zero-trust

Cluster flat networking is convenient right up until an attacker lands in one pod. I define NetworkPolicy resources early so east-west communication is explicit, reviewable, and least-privilege by default. This makes later incident containment far mor