Data-service pods use NetworkPolicy egress selector app: trading-kafka but Strimzi Kafka pods are labeled strimzi.io/name=trading-kafka. This silently blocked all Kafka traffic causing NoBrokersAvailable.