docs: clean up example yaml for L4 Deny Policy

[huntergregory]

Fixes an example L4 Deny Policy in the documentation, removing a developer's note in the yaml referenced by https://github.com/cilium/cilium/blob/main/Documentation/security/policy/language.rst

• For first time contributors, read Submitting a pull request
• All code is covered by unit and/or runtime tests where feasible.
• All commits contain a well written commit description including a title,
  description and a Fixes: #XXX line if the commit addresses a particular
  GitHub issue.
• If your commit description contains a Fixes: <commit-id> tag, then
  please add the commit author[s] as reviewer[s] to this issue.
• All commits are signed off. See the section Developer’s Certificate of Origin
• Provide a title or release-note blurb suitable for the release notes.
• Are you a user of Cilium? Please add yourself to the Users doc
• Thanks for contributing!

[maintainer-s-little-helper]

Commit 9359b55 does not match "(?m)^Signed-off-by:".

Please follow instructions provided in https://docs.cilium.io/en/stable/contributing/development/contributing_guide/#developer-s-certificate-of-origin

[lambdanis]

@huntergregory Thanks for the PR!

Have the ports in the example been double checked? If so, the change looks good to me.

Could you just amend the commit message to have the same subject as the PR title? It looks more descriptive.

[huntergregory]

@huntergregory Thanks for the PR!

Have the ports in the example been double checked? If so, the change looks good to me.

Could you just amend the commit message to have the same subject as the PR title? It looks more descriptive.

Updated! Thanks @lambdanis . Ports were the same, but just now thinking to switch the order align more with the blurb?

The following policy will allow ingress traffic for any node with the label
type=ingress-worker on TCP ports 22, 6443 (kube-apiserver), 2379 (etcd) and 4240
(health checks), as well as UDP port 8472 (VXLAN).

[lambdanis]

/test