30 lines
742 B
YAML
30 lines
742 B
YAML
apiVersion: networking.k8s.io/v1
|
|
kind: NetworkPolicy
|
|
metadata:
|
|
name: minio
|
|
namespace: kubeflow
|
|
spec:
|
|
podSelector:
|
|
matchExpressions:
|
|
- key: app
|
|
operator: In
|
|
values:
|
|
- minio # artifact storage
|
|
ingress:
|
|
- from:
|
|
- namespaceSelector:
|
|
matchExpressions:
|
|
- key: app.kubernetes.io/part-of
|
|
operator: In
|
|
values:
|
|
- kubeflow-profile
|
|
- namespaceSelector:
|
|
matchExpressions:
|
|
- key: kubernetes.io/metadata.name
|
|
operator: In
|
|
values:
|
|
- istio-system
|
|
- podSelector: {} # allow all pods from the same namespace
|
|
policyTypes:
|
|
- Ingress
|