Fork me on GitHub
Pods with label - role=db in namespace - project
:3306 TCP
Out
IPs - 172.17.0.0/16, except 172.17.1.0/24
Out
Pods in namespace with labels project=project

Pods:

nginx

app

redis

Out
Pods with label role=app in namespace - project

Pods:

app

Out
IPs - 10.0.0.0/24
:5978 TCP
apiVersion:·networking.k8s.io/v1¬
kind:·NetworkPolicy¬
metadata:¬
··name:·test-network-policy¬
··namespace:·project¬
spec:¬
··podSelector:¬
····matchLabels:¬
······role:·db¬
··policyTypes:¬
··-·Ingress¬
··-·Egress¬
··ingress:¬
··-·from:¬
····-·ipBlock:¬
········cidr:·172.17.0.0/16¬
········except:¬
········-·172.17.1.0/24¬
····-·namespaceSelector:¬
········matchLabels:¬
··········project:·project¬
····-·podSelector:¬
········matchLabels:¬
··········role:·app¬
····ports:¬
····-·protocol:·TCP¬
······port:·3306¬
··egress:¬
··-·to:¬
····-·ipBlock:¬
········cidr:·10.0.0.0/24¬
····ports:¬
····-·protocol:·TCP¬
······port:·5978¬
הההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההההה
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX