Network Policy Restrictions

kubectl run --namespace=np-demo nginx --replicas=2 --image=nginx

kind: NetworkPolicy
apiVersion: networking.k8s.io/v1
metadata:
  name: default-deny
  namespace: np-demo
spec:
  podSelector:
    matchLabels: {}

k expose --namespace=np-demo deployment nginx --port=80

kind: NetworkPolicy
apiVersion: networking.k8s.io/v1
metadata:
  name: access-nginx
  namespace: np-demo
spec:
  podSelector:
    matchLabels:
      run: nginx
  ingress:
    - from:
      - podSelector:
          matchLabels:
            run: allowed

k run --namespace=np-demo no-access --rm -ti --image busybox /bin/sh

wget -q --timeout=5 nginx -O -

 k run --namespace=policy-demo allowed --rm -ti --image busybox /bin/sh