tencent cloud

Network Policy
Download PDF
Last updated: 2024-02-01 10:16:11
Network Policy
Last updated: 2024-02-01 10:16:11
Download PDF

Overview

Add-on description

Network Policy is a resource provided by Kubernetes for defining pod-based network isolation policies. It describes whether a group of pods can communicate with other groups of pods and other network entities. This add-on provides a controller for implementing resources of this type. You can use this add-on if you want to control the network traffic of specific applications at the IP address or port layer (layer 3 or layer 4 of OSI).

Kubernetes objects deployed in a cluster

Kubernetes Object Name
Type
Requested Resource
Namespace
networkpolicy
DaemonSet
Each instance: CPU: 250m, Memory: 250Mi
kube-system
networkpolicy
ClusterRole
-
kube-system
networkpolicy
ClusterRoleBinding
-
kube-system
networkpolicy
ServiceAccount
-
kube-system

Component Permission Description

Permission Description

The permission of this component is the minimal dependency required for the current feature to operate.
Access to the namespaces, pods, services, nodes, endpoints, and networkpolicies within the cluster is required, thus necessitating list/get/watch permission.

Permission Definition

kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: networkpolicy
rules:
  - apiGroups:
      - ""
    resources:
      - namespaces
      - pods
      - services
      - nodes
      - endpoints
    verbs:
      - list
      - get
      - watch
  - apiGroups:
      - "networking.k8s.io"
    resources:
      - networkpolicies
    verbs:
      - list
      - get
      - watch
  - apiGroups:
      - extensions
    resources:
      - networkpolicies
    verbs:
      - get
      - list
      - watch

Directions

1. Log in to the TKE console and select Cluster in the left sidebar.
2. On the “Cluster Management page, click the ID of the target cluster to go to the cluster details page.
3. In the left sidebar, click Add-on Management to go to the Add-on List page.
4. On the Add-on List page, click Create and select NetworkPolicy in the pop-up Create Add-on window. For details of NetworkPolicy configuration, see Best Practices for Network Policy.
5. Click Done.
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback