bluejay-infra/apps-gx10/intranet/networkpolicy-intranet-web.json

{
  "apiVersion": "networking.k8s.io/v1",
  "kind": "NetworkPolicy",
  "metadata": {
    "name": "intranet-web",
    "namespace": "intranet"
  },
  "spec": {
    "egress": [
      {
        "ports": [
          {
            "port": 53,
            "protocol": "UDP"
          },
          {
            "port": 53,
            "protocol": "TCP"
          }
        ],
        "to": [
          {
            "namespaceSelector": {
              "matchLabels": {
                "kubernetes.io/metadata.name": "kube-system"
              }
            }
          }
        ]
      },
      {
        "ports": [
          {
            "port": 443,
            "protocol": "TCP"
          }
        ],
        "to": [
          {
            "ipBlock": {
              "cidr": "10.0.56.200/32"
            }
          }
        ]
      },
      {
        "ports": [
          {
            "port": 8000,
            "protocol": "TCP"
          },
          {
            "port": 8080,
            "protocol": "TCP"
          },
          {
            "port": 8443,
            "protocol": "TCP"
          }
        ],
        "to": [
          {
            "namespaceSelector": {
              "matchLabels": {
                "kubernetes.io/metadata.name": "traefik-system"
              }
            }
          }
        ]
      },
      {
        "ports": [
          {
            "port": 80,
            "protocol": "TCP"
          },
          {
            "port": 8080,
            "protocol": "TCP"
          },
          {
            "port": 5100,
            "protocol": "TCP"
          },
          {
            "port": 5200,
            "protocol": "TCP"
          },
          {
            "port": 5217,
            "protocol": "TCP"
          },
          {
            "port": 5300,
            "protocol": "TCP"
          },
          {
            "port": 5320,
            "protocol": "TCP"
          },
          {
            "port": 5400,
            "protocol": "TCP"
          }
        ],
        "to": [
          {
            "namespaceSelector": {}
          }
        ]
      },
      {
        "ports": [
          {
            "port": 11434,
            "protocol": "TCP"
          }
        ],
        "to": [
          {
            "ipBlock": {
              "cidr": "0.0.0.0/0"
            }
          }
        ]
      }
    ],
    "ingress": [
      {
        "from": [
          {
            "namespaceSelector": {
              "matchLabels": {
                "kubernetes.io/metadata.name": "traefik-system"
              }
            }
          }
        ],
        "ports": [
          {
            "port": 5300,
            "protocol": "TCP"
          }
        ]
      }
    ],
    "podSelector": {
      "matchLabels": {
        "app": "intranet-web"
      }
    },
    "policyTypes": [
      "Ingress",
      "Egress"
    ]
  }
}