apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: allow-kube-api
namespace: api
spec:
endpointSelector:
matchLabels:
app: api-gateway
egress:
- toEntities:
- kube-apiserver