Standard K8s NetworkPolicy ipBlock rules don't work under Cilium for API server access. Use Cilium-native kube-apiserver entity instead. Tested: runner pod can now reach K8s API server. Required by: homelab-frontend PR #25 (Tekton CI). --------- Co-authored-by: rock <[email protected]> Reviewed-on: #49 Co-authored-by: poimen <[email protected]>