Difference between revisions of "Kind: NetworkPolicy"

From wikieduonline
Jump to navigation Jump to search
Line 1: Line 1:
 
{{lc}}
 
{{lc}}
 +
 +
[[kubectl get networkpolicy]]
 +
[[kubectl describe networkpolicy]]
 +
 
== Official example ==
 
== Official example ==
 
  {{kind_networkpolicy_official}}
 
  {{kind_networkpolicy_official}}

Revision as of 15:08, 6 November 2022

kubectl get networkpolicy
kubectl describe networkpolicy

Official example

 apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: test-network-policy
  namespace: default
spec:
  podSelector:
    matchLabels:
      role: db
  policyTypes:
    - Ingress
    - Egress
  ingress:
    - from:
        - ipBlock:
            cidr: 172.17.0.0/16
            except:
              - 172.17.1.0/24
        - namespaceSelector:
            matchLabels:
              project: myproject
        - podSelector:
            matchLabels:
              role: frontend
      ports:
        - protocol: TCP
          port: 6379
  egress:
   - to: 
     -  ipBlock:
           cidr: 10.0.0.0/24
     ports:
       - protocol: TCP
         port: 5978

See also

Advertising: