In this post, I presented a pattern for isolating namespaces from each other in a cluster using NetworkPolicy. Let’s try it out! Trying it out And there we have it. By allowing just traffic to and from Pods in the same namespace, and traffic to and from the internet (but not internal IPs) we have… Continue reading Testing Namespace Isolation using NetworkPolicy
Tag: networkpolicy
Isolating namespaces with NetworkPolicy
Kubernetes allows for multi-tenancy within the cluster using namespaces. You can host multiple different applications each in their own namespace that at times can feel almost like a separate cluster. If you configure RBAC you can grant users and service accounts access to specific namespaces and even control what objects they can modify within. However,… Continue reading Isolating namespaces with NetworkPolicy