Allow all intra-namespace communication only

Hello, I would like to know how to allow all intra-namespace communication while blocking all ingress /egress to/from other namespaces. I trying to use this, but looks like it allows all communication to/from endpoints outside the namespace. Thank you

apiVersion: projectcalico.org/v3
kind: NetworkPolicy
metadata:
  name: default.test
  namespace: default
spec:
  selector: all()
  ingress:
    - action: Allow
      source: {}
      destination: {}
  egress:
    - action: Allow
      source: {}
      destination: {}
  types:
    - Ingress
    - Egress

Hello @ronaldral , that’s a great question! I would like to suggest directing this to Calico users’ Slack, here. There is a big community in our Calico Slack and everyone is great at collaborating! Please let me know if anything goes wrong with the link.