{ ... }:
{
  applications.netpol-microsoftonline = {
    project = "netpol";
    resources = {
      ciliumClusterwideNetworkPolicies = {
        allow-microsoftonline.spec = {
          endpointSelector = { };
          egress = [
            {
              toFQDNs = [
                { matchName = "login.microsoftonline.com"; }
                { matchPattern = "*.microsoftonline.com"; }
              ];
            }
          ];
        };
      };
    };
  };
}