ab/homelab
1
0
Fork 1
Code Pull Requests Actions Packages Wiki Activity

Added rustdesk
All checks were successful
Check with kubeconform / lint (push) Successful in 18s
Details

Browse Source
This commit is contained in:
Ultradesu
2025-07-18 14:47:26 +03:00
parent 24d4d34733
commit 196d53a5a9
8 changed files with 348 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

85
k8s/apps/rustdesk/network-policy.yaml Normal file
View File

@@ -0,0 +1,85 @@
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: rustdesk-network-policy
namespace: rustdesk
spec:
podSelector:
matchLabels:
app: rustdesk-hbbs
policyTypes:
- Ingress
- Egress
ingress:
# Разрешаем все входящие подключения на RustDesk порты
- from: []
ports:
- protocol: TCP
port: 21115
- protocol: TCP
port: 21116
- protocol: UDP
port: 21116
- protocol: TCP
port: 21118
# Разрешаем Traefik ingress для веб-интерфейса
- from:
- namespaceSelector:
matchLabels:
name: kube-system
ports:
- protocol: TCP
port: 21118
egress:
# Разрешаем DNS
- to: []
ports:
- protocol: UDP
port: 53
- protocol: TCP
port: 53
# Разрешаем связь между HBBS и HBBR
- to:
- podSelector:
matchLabels:
app: rustdesk-hbbr
ports:
- protocol: TCP
port: 21117
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: rustdesk-hbbr-network-policy
namespace: rustdesk
spec:
podSelector:
matchLabels:
app: rustdesk-hbbr
policyTypes:
- Ingress
- Egress
ingress:
# Разрешаем все входящие подключения на relay порт
- from: []
ports:
- protocol: TCP
port: 21117
# Разрешаем подключения от HBBS
- from:
- podSelector:
matchLabels:
app: rustdesk-hbbs
ports:
- protocol: TCP
port: 21117
egress:
# Разрешаем DNS
- to: []
ports:
- protocol: UDP
port: 53
- protocol: TCP
port: 53