Fix/add new selector to aws global network policy (kubernetes-sigs#263)

* Added fsType validation to gcp * allow access to IMDS for clod-provider external
stg-0 · Sep 5, 2023 · d6442dd · d6442dd
1 parent a2fc71b
commit d6442dd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/cluster/internal/create/actions/createworker/files/aws/allow-egress-imds_gnetpol.yaml b/pkg/cluster/internal/create/actions/createworker/files/aws/allow-egress-imds_gnetpol.yaml
@@ -12,6 +12,6 @@ spec:
     protocol: TCP
   order: 0
   namespaceSelector: kubernetes.io/metadata.name in { 'kube-system', 'capa-system' }
-  selector: app.kubernetes.io/name == 'aws-ebs-csi-driver' || cluster.x-k8s.io/provider == 'infrastructure-aws'
+  selector: app.kubernetes.io/name == 'aws-ebs-csi-driver' || cluster.x-k8s.io/provider == 'infrastructure-aws' || k8s-app == 'aws-cloud-controller-manager'
   types:
   - Egress