networkpolicy-debug

What problem does it solve?

This Skill helps diagnose and understand why network traffic is unexpectedly blocked between pods or to external services, specifically when NetworkPolicies are suspected as the cause.

Core Features & Use Cases

• Identify Blocking Policies: Determines which NetworkPolicies (standard or CNI-specific) are selecting a target pod.
• Verify CNI Support: Checks if the cluster's CNI plugin actually enforces NetworkPolicies.
• Analyze Rules: Examines ingress and egress rules within identified policies to pinpoint the exact cause of traffic blockage.
• Diagnose DNS/API Issues: Specifically checks for egress policies blocking essential DNS or Kubernetes API server traffic.
• Use Case: A new microservice can't communicate with an existing one. After confirming Service and DNS are healthy, this Skill is used to investigate if a newly applied NetworkPolicy is inadvertently blocking the traffic.

Quick Start

Use the networkpolicy-debug skill to diagnose why pod 'my-app-pod' in namespace 'dev' cannot reach external services.