OpenShift layered products that watch all namespaces are often co-located in this namespace. When those operators begin shipping network policy, there is a high chance that they accidentally select pods that are not their own, which could break other operators installed there.

In order to head that problem off, we will deploy an allow-all network policy for the openshift-operators namespace.