apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: controller
  namespace: short
spec:
  endpointSelector:
    matchLabels:
      app.kubernetes.io/name: controller
  egress:
  - toEndpoints:
    - matchLabels:
        k8s:io.kubernetes.pod.namespace: kube-system
        k8s:k8s-app: kube-dns
    toPorts:
    - ports:
      - port: '53'
        protocol: UDP
      - port: '53'
        protocol: TCP
      rules:
        dns:
        - matchPattern: '*'
  - toEndpoints:
    - matchLabels:
        k8s:io.kubernetes.pod.namespace: vault
        app.kubernetes.io/name: vault
    toPorts:
    - ports:
      - port: '8200'
        protocol: TCP
  - toCIDR:
    - 10.212.111.120/32
    toPorts:
    - ports:
      - port: '8443'
        protocol: TCP
  - toFQDNs:
    - matchPattern: iaas.*.oraclecloud.com
    toPorts:
    - ports:
      - port: '443'
        protocol: TCP