Network Policy - Restricting Egress From Some Namespaces But Allowing Other Namespace

Question

Suppose I have these ns

nginx-master - Running my Ingress controller monitoring - Running Prometheus, Grafana

app1-project (Parent) app1-dev app1-qa

a