same-ns-calico-pol.yaml

gistfile1.txt

apiVersion: projectcalico.org/v3
kind: NetworkPolicy
metadata:
  name: allow-same-namespace-communication
  namespace: my-namespace
spec:
  selector: app == 'myapp'  # Applies to pods with the label `app=myapp`
  types:
    - Ingress
    - Egress
  ingress:
    - action: Allow
      source:
        selector: app == 'myapp'  # Allow traffic from pods with the label `app=myapp`
        namespaceSelector: projectcalico.org/name == 'my-namespace'  # Restrict to the same namespace
  egress:
    - action: Allow
      destination:
        selector: app == 'myapp'  # Allow traffic to pods with the label `app=myapp`
        namespaceSelector: projectcalico.org/name == 'my-namespace'  # Restrict to the same namespace