github.com/fafucoder/cilium@v1.6.11/examples/policies/l7/dns/dns-visibility.json (about)

     1  [
     2    {
     3      "endpointSelector": {
     4        "matchLabels": {
     5          "app": "test-app"
     6        }
     7      },
     8      "egress": [
     9        {
    10          "toEndpoints": [
    11            {
    12              "matchLabels": {
    13                "app-type": "dns"
    14              }
    15            }
    16          ],
    17          "toPorts": [
    18            {
    19              "ports": [
    20                {
    21                  "port": "53",
    22                  "protocol": "ANY"
    23                }
    24              ],
    25              "rules": {
    26                "dns": [
    27                  { "matchPattern": "*" }
    28                ]
    29              }
    30            }
    31          ]
    32        },
    33        {
    34          "toFQDNs": [
    35            { "matchName": "cilium.io" },
    36            { "matchName": "sub.cilium.io" },
    37            { "matchPattern": "*.sub.cilium.io" }
    38          ]
    39        }
    40      ]
    41    }
    42  ]