Create media network policy

cluster/apps/media/kustomization.yaml

@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
 - ./namespace.yaml
 - ./sonarr
-- ./radarr
+- ./radarr
+- ./network_policy.yaml

cluster/apps/media/network_policy.yaml

@@ -0,0 +1,17 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: deny-most-allow-some
+  namespace: media
+spec:
+  # Apply to all pods in this namespace
+  podSelector: {} 
+  ingress:
+  - from:
+    # Allow all pods in this namespace
+    - podSelector: {}
+
+    # Allow all pods with this label
+    - podSelector:
+      matchLabels:
+        needsMedia: true