From 2aa30edb88cb8b288145103d3deb4d92f86ff954 Mon Sep 17 00:00:00 2001
From: Ryan Richard <richardry@vmware.com>
Date: Thu, 10 Oct 2024 11:45:16 -0700
Subject: [PATCH] explicitly define "podSelector" in NetworkPolicies

because Kube API docs say it is not optional
---
 hack/prepare-for-integration-tests.sh | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/hack/prepare-for-integration-tests.sh b/hack/prepare-for-integration-tests.sh
index 0f1f3511c..88e95c0d8 100755
--- a/hack/prepare-for-integration-tests.sh
+++ b/hack/prepare-for-integration-tests.sh
@@ -391,7 +391,7 @@ fi
 # proxy server can reach them all, so the Supervisor and Concierge can reach them through the proxy.
 #
 if [[ "${FIREWALL_IDPS:-no}" == "yes" ]]; then
-  log_note "Setting up firewalls for the Supervisor and Concierge's outgoing TCP/UDP/SCTP network traffic..."
+  log_note "Setting up firewalls for the Supervisor and Concierge's outgoing TCP/UDP network traffic..."
   cat <<EOF | kubectl apply --wait -f -
 ---
 apiVersion: networking.k8s.io/v1
@@ -400,7 +400,8 @@ metadata:
   name: supervisor-cannot-make-external-requests
   namespace: ${supervisor_namespace}
 spec:
-  # Having no podSelector will select all pods in the namespace.
+  # An empty podSelector matches all pods in this namespace.
+  podSelector: {}
   policyTypes:
     - Egress
   # This is an allow list. Everything else disallowed.
@@ -433,7 +434,8 @@ metadata:
   name: concierge-cannot-make-external-requests
   namespace: ${concierge_namespace}
 spec:
-  # Having no podSelector will select all pods in the namespace.
+  # An empty podSelector matches all pods in this namespace.
+  podSelector: {}
   policyTypes:
     - Egress
   # This is an allow list. Everything else disallowed.