Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Corrected namespaceSelector for network policy #334

Merged

Conversation

larwef
Copy link
Contributor

@larwef larwef commented Oct 11, 2024

Corrected namespaceSelector for intra-namespace network policy example. The label "name" does not exist on the namespace resource kube-system, but the label "kubernetes.io/metadata.name" is present.

@larwef larwef force-pushed the lars.wefald/hardening-correct-namespaceSelector branch from 94490e9 to b4aa0b2 Compare October 11, 2024 11:04
@larwef
Copy link
Contributor Author

larwef commented Oct 11, 2024

Discovered this doing a fresh install on a Raspberry Pi 4 and going through the hardening guide. When trying to acquiring a Let's Encrypt certificate through a Traefik DNS requests timed out.

Not sure if v1.24 and Older is also affected by this. In case they should also be updated.

@brandond
Copy link
Member

brandond commented Oct 30, 2024

Thanks for this fix - would you mind rebasing so that CI passes?

@larwef
Copy link
Contributor Author

larwef commented Oct 30, 2024

Hi. I can force a new commit with the same changes. As far as i can see it's complaining about a dead link, which looks very much alive.

@larwef larwef force-pushed the lars.wefald/hardening-correct-namespaceSelector branch from b4aa0b2 to d91254b Compare October 30, 2024 07:23
@larwef
Copy link
Contributor Author

larwef commented Oct 30, 2024

Never mind. I got it now. Sorry, first time contributing.

I will fix.

Corrected namespaceSelector for intra-namespace network policy
example. The label "name" does not exist on the namespace resource
kube-system, but the label "kubernetes.io/metadata.name" does.

Signed-off-by: Lars Wefald <[email protected]>
@larwef larwef force-pushed the lars.wefald/hardening-correct-namespaceSelector branch from d91254b to c9a4fce Compare October 30, 2024 07:37
@brandond brandond merged commit 4c2ffce into k3s-io:main Oct 30, 2024
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants