Each podSelector has ports. why is there an extra TCP and UDP ports on the bottom. Little confuse here.
Once you have any egress rules in a policy, unless you allow calls to DNS to go unblocked (53 TCP, UDP 53), nothing that needs DNS will work in the pod. So typically you will want to add these ports statements so DNS still functions correctly.
Thank you rob for the answer.