From b456be401199711b97cb3257818512ad1a172344 Mon Sep 17 00:00:00 2001
From: nold <nold@gnu.one>
Date: Thu, 25 Jan 2024 20:55:04 +0100
Subject: [PATCH] add(ingress-external): netpol

---
 projects/ingress-external/manifest/netpol.yaml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100644 projects/ingress-external/manifest/netpol.yaml

diff --git a/projects/ingress-external/manifest/netpol.yaml b/projects/ingress-external/manifest/netpol.yaml
new file mode 100644
index 00000000..0060806d
--- /dev/null
+++ b/projects/ingress-external/manifest/netpol.yaml
@@ -0,0 +1,15 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-external-only
+  namespace: ingress-external
+spec:
+  podSelector: {}
+  policyTypes:
+  - Egress
+  egress:
+  - to:
+    - namespaceSelector:
+        matchLabels:
+          environment: external
+