Fix network policy for exposure classes. (gardener#7459)

NetworkPolicy `allow-to-dns` was missing for istio-igressgateways of exposure classes.
nickytd · Feb 7, 2023 · a78fe3e · a78fe3e
1 parent 3ccfb74
commit a78fe3e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pkg/gardenlet/controller/networkpolicy/reconciler.go b/pkg/gardenlet/controller/networkpolicy/reconciler.go
@@ -207,6 +207,7 @@ func (r *Reconciler) networkPolicyConfigs() []networkPolicyConfig {
 				labels.SelectorFromSet(labels.Set{v1beta1constants.GardenRole: v1beta1constants.GardenRoleShoot}),
 				labels.SelectorFromSet(labels.Set{v1beta1constants.GardenRole: v1beta1constants.GardenRoleIstioSystem}),
 				labels.SelectorFromSet(labels.Set{v1beta1constants.GardenRole: v1beta1constants.GardenRoleIstioIngress}),
+				labels.SelectorFromSet(labels.Set{v1beta1constants.GardenRole: v1beta1constants.GardenRoleExposureClassHandler}),
 			},
 		},
 	}