small steps for the nsps

[commjoen]

No description provided.

[commjoen]

apiVersion: v1
items:
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2022-09-19T20:57:26Z"
    generation: 1
    name: default-deny-all
    namespace: t-aaa
    resourceVersion: "2417"
    uid: 1e6f07ee-9414-43e6-8c13-2d447281bc76
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
    - Egress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2022-09-19T20:57:26Z"
    generation: 1
    name: deny-all-egress-excpet-dns
    namespace: t-aaa
    resourceVersion: "2421"
    uid: 6e066ce9-0147-4aa5-b5d9-7d6add674eff
  spec:
    egress:
    - ports:
      - port: 53
        protocol: UDP
      - port: 53
        protocol: TCP
    podSelector:
      matchLabels:
        app: wrongsecrets-no-vault
    policyTypes:
    - Egress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2022-09-19T20:57:26Z"
    generation: 1
    name: deny-traffic-from-other-namespaces
    namespace: t-aaa
    resourceVersion: "2419"
    uid: bc2fbd4d-6586-47bb-91f0-239cd7004f76
  spec:
    ingress:
    - from:
      - podSelector: {}
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2022-09-19T20:58:22Z"
    generation: 1
    name: default-deny-all
    namespace: t-target
    resourceVersion: "2614"
    uid: 69150884-8fda-43d0-b98b-38a8ff78c815
  spec:
    podSelector: {}
    policyTypes:
    - Ingress
    - Egress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2022-09-19T20:58:22Z"
    generation: 1
    name: deny-all-egress-excpet-dns
    namespace: t-target
    resourceVersion: "2620"
    uid: a3245db8-80ed-46a1-be9f-b32ab05a66e2
  spec:
    egress:
    - ports:
      - port: 53
        protocol: UDP
      - port: 53
        protocol: TCP
    podSelector:
      matchLabels:
        app: wrongsecrets-no-vault
    policyTypes:
    - Egress
  status: {}
- apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
    creationTimestamp: "2022-09-19T20:58:22Z"
    generation: 1
    name: deny-traffic-from-other-namespaces
    namespace: t-target
    resourceVersion: "2618"
    uid: 3ed1692c-6c13-4833-8604-b04d0de7210e
  spec:
    ingress:
    - from:
      - podSelector: {}
    podSelector: {}
    policyTypes:
    - Ingress
  status: {}
kind: List
metadata:
  resourceVersion: ""

[commjoen]

Result: it did not work (using chrome as another team to login into the stuff from team target created via firefox):