Kubernetes Network Policies: Start With Default Deny
Why default-deny comes first with Kubernetes NetworkPolicies, the DNS and egress breakage that follows, and the CNI gotchas nobody warns you about.
Read the post1 post about network-policy in the conndeck blog — field notes on local-first Kubernetes operations, GitOps, and production debugging.
Why default-deny comes first with Kubernetes NetworkPolicies, the DNS and egress breakage that follows, and the CNI gotchas nobody warns you about.
Read the post