apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: model-registry-ui
  namespace: kubeflow
spec:
  podSelector:
    matchExpressions:
    - key: app
      operator: In
      values:
      - model-registry-ui
  ingress:
  - from:
    - namespaceSelector:
        matchExpressions:
        - key: kubernetes.io/metadata.name
          operator: In
          values:
          - istio-system
    - podSelector: {}
  policyTypes:
  - Ingress