灵活使用GlobalNetworkPolicy（calico）

## 全局模式配置有相同label命名空间互访

apiVersion: crd.projectcalico.org/v1
kind: GlobalNetworkPolicy
metadata:
  name: g1
spec:
  order: 20
  namespaceSelector: group == 'g1'
  types:
    - Ingress
    - Egress
  ingress:
  - action: Allow
    source:
      namespaceSelector: group == 'g1'
  egress:
  - action: Allow
    destination:
      namespaceSelector: group == 'g1'