Platform & DevOps·Traffic into and inside the cluster
being inside the network gets a caller nothing; every call is authenticated and authorised on its own merits.
Zero-trust networking
Also calledzero trust, never trust always verify
Designing on the assumption that the network is hostile, so location confers no privilege and each request carries and proves identity. It is the answer to the flat internal network where one compromised host reached everything. In practice it is workload identity plus mutual TLS plus per-call authorisation, and the hard part is never the cryptography — it is enumerating who is allowed to call what, which nobody has written down.