Rancher Project Isolation

[thomasprade]

Hi everyone,

with a supported CNI (e.g. cilium and calico, not flannel) rancher apparently supports the automatic creation of network policies to deny network communication of resources in different projects.
Has anyone got this feature running or has any input on compatibility with clusters created through kube-hetzner? Documentation sadly is quite sparse (at least I couldn't find anything really useful for me).