>my-app</code> is added to the ambient mesh.</p><h2 id=ambient-health-probes-and-kubernetes-networkpolicy>Ambient, health probes, and Kubernetes NetworkPolicy</h2><p>Kubernetes health check probes present a problem and create a special case for Kubernetes traffic policy in general. They originate from the kubelet running as a process on the node, and not some other pod in the cluster. They are plaintext and unsecured. Neither the kubelet or the Kubernetes node typically have their own cryptographic identity