{"id":"netpol-multitenant-isolation-three-policies","text":"Multitenant isolation requires three policies per namespace: deny-by-default, allow-same-namespace, and allow-from-ingress.","truth_value":"IN","source":"entries/2026/03/05/en-documentation-openshift_container_platform-417-html-network_security-network-.md","source_url":"","source_hash":"4518e139ef6eecaa","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"netpol-multitenant-isolation-three-policies","truth_value":"IN","reason":"premise"}]}}