NetworkPolicy (Deny All)

Lock down pod traffic — deny all ingress, allow only from frontend

📋Configuration Files

network-policy-deny-all.yml

yaml

1apiVersion: networking.k8s.io/v1
2kind: NetworkPolicy
3metadata:
4  name: deny-all-ingress
5  namespace: default
6spec:
7  podSelector: {}
8  policyTypes:
9    - Ingress

network-policy-allow-frontend.yml

Allow traffic only from pods labeled role=frontend

yaml

1apiVersion: networking.k8s.io/v1
2kind: NetworkPolicy
3metadata:
4  name: allow-from-frontend
5spec:
6  podSelector:
7    matchLabels:
8      tier: backend
9  policyTypes:
10    - Ingress
11  ingress:
12    - from:
13        - podSelector:
14            matchLabels:
15              role: frontend
16      ports:
17        - protocol: TCP
18          port: 8080

📄

Step 01

Apply NetworkPolicy

(01)Deploy to cluster

Linux

1kubectl apply -f .
2kubectl get all
3kubectl get pods -w

(02)Remove

Linux

1kubectl delete -f .