Tailor Ingress for all pods with NetworkPolicy
Depends on #20
Once initial network policy is in place allowing ingress to all pods only on the ports they say they expose, I should do a second-pass to allow ingress to those pods only from the pods that ought to be talking to them.