https://www.chenshaowen.com/en/tags/networkpolicy/Recent content in NetworkPolicy on Shaowen Chen's WebsiteHugo -- gohugo.ioen©2016 - {year}, All Rights Reserved.Wed, 23 Jun 2021 00:00:00 +0000weeklyhttps://www.chenshaowen.com/en/blog/how-to-configure-networkpolicy-for-nodeport.htmlWed, 23 Jun 2021 00:00:00 +0000Wed, 23 Jun 2021 00:00:00 +0000https://www.chenshaowen.com/en/blog/how-to-configure-networkpolicy-for-nodeport.html1. Background As shown above, the business team needs to isolate the services in a namespace, forbidding access from workloads in the bar namespace while allowing users to reach the service through a Load Balancer (LB) via NodePort. It is easy to write a network policy: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 apiVersion: networking.微信公众号NetworkPolicyNetworkKubernetesOperationsSecurityLearningNodePortNetwork Isolationhttps://www.chenshaowen.com/en/blog/network-policy-of-kubernetes.htmlTue, 18 May 2021 00:00:00 +0000Tue, 18 May 2021 00:00:00 +0000https://www.chenshaowen.com/en/blog/network-policy-of-kubernetes.html1. Network Isolation in Kubernetes Kubernetes introduced Network Policy in 1.3. It defines entities through ipBlock, podSelector, and namespaceSelector, and controls their From (Ingress) and To (Egress) traffic behavior. But Kubernetes only defines the network policy; the actual implementation depends on the network plugin. Today, network plugins such as Calico, Cilium, and Weave Net all support network isolation.微信公众号KubernetesNetwork IsolationNetworkPolicyOperations