Two NetworkPolicies select the same Pod: one allows ingress from frontend, another allows ingress from monitoring. How do they combine?
Select an answer to reveal the explanation.
Short Explanation
Think OR, not last-write-wins: each matching NetworkPolicy adds another door that may open. Frontend allow plus monitoring allow means either source can get in. They don't cancel or alphabetize.
Full Explanation
When multiple NetworkPolicies select a Pod, ingress and egress allows combine additively—traffic permitted by any applicable policy is allowed. Kubernetes NetworkPolicies do not use last-one-wins replacement semantics. Policies neither nullify each other nor apply only by object name order.