https://docs.cilium.io/en/v1.8/policy/language/#hostpolicies

Two angles are not covered here:

• Ensuring that host firewall is enabled in either helm / daemon options
• Ensuring that the nodes have the labels for the policy added