fix: add cilium cluster feature guards to network policies

values/cert-manager/manifests/policies/CiliumNetworkPolicy-allow-api-server-to-cert-manager.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
@@ -11,3 +12,4 @@ spec:
   ingress:
     - fromEntities:
         - remote-node
+{{- end }}

values/cert-manager/manifests/policies/CiliumNetworkPolicy-allow-api-server.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
@@ -10,3 +11,4 @@ spec:
         - kube-apiserver
   endpointSelector:
     matchLabels: {}
+{{- end }}

values/cert-manager/manifests/policies/CiliumNetworkPolicy-allow-prometheus-metrics.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
@@ -16,3 +17,4 @@ spec:
         - ports:
             - port: "9402"
               protocol: TCP
+{{- end }}

values/cert-manager/manifests/policies/CiliumNetworkPolicy-allow-world-traffic.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
@@ -10,3 +11,4 @@ spec:
         - world
   endpointSelector:
     matchLabels: {}
+{{- end }}