Default-deny pod traffic.
By default, all pods in a Kubernetes cluster can talk to all
other pods. NetworkPolicies let you change that. A common hardening
pattern is:
A) Apply a default-deny NetworkPolicy to each namespace, then allow
only the specific service-to-service flows you need.
B) Open everything, trust the firewall.
C) Disable kubernetes networking.
D) Run all pods as root.Sign in to save your code and track progress across devices.