Add missing networkpolicy for seaweedfs

Signed-off-by: Patrick Schönthaler <[email protected]>

.github/workflows/pipeline_swfs_test.yaml

@@ -53,7 +53,7 @@ jobs:
       run: |
         kustomize build contrib/seaweedfs/istio | kubectl apply -f -
         kubectl -n kubeflow wait --for=condition=available --timeout=600s deploy/seaweedfs
-        kubectl -n kubeflow exec deploy/seaweedfs -c seaweedfs -- sh -c "echo \"s3.configure -user minio -access_key minio -secret_key minio123 -actions Read,Write -apply\" | /usr/bin/weed shell"
+        kubectl -n kubeflow exec deploy/seaweedfs -c seaweedfs -- sh -c "echo \"s3.configure -user minio -access_key minio -secret_key minio123 -actions Read,Write,List -apply\" | /usr/bin/weed shell"
 
     - name: port forward
       run: |

contrib/seaweedfs/base/kustomization.yaml

@@ -6,3 +6,4 @@ resources:
 - seaweedfs-deployment.yaml
 - seaweedfs-pvc.yaml
 - seaweedfs-service.yaml
+- seadweedfs-networkpolicy.yaml

contrib/seaweedfs/base/seadweedfs-networkpolicy.yaml

@@ -0,0 +1,28 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: seaweedfs
+spec:
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchExpressions:
+        - key: app.kubernetes.io/part-of
+          operator: In
+          values:
+          - kubeflow-profile
+    - namespaceSelector:
+        matchExpressions:
+        - key: kubernetes.io/metadata.name
+          operator: In
+          values:
+          - istio-system
+    - podSelector: {}
+  podSelector:
+    matchExpressions:
+    - key: app
+      operator: In
+      values:
+      - seaweedfs
+  policyTypes:
+  - Ingress

contrib/seaweedfs/istio/kustomization.yaml

@@ -1,5 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: kubeflow
 
 resources:
 - ../base/