Testing Kubernetes NetworkPolicies Before They Hit Production

You write a NetworkPolicy, apply it to a namespace, and move on. Nobody tests it. Nobody validates it against the actual traffic the service depends on. It sits there until a deploy breaks something, ...