Add Barbican ingress Network Policy

Move Barbican Network Policies into a dedicated
override. Configure magnum to have the access to
Barbican.

Change-Id: Iad0f69666a28fabedd49b266c8a9de1ec3410dd6

barbican/values.yaml

@@ -197,21 +197,9 @@ network:
 network_policy:
   barbican:
     ingress:
-      - from:
+      - {}
-        - podSelector:
+    egress:
-            matchLabels:
+      - {}
-              application: barbican
-        - podSelector:
-            matchLabels:
-              application: ingress
-        - podSelector:
-            matchLabels:
-              application: horizon
-        ports:
-        - protocol: TCP
-          port: 80
-        - protocol: TCP
-          port: 9311
 
 bootstrap:
   enabled: false

barbican/values_overrides/netpol.yaml

@@ -0,0 +1,29 @@
+manifests:
+  network_policy: true
+
+network_policy:
+  barbican:
+    ingress:
+      - from:
+        - podSelector:
+            matchLabels:
+              application: barbican
+        - podSelector:
+            matchLabels:
+              application: ingress
+        - podSelector:
+            matchLabels:
+              application: horizon
+        - podSelector:
+            matchLabels:
+              application: heat
+        - podSelector:
+            matchLabels:
+              application: magnum
+        ports:
+        - protocol: TCP
+          port: 80
+        - protocol: TCP
+          port: 9311
+    egress:
+      - {}