add infra

Signed-off-by: gwg313 <gwg313@pm.me>
2026-05-16 14:11:31 -04:00 · 2026-05-16 14:11:31 -04:00 · 20c1fccff1
commit 20c1fccff1
parent c2805c6cc1
5 changed files with 199 additions and 0 deletions
--- a/platform/default-network-policies/default-deny.yaml
+++ b/platform/default-network-policies/default-deny.yaml
@ -0,0 +1,12 @@
+apiVersion: "cilium.io/v2"
+kind: CiliumClusterwideNetworkPolicy
+metadata:
+  name: baseline-default-deny
+spec:
+  description: "Deny all ingress and egress cluster-wide by default"
+  endpointSelector:
+    matchLabels: {}
+  ingress:
+    - {}
+  egress:
+    - {}