1 files changed, 135 insertions, 0 deletions
diff --git a/site/intel-pod15/software/charts/kubernetes/container-networking/policies.yaml b/site/intel-pod15/software/charts/kubernetes/container-networking/policies.yaml
new file mode 100644
index 0000000..c6a4f85
--- /dev/null
+++ b/site/intel-pod15/software/charts/kubernetes/container-networking/policies.yaml
@@ -0,0 +1,135 @@
+---
+schema: nc/Policy/v1
+metadata:
+  schema: metadata/Document/v1
+  name: site-policy
+  labels:
+    name: site-policy
+  layeringDefinition:
+    abstract: false
+    layer: site
+    parentSelector:
+      name: type-policy
+    actions:
+    - method: merge
+      path: .
+  storagePolicy: cleartext
+data:
+  policy:
+    sitelevel:
+      priority: 5
+      rules: []
+    hostendpoints:
+      priority: 9
+      rules:
+      - apiVersion: projectcalico.org/v3
+        kind: HostEndpoint
+        metadata:
+          name: pod15-node1-oam
+          labels:
+            host: nc-control
+            intf-alias: oam
+        spec:
+          interfaceName: dmz.150
+          node: pod15-node1
+          expectedIPs:
+          - 10.10.150.21
+      - apiVersion: projectcalico.org/v3
+        kind: HostEndpoint
+        metadata:
+          name: pod15-node1-ksn
+          labels:
+            host: nc-control
+            intf-alias: ksn
+        spec:
+          interfaceName: data1.152
+          node: pod15-node1
+      - apiVersion: projectcalico.org/v3
+        kind: HostEndpoint
+        metadata:
+          name: pod15-node2-oam
+          labels:
+            host: nc-control
+            intf-alias: oam
+        spec:
+          interfaceName: dmz.150
+          node: pod15-node2
+          expectedIPs:
+          - 10.10.150.22
+      - apiVersion: projectcalico.org/v3
+        kind: HostEndpoint
+        metadata:
+          name: pod15-node2-ksn
+          labels:
+            host: nc-control
+            intf-alias: ksn
+        spec:
+          interfaceName: data1.152
+          node: pod15-node2
+      - apiVersion: projectcalico.org/v3
+        kind: HostEndpoint
+        metadata:
+          name: pod15-node3-oam
+          labels:
+            host: nc-control
+            intf-alias: oam
+        spec:
+          interfaceName: dmz.150
+          node: pod15-node3
+          expectedIPs:
+          - 10.10.150.23
+      - apiVersion: projectcalico.org/v3
+        kind: HostEndpoint
+        metadata:
+          name: pod15-node3-ksn
+          labels:
+            host: nc-control
+            intf-alias: ksn
+        spec:
+          interfaceName: data1.152
+          node: pod15-node3
+      - apiVersion: projectcalico.org/v3
+        kind: HostEndpoint
+        metadata:
+          name: pod15-node4-oam
+          labels:
+            host: nc-compute
+            intf-alias: oam
+        spec:
+          interfaceName: dmz.150
+          node: pod15-node4
+          expectedIPs:
+          - 10.10.150.24
+      - apiVersion: projectcalico.org/v3
+        kind: HostEndpoint
+        metadata:
+          name: pod15-node4-ksn
+          labels:
+            host: nc-compute
+            intf-alias: ksn
+        spec:
+          interfaceName: data1.152
+          node: pod15-node4
+#      - apiVersion: projectcalico.org/v3
+#        kind: HostEndpoint
+#        metadata:
+#          name: pod15-node5-oam
+#          labels:
+#            host: nc-compute
+#            intf-alias: oam
+#        spec:
+#          interfaceName: dmz.150
+#          node: pod15-node5
+#          expectedIPs:
+#          - 10.10.150.25
+#      - apiVersion: projectcalico.org/v3
+#        kind: HostEndpoint
+#        metadata:
+#          name: pod15-node5-ksn
+#          labels:
+#            host: nc-compute
+#            intf-alias: ksn
+#        spec:
+#          interfaceName: data1.152
+#          node: pod15-node5
+...