Kubernetes network policies

From wikieduonline
Revision as of 16:05, 6 November 2022 by Welcome (talk | contribs) (→‎See also)
Jump to navigation Jump to search

kind: NetworkPolicy

Official example

 apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: test-network-policy
  namespace: default
spec:
  podSelector:
    matchLabels:
      role: db
  policyTypes:
    - Ingress
    - Egress
  ingress:
    - from:
        - ipBlock:
            cidr: 172.17.0.0/16
            except:
              - 172.17.1.0/24
        - namespaceSelector:
            matchLabels:
              project: myproject
        - podSelector:
            matchLabels:
              role: frontend
      ports:
        - protocol: TCP
          port: 6379
  egress:
   - to: 
     -  ipBlock:
           cidr: 10.0.0.0/24
     ports:
       - protocol: TCP
         port: 5978


Other examples

networkPolicy:
  enabled: true
  provider: CALICO

Related

See also

Advertising: