allow all

Signed-off-by: Daniil Antoshin <[email protected]>
deckhouse · Jan 30, 2025 · b88da7c · b88da7c
1 parent 4c9b8b4
commit b88da7c
Showing 1 changed file with 2 additions and 45 deletions.
diff --git a/images/virtualization-artifact/pkg/controller/importer/importer_pod.go b/images/virtualization-artifact/pkg/controller/importer/importer_pod.go
@@ -26,8 +26,6 @@ import (
 	netv1 "k8s.io/api/networking/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/apimachinery/pkg/types"
-	"k8s.io/apimachinery/pkg/util/intstr"
-	"k8s.io/utils/ptr"
 	"sigs.k8s.io/controller-runtime/pkg/client"
 
 	"github.com/deckhouse/virtualization-controller/pkg/common"
@@ -190,49 +188,8 @@ func (imp *Importer) makeNetworkPolicySpec(pod *corev1.Pod) (*netv1.NetworkPolic
 			PodSelector: metav1.LabelSelector{
 				MatchLabels: pod.Labels,
 			},
-			Egress: []netv1.NetworkPolicyEgressRule{
-				{
-					To: []netv1.NetworkPolicyPeer{
-						{
-							NamespaceSelector: &metav1.LabelSelector{
-								MatchLabels: map[string]string{"kubernetes.io/metadata.name": "d8-virtualization"},
-							},
-						},
-					},
-					Ports: []netv1.NetworkPolicyPort{},
-				},
-				{
-					To: []netv1.NetworkPolicyPeer{
-						{
-							NamespaceSelector: &metav1.LabelSelector{
-								MatchLabels: map[string]string{"kubernetes.io/metadata.name": "kube-system"},
-							},
-						},
-					},
-					Ports: []netv1.NetworkPolicyPort{
-						{
-							Port:     &intstr.IntOrString{Type: intstr.Int, IntVal: 53},
-							Protocol: ptr.To(corev1.ProtocolUDP),
-						},
-					},
-				},
-			},
-			Ingress: []netv1.NetworkPolicyIngressRule{
-				{
-					From: []netv1.NetworkPolicyPeer{
-						{
-							NamespaceSelector: &metav1.LabelSelector{
-								MatchLabels: map[string]string{"kubernetes.io/metadata.name": "d8-virtualization"},
-							},
-						},
-					},
-					Ports: []netv1.NetworkPolicyPort{},
-				},
-			},
-			PolicyTypes: []netv1.PolicyType{
-				netv1.PolicyTypeEgress,
-				netv1.PolicyTypeIngress,
-			},
+			Egress:      []netv1.NetworkPolicyEgressRule{},
+			PolicyTypes: []netv1.PolicyType{netv1.PolicyTypeEgress},
 		},
 	}