[07:30:10] cdanis: source and destination EntityRule's allow for "selector" - which is probably what you want. But if it feels more natural to keep it in a basic network policy, you can also mix those with calico policies [12:53:37] jayme: right so, I have an upstream chart that I don't want to modify so much, so I was considering reusing the templates that it uses to make its own k8s/v1 NetworkPolicy. which of course expand to yaml, not to the calico selector syntax [12:54:04] probably I should just hardcode a selector that makes sense in our deployment though [12:55:19] otel and the policy to egress to k8s api? [12:55:25] indeed [13:00:42] ah the helper templated render the whole matchLabels construct, I see [13:01:30] yeah [13:01:44] but you can probaby still craft something with {{ include "opentelemetry-collector.name" . }} [13:02:02] I asked a different expert last night and it suggested the following: https://i.imgur.com/T7kwpXs.png [13:02:06] duplicating opentelemetry-collector.selectorLabels a bit...but might be the easiest [13:02:07] seems a little stinky though [13:03:24] urgh...that's the australien weather expert [13:04:01] I'm not sure whether to call it stupidly clever or cleverly stupid, tbh [13:04:21] but yeah I think mimicking opentelemetry-collector.selectorLabels makes the most sense [13:06:13] that should be easy enough given it's only filtering on two labels really