Add traefik namespace selector to allow-system-egress NetworkPolicy

tembo-operator/Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "controller"
 description = "Tembo Operator for Postgres"
-version = "0.43.0"
+version = "0.43.1"
 edition = "2021"
 default-run = "controller"
 license = "Apache-2.0"

tembo-operator/src/network_policies.rs

@@ -157,6 +157,27 @@ pub async fn reconcile_network_policies(client: Client, namespace: &str) -> Resu
                   }
                 }
               ]
+            },
+            {
+              "to": [
+                {
+                  "namespaceSelector": {
+                    "matchLabels": {
+                      "kubernetes.io/metadata.name": "traefik"
+                    }
+                  }
+                }
+              ],
+              "ports": [
+                {
+                  "protocol": "TCP",
+                  "port": 443
+                },
+                {
+                  "protocol": "TCP",
+                  "port": 8443
+                }
+              ]
             }
           ]
         }