cdf7909f1c
G14 k3s kube-router generates per-pod REJECT chains when any NetworkPolicy CRD exists; without an allow-all policy in the namespace, cross-pod traffic (Sub2API→PostgreSQL, Sub2API→Redis) is silently blocked. Document the required allow-all NetworkPolicy and diagnostic symptoms for future reference. Ref: pikasTech/unidesk#254