망지로그

CKA - networkpolicy 본문

Kubernetes

CKA - networkpolicy

망지v 2024. 7. 2. 11:26

https://kubernetes.io/docs/concepts/services-networking/network-policies/

 

Network Policies

If you want to control traffic flow at the IP address or port level (OSI layer 3 or 4), NetworkPolicies allow you to specify rules for traffic flow within your cluster, and also between Pods and the outside world. Your cluster must use a network plugin tha

kubernetes.io

 

egress 여러개 network poliy추가하기 + pod selector 통해서 어떤 pod에 적용되는 네트워크 폴리시인지 확인할 수 있다.

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: internal-policy
  namespace: default
spec:
  podSelector:
    matchLabels:
      name: internal
  policyTypes:
  - Egress
  - Ingress
  ingress:
    - {}
  egress:
  - to:
    - podSelector:
        matchLabels:
          name: mysql
    ports:
    - protocol: TCP
      port: 3306

  - to:
    - podSelector:
        matchLabels:
          name: payroll
    ports:
    - protocol: TCP
      port: 8080

  - ports:
    - port: 53
      protocol: UDP
    - port: 53
      protocol: TCP

'Kubernetes' 카테고리의 다른 글

CKA-storage class  (0) 2024.07.02
CKA- pv,pvc  (0) 2024.07.02
CKA - security context  (0) 2024.07.01
CKA - secrets;private registry  (0) 2024.07.01
CKA- service account  (0) 2024.07.01