add warning for firewalling traffic in K8s

This commit is contained in:
georglauterbach 2024-03-11 11:57:27 +01:00
parent db20aaaa40
commit 8eb966dece
No known key found for this signature in database
GPG Key ID: F367F7C43C118578
1 changed files with 6 additions and 0 deletions

View File

@ -722,6 +722,12 @@ The major problem with exposing DMS to the outside world in Kubernetes is to [pr
}
```
!!! warning
You are responsible for properly managing traffic inside your cluster and to **ensure that only trustworthy entities** can connect to the designated PROXY protocol ports. With Kubernetes, this is usually the task of the container network interface.
While Dovecot provides a very basic machanims to achieve firewalling connections via `haproxy_trusted_networks`, Postfix does not provide ann equivalent at all.
Last but not least, the `ports` section in the `Deployment` needs to be changed. The following ports have to be added:
```yaml