apiVersion: "cilium.io/v2"
kind: CiliumClusterwideNetworkPolicy
metadata:
  name: baseline-default-deny
spec:
  description: "Deny all ingress and egress cluster-wide by default"
  endpointSelector:
    matchLabels: {}
  ingress:
    - {}
  egress:
    - {}