I hate ingress controllers

2025-09-13 21:22:21 -04:00
parent 2c538a1cf9
commit 85635f9648
10 changed files with 58 additions and 14 deletions
@@ -0,0 +1,16 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+    name: allow-coderunner-ingress
+    namespace: ai
+spec:
+    podSelector:
+        matchLabels:
+            app: coderunner
+    policyTypes: ["Ingress"]
+    ingress:
+        - from:
+              - ipBlock: { cidr: 0.0.0.0/0 }
+          ports:
+              - { protocol: TCP, port: 8787 }
+
@@ -0,0 +1,16 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+    name: allow-rag-server-ingress
+    namespace: ai
+spec:
+    podSelector:
+        matchLabels:
+            app: rag-server
+    policyTypes: ["Ingress"]
+    ingress:
+        - from:
+              - ipBlock: { cidr: 0.0.0.0/0 }
+          ports:
+              - { protocol: TCP, port: 8788 }
+
@@ -0,0 +1,16 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+    name: allow-tools-ingress
+    namespace: ai
+spec:
+    podSelector:
+        matchLabels:
+            app: tools
+    policyTypes: ["Ingress"]
+    ingress:
+        - from:
+              - ipBlock: { cidr: 0.0.0.0/0 }
+          ports:
+              - { protocol: TCP, port: 1331 }
+
@@ -7,3 +7,6 @@ resources:
    - allow-browser-ingress.yaml
    - allow-common-egress.yaml
    - allow-https-egress.yaml
+    - allow-tools-ingress.yaml
+    - allow-coderunner-ingress.yaml
+    - allow-rag-server-ingress.yaml