apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: canonical-routed-ranges
  namespace: default
spec:
  endpointSelector: {}
  ingress:
    - fromCIDR:
        - 10.115.187.218/24
        - 10.63.81.107/24
        - 10.162.8.60/24
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: specific-private-peers
  namespace: default
spec:
  endpointSelector: {}
  ingress:
    - fromCIDR:
        - 10.77.102.91/32
        - 10.212.111.120/32
  egress:
    - toCIDRSet:
        - cidr: 10.90.141.119/24
          except:
            - 10.66.127.81/32
---
apiVersion: cilium.io/v2
kind: CiliumClusterwideNetworkPolicy
metadata:
  name: canonical-specs
spec:
  specs:
    - nodeSelector: {}
      egress:
        - toCIDR:
            - 1.1.1.1/32
    - nodeSelector: {}
      ingress:
        - fromCIDRSet:
            - cidr: 10.63.81.107/24
              except:
                - 10.111.126.149/25
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: noncanonical-range
  namespace: default
spec:
  endpointSelector: {}
  ingress:
    - fromCIDR:
        - 10.77.102.91/24
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: redundant-range
  namespace: default
spec:
  endpointSelector: {}
  egress:
    - toCIDR:
        - 10.63.81.107/24
        - 10.77.102.91/32
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: generic-private-range
  namespace: default
spec:
  endpointSelector: {}
  ingress:
    - fromCIDR:
        - 10.87.139.185/16
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: noncanonical-cidrset-exception
  namespace: default
spec:
  endpointSelector: {}
  egress:
    - toCIDRSet:
        - cidr: 10.90.141.119/24
          except:
            - 10.66.127.81/28
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: dynamic-peer-groups
  namespace: default
spec:
  endpointSelector: {}
  ingress:
    - fromCIDRSet:
        - cidrGroupRef: short
  egress:
    - toCIDRSet:
        - cidrGroupRef: short
        - cidrGroupSelector:
            matchLabels: {owner: short}