Add model registry ui network policy (#2989)

Signed-off-by: Eder Ignatowicz <ignatowicz@gmail.com>
2025-02-13 03:27:36 -05:00 · 2025-02-13 03:27:36 -05:00 · 3b45a3be3d
parent ceaf237a0f
commit 3b45a3be3d
2 changed files with 24 additions and 0 deletions
--- a/common/networkpolicies/base/kustomization.yaml
+++ b/common/networkpolicies/base/kustomization.yaml
@ -17,6 +17,7 @@ resources:
 - ml-pipeline-ui.yaml
 - ml-pipeline.yaml
 - model-registry.yaml
+- model-registry-ui.yaml
 - poddefaults.yaml
 - pvcviewer-webhook.yaml
 - spark-operator-webhook.yaml
--- a/common/networkpolicies/base/model-registry-ui.yaml
+++ b/common/networkpolicies/base/model-registry-ui.yaml
@ -0,0 +1,23 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: model-registry-ui
+  namespace: kubeflow
+spec:
+  podSelector:
+    matchExpressions:
+    - key: app
+      operator: In
+      values:
+      - model-registry-ui
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchExpressions:
+        - key: kubernetes.io/metadata.name
+          operator: In
+          values:
+          - istio-system
+    - podSelector: {}
+  policyTypes:
+  - Ingress