Hello, I would like to know how to allow all intra-namespace communication while blocking all ingress /egress to/from other namespaces. I trying to use this, but looks like it allows all communication to/from endpoints outside the namespace. Thank you
apiVersion: projectcalico.org/v3
kind: NetworkPolicy
metadata:
name: default.test
namespace: default
spec:
selector: all()
ingress:
- action: Allow
source: {}
destination: {}
egress:
- action: Allow
source: {}
destination: {}
types:
- Ingress
- Egress