fix: remove old ccnp:s and cnp:s

values/atlantis/manifests/network/allow-api-server.yaml

@@ -0,0 +1,15 @@
+# apiVersion: cilium.io/v2
+# kind: CiliumNetworkPolicy
+# metadata:
+#   name: allow-kube-api
+#   namespace: atlantis
+# spec:
+#   endpointSelector:
+#     matchLabels: {}
+#   egress:
+#   - toEntities:
+#     - kube-apiserver
+#     toPorts:
+#     - ports:
+#       - port: "6443"
+#         protocol: TCP

values/atlantis/manifests/network/atlantis-policies.yaml

@@ -0,0 +1,25 @@
+# apiVersion: cilium.io/v2
+# kind: CiliumClusterwideNetworkPolicy
+# metadata:
+#   name: allow-atlantis-services
+#   namespace: {{ .Release.Namespace }}
+# spec:
+#   egress:
+#   - toEndpoints:
+#     - matchLabels:
+#         k8s:io.kubernetes.pod.namespace: dapr-system
+#   - toEndpoints:
+#     - matchLabels:
+#         k8s:io.kubernetes.pod.namespace: rabbitmq
+#   - toEndpoints:
+#     - matchLabels:
+#         k8s:io.kubernetes.pod.namespace: otel
+#   - toFQDNs:
+#     - matchName: dapr.github.io
+#     - matchName: analytics.loft.rocks
+#     - matchPattern: '*.oceanbox.io'
+#     # - matchName: gitlab.com
+#     # - matchName: api.github.com
+#     # - matchPattern: '*.gitlab.com'
+#   endpointSelector:
+#     matchLabels: {}

values/system/oceanbox/network/atlantis/allow-api-server.yaml

@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: atlantis
-spec:
-  endpointSelector:
-    matchLabels: {}
-  egress:
-  - toEntities:
-    - kube-apiserver
-    toPorts:
-    - ports:
-      - port: "6443"
-        protocol: TCP

values/system/oceanbox/network/atlantis/atlantis-policies.yaml

@@ -1,25 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: allow-atlantis-services
-  namespace: {{ .Release.Namespace }}
-spec:
-  egress:
-  - toEndpoints:
-    - matchLabels:
-        k8s:io.kubernetes.pod.namespace: dapr-system
-  - toEndpoints:
-    - matchLabels:
-        k8s:io.kubernetes.pod.namespace: rabbitmq
-  - toEndpoints:
-    - matchLabels:
-        k8s:io.kubernetes.pod.namespace: otel
-  - toFQDNs:
-    - matchName: dapr.github.io
-    - matchName: analytics.loft.rocks
-    - matchPattern: '*.oceanbox.io'
-    # - matchName: gitlab.com
-    # - matchName: api.github.com
-    # - matchPattern: '*.gitlab.com'
-  endpointSelector:
-    matchLabels: {}

values/system/oceanbox/network/idp/allow-api-server.yaml

@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: idp
-spec:
-  endpointSelector:
-    matchLabels: {}
-  egress:
-  - toEntities:
-    - kube-apiserver
-    toPorts:
-    - ports:
-      - port: "6443"
-        protocol: TCP

values/system/oceanbox/network/idp/allow-gitlab.yaml

@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-grafana-oidc-login
-  namespace: idp
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: cerbos
-  egress:
-  - toFQDNs:
-    - matchName: gitlab.com
-    - matchPattern: '*.gitlab.com'

values/system/oceanbox/network/idp/allow-idp-external-access.yaml

@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-external-idp
-spec:
-  egress:
-  - toFQDNs:
-    - matchName: login.microsoftonline.com
-    - matchName: graph.microsoft.com
-    - matchName: telemetry.cerbos.dev
-  endpointSelector: {}
-

values/system/oceanbox/network/idp/allow-itp-smtpgw.yaml

@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-itp-smtp
-  namespace: idp
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: keycloak
-  egress:
-  - toFQDNs:
-    - matchName: smtpgw.itpartner.no

values/system/oceanbox/network/idp/allow-keycloak.yaml

@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-keycloak
-  namespace: idp
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: dex
-  egress:
-  - toFQDNs:
-    - matchName: auth.srv.oceanbox.io

values/system/oceanbox/network/jaeger/allow-api-server.yaml

@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: jaeger
-spec:
-  endpointSelector:
-    matchLabels: {}
-  egress:
-  - toEntities:
-    - kube-apiserver
-    toPorts:
-    - ports:
-      - port: "6443"
-        protocol: TCP

values/system/oceanbox/network/jaeger/allow-remote-node.yaml

@@ -1,17 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-webhooks
-  namespace: jaeger
-spec:
-  endpointSelector:
-    matchLabels: {}
-  ingress:
-  - fromEntities:
-    - kube-apiserver
-  - toPorts:
-    - ports:
-      - port: "9443"
-        protocol: TCP
-      - port: "443"
-        protocol: TCP