feat(apps): Enable network policies for redoost

2026-09-26 11:49:21 +05:30
parent 7b94d671e4
commit 96db9b3511
1 changed files with 13 additions and 0 deletions
@@ -39,6 +39,19 @@ spec:
            websiteUpstream: garage.garage.svc.cluster.local:3902
            bucket: redoost-sites
            existingSecret: redoost-s3
+          networkPolicy:
+            enabled: true
+            gateway:
+              - namespaceSelector:
+                  matchLabels:
+                    kubernetes.io/metadata.name: traefik
+            s3:
+              - namespaceSelector:
+                  matchLabels:
+                    kubernetes.io/metadata.name: garage
+                podSelector:
+                  matchLabels:
+                    app.kubernetes.io/name: garage
    - path: apps/redoost
      repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
      targetRevision: main