﻿kind: NetworkPolicy 
apiVersion: networking.k8s.io/v1 
metadata: 
  name: hello-allow-from-foo 
spec: 
  policyTypes: 
  - Ingress 
  podSelector: 
    matchLabels: 
      app: hello 
  ingress: 
  - from: 
    - podSelector: 
        matchLabels: 
          app: foo