A transit platform team debates whether enabling a CNI plugin is the same as enforcing NetworkPolicies. What distinction should they apply?
Select an answer to reveal the explanation.
Short Explanation
CNI is the plumbing that lets Pods talk; NetworkPolicy is the optional lock on which conversations are allowed. You need connectivity first—policy is not a substitute for a CNI.
Full Explanation
CNI plugins implement the Pod network: IP allocation and reachability between Pods. NetworkPolicy resources, enforced by a supporting plugin, selectively allow or deny traffic after connectivity exists. NetworkPolicy does not replace CNI, assign Pod CIDRs in place of the plugin, or provision Nodes.