withNetworkPolicy

Grants network access to exactly the HTTP endpoints and raw-socket endpoints listed in networkPolicy. Matching is exact (scheme, canonical host and port); every other destination, including name lookups for hosts without a raw-socket grant, is denied with access-denied / HTTP-request-denied. The default policy denies all network access.