Are multiple network policies rules processed logically as "and" rules or "or"?
The kubernetes network recipe "ALLOW traffic from apps using multiple selectors" is clear:
- Rules specified in
spec.ingress.from
are OR'ed.- This means the pods selected by the selectors are combined are whitelisted altogether.