{ ... }:
{
  applications.netpol-external-ceph = {
    resources = {
      ciliumClusterwideNetworkPolicies = {
        allow-external-ceph-egress.spec = {
          egress = [
            {
              toCIDR = [
                "10.255.241.30/32"
                "10.255.241.31/32"
                "10.255.241.32/32"
                "10.255.244.0/24"
              ];
            }
          ];
          endpointSelector = { };
        };
      };
    };
  };
}