Add network policy allowance into documentation #2334
Description
We've got calico installed on our stack and found configuring this to be a challenge because of the documentation on the solvers. We've added this networking policy (replace {{namespace}} with your project namespace). Would love to see this added to the documentation / improved on to only allow the ports required.
---
kind: NetworkPolicy
apiVersion: networking.k8s.io/v1
metadata:
name: allow-cert-manager-resolver-reverse
namespace: cert-manager
spec:
podSelector:
matchLabels:
app.kubernetes.io/instance: cert-manager
egress:
- namespaceSelector:
matchLabels:
acme.cert-manager.io/http01-solver: true
---
kind: NetworkPolicy
apiVersion: networking.k8s.io/v1
metadata:
name: allow-cert-manager-resolver
namespace: "{{namespace}}"
spec:
podSelector:
matchLabels:
acme.cert-manager.io/http01-solver: "true"
ingress:
- namespaceSelector:
matchLabels:
app.kubernetes.io/instance: cert-manager