networks:
  - name: internet
    cidr: 0.0.0.0/0
    except:
      - 10.0.0.0/8
      - 172.16.0.0/12
      - 192.168.0.0/16


namespaces:
  - name: wamblee-org
    capabilities:
      - linkerd
    applications:
      - name: nexus-server
        # ports when specified at the application level are used when
        # not explicitly mentioned when a link is made
        ports:
          - 8081
          - 8082
        matchLabels:
          app: nexus-server

  - name: exposure
    applications:
      - name: httpd-wamblee-org
        matchLabels:
          app: wamblee-org

communications:
  - from: # can we support both string and list of strings?
      - httpd-wamblee-org
    to:
      - nexus-server
      - wamblee-static
      - wamblee-safe

  # or limiting ports further
  - from:
      - httpd-wamblee-org
    to:
      - nexus-server
    ports:
      - 8081
      - 8082