fix(home-assistant): netpols allow Apple TV VLAN

JJGadgets · Jun 23, 2024 · b739623 · b739623
1 parent 5b3d998
commit b739623
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/kube/deploy/apps/home-assistant/app/hr.yaml b/kube/deploy/apps/home-assistant/app/hr.yaml
@@ -23,6 +23,7 @@ spec:
           labels:
             ingress.home.arpa/nginx-internal: "allow"
             egress.home.arpa/iot: "allow"
+            egress.home.arpa/appletv: "allow"
           annotations:
             k8s.v1.cni.cncf.io/networks: |
               [{

diff --git a/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml b/kube/deploy/core/_networking/cilium/netpols/labelled-allow-egress.yaml
@@ -354,6 +354,19 @@ spec:
 # yaml-language-server: $schema=https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/cilium.io/ciliumclusterwidenetworkpolicy_v2.json
 apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
+metadata:
+  name: labelled-allow-egress-appletv
+spec:
+  endpointSelector:
+    matchLabels:
+      egress.home.arpa/appletv: "allow"
+  egress:
+    - toCIDRSet:
+        - cidr: "${IP_VLAN_APPLETV_CIDR}"
+---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/cilium.io/ciliumclusterwidenetworkpolicy_v2.json
+apiVersion: cilium.io/v2
+kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: labelled-allow-egress-user1
 spec: