apiVersion: cilium.io/v2
kind: CiliumClusterwideNetworkPolicy
metadata:
  name: allow-cnpg-backups
spec:
  description: Policy for egress for CNPG Backups.
  egress:
    - toFQDNs:
        - matchName: s3.production.itpartner.no
  endpointSelector:
    matchLabels:
      cnpg.io/podRole: instance