apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata: {name: canary, namespace: short}
spec:
  endpointSelector:
    matchLabels: {app.kubernetes.io/name: short-canary, app.kubernetes.io/instance: short}
  ingress:
    - fromEntities: [host, ingress]
      toPorts:
        - ports: [{port: "8080", protocol: TCP}]
---
apiVersion: cilium.io/v2
kind: CiliumClusterwideNetworkPolicy
metadata: {name: short-canary-egress}
spec:
  endpointSelector:
    matchLabels: {"reserved:ingress": ""}
  egress:
    - toEndpoints:
        - matchLabels:
            k8s:io.kubernetes.pod.namespace: short
            app.kubernetes.io/name: short-canary
            app.kubernetes.io/instance: short
      toPorts:
        - ports: [{port: "8080", protocol: TCP}]
---
apiVersion: cilium.io/v2
kind: CiliumClusterwideNetworkPolicy
metadata: {name: short-canary-replies}
spec:
  nodeSelector: {}
  ingress:
    - fromEndpoints:
        - matchLabels:
            k8s:io.kubernetes.pod.namespace: short
            app.kubernetes.io/name: short-canary
            app.kubernetes.io/instance: short
      toPorts:
        - ports: [{port: "32768", endPort: 60999, protocol: TCP}]