mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 14:02:56 +09:00
The unmarked CiliumNetworkPolicy fixture carried only an endpointSelector, which the cilium.io/v2 CRD rejects — spec requires at least one of ingress/ingressDeny/egress/egressDeny (anyOf), so kubectl apply failed before the invisible-to-SecurityGroup assertion could run. Add a minimal ingress rule so the fixture applies as a valid, unmarked policy. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>