fix: add cilium cluster feature guards to network policies

values/ingress-nginx/manifests/policies/CiliumNetworkPolicy-allow-host-traffic.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
@@ -12,3 +13,4 @@ spec:
     matchLabels:
       app.kubernetes.io/component: controller
       app.kubernetes.io/instance: ingress-nginx
+{{- end }}

values/ingress-nginx/manifests/policies/CiliumNetworkPolicy-allow-hubble-traffic.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
@@ -12,3 +13,4 @@ spec:
     matchLabels:
       app.kubernetes.io/component: controller
       app.kubernetes.io/instance: ingress-nginx
+{{- end }}

values/ingress-nginx/manifests/policies/CiliumNetworkPolicy-allow-prometheus-metrics.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
@@ -15,3 +16,4 @@ spec:
         - ports:
             - port: "9913"
               protocol: TCP
+{{- end }}

values/ingress-nginx/manifests/policies/CiliumNetworkPolicy-allow-s3-traffic.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
@@ -17,3 +18,4 @@ spec:
     matchLabels:
       app.kubernetes.io/component: controller
       app.kubernetes.io/instance: ingress-nginx
+{{- end }}

values/ingress-nginx/manifests/policies/CiliumNetworkPolicy-allow-world-to-ingress-nginx.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
 apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
@@ -17,3 +18,4 @@ spec:
               protocol: TCP
             - port: "443"
               protocol: TCP
+{{- end }}