This patch adds a broader networkpolicy for system-upgrades namespace,
which should ensure network access within the namespace.