root@sk730conoc4nb06:/home/cilium# cilium policy trace --src-k8s-pod 0020707-integration-business:centos2-deployment-548b74766c-74qpf -d k8s:io.kubernetes.pod.namespace=openshift-dns --dport 53
----------------------------------------------------------------
Tracing From: [k8s:app=centos2, k8s:io.cilium.k8s.namespace.labels.cvApplicationName=IP_Forward_Services_-_Workflow, k8s:io.cilium.k8s.namespace.labels.cvCamrKey=0020707, k8s:io.cilium.k8s.namespace.labels.cvTpgKey=IP, k8s:io.cilium.k8s.namespace.labels.faas-name=0020707-integration-business, k8s:io.cilium.k8s.namespace.labels.faas.visa.com/enforcement=STRICT, k8s:io.cilium.k8s.namespace.labels.infraIdentifier=K8OS73BNPGNN03, k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=0020707-integration-business, k8s:io.cilium.k8s.namespace.labels.router=business, k8s:io.cilium.k8s.namespace.labels.vks.visa.com/app-name=IP_Forward_Services_-_Workflow, k8s:io.cilium.k8s.namespace.labels.vks.visa.com/app-number=0020707, k8s:io.cilium.k8s.namespace.labels.vks.visa.com/infra-identifier=K8OS73BNPGNN03, k8s:io.cilium.k8s.namespace.labels.vks.visa.com/tpg-key=IP, k8s:io.cilium.k8s.policy.cluster=default, k8s:io.cilium.k8s.policy.serviceaccount=default, k8s:io.kubernetes.pod.namespace=0020707-integration-business] => To: [k8s:io.kubernetes.pod.namespace=openshift-dns] Ports: [53/ANY]

Resolving egress policy for [k8s:app=centos2 k8s:io.cilium.k8s.namespace.labels.cvApplicationName=IP_Forward_Services_-_Workflow k8s:io.cilium.k8s.namespace.labels.cvCamrKey=0020707 k8s:io.cilium.k8s.namespace.labels.cvTpgKey=IP k8s:io.cilium.k8s.namespace.labels.faas-name=0020707-integration-business k8s:io.cilium.k8s.namespace.labels.faas.visa.com/enforcement=STRICT k8s:io.cilium.k8s.namespace.labels.infraIdentifier=K8OS73BNPGNN03 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=0020707-integration-business k8s:io.cilium.k8s.namespace.labels.router=business k8s:io.cilium.k8s.namespace.labels.vks.visa.com/app-name=IP_Forward_Services_-_Workflow k8s:io.cilium.k8s.namespace.labels.vks.visa.com/app-number=0020707 k8s:io.cilium.k8s.namespace.labels.vks.visa.com/infra-identifier=K8OS73BNPGNN03 k8s:io.cilium.k8s.namespace.labels.vks.visa.com/tpg-key=IP k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=default k8s:io.kubernetes.pod.namespace=0020707-integration-business]
* Rule {"matchLabels":{"k8s:io.kubernetes.pod.namespace":"0020707-integration-business"}}: selected
* Rule {"matchLabels":{"k8s:io.kubernetes.pod.namespace":"0020707-integration-business"},"matchExpressions":[{"key":"k8s:faas-quarantined","operator":"NotIn","values":["true"]}]}: selected
    Allows to labels {"matchLabels":{"k8s:io.cilium.k8s.namespace.labels.faas-name":"istio-system"}}
      No label match for [k8s:io.kubernetes.pod.namespace=openshift-dns]
    Allows to labels {"matchLabels":{"k8s:io.cilium.k8s.namespace.labels.faas-name":"kube-system","k8s:k8s-app":"kubernetes"}}
      No label match for [k8s:io.kubernetes.pod.namespace=openshift-dns]
    Allows to labels {"matchLabels":{"k8s:io.cilium.k8s.namespace.labels.faas-name":"openshift-dns"}}
      No label match for [k8s:io.kubernetes.pod.namespace=openshift-dns]
    Allows to labels {"matchLabels":{"k8s:io.cilium.k8s.namespace.labels.faas-name":"kube-system","k8s:k8s-app":"kube-dns"}}
      No label match for [k8s:io.kubernetes.pod.namespace=openshift-dns]
    Allows to labels {"matchLabels":{"k8s:io.cilium.k8s.namespace.labels.faas-name":"istio-gateway"}}
      No label match for [k8s:io.kubernetes.pod.namespace=openshift-dns]
2/66 rules selected
Found no allow rule
Found no deny rule
Egress verdict: denied