Hostnames connectors may call: exact entries ('api.openai.com') or leading wildcards ('*.googleapis.com' — subdomains only, not the apex). An empty list denies all declared egress; there is no allow-all entry — omit the policy instead. Malformed entries throw at construction.
OptionalnamePolicy name used in denials and audit records.
Configuration for networkEgress.