shift vpn policy to vpn namespace

[jgilfoil]

even though namespace: vpn was set, it was being applied to the network namespace.

[github-actions]

--- kubernetes/apps/kube-system/cilium/app Kustomization: flux-system/cilium CiliumNetworkPolicy: kube-system/vpn-pod-gateway

+++ kubernetes/apps/kube-system/cilium/app Kustomization: flux-system/cilium CiliumNetworkPolicy: kube-system/vpn-pod-gateway

@@ -1,26 +0,0 @@

----
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  labels:
-    app.kubernetes.io/instance: vpn-gateway
-    app.kubernetes.io/name: cilium
-    kustomize.toolkit.fluxcd.io/name: cilium
-    kustomize.toolkit.fluxcd.io/namespace: flux-system
-  name: vpn-pod-gateway
-  namespace: kube-system
-spec:
-  egress:
-  - toCIDR:
-    - 0.0.0.0/0
-    toPorts:
-    - ports:
-      - port: '1637'
-        protocol: UDP
-  - toEntities:
-    - cluster
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: vpn-gateway
-      app.kubernetes.io/name: pod-gateway
-
--- kubernetes/apps/network/vpn-gateway/app Kustomization: flux-system/vpn-gateway CiliumNetworkPolicy: network/vpn-pod-gateway

+++ kubernetes/apps/network/vpn-gateway/app Kustomization: flux-system/vpn-gateway CiliumNetworkPolicy: network/vpn-pod-gateway

@@ -0,0 +1,26 @@

+---
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/instance: vpn-gateway
+    app.kubernetes.io/name: vpn-gateway
+    kustomize.toolkit.fluxcd.io/name: vpn-gateway
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: vpn-pod-gateway
+  namespace: network
+spec:
+  egress:
+  - toCIDR:
+    - 0.0.0.0/0
+    toPorts:
+    - ports:
+      - port: '1637'
+        protocol: UDP
+  - toEntities:
+    - cluster
+  endpointSelector:
+    matchLabels:
+      app.kubernetes.io/instance: vpn-gateway
+      app.kubernetes.io/name: pod-gateway
+