1  # Copyright 2024 Defense Unicorns
  2  # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
  3  
  4  apiVersion: v1
  5  kind: Service
  6  metadata:
  7    name: curl-pkg-deny-all-1
  8    namespace: curl-ns-deny-all-1
  9    labels:
 10      name: curl-pkg-deny-all-1
 11      namespace: curl-ns-deny-all-1
 12  spec:
 13    ports:
 14      - name: port8080
 15        port: 8080
 16        targetPort: 8080
 17    selector:
 18      app: curl-pkg-deny-all-1
 19  ---
 20  apiVersion: apps/v1
 21  kind: Deployment
 22  metadata:
 23    name: curl-pkg-deny-all-1
 24    namespace: curl-ns-deny-all-1
 25  spec:
 26    replicas: 1
 27    selector:
 28      matchLabels:
 29        app: curl-pkg-deny-all-1
 30    template:
 31      metadata:
 32        labels:
 33          app: curl-pkg-deny-all-1
 34        annotations:
 35          sidecar.istio.io/proxyCPU: "10m"
 36          sidecar.istio.io/proxyMemory: "16Mi"
 37      spec:
 38        containers:
 39          - name: curl-pkg-deny-all-1
 40            image: curlimages/curl
 41            imagePullPolicy: IfNotPresent
 42            command: ["sleep", "3600"]
 43            resources:
 44              limits:
 45                cpu: 50m
 46                memory: 64Mi
 47              requests:
 48                cpu: 10m
 49                memory: 16Mi
 50            ports:
 51              - containerPort: 8080
 52  ---
 53  apiVersion: v1
 54  kind: Service
 55  metadata:
 56    name: curl-pkg-deny-all-2
 57    namespace: curl-ns-deny-all-2
 58    labels:
 59      name: curl-pkg-deny-all-2
 60      namespace: curl-ns-deny-all-2
 61  spec:
 62    ports:
 63      - name: port8080
 64        port: 8080
 65        targetPort: 8080
 66    selector:
 67      app: curl-pkg-deny-all-2
 68  ---
 69  apiVersion: apps/v1
 70  kind: Deployment
 71  metadata:
 72    name: curl-pkg-deny-all-2
 73    namespace: curl-ns-deny-all-2
 74  spec:
 75    replicas: 1
 76    selector:
 77      matchLabels:
 78        app: curl-pkg-deny-all-2
 79    template:
 80      metadata:
 81        labels:
 82          app: curl-pkg-deny-all-2
 83        annotations:
 84          sidecar.istio.io/proxyCPU: "10m"
 85          sidecar.istio.io/proxyMemory: "16Mi"
 86      spec:
 87        containers:
 88          - name: curl-pkg-deny-all-2
 89            image: curlimages/curl
 90            imagePullPolicy: IfNotPresent
 91            command: ["sleep", "3600"]
 92            resources:
 93              limits:
 94                cpu: 50m
 95                memory: 64Mi
 96              requests:
 97                cpu: 10m
 98                memory: 16Mi
 99            ports:
100              - containerPort: 8080
101  ---
102  apiVersion: v1
103  kind: Service
104  metadata:
105    name: curl-pkg-allow-all
106    namespace: curl-ns-allow-all
107    labels:
108      name: curl-pkg-allow-all
109      namespace: curl-ns-allow-all
110  spec:
111    ports:
112      - name: port8080
113        port: 8080
114        targetPort: 8080
115      - name: port8081
116        port: 8081
117        targetPort: 8081
118    selector:
119      app: curl-pkg-allow-all
120  ---
121  apiVersion: apps/v1
122  kind: Deployment
123  metadata:
124    name: curl-pkg-allow-all
125    namespace: curl-ns-allow-all
126  spec:
127    replicas: 1
128    selector:
129      matchLabels:
130        app: curl-pkg-allow-all
131    template:
132      metadata:
133        labels:
134          app: curl-pkg-allow-all
135        annotations:
136          sidecar.istio.io/proxyCPU: "10m"
137          sidecar.istio.io/proxyMemory: "16Mi"
138      spec:
139        containers:
140          - name: curl-pkg-allow-all
141            image: hashicorp/http-echo
142            imagePullPolicy: IfNotPresent
143            args:
144              - "-text=Hello from curl-pkg-allow-all on port 8080"
145              - "-status-code=200"
146              - "-listen=:8080"
147            ports:
148              - containerPort: 8080
149          - name: curl-pkg-allow-all-8081
150            image: hashicorp/http-echo
151            imagePullPolicy: IfNotPresent
152            args:
153              - "-text=Hello from curl-pkg-allow-all on port 8081"
154              - "-status-code=200"
155              - "-listen=:8081"
156            ports:
157              - containerPort: 8081
158  ---
159  apiVersion: v1
160  kind: Service
161  metadata:
162    name: curl-pkg-remote-ns-egress
163    namespace: curl-ns-remote-ns-1
164    labels:
165      name: curl-pkg-remote-ns-egress
166      namespace: curl-ns-remote-ns-1
167  spec:
168    ports:
169      - name: port8080
170        port: 8080
171        targetPort: 8080
172    selector:
173      app: curl-pkg-remote-ns-egress
174  ---
175  apiVersion: apps/v1
176  kind: Deployment
177  metadata:
178    name: curl-pkg-remote-ns-egress
179    namespace: curl-ns-remote-ns-1
180  spec:
181    replicas: 1
182    selector:
183      matchLabels:
184        app: curl-pkg-remote-ns-egress
185    template:
186      metadata:
187        labels:
188          app: curl-pkg-remote-ns-egress
189        annotations:
190          sidecar.istio.io/proxyCPU: "10m"
191          sidecar.istio.io/proxyMemory: "16Mi"
192      spec:
193        containers:
194          - name: curl-pkg-remote-ns-egress
195            image: curlimages/curl
196            imagePullPolicy: IfNotPresent
197            command: ["sleep", "3600"]
198            resources:
199              limits:
200                cpu: 50m
201                memory: 64Mi
202              requests:
203                cpu: 10m
204                memory: 16Mi
205            ports:
206              - containerPort: 8080
207  ---
208  apiVersion: v1
209  kind: Service
210  metadata:
211    name: curl-pkg-remote-ns-ingress
212    namespace: curl-ns-remote-ns-2
213    labels:
214      name: curl-pkg-remote-ns-ingress
215      namespace: curl-ns-remote-ns-2
216  spec:
217    ports:
218      - name: port8080
219        port: 8080
220        targetPort: 8080
221    selector:
222      app: curl-pkg-remote-ns-ingress
223  ---
224  apiVersion: apps/v1
225  kind: Deployment
226  metadata:
227    name: curl-pkg-remote-ns-ingress
228    namespace: curl-ns-remote-ns-2
229  spec:
230    replicas: 1
231    selector:
232      matchLabels:
233        app: curl-pkg-remote-ns-ingress
234    template:
235      metadata:
236        labels:
237          app: curl-pkg-remote-ns-ingress
238        annotations:
239          sidecar.istio.io/proxyCPU: "10m"
240          sidecar.istio.io/proxyMemory: "16Mi"
241      spec:
242        containers:
243          - name: curl-pkg-remote-ns-ingress
244            image: hashicorp/http-echo
245            imagePullPolicy: IfNotPresent
246            args:
247              - "-text=Hello from curl-pkg-remote-ns-ingress on port 8080"
248              - "-status-code=200"
249              - "-listen=:8080"
250            ports:
251              - containerPort: 8080
252  ---
253  apiVersion: v1
254  kind: Service
255  metadata:
256    name: curl-pkg-kube-api
257    namespace: curl-ns-kube-api
258    labels:
259      name: curl-pkg-kube-api
260      namespace: curl-ns-kube-api
261  spec:
262    ports:
263      - name: port8080
264        port: 8080
265        targetPort: 8080
266    selector:
267      app: curl-pkg-kube-api
268  ---
269  apiVersion: apps/v1
270  kind: Deployment
271  metadata:
272    name: curl-pkg-kube-api
273    namespace: curl-ns-kube-api
274  spec:
275    replicas: 1
276    selector:
277      matchLabels:
278        app: curl-pkg-kube-api
279    template:
280      metadata:
281        labels:
282          app: curl-pkg-kube-api
283        annotations:
284          sidecar.istio.io/proxyCPU: "10m"
285          sidecar.istio.io/proxyMemory: "16Mi"
286      spec:
287        containers:
288          - name: curl-pkg-kube-api
289            image: curlimages/curl
290            imagePullPolicy: IfNotPresent
291            command: ["sleep", "3600"]
292            resources:
293              limits:
294                cpu: 50m
295                memory: 64Mi
296              requests:
297                cpu: 10m
298                memory: 16Mi
299            ports:
300              - containerPort: 8080
301  ---
302  apiVersion: v1
303  kind: Service
304  metadata:
305    name: curl-pkg-remote-cidr
306    namespace: curl-ns-remote-cidr
307    labels:
308      name: curl-pkg-remote-cidr
309      namespace: curl-ns-remote-cidr
310  spec:
311    ports:
312      - name: port8080
313        port: 8080
314        targetPort: 8080
315    selector:
316      app: curl-pkg-remote-cidr
317  ---
318  apiVersion: apps/v1
319  kind: Deployment
320  metadata:
321    name: curl-pkg-remote-cidr
322    namespace: curl-ns-remote-cidr
323  spec:
324    replicas: 1
325    selector:
326      matchLabels:
327        app: curl-pkg-remote-cidr
328    template:
329      metadata:
330        labels:
331          app: curl-pkg-remote-cidr
332        annotations:
333          sidecar.istio.io/proxyCPU: "10m"
334          sidecar.istio.io/proxyMemory: "16Mi"
335      spec:
336        containers:
337          - name: curl-pkg-remote-cidr
338            image: hashicorp/http-echo
339            imagePullPolicy: IfNotPresent
340            args:
341              - "-text=Hello from curl-pkg-remote-cidr on port 8080"
342              - "-status-code=200"
343              - "-listen=:8080"
344            ports:
345              - containerPort: 8080