apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: seed
  namespace: short
spec:
  endpointSelector:
    matchLabels:
      app.kubernetes.io/name: seed
  egress:
  - toEndpoints:
    - matchLabels:
        k8s:io.kubernetes.pod.namespace: kube-system
        k8s:k8s-app: kube-dns
    toPorts:
    - ports:
      - port: '53'
        protocol: UDP
      - port: '53'
        protocol: TCP
      rules:
        dns:
        - matchPattern: '*'
  - toEndpoints:
    - matchLabels:
        k8s:io.kubernetes.pod.namespace: vault
        app.kubernetes.io/name: vault
    toPorts:
    - ports:
      - port: '8200'
        protocol: TCP