Enforcing Default-Deny in Production: What Zero-Trust Slides Don't Tell You
Zero-trust presentations make default-deny look like a one-line YAML fix. In reality, turning on default-deny breaks DNS, kubelet probes, and metrics. Here is the operational guide to doing it safely.