K8s-networkpolicy: Difference between revisions
Jump to navigation
Jump to search
(Created page with "<pre> #NAMESPACE NETWORK ISOLATION cat <<EOF |kubectl -n ${nameSpace} apply -f - kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: allow-same-namespace sp...") |
No edit summary |
||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
<pre> | <pre> | ||
#NAMESPACE NETWORK ISOLATION | #NAMESPACE NETWORK ISOLATION | ||
cat << | |||
#Define namespace : | |||
export nameSpace= | |||
#Execute : | |||
cat <<EOT >~/networkpolicy.yaml | |||
kind: NetworkPolicy | kind: NetworkPolicy | ||
apiVersion: networking.k8s.io/v1 | apiVersion: networking.k8s.io/v1 | ||
| Line 54: | Line 59: | ||
policyTypes: | policyTypes: | ||
- Ingress | - Ingress | ||
EOT | |||
kubectl -n ${nameSpace} apply -f ~/networkpolicy.yaml | |||
</pre> | </pre> | ||
Latest revision as of 12:14, 27 August 2023
#NAMESPACE NETWORK ISOLATION
#Define namespace :
export nameSpace=
#Execute :
cat <<EOT >~/networkpolicy.yaml
kind: NetworkPolicy
apiVersion: networking.k8s.io/v1
metadata:
name: allow-same-namespace
spec:
podSelector:
matchLabels:
ingress:
- from:
- podSelector: {}
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: allow-from-ingress
spec:
ingress:
- from:
- namespaceSelector:
matchLabels:
kubernetes.io/metadata.name: ingress
podSelector: {}
policyTypes:
- Ingress
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: allow-from-openshift-ingress
spec:
ingress:
- from:
- namespaceSelector:
matchLabels:
policy-group.network.openshift.io/ingress: ""
podSelector: {}
policyTypes:
- Ingress
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: allow-from-openshift-monitoring
spec:
ingress:
- from:
- namespaceSelector:
matchLabels:
network.openshift.io/policy-group: monitoring
podSelector: {}
policyTypes:
- Ingress
EOT
kubectl -n ${nameSpace} apply -f ~/networkpolicy.yaml