apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hydra
  namespace: hydra
spec:
  podSelector:
    matchLabels:
      app: hydra
  policyTypes:
  - Ingress
  ingress:
  - from:
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: envoy-gateway-system
    ports:
    - port: 4444
      protocol: TCP
  - from:
    - podSelector:
        matchLabels:
          app: hydra-login
    ports:
    - port: 4445
      protocol: TCP
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hydra-login
  namespace: hydra
spec:
  podSelector:
    matchLabels:
      app: hydra-login
  policyTypes:
  - Ingress
  ingress:
  - from:
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: envoy-gateway-system
    ports:
    - port: 8080
      protocol: TCP