How does Project Calico enable network policies in K8s? How to implement basics? Creating and managing policies in your clusters