Neuvector currently has a [batch](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/neuvector/-/tree/main/chart/templates/bigbang/networkpolicies) of network policies. These policies should be evaluated to ensure that all are working and applicable. Particular things to look out for: - Proper namespaces on policies - Ingress restricted to Istio + Monitoring only (typically this is all) - Egress for istiod, traces (to tempo), DNS, (sometimes) HTTPS access for contacting external services - In namespace access - Ensure AWS metadata is blocked, unless required for some package functionality Aceeptance criteria: - [ ] Network policies updated as necessary - [x] Network policies enabled by default in [package CI](https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/neuvector/-/blob/main/tests/test-values.yaml) - [x] Network policies enabled by default in BB, with "global" network policy value passing through