gitlab networkpolicy for kube api egress

Dogfood upgrade failed due to inability to communicate with api server. This adds network policy to allow ingress on this.