chore: adjust aws imds gnetpol (kubernetes-sigs#197)

stg-0 · Jul 10, 2023 · 4827f62 · 4827f62
1 parent 56cb98b
commit 4827f62
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/...luster/internal/create/actions/createworker/files/aws/allow-capa-egress-imds_gnetpol.yaml b/...luster/internal/create/actions/createworker/files/aws/allow-capa-egress-imds_gnetpol.yaml
@@ -11,6 +11,7 @@ spec:
       - 169.254.169.254/32
     protocol: TCP
   order: 0
-  namespaceSelector: cluster.x-k8s.io/provider == 'infrastructure-aws' || kubernetes.io/metadata.name in { 'kube-system' }
+  namespaceSelector: kubernetes.io/metadata.name in { 'kube-system', 'capa-system' }
+  selector: app.kubernetes.io/name == 'aws-ebs-csi-driver' || cluster.x-k8s.io/provider == 'infrastructure-aws'
   types:
   - Egress