The problem has been on clusters with public IP addresses on the nodes. The
added policy will explicitly allow connecting to cluster ingress service.

Needed for testing from within notebooks and for collaborative feature.