Kubernetes defines the NetworkPolicy API, but it does not enforce it itself. The API server will happily store any policy you create. Enforcement is the job of the cluster's network plugin, which implements the Container Network Interface (CNI), the standard way Kubernetes asks a plugin to wire up Pod networking. If the plugin does not support NetworkPolicy, your policies exist but have no effect, and all traffic keeps flowing.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 6 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.