# Allow all foxhunt pods to fetch binaries from GitLab Generic Package Registry.
# initContainers in services and training jobs use curl to download release binaries
# from gitlab-webservice-default:8181 (GitLab API).
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: gitlab-packages
  namespace: foxhunt
  labels:
    app.kubernetes.io/part-of: foxhunt
spec:
  podSelector:
    matchLabels:
      app.kubernetes.io/part-of: foxhunt
  policyTypes:
    - Egress
  egress:
    - to:
        - podSelector:
            matchLabels:
              app: webservice
      ports:
        - protocol: TCP
          port: 8181