Building-permits administrators apply several NetworkPolicy objects…

Question

Building-permits administrators apply several NetworkPolicy objects, but traffic is never filtered. Pods and Services look correct. What dependency is most likely missing?

Accepted Answer

A CNI or network-policy engine that implements and enforces NetworkPolicy; without it, policy objects have no effect on traffic. — Writing NetworkPolicy YAML without an enforcing CNI is like posting speed-limit signs with no police — the paper exists, the traffic doesn't change.

Answer

A PriorityClass named network-policy must exist or the apiserver drops NetworkPolicy resources.

Answer

Every namespace must contain a default ServiceAccount token Secret named networkpolicy-enforcer.

Answer

Ingress controllers must be scaled to zero before NetworkPolicy can activate.

Building-permits administrators apply several NetworkPolicy objects, but traffic is never filtered. Pods and Services look correct. What dependency is most likely missing?

Short Explanation

Full Explanation