github.com/looshlee/cilium@v1.6.12/examples/kubernetes-istio/istio-sidecar-init-policy.yaml (about)

     1  apiVersion: "cilium.io/v2"
     2  kind: CiliumNetworkPolicy
     3  metadata:
     4    name: istio-sidecar
     5  specs:
     6    - endpointSelector:
     7        matchLabels:
     8          "reserved:init": ""
     9      ingress:
    10      - fromEntities:
    11        - host
    12      egress:
    13      - toEntities:
    14        - all
    15        toPorts:
    16        - ports:
    17          - port: "53"
    18            protocol: UDP
    19      - toEndpoints:
    20        - matchLabels:
    21            "k8s:io.kubernetes.pod.namespace": "istio-system"