ingress revision

deploy/infra/network-policies.yaml

@@ -14,29 +14,10 @@ spec:
 
     
 ---
-
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
-  name: allow-ssh-to-gitea
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: gitea
-
-  ingress:
-    - fromCIDRSet:
-        - cidr: 0.0.0.0/0
-      toPorts:
-        - ports:
-            - port: "2222"
-              protocol: TCP
----
-
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-gitea-ingress
+  name: allow-traefik-ingress
 spec:
   endpointSelector:
     matchLabels:
@@ -44,7 +25,7 @@ spec:
 
   ingress:
     # -------------------------------------------------------------
-    # Allow Traefik (in kube-system) to reach Gitea on port 3000
+    # Allow Traefik (in kube-system) to reach Gitea on port 3000 and 2222
     # -------------------------------------------------------------
     - fromEndpoints:
         - matchLabels:
@@ -53,9 +34,12 @@ spec:
             - key: k8s:io.kubernetes.pod.namespace
               operator: In
               values:
-                - kube-system
+                - traefik
+                - traefik-public
       toPorts:
         - ports:
             - port: "3000"
               protocol: TCP
-
+        - ports:
+            - port: "2222"
+              protocol: TCP