A sidecar supports another container in the same Pod. The containers share a network namespace, but their filesystems remain separate unless you mount a shared volume. An init container runs before the main application containers. Kubernetes waits for successful completion before moving to the next init container or starting the application. A NetworkPolicy selects the Pods it governs and declares permitted ingress or egress. The destination selector and allowed source selector are different parts of the rule.
Apply those boundaries to fresh fixtures. Inspect the requested name, namespace, path and value before reusing a command. The tasks mix earlier operations and include nearby wrong targets, so preserve unrelated work. Choose any supported approach that produces the complete requested state; the checker evaluates the result rather than a recorded command sequence.