mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 22:13:18 +09:00
The unmarked CiliumNetworkPolicy fixture carried only an endpointSelector, which the cilium.io/v2 CRD rejects — spec requires at least one of ingress/ingressDeny/egress/egressDeny (anyOf), so kubectl apply failed before the invisible-to-SecurityGroup assertion could run. Add a minimal ingress rule so the fixture applies as a valid, unmarked policy. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>