Kubernetes: add cert-manager network policy

[YuryHrytsuk]

What do these changes do?

Apply global deny all traefik policy on cert-manager applications and add explicit network policy allowing necessary networking by extending existing chart with network policy (create a new chart with cert-manager as a subchart)

@sanderegg something not existing in docker swarm 😉

Implementation

Tasks:

• Update calico global policy
• Add policy for local deployment (existing policy fits)

Wishes:

• restart cert manager components on policy change --> no easy way to do it (if there is any) + changes are not expected to happen frequently (or at all). Stay with manual restart

Related issue/s

• Kubernetes security: implement global default network policy denying everything #1138
• cert-manager issue for network policieshttps://github.com/Add network policy allowance into documentation cert-manager/cert-manager#2334

Related PR/s

• configuration changes https://git.speag.com/oSparc/osparc-ops-deployment-configuration/-/merge_requests/1535

Checklist

• I tested and it works

[mrnicegyu11]

lgtm thx!