Add CiliumNetworkPolicy for falco-exporter (#224)

giantswarm · Jan 25, 2024 · 8b250d7 · 8b250d7
1 parent ac45350
commit 8b250d7
Show file tree

Hide file tree

Showing 2 changed files with 24 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Add CiliumNetworkPolicy for falco-exporter.
+
 ## [0.7.2] - 2024-01-12
 
 ### Changed

diff --git a/helm/falco/templates/falco-exporter-cilium-network-policy.yaml b/helm/falco/templates/falco-exporter-cilium-network-policy.yaml
@@ -0,0 +1,20 @@
+{{- if .Values.ciliumNetworkPolicy.enabled }}
+apiVersion: "cilium.io/v2"
+kind: CiliumNetworkPolicy
+metadata:
+  name: {{ include "falco-helpers.fullname" . }}-exporter
+  namespace: {{ include "falco-helpers.namespace" . }}
+  labels:
+    {{- include "falco-helpers.labels" . | nindent 4 }}
+spec:
+  endpointSelector:
+    matchLabels:
+      app.kubernetes.io/instance: falco
+      app.kubernetes.io/name: falco-exporter
+  ingress:
+    - fromEntities:
+      - cluster
+      toPorts:
+      - ports:
+          - port: "9376"
+{{- end }}