apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-to-admission-controller
spec:
  ingress:
  - {}
  podSelector:
    matchLabels:
      control-plane: controller-manager
  policyTypes:
  - Ingress
