Ad network policy.

metal-stack · Dec 11, 2023 · cac5a54 · cac5a54
1 parent 50d1259
commit cac5a54
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/pkg/controller/audit/actuator.go b/pkg/controller/audit/actuator.go
@@ -685,6 +685,8 @@ func seedObjects(auditConfig *v1alpha1.AuditConfig, secrets map[string]*corev1.S
 		}
 
 		if cluster.Shoot.Spec.ControlPlane != nil && cluster.Shoot.Spec.ControlPlane.HighAvailability != nil {
+			vpnGateway.Spec.Template.Labels["networking.resources.gardener.cloud/to-vpn-seed-server-0-tcp-9443"] = "allowed"
+
 			vpnGateway.Spec.Template.Spec.Containers[0].Env = append(vpnGateway.Spec.Template.Spec.Containers[0].Env,
 				corev1.EnvVar{
 					Name:  "GATEWAY_PROXY_HOST",