add global metadata restriction policy
As it is not, the pods can query the host metadata endpoint This manifest creates a calico GlobalNetworkPolicy stopping egress of TCP/UDP packets to the metadata server. For further information, please see OS-15462
Closes: https://gitlab.cern.ch/kubernetes/project/-/issues/148#note_5628982
Edited by Diogo Filipe Tomas Guerra