{{- if not .Open }} --- kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: default-allow-nothing namespace: "{{.Name}}" spec: podSelector: {} policyTypes: - Ingress - Egress {{ end }}