Network policy validation

Non-transitory computer-readable media comprising instructions that, when executed, causes processing circuitry to:

• obtain one or more flow records indicative of one or more packet flows among workloads deployed to one or more computing devices configured with a network policy, wherein each of the one or more flow records indicates permission for a corresponding packet flow of the one or more packet flows in accordance with the network policy;
• and
• based on a determination that the corresponding packet flow for one of the one or more flow records does not have a discrepancy with the network policy, configure a network system with the network policy, wherein the discrepancy comprises one of:
• (1) the network policy would deny the corresponding packet flow, and the one of the one or more flow records indicate the corresponding packet flow was allowed;
• or
• (2) the network policy would allow the corresponding packet flow, and the one of the one or more flow records indicate the corresponding packet flow was denied.

Non-transitory computer-readable media comprising instructions that, when executed, causes processing circuitry to:

• obtain one or more flow records indicative of one or more packet flows among workloads deployed to one or more computing devices configured with a network policy, wherein each of the one or more flow records indicates permission for a corresponding packet flow of the one or more packet flows in accordance with the network policy;
• receive an updated network policy;
• and
• based on a determination that the corresponding packet flow for one of the one or more flow records does not have a discrepancy with the updated network policy, configure a network system with the updated network policy.