add webhook server network policy

This will allow ingress traffic to the webhook server.

Signed-off-by: Ronny Baturov <[email protected]>

Author: rbaturov

config/networkpolicy/kustomization.yaml

@@ -2,3 +2,4 @@ resources:
 - deny-all.yaml
 - egress-to-api-server.yaml
 - ingress-to-metrics.yaml
+- webhook-server.yaml

config/networkpolicy/webhook-server.yaml

@@ -0,0 +1,15 @@
+# Allow access to the webhook server.
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-webhook-traffic
+spec:
+  ingress:
+    - ports:
+        - port: 9443
+          protocol: TCP
+  podSelector:
+    matchLabels:
+      app: numaresources-operator
+  policyTypes:
+    - Ingress