# Default deny all ingress and egress
# Apply this first; then apply allow policies for each component.
# See README.md for dependency documentation.
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: default-deny-ingress
  namespace: veza-production
spec:
  podSelector: {}
  policyTypes:
  - Ingress
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: default-deny-egress
  namespace: veza-production
spec:
  podSelector: {}
  policyTypes:
  - Egress