Issue description

The workshop-support group must accept traffic only from within the same workshop by using the workshop=project_name label or from namespaces with the policy-group.network.openshift.io/ingress: "" label.

Workaround:

Modify the specification to match the solution at step 4.3:

Create a network policy to accept traffic from within the workshop project or from outside the cluster. To identify the workshop project traffic, label the template-test namespace with the workshop=template-test label. You can use the networkpolicy.yaml file to create the network policy.