# Alles zu, was keine andere Policy ausdruecklich erlaubt (beide Richtungen).
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: default-deny
spec:
  podSelector: {}
  policyTypes: [Ingress, Egress]