`apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  creationTimestamp: null
  labels:
    acorn.io/managed: "true"
  name: buildkitd
  namespace: acorn-image-system
spec:
  egress:
  - to:
    - ipBlock:
        cidr: 0.0.0.0/0
        except:
        - 10.42.0.0/24
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: kube-system
      podSelector:
        matchLabels:
          k8s-app: kube-dns
    - podSelector:
        matchLabels:
          app: registry
  ingress:
  - from:
    - namespaceSelector:
        matchLabels:
          kubernetes.io/metadata.name: acorn-system
      podSelector:
        matchLabels:
          app: acorn-api
  podSelector:
    matchLabels:
      another: label
      app: buildkitd
  policyTypes:
  - Ingress
  - Egress
status: {}
`
