apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: application-metier-frontend
  namespace: application-metier
spec:
  endpointSelector:
    matchLabels:
      app.kubernetes.io/name: application-metier
      app.kubernetes.io/component: frontend
  ingress:
    - fromEntities:
        - ingress
        - host
      toPorts:
        - ports:
            - port: "8080"
              protocol: TCP
  egress:
    - toEndpoints:
        - matchLabels:
            app.kubernetes.io/name: application-metier
            app.kubernetes.io/component: api
      toPorts:
        - ports:
            - port: "8080"
              protocol: TCP
    - toEndpoints:
        - matchLabels:
            "k8s:io.kubernetes.pod.namespace": kube-system
            "k8s:k8s-app": kube-dns
      toPorts:
        - ports:
            - port: "53"
              protocol: UDP
            - port: "53"
              protocol: TCP
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: application-metier-api
  namespace: application-metier
spec:
  endpointSelector:
    matchLabels:
      app.kubernetes.io/name: application-metier
      app.kubernetes.io/component: api
  ingress:
    - fromEntities:
        - cluster
        - host
      toPorts:
        - ports:
            - port: "8080"
              protocol: TCP
  egress:
    - toEndpoints:
        - matchLabels:
            app.kubernetes.io/name: application-metier
            app.kubernetes.io/component: postgres
      toPorts:
        - ports:
            - port: "5432"
              protocol: TCP
    - toEndpoints:
        - matchLabels:
            app.kubernetes.io/name: application-metier
            app.kubernetes.io/component: redis
      toPorts:
        - ports:
            - port: "6379"
              protocol: TCP
    - toEndpoints:
        - matchLabels:
            "k8s:io.kubernetes.pod.namespace": kube-system
            "k8s:k8s-app": kube-dns
      toPorts:
        - ports:
            - port: "53"
              protocol: UDP
            - port: "53"
              protocol: TCP
    - toEntities:
        - world
      toPorts:
        - ports:
            - port: "443"
              protocol: TCP
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: application-metier-postgres
  namespace: application-metier
spec:
  endpointSelector:
    matchLabels:
      app.kubernetes.io/name: application-metier
      app.kubernetes.io/component: postgres
  ingress:
    - fromEndpoints:
        - matchExpressions:
            - key: app.kubernetes.io/component
              operator: In
              values: [api, migration, bootstrap, backup, restore]
      toPorts:
        - ports:
            - port: "5432"
              protocol: TCP
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: application-metier-redis
  namespace: application-metier
spec:
  endpointSelector:
    matchLabels:
      app.kubernetes.io/name: application-metier
      app.kubernetes.io/component: redis
  ingress:
    - fromEndpoints:
        - matchLabels:
            app.kubernetes.io/name: application-metier
            app.kubernetes.io/component: api
      toPorts:
        - ports:
            - port: "6379"
              protocol: TCP
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: application-metier-jobs
  namespace: application-metier
spec:
  endpointSelector:
    matchExpressions:
      - key: app.kubernetes.io/component
        operator: In
        values: [migration, bootstrap, backup, restore]
  egress:
    - toEndpoints:
        - matchLabels:
            app.kubernetes.io/name: application-metier
            app.kubernetes.io/component: postgres
      toPorts:
        - ports:
            - port: "5432"
              protocol: TCP
    - toEndpoints:
        - matchLabels:
            "k8s:io.kubernetes.pod.namespace": kube-system
            "k8s:k8s-app": kube-dns
      toPorts:
        - ports:
            - port: "53"
              protocol: UDP
            - port: "53"
              protocol: TCP