K8s-networkpolicy - Revision history

Tcepo at 10:14, 27 August 2023

2023-08-27T10:14:05Z

← Older revision		Revision as of 12:14, 27 August 2023
Line 6:		Line 6:

	#Execute :		#Execute :
	cat <<~~EOF \|kubectl -n ${nameSpace} apply -f -~~		cat <<EOT >~/networkpolicy.yaml
	kind: NetworkPolicy		kind: NetworkPolicy
	apiVersion: networking.k8s.io/v1		apiVersion: networking.k8s.io/v1
Line 59:		Line 59:
	policyTypes:		policyTypes:
	- Ingress		- Ingress
	~~EOF~~		EOT

			kubectl -n ${nameSpace} apply -f ~/networkpolicy.yaml
	</pre>		</pre>

Tcepo at 07:32, 20 April 2023

2023-04-20T07:32:07Z

← Older revision		Revision as of 09:32, 20 April 2023
Line 1:		Line 1:
	<pre>		<pre>
	#NAMESPACE NETWORK ISOLATION		#NAMESPACE NETWORK ISOLATION

			#Define namespace :
			export nameSpace=

			#Execute :
	cat <<EOF \|kubectl -n ${nameSpace} apply -f -		cat <<EOF \|kubectl -n ${nameSpace} apply -f -
	kind: NetworkPolicy		kind: NetworkPolicy

Tcepo: Created page with "

 #NAMESPACE NETWORK ISOLATION cat <
2023-04-20T07:31:08Z
Created page with "<pre> #NAMESPACE NETWORK ISOLATION cat <<EOF |kubectl -n ${nameSpace} apply -f - kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata:   name: allow-same-namespace sp..."
New page
<pre>

#NAMESPACE NETWORK ISOLATION

cat <<EOF |kubectl -n ${nameSpace} apply -f -

kind: NetworkPolicy

apiVersion: networking.k8s.io/v1

metadata:

  name: allow-same-namespace

spec:

  podSelector:

    matchLabels:

  ingress:

  - from:

    - podSelector: {}

---

apiVersion: networking.k8s.io/v1

kind: NetworkPolicy

metadata:

  name: allow-from-ingress

spec:

  ingress:

  - from:

    - namespaceSelector:

        matchLabels:

          kubernetes.io/metadata.name: ingress

  podSelector: {}

  policyTypes:

  - Ingress

---

apiVersion: networking.k8s.io/v1

kind: NetworkPolicy

metadata:

  name: allow-from-openshift-ingress

spec:

  ingress:

  - from:

    - namespaceSelector:

        matchLabels:

          policy-group.network.openshift.io/ingress: ""

  podSelector: {}

  policyTypes:

  - Ingress

---

apiVersion: networking.k8s.io/v1

kind: NetworkPolicy

metadata:

  name: allow-from-openshift-monitoring

spec:

  ingress:

  - from:

    - namespaceSelector:

        matchLabels:

          network.openshift.io/policy-group: monitoring

  podSelector: {}

  policyTypes:

  - Ingress

EOF

</pre>