Unwanted automatic creation of network policys

Rancher
1

Hello, have a question about network policy.

When I create a deployment/ingress directly on the RKE cluster a new networkpolicy is created instead of just using the np-default. The name of the automatic policy gets prefixed with np- and then deploymentname.

Project isolation is overridden by this automatically created networkpolicy.

When deploying a workload through rancher web ui, no networkpolicy like this is created for the deployment.

Any way to prevent these networkpolicys to be created when doing deployments not through rancher?

2

Seems the network policy is only created when deploying with nodeport. Changed to cluster_ip which will be the common usecase and it does not get created.

Would have been nice to know the reason for it to be created. Is it a need for the nodeport to work?