What would you like to be added:

Added network policy for sandbox, k8s has existing networkpolicy. And even in some service mesh, some more high level limitation is supported.

I would suggest we can think about this feature.

Why is this needed:

Sandbox require strong isolation and security, in terms of this, we should provide limitations on ingress and egress network access.