Added
clusterManager.networkPolicy.workloadClusters.provider: awsopens the CAPA API server load balancers,*.*.elb.amazonaws.com(giantswarm/agent-platform#487). cluster-manager dials theserver:of a cluster’s Cluster API kubeconfig Secret, which on CAPA is the API server’s load balancer, never theapi.*.<base domain>pattern the values used to document. The preset renders next tofqdnsin cluster-manager’s egress and in model-manager’s, which follows cluster-manager’s block. An unknown provider is refused and the presets are named. The values now say which host to select and that Cilium’s*matches one DNS label.