cilium-repro.yaml

cilium-repro.yaml

---
apiVersion: v1
kind: Namespace
metadata:
  name: host-network
  labels:
    name: host-network
---
apiVersion: v1
kind: Pod
metadata:
  creationTimestamp: null
  labels:
    run: toolbox
  name: toolbox-host-network
  namespace: host-network
spec:
  containers:
  - image: diversario/toolbox
    command:
    - cat
    name: toolbox
    stdin: true
    tty: true
  dnsPolicy: ClusterFirst
  restartPolicy: Always
  hostNetwork: true
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-from-cluster-network
  namespace: host-network
spec:
  podSelector: {}
  ingress:
  - from:
    - namespaceSelector:
        matchLabels:
          name: cluster-network
---
apiVersion: v1
kind: Namespace
metadata:
  name: cluster-network
  labels:
    name: cluster-network
---
apiVersion: v1
kind: Pod
metadata:
  creationTimestamp: null
  labels:
    run: toolbox
  name: toolbox-cluster-network
  namespace: cluster-network
spec:
  containers:
  - image: diversario/toolbox
    command:
    - cat
    name: toolbox
    stdin: true
    tty: true
  dnsPolicy: ClusterFirst
  restartPolicy: Always
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-from-host-network
  namespace: cluster-network
spec:
  podSelector: {}
  ingress:
  - from:
    - namespaceSelector:
        matchLabels:
          name: host-network