[CKA] 15. NetworkPolicy 생성

01. 특정 조건의 networkPolicy 생성. 

 

[solve]

[root@k8s-master ~]# vi 46-test.yaml

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-port-from-namespace
  namespace: echo
spec:
  policyTypes:
  - Ingress
  ingress:
  - from:   
    - namespaceSelector:
        matchLabels:
          name: my-app
    ports:
    - protocol: TCP
      port: 9000
 

[root@k8s-master ~]# kubectl apply -f 46-test.yaml 
networkpolicy.networking.k8s.io/allow-port-from-namespace created
[root@k8s-master ~]# 
[root@k8s-master ~]# kubectl get networkpolicies.networking.k8s.io -A
NAMESPACE          NAME                        POD-SELECTOR     AGE
calico-apiserver   allow-apiserver             apiserver=true   46h
echo               allow-port-from-namespace   <none>           2m16s
[root@k8s-master ~]#