add namespace and refine ingress rules in CiliumNetworkPolicy for improved traffic segmentation

k8s/cilium-netpol.yaml

@@ -3,7 +3,7 @@ apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
   name: default-deny-all
-
+  namespace: escapefromteacher
 spec:
   endpointSelector: {}
   ingress:
@@ -21,9 +21,10 @@ spec:
     matchLabels:
       app: escape-game
   ingress:
-  # Allow HTTP traffic from anywhere (for user access)
   - fromEndpoints:
-    - {}
+    - matchLabels:
+        io.cilium.k8s.policy.namespace: traefik
+        name: traefik
     toPorts:
     - ports:
       - port: "8080"