create networkpolicies

NetworkPolicy allow rules are additive across every policy selecting a pod for a given direction.

A new permissive policy reopens access without touching existing restrictive ones, and leaves less of an audit trail than a patch or delete.

Escalation Paths

Create a second NetworkPolicy selecting the same pods, with an unconditional allow rule for ingress or egress.
Allowed traffic is the union of every policy that selects the pod, so the permissive rule reopens what the restrictive policy closed.
The restrictive policy is untouched and still present, so an audit or GitOps diff of existing objects shows it intact.
Patching an existing policy reaches the same result by adding allow rules or by narrowing its podSelector so it stops selecting the target.
Quieter than deletion, because nothing that was there is missing.
The new object is the only evidence.

Additional rights needed:

none