---
manifests:
  network_policy: true
network_policy:
  horizon:
    ingress:
      - from:
        - podSelector:
            matchLabels:
              application: horizon
      - from:
        - podSelector:
            matchLabels:
              application: prometheus-openstack-exporter
      - from:
        - podSelector:
            matchLabels:
              application: ingress
        ports:
          - port: 80
            protocol: TCP
          - port: 443
            protocol: TCP
    egress:
      - to:
        - podSelector:
            matchLabels:
              application: neutron
      - to:
        - podSelector:
            matchLabels:
              application: nova
      - to:
        - podSelector:
            matchLabels:
              application: glance
      - to:
        - podSelector:
            matchLabels:
              application: cinder
      - to:
        - podSelector:
            matchLabels:
              application: keystone
      - to:
        - podSelector:
            matchLabels:
              application: heat
      - to:
        - ipBlock:
            cidr: %%%REPLACE_API_ADDR%%%/32
        ports:
          - protocol: TCP
            port: %%%REPLACE_API_PORT%%%
...