apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: allow-traefik-to-whiteboard-ingress
spec:
  endpointSelector:
    matchLabels:
      app: nextcloud-whiteboard

  ingress:
    # -------------------------------------------------------------
    # Allow Traefik (internal and public) to reach whiteboard ws
    # -------------------------------------------------------------
    - fromEndpoints:
        - matchLabels:
            app.kubernetes.io/name: traefik
          matchExpressions:
            - key: k8s:io.kubernetes.pod.namespace
              operator: In
              values:
                - traefik
                - traefik-public
      toPorts:
        - ports:
            - port: "3002"
    
              protocol: TCP