Fix DRA NetworkPolicy: add allow-all egress rule

The DRA NetworkPolicy declares both Ingress and Egress policy types
but has no egress rules, which blocks all outbound traffic from the
DRA kubelet plugin pod. This prevents the plugin from reaching the
API server to create/update ResourceSlices. Add an allow-all egress
rule.

Signed-off-by: Anthony Byrne <abyrne@redhat.com>

Author: abyrne55

internal/networkpolicy/networkpolicy.go

@@ -201,6 +201,9 @@ func (np *networkPolicy) DRANetworkPolicy(namespace string) *networkingv1.Networ
 					"app.kubernetes.io/component": "dra",
 				},
 			},
+			Egress: []networkingv1.NetworkPolicyEgressRule{
+				{}, // Allow all egress — DRA kubelet plugin needs API server access for ResourceSlice management
+			},
 			PolicyTypes: []networkingv1.PolicyType{
 				networkingv1.PolicyTypeIngress,
 				networkingv1.PolicyTypeEgress,