apiserver cilium rules.

cmd/policygen/templates/netpol/pod/apiserver.yaml

@@ -1,20 +1,20 @@
+---
 kind: CiliumNetworkPolicy
 apiVersion: cilium.io/v2
 metadata:
-  name: {{.name}}
-  namespace: {{.namespace}}
-  labels: "{{ .labels | toYaml | nindent 4 }}"
+  name: {{.app.Name}}
+  namespace: {{.app.Namespace.Name}}
+  labels: {{ .labels | toYaml | nindent 4 }}
 spec:
-  endpointSelector:
-    {{ .selector }}
-  {{- if .from }}
+  endpointSelector: {{ .app.MatchLabels | toYaml | nindent 4 }}
+  {{- if .ingress }}
   ingress:
   - fromEntities:
     - kube-apiserver
     # See https://github.com/cilium/cilium/issues/35401
     - remote-node
   {{- end }}
-  {{- if .to }}
+  {{- if .egress }}
   egress:
   - toEntities:
       - kube-apiserver

cmd/policygen/templates/netpol/pod/pod.yaml

@@ -13,7 +13,7 @@
           matchLabels: {{ .MatchLabels | toYaml | nindent 12 }}
         namespaceSelector:
           matchLabels:
-            kubernetes.io/metadata.name: {{ .Namespace }}
+            kubernetes.io/metadata.name: {{ .Namespace.Name }}
         {{- if .Ports }}
         ports:
           {{- template "ports" .Ports }}