github.com/looshlee/cilium@v1.6.12/examples/policies/l3 (about) cidr egress-allow-all egress-default-deny entities fqdn ingress-allow-all requires service simple