fix(csi-addons): netpol egress rook-ceph rbdplugin

kube/deploy/core/storage/_csi-addons/netpol.yaml

@@ -8,5 +8,14 @@ metadata:
 spec:
   endpointSelector: {}
   egress:
+    # allow access to apiserver
     - toEntities:
         - kube-apiserver
+    # allow access to Rook-Ceph's rbdplugin which has csi-addons listener
+    - toEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: "rook-ceph"
+            app: "csi-rbdplugin"
+      toPorts:
+        - ports:
+            - port: "9070"

kube/deploy/core/storage/rook-ceph/app/netpol.yaml

@@ -15,6 +15,10 @@ spec:
     # external Ceph cluster
     - fromCIDRSet:
         - cidr: "${IP_PVE_CEPH_CIDR}"
+    # csi-addons
+    - fromEndpoints:
+        - matchLabels:
+            io.kubernetes.pod.namespace: "csi-addons-system"
   egress:
     # same namespace
     - toEndpoints: