From 35341ba931b499dfe443642377d530f80cb193bf Mon Sep 17 00:00:00 2001
From: Denis Patrakeev <denis.patrakeev@avroid.team>
Date: Tue, 25 Feb 2025 15:43:01 +0300
Subject: [PATCH] [DO-1600] Fix trivy-operator 7 (!48)

[DO-1600]

Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/48
---
 .../argocd-apps-trivy-network-policy.yaml     | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/security/trivy/argocd-apps-trivy-network-policy.yaml b/clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/security/trivy/argocd-apps-trivy-network-policy.yaml
index f07696d..a4bf914 100644
--- a/clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/security/trivy/argocd-apps-trivy-network-policy.yaml
+++ b/clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/security/trivy/argocd-apps-trivy-network-policy.yaml
@@ -20,6 +20,25 @@ spec:
     - ports:
         - port: 4954
           protocol: TCP
+# https://aquasecurity.github.io/trivy-operator/v0.23.0/getting-started/installation/troubleshooting/#installing-the-operator-in-a-namespace-with-default-deny-all-egressingress-network-policies
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: trivy-in-4954
+  namespace: avroid-prod
+  labels:
+    app.kubernetes.io/managed-by: argocd
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: trivy
+  policyTypes:
+    - Ingress
+  ingress:
+    - ports:
+        - port: 4954
+          protocol: TCP
 ---
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy