1. The access collection black hole You need Figma access, Google Analytics, WordPress admin, GitHub, and the client's Slack. You ask. They forward a password email from two years ago. You ask again. Their developer says they'll get back to you. Three days pass. The fix: Send a single, complete access list on Day 1 — not "we'll need some access" but the exact list, with specifics for each tool,
CKS Study Memo on Network Policies official document: https://kubernetes.io/docs/concepts/services-networking/network-policies/ You can control traffic between pods using the NetworkPolicy resource. In the sample manifest, the selectors are written like this. ingress: - from: - namespaceSelector: matchLabels: user: alice - podSelector: matchLabels: