A policy should restrict only egress and leave ingress unspecified…

Question

A policy should restrict only egress and leave ingress unspecified intentionally. What must be set so egress rules are honored as intended?

Accepted Answer

Include Egress in policyTypes (and define the egress rules); do not rely on ingress-only defaults. — policyTypes is the label on the jar that says what's inside—if you mean egress, list Egress. Don't hide egress rules under an Ingress-only jar or on Service externalIPs.

Answer

Omit policyTypes entirely and list only ingress rules to force egress deny.

Answer

Set policyTypes to Ingress only while putting rules under the egress field.

Answer

Put egress CIDRs in the Service externalIPs field instead of NetworkPolicy policyTypes.

A policy should restrict only egress and leave ingress unspecified intentionally. What must be set so egress rules are honored as intended?

Short Explanation

Full Explanation