[DO-1600] Fix trivy-operator 3 (!43)

[DO-1600]

Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/43
This commit is contained in:
Denis Patrakeev
2025-02-25 13:34:19 +03:00
parent 99a83a42d3
commit 7a0a151fe7

View File

@@ -17,6 +17,8 @@ spec:
- namespaceSelector: - namespaceSelector:
matchLabels: matchLabels:
kubernetes.io/metadata.name: ingress-nginx kubernetes.io/metadata.name: ingress-nginx
# https://aquasecurity.github.io/trivy-operator/v0.23.0/getting-started/installation/troubleshooting/#installing-the-operator-in-a-namespace-with-default-deny-all-egressingress-network-policies
--- ---
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: NetworkPolicy kind: NetworkPolicy
@@ -31,12 +33,22 @@ spec:
- Egress - Egress
ingress: [] ingress: []
egress: egress:
# https://aquasecurity.github.io/trivy-operator/v0.23.0/getting-started/installation/troubleshooting/#installing-the-operator-in-a-namespace-with-default-deny-all-egressingress-network-policies
- ports: - ports:
- port: 53
protocol: TCP
- port: 53
protocol: UDP
- port: 443 - port: 443
protocol: TCP protocol: TCP
- port: 80 - port: 4954
protocol: TCP protocol: TCP
- to: - to:
- namespaceSelector:
matchLabels:
kubernetes.io/metadata.name: kube-system
- podSelector: - podSelector:
matchLabels: matchLabels:
app.kubernetes.io/name: trivy app.kubernetes.io/name: trivy
- ipBlock:
cidr: 172.24.0.1/32