P3.8: Restrict llm-serving ingress to api-gateway only (#15)

## Summary Replaces hand-applied `llm-serving-default-deny` NetworkPolicy with a git-managed, namespace-scoped policy that only allows traffic from the api-gateway. **Issue:** #13 Co-authored-by: rock <[email protected]>
2026-09-08 16:56:36 +00:00
parent 1630704f8b
commit 95c67f9437
2 changed files with 63 additions and 0 deletions
@@ -14,5 +14,6 @@ resources:
  - ornith.yaml
  - reasoning.yaml
  - reranker.yaml
+  - networkpolicy.yaml
 # No namespace transformer: every file sets its own, and the transformer would
 # rewrite metadata.namespace on anything cross-namespace added later.