split internal & external

internal/internal-policy.yaml

@@ -0,0 +1,21 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: restrict-ingress-nginx-internal
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: nginx-internal
+  policyTypes:
+    - Ingress
+  ingress:
+    - {}
+    # - from:
+    #     - ipBlock:
+    #         cidr: 192.168.0.0/16
+    #   ports:
+    #     - protocol: TCP
+    #       port: 80
+    #     - protocol: TCP
+    #       port: 443