Define cilium network policy to enforce L7 policies

cilium-network-policy-enforce-L7.yaml

apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
  name: my-app-policy
  namespace: default
spec:
  endpointSelector:
    matchLabels:
      app: my-app
  ingress:
  - fromEndpoints:
    - matchLabels:
        app: allowed-app
  egress:
  - toEndpoints:
    - matchLabels:
        app: external-service
  l7Rules:
    http:
    - method: "GET"
      path: "/"