apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: allow-api-server namespace: mariadb-operator spec: egress: - toEntities: - kube-apiserver endpointSelector: matchLabels: app.kubernetes.io/instance: mariadb-operator