apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: restic
  labels:
    app.kubernetes.io/name: restic
    app.kubernetes.io/component: restic
spec:
  egress:
  - to:
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: kube-system
    ports:
    - port: 53
      protocol: UDP
    - port: 53
      protocol: TCP
  - to:
    - ipBlock:
        cidr: 172.30.0.15/32
    ports:
    - port: 443
  podSelector: {}