Update all-resources.yml

AdmiraalA · Feb 22, 2024 · 0368bab · 0368bab
1 parent 0d2be5d
commit 0368bab
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/deployments/nginx/all-resources.yml b/deployments/nginx/all-resources.yml
@@ -452,6 +452,10 @@ spec:
   egress:
   - to:
     - podSelector: {}
+  # Add a default-deny rule to minimize admission of pods without NetworkPolicy
+  # This rule denies all ingress and egress traffic by default
+  # Pods must have specific NetworkPolicy to allow traffic
+  - {}
 ---
 apiVersion: v1
 kind: ServiceAccount