Restrict east-west traffic with ingress and egress NetworkPolicies. Design default-deny rules, permit required DNS and application paths, and verify whether the chosen network plugin enforces them.
