kind: NetworkPolicy
metadata: { name: default-deny }
spec:
podSelector: {}
policyTypes: ["Ingress", "Egress"]
