Rename base Cilium egress policies by namespace

infrastructure/network-policies/forgejo/base-egress.yaml

@@ -1,13 +1,18 @@
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
-  name: apps-base-egress
+  name: forgejo-base-egress
   namespace: forgejo
+
 spec:
   endpointSelector: {}
+
   egress:
+    # Allow access to the Kubernetes API
     - toEntities:
         - kube-apiserver
+
+    # Allow DNS lookups
     - toEndpoints:
         - matchLabels:
             k8s:io.kubernetes.pod.namespace: kube-system
@@ -18,3 +23,13 @@ spec:
               protocol: UDP
             - port: "53"
               protocol: TCP
+
+    # Allow Forgejo to talk to PostgreSQL
+    - toEndpoints:
+        - matchLabels:
+            k8s:io.kubernetes.pod.namespace: platform-services
+            app: platform-postgres
+      toPorts:
+        - ports:
+            - port: "5432"
+              protocol: TCP

infrastructure/network-policies/openproject/base-egress.yaml

@@ -1,7 +1,7 @@
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
-  name: apps-base-egress
+  name: openproject-base-egress
   namespace: openproject
 spec:
   endpointSelector: {}

infrastructure/network-policies/pgadmin/base-egress.yaml

@@ -1,7 +1,7 @@
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
-  name: apps-base-egress
+  name: pgadmin-base-egress
   namespace: pgadmin
 spec:
   endpointSelector: {}

infrastructure/network-policies/platform-services/base-egress.yaml

@@ -1,7 +1,7 @@
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
-  name: apps-base-egress
+  name: platform-services-base-egress
   namespace: platform-services
 spec:
   endpointSelector: {}