networkPolicy:
  enabled: true
  spec:
    podSelector:
      matchLabels:
        foo: bar
    ingress:
    - from:
      - podSelector:
          matchLabels: {}
      - namespaceSelector:
          matchLabels:
            name: foo
