Unwanted automatic creation of network policys

Hello, have a question about network policy.

When I create a deployment/ingress directly on the RKE cluster a new networkpolicy is created instead of just using the np-default. The name of the automatic policy gets prefixed with np- and then deploymentname.

Project isolation is overridden by this automatically created networkpolicy.

When deploying a workload through rancher web ui, no networkpolicy like this is created for the deployment.

Any way to prevent these networkpolicys to be created when doing deployments not through rancher?

Seems the network policy is only created when deploying with nodeport. Changed to cluster_ip which will be the common usecase and it does not get created.

Would have been nice to know the reason for it to be created. Is it a need for the nodeport to work?