[...]
 kind: Namespace
 apiVersion: v1
 metadata:
   annotations:
     net.beta.kubernetes.io/network-policy: |
       {
         "ingress": {
           "isolation": "DefaultDeny"
         }
       }
 [...]