Capture pod traffic on a live Kubernetes cluster with Isopcap — no pod changes, CNI-independent, driven by a simple CRD.