40-Network-Policy.md

Network Policy

• Take me to the Video Tutorial

In this section, we will take a look at Network Policy.

Traffic flowing through a webserver serving frontend to users an app server serving backend API and a database server

• There are two types of traffic

  • Ingress
  • Egress

  

  

Network Security

Network Policy

Network Policy Selectors

Network Policy Rules

Create network policy

• To create a network policy

  apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
   name: db-policy
  spec:
    podSelector:
      matchLabels:
        role: db
    policyTypes:
    - Ingress
    ingress:
    - from:
      - podSelector:
          matchLabels:
            role: api-pod
      ports:
      - protocol: TCP
        port: 3306
  

  $ kubectl create -f policy-definition.yaml
  

  

  

Note

K8s Reference Docs

• https://kubernetes.io/docs/concepts/services-networking/network-policies/
• https://kubernetes.io/docs/tasks/administer-cluster/declare-network-policy/