Excuse me, but I did not know anything about Network Policies because we use Flannel and, as long as I have read, it does not support them. However, I’m going to run a test server with Calico and see how isolation works actually.
Pods from different namespaces in the same node is not a problem for us, as long as there are quotas and limits to prevent DoS. However, I appreciate the explanation.
I’m going to run the tests and, then, update with more info.
Thank you very much.