A namespace has a default-deny ingress NetworkPolicy. How should an approved frontend reach its database?

1. Delete every policy from the namespace
2. Add a narrow allow policy for the required peers and ports
3. Rename the database Pod
4. Grant the frontend cluster-admin