Networknet notebook
Calico
When default deny blocked the Kubernetes API
A failed Calico API server replica exposed the difference between a Kubernetes Service address and the endpoint my network policy actually needed to allow.
Learning the network by denying it first
Applying default-deny NetworkPolicies per use case to segment Kubernetes traffic and turn application data flows into explicit rules.