---
id: network-policy-on
name: "Capability: NetworkPolicy present when enabled (ON)"
description: >-
  Renders the product chart with networkPolicy.enabled=true and asserts a
  NetworkPolicy is rendered selecting the product pods. The sample chart
  does NOT include a networkpolicy.yaml template — setting
  networkPolicy.enabled=true has no effect because the chart lacks the
  template. This scenario is EXPECTED to FAIL (honest red gap) documenting
  that the chart lacks a networkPolicy knob and template.
labels: {customer: enterprise, profile: compliance}
cluster:
  provider: kind
  k8s_version: v1.36.1
product:
  chart: ./chart
  release: sample
  namespace: sample
  set:
    networkPolicy.enabled: true
asserts:
  - type: network-policy
    namespace: sample
    source: rendered
    expect_present: true
tags: [capability, compliance]
category: capability
capability: network-policy
tier: capability
mechanisms: ["capability:network-policy"]