apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
    name: allow-browser-ingress
    namespace: argocd
spec:
    podSelector:
        matchLabels:
            app: browser
    policyTypes: ["Ingress"]
    ingress:
        - from:
              - ipBlock:
                    cidr: 0.0.0.0/0
          ports:
              - { protocol: TCP, port: 7788 }