apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: falco
  namespace: falco
  labels:
    app.kubernetes.io/name: falco
    app.kubernetes.io/part-of: falco
spec:
  ingress:
  - from:
    - namespaceSelector:
        matchLabels:
          app.kubernetes.io/name: falco
          app.kubernetes.io/part-of: falco
    - ipBlock:
        cidr: 192.168.0.0/28
    ports:
    - port: 8765
      protocol: TCP
  podSelector:
    matchLabels:
      app.kubernetes.io/name: falco
      app.kubernetes.io/part-of: falco
  policyTypes:
  - Ingress
