Google has added ClusterNetworkPolicy to Google Kubernetes Engine, with the feature available in preview for version 1.36 and later. Standard Kubernetes NetworkPolicy is commonly used to manage traffic between workloads, but it is limited to individual namespaces. The highest level is the admin tier, followed by the standard namespace network policy tier, and then a baseline tier that sets default behaviour when no other policy applies. Another is protecting core services such as kube-dns with a global allow rule, ensuring they remain reachable even if a namespace policy is misconfigured. For GKE users, the feature adds another layer to Google's managed Kubernetes service at a time when customers are placing greater scrutiny on internal segmentation and east-west traffic controls.