--- apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: zfs-exporter namespace: zfs-exporter spec: endpointSelector: matchLabels: app.kubernetes.io/name: zfs-exporter app.kubernetes.io/instance: zfs-exporter ingress: - fromEntities: - host toPorts: - ports: - port: "9134" protocol: TCP - fromEndpoints: - matchLabels: k8s:io.kubernetes.pod.namespace: victoriametrics app.kubernetes.io/name: vmagent app.kubernetes.io/instance: main toPorts: - ports: - port: "9134" protocol: TCP --- apiVersion: cilium.io/v2 kind: CiliumClusterwideNetworkPolicy metadata: name: host-egress-zfs-exporter spec: nodeSelector: {} egress: - toEndpoints: - matchLabels: k8s:io.kubernetes.pod.namespace: zfs-exporter app.kubernetes.io/name: zfs-exporter app.kubernetes.io/instance: zfs-exporter toPorts: - ports: - port: "9134" protocol: TCP