{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumClusterwideNetworkPolicy
metadata:
  name: allow-kube-apiserver
spec:
  endpointSelector:
    matchLabels: {}
  egress:
  - toEntities:
    - kube-apiserver
{{- end }}