From 249d446ef2a863ecd6e427cfb53dfa484b4343c5 Mon Sep 17 00:00:00 2001 From: Jerome Petazzoni Date: Sat, 27 Feb 2021 19:48:38 +0100 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=91=20Add=20Cilium=20and=20Tufin=20web?= =?UTF-8?q?=20tools=20to=20generate=20and=20view=20network=20policies?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- slides/k8s/netpol.md | 32 ++++++++++++++++++++------------ 1 file changed, 20 insertions(+), 12 deletions(-) diff --git a/slides/k8s/netpol.md b/slides/k8s/netpol.md index f92148cf..0ee5de8c 100644 --- a/slides/k8s/netpol.md +++ b/slides/k8s/netpol.md @@ -427,26 +427,34 @@ troubleshoot easily, without having to poke holes in our firewall. --- -## Further resources +## Tools and resources -- As always, the [Kubernetes documentation](https://kubernetes.io/docs/concepts/services-networking/network-policies/) is a good starting point +- [Cilium Network Policy Editor](https://editor.cilium.io/) -- The API documentation has a lot of detail about the format of various objects: +- [Tufin Network Policy Viewer](https://orca.tufin.io/netpol/) - - [NetworkPolicy](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#networkpolicy-v1-networking-k8s-io) - - - [NetworkPolicySpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#networkpolicyspec-v1-networking-k8s-io) - - - [NetworkPolicyIngressRule](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#networkpolicyingressrule-v1-networking-k8s-io) - - - etc. - -- And two resources by [Ahmet Alp Balkan](https://ahmet.im/): +- Two resources by [Ahmet Alp Balkan](https://ahmet.im/): - a [very good talk about network policies](https://www.youtube.com/watch?list=PLj6h78yzYM2P-3-xqvmWaZbbI1sW-ulZb&v=3gGpMmYeEO8) at KubeCon North America 2017 - a repository of [ready-to-use recipes](https://github.com/ahmetb/kubernetes-network-policy-recipes) for network policies +--- + +## Documentation + +- As always, the [Kubernetes documentation](https://kubernetes.io/docs/concepts/services-networking/network-policies/) is a good starting point + +- The API documentation has a lot of detail about the format of various objects: + + - [NetworkPolicy](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#networkpolicy-v1-networking-k8s-io) + + - [NetworkPolicySpec](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#networkpolicyspec-v1-networking-k8s-io) + + - [NetworkPolicyIngressRule](https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.20/#networkpolicyingressrule-v1-networking-k8s-io) + + - etc. + ??? :EN:- Isolating workloads with Network Policies