Should pods be network isolated by default?

[iliapolo]

There's a way to create network policies that isolate pods for egress / ingress. That is, pods won't be able to accept or initiate network traffic.

• See https://kubernetes.io/docs/concepts/services-networking/network-policies/#default-deny-all-ingress-and-all-egress-traffic

Intuitively, as far as security and architectural best practices, this feels like it should be the default. Any network connection should be explicitly defined and allowed.

cdk8s-plus allows us to apply this default very easily, question is - should we?

[iliapolo]

Lets just have a property on pods to easily configure this

[iliapolo]

Converted to issue: #891