Rancher Manager - Cilium Network Policies

rancher-webhook.yaml

apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: webhook-strict
  namespace: cattle-system
spec:
  endpointSelector:
    matchLabels:
      app: rancher-webhook

  ingress:
    # Requests from apiserver running on host or remote-nodes.
    - fromEntities:
        - host
        - remote-node
      toPorts:
        - ports:
            - port: "9443"
            - port: "8777" # capi

    # Requests from apiserver.
    - fromEndpoints:
        - matchLabels:
            "k8s:io.kubernetes.pod.namespace": kube-system
            "k8s:k8s-app": kube-apiserver
      toPorts:
        - ports:
            - port: "9443"
            - port: "8777" # capi