Question

A security team wants to ensure that Pods in the 'payments' namespace reject all incoming network traffic by default, unless a more specific NetworkPolicy explicitly allows it. They apply a NetworkPolicy with an empty podSelector ({}), a policyTypes list containing 'Ingress', and no ingress rules defined. What is the effect of this policy on the Pods in the namespace?

Accepted Answer

All ingress traffic to every Pod in the 'payments' namespace is denied unless another policy allows it

Answer

All ingress and egress traffic to every Pod in the namespace is denied

Answer

The policy has no effect because at least one ingress rule must be specified to be valid

Answer

Only traffic from other namespaces is denied, while traffic within 'payments' is still allowed