---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
    name: deny-db-traffic
    labels:
        app: reddit
spec:
    podSelector:
        matchLabels:
            app: reddit
            component: mongo
    policyTypes:
        -  Ingress
    ingress:
    - from:
        - podSelector:
            matchLabels:
                app: reddit
                component: comment
        - podSelector:
            matchLabels:
                app: reddit
                component: post
