What feature must a CNI support to control specific traffic flows for workloads running in Kubernetes?

Border Gateway Protocol (BGP) is a routing protocol primarily used for routing between autonomous systems on the internet, or sometimes within a large cluster for advanced routing, but it's not the feature that directly enables Kubernetes Network Policies.

Border Gateway Protocol (BGP) is a routing protocol primarily used for routing between autonomous systems on the internet, or sometimes within a large cluster for advanced routing, but it's not the feature that directly enables Kubernetes Network Policies.

Pod Security Policy (PSP) controls security aspects of Pod creation and updates, such as privileged containers or host path access, not specific network traffic flows.

Kubernetes Network Policies are a declarative way to specify how groups of Pods are allowed to communicate with each other and other network endpoints. A CNI (Container Network Interface) plugin must implement support for Network Policies to enable this granular control over traffic flows within the cluster.