apiVersion: cilium.io/v2 kind: CiliumNetworkPolicy metadata: name: allow-ingress namespace: robusta spec: endpointSelector: matchLabels: app.kubernetes.io/component: server ingress: - fromEndpoints: - matchLabels: io.kubernetes.pod.namespace: ingress-nginx