Current networkpolicy template enforces labels with Ingress. There is optional networkPolicy.extraFrom value attribute where user can define an alternative rule, but it has a hardcoded from: block, which makes difficult - if not impossible - to create an ingress rule that allows traffic to the specified ports but not require labels.
I suggest adding a boolean attribute to networkPolicy section, for example requireIngressLabels which could be true by default. If it is false, network policy template would bypass whole from section in Ingress rules.
ExtraFrom handling could remain untouched.
(BTW, instead hardcoding ports, networkpolicy should use the ones specified in service section)