rules appear to be working.

cmd/policygen/templates/netpol/namespace/jaeger.yaml

@@ -0,0 +1,17 @@
+{{- if not .Open }}
+---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: allow-jaeger # required for OCSP
+  namespace: {{ .Name }}
+spec:
+  podSelector: {}
+  policyTypes:
+    - Egress
+  egress:
+    - to:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: observability
+  {{- end }}

cmd/policygen/templates/netpol/namespace/linkerd.yaml

@@ -24,7 +24,6 @@ spec:
         - namespaceSelector:
             matchLabels:
               kubernetes.io/metadata.name: monitoring
-          # podSelector prometheus
   egress:
     - to:
         - namespaceSelector:

cmd/policygen/templates/netpol/namespace/monitored.yaml

@@ -1,5 +1,6 @@
 {{- if not .Open }}
-
+---
+kind: NetworkPolicy
 apiVersion: networking.k8s.io/v1
 metadata:
   name: allow-monitoring

cmd/policygen/templates/netpol/namespace/namespace.yaml

@@ -1,6 +1,6 @@
 
-{{- if not .Open }}
 ---
+{{- if not .Open }}
 kind: NetworkPolicy
 apiVersion: networking.k8s.io/v1
 metadata: