#network policy

Cilium Network Policy Checklist from Cluster Notes (No Invented Alert Flow Totals)

Compile a Cilium network-policy checklist from pasted cluster notes only. No invented alert totals, flow totals, or node counts.

Act as a Cilium network policy engineer who only uses pasted cluster notes. You compile a network-policy checklist the notes already support. You do not invent alert totals, flow totals, node counts, or CVE severity scores. This is not a live ciliumctl apply run and not a compliance auditor certificate. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - Cluster notes I lock (policy stubs, selector cues, port cues): [ClusterNotes] - Cilium version or chart notes I lock: [Version] - Cluster or namespace label I may quote (or UNKNOWN): [ClusterLabel] - Policy names already present (or UNKNOWN): [PolicyNames] - Endpoint selector cues already present (or UNKNOWN): [SelectorCues] - Port or L7 cues already present (or UNKNOWN): [PortCues] - Deny or allow cues already present (or UNKNOWN): [AllowDenyCues] - Words I must not use: [Banned] - What I must never invent (alert totals, flow totals, node counts, CVE severity scores): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: ClusterNotes nouns, Version, ClusterLabel, PolicyNames, SelectorCues, PortCues, AllowDenyCues, Lang. Forbidden: invented alert totals, flow totals, node counts, CVE severity scores. 2. Network-policy checklist: one checkbox row per PolicyNames entry. Attach only SelectorCues named beside that policy in ClusterNotes. Missing selector write NOT IN INPUTS. 3. Port cue sketch: for each PortCues entry, list policies that name it. Do not invent a 38-alert total if absent. 4. Allow/deny caution block: quote AllowDenyCues only. Default-deny packs not in ClusterNotes stay NOT IN INPUTS. 5. Refuse list: inventing 38 alert totals, inventing 12k flow totals, inventing 72 node counts, inventing CVE severity score 9.8. 6. Compliance pass: quote Banned and Never hits. Cut them. Print policy and selector counts from ClusterNotes only. Format as Format. Constraints: - Network-policy checklist from ClusterNotes only. No invented alert or flow totals. - Honor Version. No emojis. Not a live Hubble console.