rules:
  # prevent exposing internal api in streaming packages
  - selectorRegexp: k8s[.]io/kubernetes
    allowedPrefixes: []