ess or egress <code>NetworkPolicy</code>, depending on the CNI you are using, packets with this link-local address may be blocked by the explicit <code>NetworkPolicy</code>, which will cause your application pod health probes to begin failing when you add your pods to the ambient mesh.</p><p>For instance, applying the following <code>NetworkPolicy</code> in a namespace would block all traffic (Istio or otherwise) to the <code>my-app</code> pod, <strong>including</strong> kubelet health probes. Depending on 