ForApp creates a single Kubernetes NetworkPolicy that restricts incoming network traffic to all pods in an app, so that they cannot be reached by pods from other projects.

ForBuilder creates a Kubernetes NetworkPolicy to allow traffic to the buildkitd pods from the acorn-api only.

ForIngress creates Kubernetes NetworkPolicies to allow traffic to exposed HTTP ports on Acorn apps from the ingress controller.

ForService creates a Kubernetes NetworkPolicy to allow traffic to published TCP/UDP ports on Acorn apps that are exposed with LoadBalancer Services.