Context

The goal of this issue is for the operator to start deploying a set of network policies that define the bare minimum amount of Egress & Ingress to the different LokiStack components.

Acceptance Criteria

• Loki pods should be able to connect to Loki Gossip Ring
• Loki pods should be able to connect to Loki gRPC load balancing
• Loki pods should be able to connect to S3 storage
• Loki pods should allow connections to Loki Gossip Ring
• Loki pods should allow connections to Loki gRPC load balancing
• Loki pods should allow connections to Loki Healthchecks
• Loki pods should allow connections to metrics
• Gateway should be able to connect to the Distributor
• Gateway should be able to connect to the API Server
• Gateway should allow connections to metrics
• Gateway should allow connections from in-cluster & outside

Developer notes

• See https://docs.google.com/document/d/1o31U0tfEfhKTk3ZoVdKxlwkiBZIIyn6YotwHCAku5Gw/edit?tab=t.0