and if so how is this done if the VM is a different namespace? does the vm, network and lb need to live in the same namespace ?