A

manifests/policy/allow-browser-ingress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-browser-ingress
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector:
         matchLabels:
@@ -14,4 +14,3 @@ spec:
                     cidr: 0.0.0.0/0
           ports:
               - { protocol: TCP, port: 7788 }
-

manifests/policy/allow-common-egress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-common-egress
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector: {}
     policyTypes: ["Egress"]
@@ -23,4 +23,3 @@ spec:
                         kubernetes.io/metadata.name: ai
           ports:
               - { protocol: TCP, port: 5432 }
-

manifests/policy/allow-https-egress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-https-egress
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector: {}
     policyTypes: ["Egress"]

manifests/policy/allow-openwebui-ingress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-openwebui-ingress
-    namespace: ai
+    namespace: argocd
 spec:
     # Select the Open WebUI pods deployed by the Helm release "openwebui"
     podSelector:
@@ -17,4 +17,3 @@ spec:
               # Open WebUI typically listens on 8080 (chart default), sometimes 80
               - { protocol: TCP, port: 8080 }
               - { protocol: TCP, port: 80 }
-

manifests/policy/default-deny.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: default-deny-all
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector: {} # die
     policyTypes: ["Ingress", "Egress"]