netpol.yml

kind: NetworkPolicy
apiVersion: networking.k8s.io/v1
metadata:
  name: "allow-nodeport-my-shell"
spec:
  podSelector:
   matchLabels:
    run: "my-shell"
  policyTypes:
  ingress:
    - ports:
      - protocol: TCP
        port: 8080
  egress:
    - ports:
      - port: 443
        protocol: TCP
      - port: 80
        protocol: TCP

testing_mechanism

[dev-laptop] $ kubectl run my-shell --rm -i --tty --image registry.example.com/some-org/docker-debianimage -- bash

[no-name] $  ping google.com