{{- if and .Values.networkPolicies.enabled .Values.networkPolicies.internal.enabled }}

# Copyright Materialize, Inc. and contributors. All rights reserved.
#
# Use of this software is governed by the Business Source License
# included in the LICENSE file at the root of this repository.
#
# As of the Change Date specified in that file, in accordance with
# the Business Source License, use of this software will be governed
# by the Apache License, Version 2.0.

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: egress-to-environmentd
  namespace: {{ .Release.Namespace }}
spec:
  podSelector:
    matchLabels:
      {{- include "materialize-operator.selectorLabels" . | nindent 6 }}
  egress:
    - to:
        - podSelector:
            matchLabels:
              materialize.cloud/app: environmentd
          namespaceSelector: {}
      ports:
        # environmentd external http
        - port: 6876
        # environmentd internal http
        - port: 6878
{{- end }}