Ship default-deny NetworkPolicies for all Kuadrant operators and operands. Operators deny all ingress except metrics/health. Authorino and Limitador additionally allow gRPC ingress from gateway namespaces configured via a new spec.allowedNamespaces CRD field. kuadrant-operator auto-derives gateway namespaces from its topology.
Ship default-deny NetworkPolicies for all Kuadrant operators and operands. Operators deny all ingress except metrics/health. Authorino and Limitador additionally allow gRPC ingress from gateway namespaces configured via a new
spec.allowedNamespacesCRD field. kuadrant-operator auto-derives gateway namespaces from its topology.