network policies

controllers/internal-controller.yaml

@@ -0,0 +1,37 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: nginx-internal
+  labels:
+    app.kubernetes.io/name: nginx-internal
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: nginx-internal
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: nginx-internal
+    spec:
+      containers:
+      - name: nginx-ingress
+        image: registry.k8s.io/ingress-nginx/controller:v1.7.0
+        args:
+          - /nginx-ingress-controller
+          - --ingress-class=nginx-internal
+          - --configmap=$(POD_NAMESPACE)/nginx-configuration
+        env:
+          - name: POD_NAME
+            valueFrom:
+              fieldRef:
+                fieldPath: metadata.name
+          - name: POD_NAMESPACE
+            valueFrom:
+              fieldRef:
+                fieldPath: metadata.namespace
+        ports:
+          - name: http
+            containerPort: 80
+          - name: https
+            containerPort: 443