Replace ToServices/ToPorts combination in CiliumNetworkPolicy bec…

…ause of breakage in Cilium v1.14 See cilium/cilium#20067 - the combination is not supported anymore and Cilium prints warnings about the non-effective policy.
giantswarm · Jan 22, 2024 · fa5c7b1 · fa5c7b1
1 parent 57fd441
commit fa5c7b1
Showing 1 changed file with 4 additions and 6 deletions.
diff --git a/helm/cilium/templates/extra-policies/configmap.yaml b/helm/cilium/templates/extra-policies/configmap.yaml
@@ -18,12 +18,10 @@ data:
       endpointSelector: {} # any
 
       egress:
-        - toServices:
-            - k8sServiceSelector:
-                namespace: kube-system
-                selector:
-                  matchLabels:
-                    k8s-app: coredns
+        - toEndpoints:
+            - matchLabels:
+                k8s-app: coredns
+                k8s:io.kubernetes.pod.namespace: kube-system
 
           toPorts:
             - ports: