apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata: {name: short, namespace: vault}
spec:
  endpointSelector:
    matchLabels: {app.kubernetes.io/name: vault, component: server}
  ingress:
    - fromEndpoints:
        - matchLabels:
            k8s:io.kubernetes.pod.namespace: short
            app.kubernetes.io/instance: short
          matchExpressions:
            - key: app.kubernetes.io/name
              operator: In
              values: [seed, controller]
      toPorts:
        - ports: [{port: "8200", protocol: TCP}]