feat(longhorn): Restrict network access

infrastructure/longhorn/kustomization.yaml

@@ -5,3 +5,12 @@ resources:
   - namespace.yaml
   - repository.yaml
   - release.yaml
+  # Add network policies
+  - https://git.shivering-isles.com/github-mirror/longhorn/longhorn/-/raw/v1.2.3/examples/network-policy/manager-network-policy.yaml
+  - https://git.shivering-isles.com/github-mirror/longhorn/longhorn/-/raw/v1.2.3/examples/network-policy/instance-manager-networking.yaml
+  - https://git.shivering-isles.com/github-mirror/longhorn/longhorn/-/raw/v1.2.3/examples/network-policy/backing-image-manager-network-policy.yaml
+  - https://git.shivering-isles.com/github-mirror/longhorn/longhorn/-/raw/v1.2.3/examples/network-policy/backing-image-data-source-network-policy.yaml
+  - ../../../shared/networkpolicies/allow-from-ingress.yaml
+patchesStrategicMerge:
+  - networkpolicy.yaml
+

infrastructure/longhorn/networkpolicy.yaml

+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-ingress
+spec:
+  podSelector:
+    matchLabels:
+      app: longhorn-ui