25-Network-Policies.md

Network Policies

• Take me to Video Tutorials

Trafic flowing through a webserver serving frontend to users an app server serving backend API and a database server

• There are two types of traffic

  • Ingress
  • Egress

  

  

Network Security

Network Policy

Network Policy Selectors

Network Policy Rules

Create network policy

• To create a network policy

  apiVersion: networking.k8s.io/v1
  kind: NetworkPolicy
  metadata:
   name: db-policy
  spec:
    podSelector:
      matchLabels:
        role: db
    policyTypes:
    - Ingress
    ingress:
    - from:
      - podSelector:
          matchLabels:
            role: api-pod
      ports:
      - protocol: TCP
        port: 3306
  

  $ kubectl create -f policy-definition.yaml

  
  ![npol3](../../images/npol3.PNG)
  
  ![npol4](../../images/npol4.PNG)
  
  

Note

K8s Reference Docs

• https://kubernetes.io/docs/concepts/services-networking/network-policies/
• https://kubernetes.io/docs/tasks/administer-cluster/declare-network-policy/