Replace ToServices/ToPorts combination in CiliumNetworkPolicy bec…

…ause of breakage in Cilium v1.14 (#128) See cilium/cilium#20067 - the combination is not supported anymore and Cilium prints warnings about the non-effective policy.
giantswarm · Jan 22, 2024 · 34cef0d · 34cef0d
1 parent a413718
commit 34cef0d
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 6 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- Replace `ToServices`/`ToPorts` combination in CiliumNetworkPolicy because of breakage in Cilium v1.14
+
 ## [0.19.1] - 2024-01-18
 
 ### Changed

diff --git a/helm/cilium/templates/extra-policies/configmap.yaml b/helm/cilium/templates/extra-policies/configmap.yaml
@@ -18,12 +18,10 @@ data:
       endpointSelector: {} # any
 
       egress:
-        - toServices:
-            - k8sServiceSelector:
-                namespace: kube-system
-                selector:
-                  matchLabels:
-                    k8s-app: coredns
+        - toEndpoints:
+            - matchLabels:
+                k8s-app: coredns
+                k8s:io.kubernetes.pod.namespace: kube-system
 
           toPorts:
             - ports: