From the course: Kubernetes and Cloud Native Security Associate (KCSA) Cert Prep
Join today to access over 24,700 courses taught by industry experts.
Network policies
From the course: Kubernetes and Cloud Native Security Associate (KCSA) Cert Prep
Network policies
All right. So let's take a look at a network policy here. Now we're going to be calling from the named API group. We're going to be specifying the network policy object or resource. We'll give it a name, we'll specify the namespace, we'll utilize the pod selector. And then what we're going to do is we're going to specify types. Now remember, network policies care about ingress and egress. You can specify one or you can specify both. So from this perspective, essentially what we're saying is, this CIDR range accept this IP address, verifies this namespace selector and selects these pods, okay? Over particular ports. So what I'm saying is this CIDR range has access to these pods over these ports. From an egress perspective, I'm saying this IP block can go outbound over port 5959, okay? So let's kind of see this in action a little bit here. Now the first thing that we're going to do is we're going to run two pods based on the busybox container image. And really what the busybox container…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.