kind: CiliumNetworkPolicy
apiVersion: cilium.io/v2
metadata:
  name: {{.name}}
  namespace: {{.namespace}}
spec:
  endpointSelector:
    {{ .selector }}
  ingress:
  - fromEntities:
    - kube-apiserver
    # See https://github.com/cilium/cilium/issues/35401
    - remote-node