GitLab runner not passing control plane cidr
# Bug
## Description
The BB level value of networkPolicies.controlPlaneCidr passes down to app netpols via default values per app in their respective BB template subdirectories, but gitlab-runner is missing this default value [here](https://repo1.dso.mil/big-bang/bigbang/-/blob/master/chart/templates/gitlab-runner/values.yaml#L19).
This is easy to mitigate in the meantime with addons.gitlabRunner.values.networkPolicies.controlPlaneCidr, but still a minor bug:
```yaml
addons:
gitlabRunner:
enabled: true
values:
networkPolicies:
controlPlaneCidr: 172.18.0.0/24
```
Also, the [associated network policy](https://repo1.dso.mil/big-bang/product/packages/gitlab-runner/-/blob/main/chart/templates/bigbang/networkpolicies/egress-runner.yaml?ref_type=heads) includes a rule to allow all traffic to the gitlab namespace, but all other applications have a dedicated kube-api egress and this one should as well, as the current multi-element rule allows all traffic to the gitlab namespace or the default cidr (0.0.0.0/0 if not configured directly in the gitlab runner values).
Suggested action is to fix the gitlab runner BB level values, break the netpol into its own dedicated kube api netpol and create a new netpol for gitlab-runner > gitlab communication. Below was tested and worked fine for us:
```yaml
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
annotations:
meta.helm.sh/release-name: gitlab-runner
meta.helm.sh/release-namespace: gitlab-runner
labels:
app.kubernetes.io/managed-by: Helm
helm.toolkit.fluxcd.io/name: gitlab-runner
helm.toolkit.fluxcd.io/namespace: bigbang
name: egress-runner-to-webservice
namespace: gitlab-runner
spec:
egress:
- to:
- namespaceSelector:
matchLabels:
app.kubernetes.io/name: gitlab
podSelector:
matchLabels:
app: webservice
podSelector:
matchLabels:
app: gitlab-runner
policyTypes:
- Egress
```
This policy enforces traffic to be destined to the gitlab namespace _and_ pods with the `app: webservice` label which I believe is all gitlab-runner needs.
## BigBang Version
2.19.2 but likely an issue since the migration of gitlab-runner to its own namespace.
issue