fix: add eli and hansi to ocenographers acl

Merge branch 'main' of gitlab.com:oceanbox/manifests
fix: migrate rossby manifests to gitea
2026-02-02 15:37:19 +01:00 · 2026-02-02 12:31:00 +01:00 · 2026-02-02 12:28:36 +01:00 · 2026-02-01 22:46:56 +01:00 · 2026-02-01 22:40:08 +01:00 · 2026-02-01 15:18:36 +01:00
471 changed files with 917 additions and 58602 deletions
@@ -1,27 +0,0 @@
-apiVersion: v2
-name: sys
-description: A Helm chart for Kubernetes
-
-# A chart can be either an 'application' or a 'library' chart.
-#
-# Application charts are a collection of templates that can be packaged into versioned archives
-# to be deployed.
-#
-# Library charts provide useful utilities or functions for the chart developer. They're included as
-# a dependency of application charts to inject those utilities and functions into the rendering
-# pipeline. Library charts do not define any templates and therefore cannot be deployed.
-type: application
-
-# This is the chart version. This version number should be incremented each time you make changes
-# to the chart and its templates, including the app version.
-# Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.0
-
-# This is the version number of the application being deployed. This version number should be
-# incremented each time you make changes to the application. Versions are not expected to
-# follow Semantic Versioning. They should reflect the version the application is using.
-# It is recommended to use it with quotes.
-appVersion: "1.16.0"
-dependencies: # A list of the chart requirements (optional)
-  - name: sys-cilium-policies
-    condition: cilium.enabled
@@ -1,23 +0,0 @@
-# Patterns to ignore when building packages.
-# This supports shell glob matching, relative path matching, and
-# negation (prefixed with !). Only one pattern per line.
-.DS_Store
-# Common VCS dirs
-.git/
-.gitignore
-.bzr/
-.bzrignore
-.hg/
-.hgignore
-.svn/
-# Common backup files
-*.swp
-*.bak
-*.tmp
-*.orig
-*~
-# Various IDEs
-.project
-.idea/
-*.tmproj
-.vscode/
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-applicationset-ingress
-  namespace: argocd
-spec:
-  description: Allow access from the ingress controller
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: applicationset-controller
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: ingress-nginx
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-argo-notifications
-  namespace: argocd
-spec:
-  description: Allow access to the ArgoCD Notifications
-  egress:
-    - toFQDNs:
-        - matchName: slack.com
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: notifications-controller
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-argo-repo-access-applicationset
-  namespace: argocd
-spec:
-  description: Allow access to the ArgoCD repo Applicationset
-  egress:
-    - toEntities:
-        - world
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: applicationset-controller
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-argo-repo-access
-  namespace: argocd
-spec:
-  description: Allow access to the ArgoCD repo server
-  egress:
-    - toEntities:
-        - world
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: repo-server
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-chartmuseum-ingress
-  namespace: argocd
-spec:
-  description: Allow access to the chartmuseum ingress
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: chartmuseum
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: ingress-nginx
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-image-updater-repo-access
-  namespace: argocd
-spec:
-  description: Allow argoCD image updater to access github container registry
-  egress:
-    - toFQDNs:
-        - matchName: ghcr.io
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: argocd-image-updater
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-ingress
-  namespace: argocd
-spec:
-  description: Allow access from the ingress controller
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: server
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: ingress-nginx
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: argocd
-spec:
-  description: Allow access to the Kube API server
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels: {}
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-microsoft-sso
-  namespace: argocd
-spec:
-  description: Allow argoCD dex server to authenticate to microsoft online azure oatuh
-  egress:
-    - toFQDNs:
-        - matchName: login.microsoftonline.com
-        - matchPattern: '*.microsoftonline.com'
-        - matchName: github.com
-        - matchName: api.github.com
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: argocd-dex-server
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-prometheus-metrics-rollout
-  namespace: argocd
-spec:
-  description: Allow access to the Prometheus metrics
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: argo-rollouts
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-      toPorts:
-        - ports:
-            - port: "8090"
-              protocol: TCP
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-prometheus-metrics-workflows
-  namespace: argocd
-spec:
-  description: Allow access to the Prometheus metrics
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: argo-workflows
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-      toPorts:
-        - ports:
-            - port: "9090"
-              protocol: TCP
@@ -1,30 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-prometheus-metrics
-  namespace: argocd
-spec:
-  description: Allow access to the Prometheus metrics
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: argocd
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-      toPorts:
-        - ports:
-            - port: "8082"
-              protocol: TCP
-            - port: "8080"
-              protocol: TCP
-            - port: "9001"
-              protocol: TCP
-            - port: "9121"
-              protocol: TCP
-            - port: "8084"
-              protocol: TCP
-            - port: "8083"
-              protocol: TCP
-            - port: "5558"
-              protocol: TCP
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-api-server-to-cert-manager
-  namespace: cert-manager
-spec:
-  description: Allow the API server to communicate with the cert-manager pods
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: cert-manager
-  ingress:
-    - fromEntities:
-        - remote-node
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-api-server
-  namespace: cert-manager
-spec:
-  description: Allow the Kube API server to communicate with cert-manager
-  egress:
-    - toEntities:
-        - kube-apiserver
-  endpointSelector:
-    matchLabels: {}
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-prometheus-metrics
-  namespace: cert-manager
-spec:
-  description: Allow Prometheus metrics
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: cert-manager
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-    - toPorts:
-        - ports:
-            - port: "9402"
-              protocol: TCP
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-world-traffic
-  namespace: cert-manager
-spec:
-  description: Allow the world to communicate with cert-manager
-  egress:
-    - toEntities:
-        - world
-  endpointSelector:
-    matchLabels: {}
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-api-server
-  namespace: cilium-spire
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels: {}
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-to-server
-  namespace: cilium-spire
-spec:
-  endpointSelector:
-    matchLabels: {}
-  ingress:
-    - fromEntities:
-        - remote-node
-      toPorts:
-        - ports:
-            - port: "8081"
-              protocol: TCP
@@ -1,22 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-api-server
-  namespace: cilium-test
-spec:
-  egress:
-    - toEndpoints:
-        - {}
-    - toEntities:
-        - cluster
-    - toEntities:
-        - remote-node
-    - toEntities:
-        - world
-  endpointSelector:
-    matchLabels: {}
-  ingress:
-    - fromEntities:
-        - cluster
-    - fromEntities:
-        - world
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: allow-acme-solvers
-spec:
-  description: Policy for ingress for Acme Solvers.
-  endpointSelector:
-    matchLabels:
-      acme.cert-manager.io/http01-solver: "true"
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: ingress-nginx
@@ -1,24 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: allow-dns
-spec:
-  description: 'description: Allow only dns traffic by default. Also acts as a deny-all policy'
-  egress:
-    - toEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: kube-system
-            k8s-app: kube-dns
-      toPorts:
-        - ports:
-            - port: "53"
-              protocol: UDP
-        - rules:
-            dns:
-              - matchPattern: '*'
-  endpointSelector:
-    matchExpressions:
-      - key: io.kubernetes.pod.namespace
-        operator: NotIn
-        values:
-          - kube-system
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: allow-mariadb-operator
-spec:
-  description: allow mariadb instances to be reached by operator
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: mariadb
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            app.kubernetes.io/name: mariadb-operator
-            io.kubernetes.pod.namespace: mariadb-operator
-      toPorts:
-        - ports:
-            - port: "3306"
-              protocol: TCP
@@ -1,20 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: allow-s3-traffic
-spec:
-  description: Policy for egress for CNPG Backups.
-  egress:
-    - toFQDNs:
-      {{- range .Values.s3.hosts }}
-        - matchName: {{ . | quote }}
-      {{- end }}
-      {{- range .Values.s3.patterns }}
-        - matchPattern: {{ . | quote }}
-      {{- end }}
-    - toCIDR:
-      {{- range .Values.s3.cidr }}
-        - {{ . | quote }}
-      {{- end }}
-  endpointSelector:
-    matchLabels: {}
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: cilium-health-checks
-spec:
-  description: Health checks
-  egress:
-    - toEntities:
-        - remote-node
-  endpointSelector:
-    matchLabels:
-      reserved:health: ""
-  ingress:
-    - fromEntities:
-        - remote-node
@@ -1,9 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: deny-all
-spec:
-  description: Deny all
-  egress: []
-  endpointSelector: {}
-  ingress: []
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-api-server
-  namespace: cnpg
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: postgres-operator
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-webhooks
-  namespace: cnpg
-spec:
-  endpointSelector:
-    matchLabels: {}
-  ingress:
-    - fromEntities:
-        - kube-apiserver
-    - toPorts:
-        - ports:
-            - port: "9443"
-              protocol: TCP
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-api-server
-  namespace: kube-downscaler
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels:
-      application: downscaler-py-kube-downscaler
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-webhooks
-  namespace: kube-downscaler
-spec:
-  endpointSelector:
-    matchLabels: {}
-  ingress:
-    - fromEntities:
-        - kube-apiserver
-    - toPorts:
-        - ports:
-            - port: "9443"
-              protocol: TCP
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-host-traffic
-  namespace: ingress-nginx
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-        - host
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: controller
-      app.kubernetes.io/instance: ingress-nginx
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-hubble-traffic
-  namespace: ingress-nginx
-spec:
-  egress:
-    - toFQDNs:
-        - matchPattern: hubble.*.*.*
-        - matchPattern: hubble.*.*.*.*
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: controller
-      app.kubernetes.io/instance: ingress-nginx
@@ -1,17 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-prometheus-metrics
-  namespace: ingress-nginx
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: ingress-nginx
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-    - toPorts:
-        - ports:
-            - port: "9913"
-              protocol: TCP
@@ -1,19 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-s3-traffic
-  namespace: ingress-nginx
-spec:
-  egress:
-    - toCIDR:
-        - 10.139.2.10/32
-    - toCIDR:
-        - 10.139.2.11/32
-    - toCIDR:
-        - 10.139.2.20/32
-    - toCIDR:
-        - 10.139.2.21/32
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: controller
-      app.kubernetes.io/instance: ingress-nginx
@@ -1,19 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-world-to-ingress-nginx
-  namespace: ingress-nginx
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: controller
-      app.kubernetes.io/instance: ingress-nginx
-  ingress:
-    - fromEntities:
-        - world
-    - toPorts:
-        - ports:
-            - port: "80"
-              protocol: TCP
-            - port: "443"
-              protocol: TCP
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: jaeger
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-    - toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels: {}
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-to-jaeger
-  namespace: jaeger
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: jaeger-operator
-  ingress:
-    - fromEntities:
-        - remote-node
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-api-server
-  namespace: kafka
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: kafka-operator
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-webhooks
-  namespace: kafka
-spec:
-  endpointSelector:
-    matchLabels: {}
-  ingress:
-    - fromEntities:
-        - kube-apiserver
-    - toPorts:
-        - ports:
-            - port: "9443"
-              protocol: TCP
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-controller-metrics
-  namespace: kube-system
-spec:
-  description: Allow Controller Metrics
-  endpointSelector:
-    matchLabels:
-      k8s-app: kube-controller-manager
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-    - toPorts:
-        - ports:
-            - port: "10257"
-              protocol: TCP
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-csi-webhook
-  namespace: kube-system
-spec:
-  endpointSelector:
-    matchLabels:
-      app: csi-snapshot-webhook
-  ingress:
-    - fromEntities:
-        - remote-node
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-dns-metrics
-  namespace: kube-system
-spec:
-  description: Allow DNS metrics
-  endpointSelector:
-    matchLabels:
-      k8s-app: kube-dns
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-    - toPorts:
-        - ports:
-            - port: "9153"
-              protocol: TCP
@@ -1,31 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-dns-world
-  namespace: kube-system
-spec:
-  description: Allow DNS World
-  egress:
-    - toCIDR:
-        - 8.8.8.8/32
-        - 172.31.254.11/32
-        - 1.1.1.1/32
-      toPorts:
-        - ports:
-            - port: "53"
-              protocol: UDP
-          rules:
-            dns:
-              - matchPattern: '*'
-    - toEntities:
-        - world
-      toPorts:
-        - ports:
-            - port: "53"
-              protocol: UDP
-          rules:
-            dns:
-              - matchPattern: '*'
-  endpointSelector:
-    matchLabels:
-      k8s-app: kube-dns
@@ -1,19 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-dns
-  namespace: kube-system
-spec:
-  description: Allow DNS
-  endpointSelector:
-    matchLabels:
-      k8s-app: kube-dns
-  ingress:
-    - fromEndpoints:
-        - matchExpressions:
-            - key: io.kubernetes.pod.namespace
-              operator: Exists
-      toPorts:
-        - ports:
-            - port: "53"
-              protocol: UDP
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-host-traffic
-  namespace: kube-system
-spec:
-  description: Allow Host Traffic
-  egress:
-    - toEntities:
-        - remote-node
-        - host
-        - kube-apiserver
-  endpointSelector:
-    matchLabels: {}
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-hubble-ingress
-  namespace: kube-system
-spec:
-  description: Allow Hubble ingress
-  endpointSelector:
-    matchLabels:
-      k8s-app: hubble-ui
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: ingress-nginx
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-hubble-oauth2-ingress
-  namespace: kube-system
-spec:
-  description: Allow Hubble OAuth2 ingress
-  endpointSelector:
-    matchLabels:
-      k8s-app: oauth2-proxy
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: ingress-nginx
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-hubble-relay-metrics
-  namespace: kube-system
-spec:
-  description: Allow Hubble Relay Metrics
-  endpointSelector:
-    matchLabels:
-      k8s-app: hubble-relay
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-    - toPorts:
-        - ports:
-            - port: "9966"
-              protocol: TCP
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-microsoft-sso
-  namespace: kube-system
-spec:
-  description: Allow Microsoft SSO
-  egress:
-    - toFQDNs:
-        - matchName: login.microsoftonline.com
-        - matchPattern: '*.microsoftonline.com'
-        - matchName: graph.microsoft.com
-  endpointSelector:
-    matchLabels:
-      k8s-app: oauth2-proxy
@@ -1,26 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-namespace-traffic
-  namespace: kube-system
-spec:
-  description: Allow Namespace Traffic
-  egress:
-    - toEndpoints:
-        - {}
-    - toEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: kube-system
-            k8s-app: kube-dns
-      toPorts:
-        - ports:
-            - port: "53"
-              protocol: UDP
-          rules:
-            dns:
-              - matchPattern: '*'
-  endpointSelector:
-    matchLabels: {}
-  ingress:
-    - fromEndpoints:
-        - {}
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-proxy-metrics
-  namespace: kube-system
-spec:
-  description: Allow Proxy metrics
-  endpointSelector:
-    matchLabels:
-      k8s-app: kube-proxy
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-    - toPorts:
-        - ports:
-            - port: "10249"
-              protocol: TCP
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: kubelet-serving-cert-approver
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels: {}
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-api-server
-  namespace: kyverno
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-    - toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels: {}
@@ -1,17 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-prometheus-metrics
-  namespace: kyverno
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: kyverno
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-    - toPorts:
-        - ports:
-            - port: "8000"
-              protocol: TCP
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-to-kyverno
-  namespace: kyverno
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: kyverno
-  ingress:
-    - fromEntities:
-        - remote-node
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-loki-backend-to-api-server
-  namespace: loki
-spec:
-  description: Promtail needs to reach kube-apiserver
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: backend
-      app.kubernetes.io/instance: loki
@@ -1,20 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-prometheus-metrics
-  namespace: loki
-spec:
-  description: Allow Prometheus read and write
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: loki
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-      toPorts:
-        - ports:
-            - port: "3100"
-              protocol: TCP
-            - port: "3500"
-              protocol: TCP
@@ -1,17 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-promtail-to-api-server
-  namespace: loki
-spec:
-  description: Promtail needs to reach kube-apiserver
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: promtail
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-stats-grafana
-  namespace: loki
-spec:
-  description: Allow stats
-  egress:
-    - toFQDNs:
-        - matchName: stats.grafana.org
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: loki
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-api-server
-  namespace: mariadb-operator
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: mariadb-operator
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-host-to-mariadb
-  namespace: mariadb-operator
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: mariadb-operator
-  ingress:
-    - fromEntities:
-        - host
@@ -1,17 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-prometheus-metrics
-  namespace: mariadb-operator
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: mariadb-operator
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-      toPorts:
-        - ports:
-            - port: "8080"
-              protocol: TCP
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-webhooks
-  namespace: mariadb-operator
-spec:
-  endpointSelector:
-    matchLabels: {}
-  ingress:
-    - fromEntities:
-        - kube-apiserver
-        - remote-node
-      toPorts:
-        - ports:
-            - port: "443"
-              protocol: TCP
-            - port: "9443"
-              protocol: TCP
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-host-traffic
-  namespace: mayastor
-spec:
-  description: Allow Host Traffic
-  egress:
-    - toEntities:
-        - remote-node
-        - host
-        - kube-apiserver
-  endpointSelector:
-    matchLabels: {}
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-to-agent-core
-  namespace: mayastor
-spec:
-  description: Allow Remote to Agent Core
-  endpointSelector:
-    matchLabels:
-      app: agent-core
-  ingress:
-    - fromEntities:
-        - remote-node
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-to-etcd
-  namespace: mayastor
-spec:
-  description: Allow Remote to Etcd
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: etcd
-  ingress:
-    - fromEntities:
-        - remote-node
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-to-maya
-  namespace: mayastor
-spec:
-  description: Allow Remote to Mayastor
-  endpointSelector:
-    matchLabels:
-      app: api-rest
-  ingress:
-    - fromEntities:
-        - remote-node
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: allow-kube-api
-spec:
-  description: Allow access to the Kube API server
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels:
-      app: minio
@@ -1,17 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: allow-minio-operator
-spec:
-  description: Allow access to the Kube API server
-  endpointSelector:
-    matchLabels:
-      app: minio
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: minio-operator
-      toPorts:
-        - ports:
-            - port: "9000"
-              protocol: TCP
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: allow-nodeport-ingress
-spec:
-  description: Allow access to the Kube API server
-  endpointSelector:
-    matchLabels:
-      app: minio
-  ingress:
-    - fromEntities:
-        - world
-      toPorts:
-        - ports:
-            - port: "9000"
-              protocol: TCP
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: minio-operator
-spec:
-  description: Allow access to the Kube API server
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels: {}
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: odigos-system
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels: {}
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-port-4317
-  namespace: odigos-system
-spec:
-  egress:
-    - toPorts:
-        - ports:
-            - port: "4317"
-              protocol: TCP
-  endpointSelector:
-    matchLabels: {}
-  ingress:
-    - fromEntities:
-        - remote-node
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-api-server
-  namespace: one-password
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: one-password-operator
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-webhooks
-  namespace: one-password
-spec:
-  endpointSelector:
-    matchLabels: {}
-  ingress:
-    - fromEntities:
-        - kube-apiserver
-    - toPorts:
-        - ports:
-            - port: "9443"
-              protocol: TCP
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-kube-api
-  namespace: opencost
-spec:
-  egress:
-    - toEntities:
-        - kube-apiserver
-      toPorts:
-        - ports:
-            - port: "6443"
-              protocol: TCP
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: opencost
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-otel-collector-loadbalancer-ingress
-  namespace: otel
-spec:
-  description: Allow ingress from world
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: opentelemetry-collector
-  ingress:
-    - fromEntities:
-        - world
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-mail-egress
-  namespace: postfix
-spec:
-  description: Allow mailserver to send mails to world
-  egress:
-    - toEntities:
-        - world
-  endpointSelector:
-    matchLabels:
-      app: smtp-relay
@@ -1,21 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-mail-ingress
-  namespace: postfix
-spec:
-  description: Allow all services in cluster to send mail
-  endpointSelector:
-    matchLabels:
-      app: smtp-relay
-  ingress:
-    - fromEndpoints:
-        - matchExpressions:
-            - key: io.kubernetes.pod.namespace
-              operator: Exists
-      toPorts:
-        - ports:
-            - port: "25"
-              protocol: TCP
-            - port: "587"
-              protocol: TCP
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-prometheus-metrics
-  namespace: postfix
-spec:
-  description: 'Allow prometheus metrics '
-  endpointSelector:
-    matchLabels:
-      app: smtp-relay
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: prometheus
-      toPorts:
-        - ports:
-            - port: "9154"
-              protocol: TCP
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-alerting
-  namespace: prometheus
-spec:
-  description: Allow alerting
-  egress:
-    - toEntities:
-        - world
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: prom-alertmanager
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-alertmanager-ingress
-  namespace: prometheus
-spec:
-  description: Allow Nginx ingress
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: alertmanager
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: ingress-nginx
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-dns-metrics
-  namespace: prometheus
-spec:
-  description: Allow DNS metrics
-  egress:
-    - toPorts:
-        - ports:
-            - port: "9153"
-              protocol: TCP
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: prometheus
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-etcd-metrics
-  namespace: prometheus
-spec:
-  description: Allow ETCD metrics
-  egress:
-    - toPorts:
-        - ports:
-            - port: "2379"
-              protocol: TCP
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: prometheus
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-grafana-ingress
-  namespace: prometheus
-spec:
-  description: Allow Grafana ingress
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: grafana
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: ingress-nginx
@@ -1,16 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-grafana-oidc-login
-  namespace: prometheus
-spec:
-  description: Allow Grafana OIDC login
-  egress:
-    - toFQDNs:
-        - matchName: login.microsoftonline.com
-        - matchPattern: '*.microsoftonline.com'
-        - matchName: api.github.com
-        - matchName: github.com
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: grafana
@@ -1,15 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-grafana-plugins
-  namespace: prometheus
-spec:
-  description: Allow Grafana Plugins
-  egress:
-    - toFQDNs:
-        - matchName: grafana.com
-        - matchName: storage.googleapis.com
-        - matchName: raw.githubusercontent.com
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: grafana
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-grafana-secure-gravatar
-  namespace: prometheus
-spec:
-  description: Allow Grafana Secure Gravatar
-  egress:
-    - toFQDNs:
-        - matchName: secure.grafana.com
-        - matchName: secure.gravatar.com
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: grafana
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-host-traffic
-  namespace: prometheus
-spec:
-  description: Allow Host Traffic
-  egress:
-    - toEntities:
-        - remote-node
-        - host
-        - kube-apiserver
-  endpointSelector:
-    matchLabels: {}
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-nginx-ingress
-  namespace: prometheus
-spec:
-  description: Allow Nginx ingress
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: prometheus
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: ingress-nginx
@@ -1,19 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-opencost-scrape
-  namespace: prometheus
-spec:
-  description: Allow OpenCost scrape
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: prometheus
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            app.kubernetes.io/name: opencost
-            io.kubernetes.pod.namespace: opencost
-    - toPorts:
-        - ports:
-            - port: "9090"
-              protocol: TCP
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-to-metrics-server
-  namespace: prometheus
-spec:
-  description: Allow Remote Metrics Server
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: metrics-server
-  ingress:
-    - fromEntities:
-        - remote-node
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-remote-node-to-webhook
-  namespace: prometheus
-spec:
-  description: Allow Remote Web Hook
-  endpointSelector:
-    matchLabels:
-      app: kube-prometheus-stack-operator
-  ingress:
-    - fromEntities:
-        - remote-node
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-robusta-ingress
-  namespace: prometheus
-spec:
-  description: Allow Robusta ingress
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: prom-prometheus
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: robusta
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-stats-grafana
-  namespace: prometheus
-spec:
-  description: Allow stats
-  egress:
-    - toFQDNs:
-        - matchName: stats.grafana.org
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/name: grafana
@@ -1,52 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-inter-node-traffic
-  namespace: rabbitmq
-spec:
-  description: Allow communication between nodes int the RabbitMQ cluster
-  egress:
-    - toEndpoints:
-        - matchLabels:
-            app.kubernetes.io/component: rabbitmq
-      toPorts:
-        - ports:
-            - port: "4369"
-            - endPort: 6500
-              port: "6000"
-            - port: "25672"
-            - port: "35672"
-            - port: "35673"
-            - port: "35674"
-            - port: "35675"
-            - port: "35676"
-            - port: "35677"
-            - port: "35678"
-            - port: "35679"
-            - port: "35680"
-            - port: "35681"
-            - port: "35682"
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: rabbitmq
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            app.kubernetes.io/component: rabbitmq
-      toPorts:
-        - ports:
-            - port: "4369"
-            - endPort: 6500
-              port: "6000"
-            - port: "25672"
-            - port: "35672"
-            - port: "35673"
-            - port: "35674"
-            - port: "35675"
-            - port: "35676"
-            - port: "35677"
-            - port: "35678"
-            - port: "35679"
-            - port: "35680"
-            - port: "35681"
-            - port: "35682"
@@ -1,18 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-operator-traffic
-  namespace: rabbitmq
-spec:
-  description: Allow access to the RabbitMQ operator
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: rabbitmq
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            app.kubernetes.io/component: rabbitmq-operator
-      toPorts:
-        - ports:
-            - port: "15672"
-            - port: "15671"
@@ -1,27 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-rabbitmq-traffic
-  namespace: rabbitmq
-spec:
-  description: Allow access to the RabbitMQ cluster
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: rabbitmq
-  ingress:
-    - toPorts:
-        - ports:
-            - port: "5672"
-            - port: "5671"
-            - port: "5552"
-            - port: "5551"
-            - port: "15672"
-            - port: "15671"
-            - port: "61613"
-            - port: "61614"
-            - port: "1883"
-            - port: "8883"
-            - port: "15674"
-            - port: "15675"
-            - port: "15692"
-            - port: "15691"
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-ingress
-  namespace: robusta
-spec:
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/component: server
-  ingress:
-    - fromEndpoints:
-        - matchLabels:
-            io.kubernetes.pod.namespace: ingress-nginx
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
juselius	fceba8ccea	fix: add eli and hansi to ocenographers acl	2026-02-02 15:37:19 +01:00
juselius	bfb16288b9	Merge branch 'main' of gitlab.com:oceanbox/manifests	2026-02-02 12:31:00 +01:00
juselius	d90f43411f	fix: migrate rossby manifests to gitea	2026-02-02 12:28:36 +01:00
mrtz	a30a5f28fb	fix: Use working env	2026-02-01 22:46:56 +01:00
mrtz	e4cb8b36df	fix(gitea/pf): Add mail	2026-02-01 22:40:08 +01:00
juselius	ff956948bf	fix: add hel1 lb to whitelist	2026-02-01 15:18:36 +01:00
juselius	18e3815e03	fix: change attic source to git.oceanbox.io	2026-02-01 15:12:28 +01:00
juselius	2dfca9bcbc	fix: add port 22 to hel1 for oceanographers	2026-02-01 14:56:52 +01:00
mrtz	5a013b42ba	fix: Add gitea to sys-proj and whitelist	2026-02-01 11:56:37 +01:00
mrtz	5cb695e096	fix(gitea): Don't use azure scopes	2026-02-01 11:19:12 +01:00
mrtz	3b7582edd0	fix(gitea): TRy new claim	2026-02-01 11:04:04 +01:00
mrtz	49321a0fa0	fix(gitea): Set admins	2026-02-01 10:52:15 +01:00
mrtz	9b55685967	fix(gitea): Add ekman/oceanbox to whitelist	2026-02-01 10:34:41 +01:00
mrtz	d257651195	fix(gitea): Only link on login	2026-02-01 10:33:35 +01:00
mrtz	63b6d99955	chore: Bump makai	2026-01-29 19:06:09 +01:00
mrtz	a48077f9b3	fifix(gitea): Enable registrations for nickname and email	2026-01-29 17:40:34 +01:00
Radovan Bast	9c60baeff9	ci: docs	2026-01-29 09:57:25 +00:00
mrtz	d30515ab76	ci: docs	2026-01-29 09:41:42 +00:00
mrtz	85117976c3	ci: docs	2026-01-29 09:32:30 +00:00
mrtz	2ec369f428	ci: docs	2026-01-29 09:29:39 +00:00
mrtz	aadf8995e6	ci: docs	2026-01-29 09:27:09 +00:00
mrtz	53776f68dd	ci: docs	2026-01-29 09:18:51 +00:00
mrtz	d4a56867e5	fix: Add docs to headscale	2026-01-29 10:00:56 +01:00
mrtz	8ae4f2c854	fix: Set registry path	2026-01-29 09:43:47 +01:00
mrtz	ee21078412	fix: docs	2026-01-29 09:40:34 +01:00
mrtz	a0e69a053d	ci: docs	2026-01-29 08:38:15 +00:00
mrtz	3bae9f5065	fix: makai -> docs	2026-01-29 09:29:01 +01:00
mrtz	cf816e621b	feat: Add docs	2026-01-29 09:26:53 +01:00
Radovan Bast	b71da56da7	ci: makai	2026-01-28 12:35:09 +00:00
simkir	3b6ed8e544	ci: makai	2026-01-28 11:48:46 +00:00
mrtz	9cbb16ae08	fix(gitea): Increase session lifetime	2026-01-27 21:04:23 +01:00
mrtz	708a44fa9b	fix(gitea): Typo	2026-01-26 17:39:33 +01:00
mrtz	f4a53934c2	fix(gitea): remove unused	2026-01-26 17:30:44 +01:00
mrtz	79ad206db3	fix(gitea): Reset	2026-01-26 17:28:56 +01:00
mrtz	6c850b312c	fix(gitae):...	2026-01-26 17:27:36 +01:00
mrtz	d1c4b25499	fix(gitea): More secrets	2026-01-26 17:25:11 +01:00
mrtz	265c370787	fix(gitea): Also for attachements	2026-01-26 17:23:27 +01:00
mrtz	ed017894b5	fix(gitea): Dup	2026-01-26 17:21:33 +01:00
mrtz	9f0503bbf3	fix(gitea): Use env	2026-01-26 17:18:29 +01:00
mrtz	5aa937acb3	fix(gitea): All in buckets	2026-01-26 17:16:08 +01:00
mrtz	548c942b42	fix(hs): Add new gitea	2026-01-26 09:42:38 +01:00
mrtz	b49f8dc005	fix(gitea): Change to public DNS with private IP	2026-01-26 08:55:16 +01:00
mrtz	955424cc70	Merge branch 'renovate/gatus-1.x' into 'main' Update Helm release gatus to v1.4.5 See merge request oceanbox/manifests!71	2026-01-25 21:08:35 +01:00
mrtz	6e7fa3a642	fix(gitea): Cleanup	2026-01-25 20:38:43 +01:00
mrtz	f6d6282aea	chore(gitea): Bump	2026-01-25 11:45:13 +01:00
Renovate Bot	f20375c7ca	Update Helm release gatus to v1.4.5	2026-01-25 08:58:18 +00:00
mrtz	127722c4b4	fix(argo): Add postfix	2026-01-24 16:51:12 +01:00
mrtz	d345172d8a	fix(postfix): Move into manifests	2026-01-24 16:49:33 +01:00
mrtz	e55212a859	fix(postfix): Plain	2026-01-24 16:47:38 +01:00
mrtz	8a39fb8afc	Intiall Postfix setup :/	2026-01-24 15:52:10 +01:00
mrtz	212739ae94	Merge branch 'automated/npins-update-20260123' into 'main' chore: update npins dependencies See merge request oceanbox/manifests!70	2026-01-24 08:29:11 +01:00
mrtz	a940a2fedf	fix(gitea): More metrics and NodePort	2026-01-23 20:03:56 +01:00
mrtz	38264b4879	fix(gitea): LB	2026-01-23 19:43:51 +01:00
mrtz	941e98abb8	fix(gitea): Add push to create and lb	2026-01-23 19:42:51 +01:00
mrtz	09b8030d03	chore: update npins dependencies Automated update of Nix dependencies via npins. Updated packages: + "revision": "a1ef738813b15cf8ec759bdff5761b027e3e1d23", + "hash": "sha256-Efs3VUPelRduf3PpfPP2ovEB4CXT7vHf8W+xc49RL/U=" + "hash": "sha256-XH6awru9NnBc/m+2YhRNT8r1PAKEiPGF3gs//F3ods0="	2026-01-23 15:01:05 +00:00
mrtz	e7ba9bf363	fix(gitea): Via proxy protocol	2026-01-22 17:36:52 +01:00
mrtz	3a188746de	fix(gitea): Secure cookie	2026-01-22 17:32:46 +01:00
mrtz	f315c5019b	fix(gitea): Rootless-Rootless	2026-01-22 16:31:00 +01:00
mrtz	6213f4ce2e	fix(gitea): Rootless	2026-01-22 16:28:01 +01:00
mrtz	6d61ba9243	chore(gitea): Bump	2026-01-22 16:23:26 +01:00
mrtz	ead05c101d	fix(gitea\|hs): Cool git domain	2026-01-22 16:16:38 +01:00
mrtz	44a93f15a6	fix(hs): New LB for git	2026-01-22 16:15:51 +01:00
mrtz	97d21660b1	fix(gitea): Back to svc for now	2026-01-22 15:46:31 +01:00
mrtz	9ff1f8aafc	fix(gitea): Nodeport	2026-01-22 15:41:49 +01:00
mrtz	f9cf9ad9b1	fix(gitea): Don't overwrite http LB	2026-01-22 15:28:16 +01:00
mrtz	807d9bca35	fix(gitea): Enabled by default	2026-01-22 15:26:28 +01:00
mrtz	bf15426393	fix(gitea): LB take two	2026-01-22 15:25:14 +01:00
mrtz	21c57dac36	fix(gitea): Add LB	2026-01-22 15:24:05 +01:00
mrtz	1fd177b73a	fix(gitea): Type again	2026-01-22 15:01:45 +01:00
mrtz	9d5b144d2d	fix(gitea): Set nodePort	2026-01-22 14:59:01 +01:00
mrtz	24dfb63714	fix(gitea): Bump nodeport	2026-01-22 14:52:47 +01:00
mrtz	e467799bd6	fix(gitea): Add admin secret and nodeport	2026-01-22 14:50:07 +01:00
mrtz	ad258bf3fe	feat: Add Gitea	2026-01-22 12:31:52 +01:00
mrtz	0801c0c6c7	fix: Remove attic reference	2026-01-22 09:57:37 +01:00
mrtz	924c7c74a4	fix(rabbitmq): Bump memroy	2026-01-22 08:42:42 +01:00
mrtz	1b766341cb	ci: atlantis	2026-01-21 12:53:15 +00:00
mrtz	b8c199718a	fix(forgejo): Increase caching and don't send confirmation emails	2026-01-21 13:48:38 +01:00
mrtz	b77b968420	fix(forgejo): Add metrics	2026-01-21 13:39:03 +01:00
mrtz	449a0f0e60	ci: atlantis	2026-01-21 09:42:26 +00:00
mrtz	b1584703d1	fix: Remove nexus helmfile	2026-01-21 09:37:24 +01:00
mrtz	d3ecef770f	fix: Remove unused values	2026-01-21 09:36:29 +01:00
mrtz	f43588cb93	fix(cilium): Autosync of by default	2026-01-21 09:03:41 +01:00
mrtz	be985a1ac4	Merge branch 'renovate/forgejo-16.x' into 'main' Update forgejo Docker tag to v16.0.1 See merge request oceanbox/manifests!68	2026-01-20 19:09:10 +01:00
mrtz	6a3e3855df	Merge branch 'renovate/argocd-apps-2.x' into 'main' Update Helm release argocd-apps to v2.0.4 See merge request oceanbox/manifests!69	2026-01-20 19:08:50 +01:00
Renovate Bot	da5a2ea142	Update Helm release argocd-apps to v2.0.4	2026-01-20 18:04:14 +00:00
Renovate Bot	d3db1db7c5	Update forgejo Docker tag to v16.0.1	2026-01-20 18:04:09 +00:00
mrtz	411550cc23	devel: Remove vCluster Now available on the `vcluster` branch	2026-01-20 18:53:17 +01:00
mrtz	1e8584281a	devel: Remove attic It's now available on the attic branch.	2026-01-20 18:50:22 +01:00