Network policy

networkpolicy.yaml

@@ -0,0 +1,25 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: default-deny-ingress
+  namespace: namespace-a
+spec:
+  podSelector: {}
+  policyTypes:
+  - Ingress
+---
+kind: NetworkPolicy
+apiVersion: networking.k8s.io/v1
+metadata:
+  name: allow-namespace-a
+  namespace: namespace-a
+spec:
+  podSelector:
+    matchLabels:
+      app: k8s-security-demo
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          team: a

testpod-namespace-separation.yaml

@@ -9,3 +9,14 @@ spec:
   - name: curl
     image: curlimages/curl 
     command: [ "sleep", "600" ]
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: testpod
+  namespace: namespace-a
+spec:
+  containers:
+  - name: curl
+    image: curlimages/curl
+    command: [ "sleep", "600" ]