apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: policy-from-ip-block-to1
  namespace: default
spec:
  podSelector:
    matchLabels:
      app: app-1
  policyTypes:
  - Ingress
  ingress:
    - from:
      - ipBlock:
          cidr: 10.0.0.0/8
          except:
          - 10.10.0.0/16
