Allow envoy-gateway-system ingress to rook-ceph for dashboard

The Ceph dashboard moved from Istio to the Envoy edge gateway but the
CiliumNetworkPolicy was still only allowing istio-system, causing 503s.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Scooby Husky
2026-03-12 23:24:26 -05:00
co-authored by Claude Opus 4.6
parent 31113ecf16
commit c199715276
@@ -139,10 +139,13 @@ spec:
- host - host
- kube-apiserver - kube-apiserver
- remote-node - remote-node
# Istio ingress gateway (Ceph dashboard) # Ingress gateways (Ceph dashboard)
- fromEndpoints: - fromEndpoints:
- matchLabels: - matchLabels:
k8s:io.kubernetes.pod.namespace: istio-system k8s:io.kubernetes.pod.namespace: istio-system
- fromEndpoints:
- matchLabels:
k8s:io.kubernetes.pod.namespace: envoy-gateway-system
# Internal Ceph traffic # Internal Ceph traffic
- fromEndpoints: - fromEndpoints:
- matchLabels: - matchLabels: