Refine https://github.com/2i2c-org/infrastructure/issues/4652

[yuvipanda]

#4652 is not refined enough to be worked on.

I'll work with @sgibson91 on helping refine that.

[consideRatio]

I opened related issues potentially relevant to refining this, as the new version of vpc-cni is meant to be able to enforce NetworkPolicies:

• Upgrade EKS clusters' vpc-cni addons to be consistently of a new version #4661
  This is upgrading the vpc-cni addon using the existing old system.
• Transition to EKS managed addons (Enables NetworkPolicy enforcement via aws CNI) #4660
  This is to transition to a new way of installing the vpc-cni addon, and using that system, its documented clearly how to enable the NetworkPolicy enforcement. However, using the old way we still do in all our clusters, I've failed to enable the network policy enforcement, and that is tracked via: Support enabling NetworkPolicy enforcement via eksctl cluster config eksctl-io/eksctl#7770

[yuvipanda]

We have decided to not pursue this for now due to capacity constraints.