Support ingress endpoint with private IP

[zubenkoivan]

Currently when we create user jobs we also create user network policy which forbids egress traffic to private IP ranges.
In case cluster is behind VPN it's ingress endpoint may have private IP. We need to allow egress traffic to ingress endpoints for such clusters.
Creating additional network policy which allows traffic to private IPs which are specified in Platform k8s resource should enough.