kind: CiliumNetworkPolicy
apiVersion: cilium.io/v2
metadata:
  name: {{.name}}
  namespace: {{.namespace}}
spec:
  endpointSelector:
    {{ .selector }}
  egress:
  - toEntities:
    - kube-apiserver
  - toPorts:
    - ports:
      - port: "6443"
        protocol: TCP