Member-only story

Kubernetes NetworkPolicy API

Luca Berton
6 min readOct 18, 2024

networkpolicy.io refers to the Kubernetes NetworkPolicy API, which is used to define rules for network traffic control at the pod level in Kubernetes clusters. With NetworkPolicies, you can specify how pods communicate with each other and with external services, effectively implementing security controls for your Kubernetes network traffic.

Key Concepts of Kubernetes Network Policies

A NetworkPolicy is a Kubernetes resource that defines what ingress (inbound) and egress (outbound) traffic is allowed to and from a set of pods. By default, pods are non-isolated and can communicate with any other pods or external resources. When you apply a NetworkPolicy, pods become isolated and will only allow traffic as defined in the policy.

1. Core Components of a NetworkPolicy

  • Pod Selector: Specifies the pods to which the NetworkPolicy applies. This is done using labels that select specific pods.
  • Ingress Rules: Define what traffic is allowed to enter the pods selected by the policy.
  • Egress Rules: Define what traffic is allowed to leave the pods selected by the policy.
  • Namespace Selector: Limits traffic to pods from specified namespaces.
  • IP Block: Defines CIDR blocks for external…

--

--

Luca Berton
Luca Berton

Written by Luca Berton

I help creative Automation DevOps, Cloud Engineer, System Administrator, and IT Professional to succeed with Ansible Technology to automate more things everyday

No responses yet