apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: kube-system
  namespace: kube-system
spec:
  podSelector: {}
  policyTypes:
    - Ingress
  ingress:
    - from:
      - namespaceSelector:
          matchLabels:
            name: kube-system
    - from:
      - namespaceSelector:
          matchLabels: {}
      ports:
      - protocol: TCP
        port: 6443
      - protocol: TCP
        port: 6444
      - protocol: TCP
        port: 53
      - protocol: UDP
        port: 53