homelab-gitops/apps/bytestash/network-policy.yaml
gwg313 7a569878b8
add bytestash
Signed-off-by: gwg313 <gwg313@pm.me>
2026-05-19 21:34:14 -04:00

22 lines
560 B
YAML

apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: allow-ingress
namespace: bytestash
spec:
description: "Allow external traffic from the shared Cilium edge proxy into the bytestash service"
endpointSelector:
matchLabels:
app: bytestash
ingress:
- fromEntities:
- ingress
- fromEndpoints:
- matchLabels:
io.kubernetes.pod.namespace: cilium-ingress
toPorts:
- ports:
- port: "80"
protocol: TCP
- port: "5000"
protocol: TCP