apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: {{ .Release.Name }}-allow-ingress
spec:
  endpointSelector:
    matchLabels:
      app: mcp-server
  ingress:
    - fromEntities:
        - host
        - remote-node
      toPorts:
        - ports:
            - port: "{{ .Values.service.targetPort }}"
              protocol: TCP