Tag

#network-policy

Tagged “network-policy”

2 articles

GKE's ClusterNetworkPolicy gives platform teams a floor without stepping on namespace owners

Google Cloud is previewing ClusterNetworkPolicy in GKE, a cluster-scoped resource with an Admin, NetworkPolicy and Baseline tier stack. It lets platform teams set a non-negotiable isolation floor while namespace-scoped NetworkPolicies keep working underneath.

Aug 11, 2026 · Priya Nair Runners & infrastructure

The 60% idle GPU that turned out to be a network policy

A CNCF write-up walks through a distributed Kubeflow training job whose GPUs sat around 60% idle while every pod reported healthy. The failure lived one layer down, in a Cilium policy enforcing zone boundaries that gradient sync had to cross.

Jul 23, 2026 · Maya Okonkwo