Commit Graph
2 Commits
Author SHA1 Message Date
Haiyan Meng 53aac5b645 feat(netpol): refine NetworkPolicy controller and add E2E verification
- Add ate.dev/worker-pool label to NetworkPolicy metadata and remove Egress management to allow default egress behavior
- Define ateSystemNamespace and atenetRouterAppName constants for Ingress peer selectors
- Centralize deterministic NetworkPolicy naming logic (resources.NetworkPolicyName) and prevent trailing hyphens
- Add comprehensive E2E test suite for networkpolicy covering control plane reconciliation, positive data plane verification (authorized ingress via atenet-router), and negative data plane verification (unauthorized ingress blocking)
2026-07-29 10:50:44 -07:00
Bowei Du e8951bca1f Add basic network policy for Ingress to Workers
Restrict Ingress to Workers and hence Actors to be only
from the Router component.

This makes the atecontroller responsible for K8s level network policy

Note: this is a belts-and-suspenders model as this applies on the Worker
level. This will be refined further with Actor-specific policies.
2026-07-29 10:50:44 -07:00