Reputation: 166
Can I use coredns Domain name policy
to restrict or control egress call.
For example I want to allow google.com
and block gitHub.com
. What implementation steps required to do this if I had kubernetes setup ready and default coredns
pod running in it.
Upvotes: 0
Views: 502
Reputation: 1229
I have done this recently using egress-operator. You have to configure this with coredns image that you will build (follow the Readme) and it will route your egress traffic through the operator.
On the operator external service you can whitelist the domains.
Note: Try to use docker local registry first instead of cloud to avoid push-pull delay
Upvotes: 2