# services/hermes/networkpolicy.yaml
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-local-image-ingress
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes-local-image
  policyTypes:
    - Ingress
  ingress:
    - from:
        - podSelector:
            matchExpressions:
              - key: app
                operator: In
                values: [hermes-agent, hermes-model-gate]
      ports:
        - {protocol: TCP, port: 9004}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-model-gate-ingress
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes-model-gate
  policyTypes: [Ingress]
  ingress:
    - from:
        - podSelector:
            matchExpressions:
              - key: app
                operator: In
                values: [hermes, hermes-agent, hermes-chat-tenant, hermes-switchyard]
      ports:
        - {protocol: TCP, port: 8080}
    - from:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: maintenance
          podSelector:
            matchLabels:
              app: ariadne
      ports:
        - {protocol: TCP, port: 8081}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-triage-ingress
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes
  policyTypes: [Ingress]
  ingress:
    - from:
        - podSelector:
            matchLabels:
              app: oauth2-proxy-hermes-triage
      ports:
        - {protocol: TCP, port: 8787}
    - from:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: maintenance
          podSelector:
            matchLabels:
              app: ariadne
      ports:
        - {protocol: TCP, port: 8642}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-agent-isolation
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes-agent
  policyTypes: [Ingress, Egress]
  ingress:
    - from:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: traefik
          podSelector:
            matchLabels:
              app.kubernetes.io/name: traefik
      ports:
        - {protocol: TCP, port: 4180}
    - from:
        - podSelector:
            matchLabels:
              app: hermes-chat-tenant
      ports:
        - {protocol: TCP, port: 9002}
        - {protocol: TCP, port: 9003}
    - from:
        - podSelector:
            matchLabels:
              app: hermes-switchyard
      ports:
        - {protocol: TCP, port: 9003}
  # agent.hermes.bstein.dev is an owner-only engineering workstation. The
  # browser boundary remains OAuth-protected, while its workers need to reach
  # every cluster namespace, Atlas LAN service, and hosted provider endpoint.
  egress:
    - {}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-chat-sandbox-deny
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes-chat-sandbox
  policyTypes: [Ingress, Egress]
  ingress: []
  egress: []
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-chat-sandbox-tenant-0
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes-chat-sandbox
      ai.bstein.dev/tenant-ordinal: "0"
  policyTypes: [Ingress]
  ingress:
    - from:
        - podSelector:
            matchLabels:
              statefulset.kubernetes.io/pod-name: hermes-chat-tenant-0
      ports:
        - {protocol: TCP, port: 9080}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-chat-sandbox-tenant-1
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes-chat-sandbox
      ai.bstein.dev/tenant-ordinal: "1"
  policyTypes: [Ingress]
  ingress:
    - from:
        - podSelector:
            matchLabels:
              statefulset.kubernetes.io/pod-name: hermes-chat-tenant-1
      ports:
        - {protocol: TCP, port: 9080}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-chat-sandbox-tenant-2
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes-chat-sandbox
      ai.bstein.dev/tenant-ordinal: "2"
  policyTypes: [Ingress]
  ingress:
    - from:
        - podSelector:
            matchLabels:
              statefulset.kubernetes.io/pod-name: hermes-chat-tenant-2
      ports:
        - {protocol: TCP, port: 9080}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-chat-sandbox-tenant-3
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes-chat-sandbox
      ai.bstein.dev/tenant-ordinal: "3"
  policyTypes: [Ingress]
  ingress:
    - from:
        - podSelector:
            matchLabels:
              statefulset.kubernetes.io/pod-name: hermes-chat-tenant-3
      ports:
        - {protocol: TCP, port: 9080}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-chat-tenant-isolation
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes-chat-tenant
  policyTypes: [Ingress, Egress]
  ingress:
    - from:
        - podSelector:
            matchLabels:
              app: hermes-chat-router
      ports:
        - {protocol: TCP, port: 8787}
        - {protocol: TCP, port: 8642}
  egress:
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: kube-system
          podSelector:
            matchLabels:
              k8s-app: kube-dns
      ports:
        - {protocol: UDP, port: 53}
        - {protocol: TCP, port: 53}
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: vault
          podSelector:
            matchLabels:
              app: vault
      ports:
        - {protocol: TCP, port: 8200}
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: ai
          podSelector:
            matchLabels:
              app: ollama
      ports:
        - {protocol: TCP, port: 11434}
    - to:
        - podSelector:
            matchLabels:
              app: hermes-model-gate
      ports:
        - {protocol: TCP, port: 8080}
    - to:
        - podSelector:
            matchLabels:
              app: hermes-switchyard
      ports:
        - {protocol: TCP, port: 9005}
    - to:
        - podSelector:
            matchLabels:
              app: hermes-agent
      ports:
        - {protocol: TCP, port: 9002}
        - {protocol: TCP, port: 9003}
    - to:
        - podSelector:
            matchLabels:
              app: hermes-chat-sandbox
      ports:
        - {protocol: TCP, port: 9080}
    - to:
        - podSelector:
            matchExpressions:
              - key: app
                operator: In
                values: [hermes-stt, hermes-tts]
      ports:
        - {protocol: TCP, port: 9000}
        - {protocol: TCP, port: 9001}
    - to:
        - ipBlock:
            cidr: 0.0.0.0/0
            except:
              - 10.0.0.0/8
              - 100.64.0.0/10
              - 127.0.0.0/8
              - 169.254.0.0/16
              - 172.16.0.0/12
              - 192.168.0.0/16
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-switchyard-isolation
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes-switchyard
  policyTypes: [Ingress, Egress]
  ingress:
    - from:
        - podSelector:
            matchExpressions:
              - key: app
                operator: In
                values: [hermes, hermes-agent, hermes-chat-tenant]
      ports:
        - {protocol: TCP, port: 9005}
  egress:
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: kube-system
          podSelector:
            matchLabels:
              k8s-app: kube-dns
      ports:
        - {protocol: UDP, port: 53}
        - {protocol: TCP, port: 53}
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: vault
          podSelector:
            matchLabels:
              app: vault
      ports:
        - {protocol: TCP, port: 8200}
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: ai
          podSelector:
            matchLabels:
              app: ollama
      ports:
        - {protocol: TCP, port: 11434}
    - to:
        - podSelector:
            matchLabels:
              app: hermes-model-gate
      ports:
        - {protocol: TCP, port: 8080}
    - to:
        - podSelector:
            matchLabels:
              app: hermes-agent
      ports:
        - {protocol: TCP, port: 9003}
    - to:
        - ipBlock:
            cidr: 0.0.0.0/0
            except:
              - 10.0.0.0/8
              - 100.64.0.0/10
              - 127.0.0.0/8
              - 169.254.0.0/16
              - 172.16.0.0/12
              - 192.168.0.0/16
      ports:
        - {protocol: TCP, port: 443}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-chat-router-isolation
  namespace: hermes
spec:
  podSelector:
    matchLabels:
      app: hermes-chat-router
  policyTypes: [Ingress, Egress]
  ingress:
    - from:
        - podSelector:
            matchLabels:
              app: oauth2-proxy-hermes-chat
      ports:
        - {protocol: TCP, port: 8080}
  egress:
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: kube-system
          podSelector:
            matchLabels:
              k8s-app: kube-dns
      ports:
        - {protocol: UDP, port: 53}
        - {protocol: TCP, port: 53}
    - to:
        - podSelector:
            matchLabels:
              app: hermes-chat-tenant
      ports:
        - {protocol: TCP, port: 8787}
        - {protocol: TCP, port: 8642}
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: vault
          podSelector:
            matchLabels:
              app: vault
      ports:
        - {protocol: TCP, port: 8200}
    - to:
        - ipBlock:
            cidr: 0.0.0.0/0
            except:
              - 10.0.0.0/8
              - 100.64.0.0/10
              - 127.0.0.0/8
              - 169.254.0.0/16
              - 172.16.0.0/12
              - 192.168.0.0/16
      ports:
        - {protocol: TCP, port: 443}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-oauth2-proxies
  namespace: hermes
spec:
  podSelector:
    matchExpressions:
      - key: app
        operator: In
        values:
          - oauth2-proxy-hermes-chat
          - oauth2-proxy-hermes-triage
  policyTypes: [Ingress, Egress]
  ingress:
    - from:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: traefik
          podSelector:
            matchLabels:
              app: traefik
      ports:
        - {protocol: TCP, port: 4180}
  egress:
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: kube-system
          podSelector:
            matchLabels:
              k8s-app: kube-dns
      ports:
        - {protocol: UDP, port: 53}
        - {protocol: TCP, port: 53}
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: vault
          podSelector:
            matchLabels:
              app: vault
      ports:
        - {protocol: TCP, port: 8200}
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: traefik
          podSelector:
            matchLabels:
              app: traefik
      ports:
        - {protocol: TCP, port: 443}
    - to:
        - podSelector:
            matchExpressions:
              - key: app
                operator: In
                values: [hermes, hermes-agent, hermes-chat-router]
      ports:
        - {protocol: TCP, port: 7681}
        - {protocol: TCP, port: 8787}
        - {protocol: TCP, port: 8080}
    - to:
        - podSelector:
            matchLabels:
              app: hermes-oauth-sessions
      ports:
        - {protocol: TCP, port: 6379}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: hermes-private-voice
  namespace: hermes
spec:
  podSelector:
    matchExpressions:
      - key: app
        operator: In
        values: [hermes-stt, hermes-tts]
  policyTypes: [Ingress, Egress]
  ingress:
    - from:
        - podSelector:
            matchLabels:
              app: hermes-chat-tenant
      ports:
        - {protocol: TCP, port: 9000}
        - {protocol: TCP, port: 9001}
  egress:
    - to:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: kube-system
          podSelector:
            matchLabels:
              k8s-app: kube-dns
      ports:
        - {protocol: UDP, port: 53}
        - {protocol: TCP, port: 53}