netpol

scaleway · Jun 15, 2023 · 020e94e · 020e94e
1 parent 7271ead
commit 020e94e
Show file tree

Hide file tree

Showing 6 changed files with 33 additions and 0 deletions.
diff --git a/assets/images/netpol/allow.png b/assets/images/netpol/allow.png
diff --git a/assets/images/netpol/apply.png b/assets/images/netpol/apply.png
diff --git a/assets/images/netpol/gui.png b/assets/images/netpol/gui.png
diff --git a/assets/images/netpol/ko.png b/assets/images/netpol/ko.png
diff --git a/assets/images/netpol/ok.png b/assets/images/netpol/ok.png
diff --git a/netpol.md b/netpol.md
@@ -5,3 +5,36 @@ permalink: /netpol
 nav_order: 4
 ---
 # Securing Namespaces with Network Policies
+## Test existing connectivity
+
+```
+kubectl run -i --rm --restart=Never --image=busybox:latest -n ns1 shell -- wget -qO- http://test.ns2.svc.cluster.local
+```
+
+![](assets/images/netpol/allow.png)
+
+## Apply demo network policy
+
+```
+kubectl apply -f exercice-files/lab3.yaml
+```
+
+![](assets/images/netpol/apply.png)
+
+This demo policy has been built using a GUI available here: [https://editor.networkpolicy.io/](https://editor.networkpolicy.io/)
+
+![](assets/images/netpol/gui.png)
+
+## Test new connectivity
+
+```
+kubectl run -i --rm --restart=Never --image=busybox:latest -n ns1 shell -- wget -qO- http://test.ns1.svc.cluster.local
+```
+
+![](assets/images/netpol/ok.png)
+
+```
+kubectl run -i --rm --restart=Never --image=busybox:latest -n ns1 shell -- wget -qO- http://test.ns2.svc.cluster.local
+```
+
+![](assets/images/netpol/ko.png)