---
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
   name: deny-db-traffic
   labels:
     app: reddit
 spec:
   podSelector:
     matchLabels:
       app: reddit
       component: mongo
   policyTypes:
   - Ingress
   ingress:
   - from:
     - podSelector:
         matchLabels:
           app: reddit
           component: comment
     - podSelector:
         matchLabels:
           app: reddit
           component: post
