Skip to content
This repository was archived by the owner on Sep 20, 2025. It is now read-only.
This repository was archived by the owner on Sep 20, 2025. It is now read-only.

Isolate namespaces using NetworkPolicy resources #1

@d3adb5

Description

@d3adb5

The cluster that sources its applications from this repository uses Calico as a CNI. Calico has support for the NetworkPolicy resource, allowing us to restrict access to and from groups of Pods and namespaces within the cluster.

It is good practice to isolate applications in the network to mitigate lateral movement should any of them be compromised.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Projects

Status

In progress

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions