look at upstream kubernetes network policies

[mattfenwick]

1. get a feel for upstream network policies
2. figure out if the code in this repo models netpols the same way -- with an eye to ensuring that these can cover what the upstream ones cover