cilium

1
apiVersion: "cilium.io/v2"
2
kind: CiliumClusterwideNetworkPolicy
3
metadata:
4
  name: "wildcard-from-endpoints"
5
spec:
6
  description: "Policy for ingress allow to kube-dns from all Cilium managed endpoints in the cluster"
7
  endpointSelector:
8
    matchLabels:
9
      k8s:io.kubernetes.pod.namespace: kube-system
10
      k8s-app: kube-dns
11
  ingress:
12
  - fromEndpoints:
13
    - {}
14
    toPorts:
15
    - ports:
16
      - port: "53"
17
        protocol: UDP
18