apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-flux-operator
  namespace: infra-gitops
spec:
  podSelector:
    matchLabels:
      app.kubernetes.io/name: flux-operator
  ingress:
    - from:
        - podSelector: {}
        - ipBlock:
            cidr: 100.0.0.0/8
      ports:
        - port: 9080
          protocol: TCP
  egress:
    - {}
  policyTypes:
    - Ingress
    - Egress