apiVersion: "cilium.io/v2"
kind: CiliumNetworkPolicy
description: "enable outposts to consume empire-announce"
metadata:
  name: "rule2"
spec:
  endpointSelector:
    matchLabels:
      app: kafka
  ingress:
  - fromEndpoints:
    - matchLabels:
        app: empire-outpost
    toPorts:
    - ports:
      - port: "9092"
        protocol: TCP
      rules:
        kafka:
        - apiKey: "fetch"
          topic: "empire-announce"
        - apiKey: "apiversions"
        - apiKey: "metadata"
        - apiKey: "findcoordinator"
        - apiKey: "joingroup"
        - apiKey: "leavegroup"
        - apiKey: "syncgroup"
        - apiKey: "offsets"
        - apiKey: "offsetcommit"
        - apiKey: "offsetfetch"
        - apiKey: "heartbeat"

apiVersion: "cilium.io/v2"
kind: CiliumNetworkPolicy
description: "enable outposts to consume empire-announce"
metadata:
  name: "rule2"
spec:
  endpointSelector:
    matchLabels:
      app: kafka
  ingress:
  - fromEndpoints:
    - matchLabels:
        app: empire-outpost
    toPorts:
    - ports:
      - port: "9092"
        protocol: TCP
      rules:
        kafka:
        - role: "consume"
          topic: "empire-announce"

Fix the Kafka policy to use the new role in the GSG
docs: Fix the Kafka policy to use the new role in the GSG

Fixes: #3349
Signed-Off-By: Manali Bhutiyani <f91afadb65fa57d2313cebbfecb7de1f482fe10f@covalent.io>
