networkPolicy:
  enable: true
  allowExternal: false
  additionalRules:
    - matchLabels:
      - role: foo
    - matchExpressions:
      - key: role
        operator: In
        values:
          - bar
