This repository is a demonstration of the functionalities of kubernetes network policies together with egress network policy (open vSwitch).

Kubernetes NetworkPolicy

Kubernetes Network Policies samples

Combination of Cilium Golang Envoy Filter and TCP tunnel to build Visual Studio Bridge To Kubernetes.

Kubernetes NetworkPolicy Examples

Network Policy tests scripts

Quickly provision and tear down a GKE cluster with Cilium enabled for working with Network Policy.

Produces a semantic diff between two network-connectivity configurations

Annotates a PR with connectivity map and connectivity diff comments, based on the repo's k8s NetworkPolicies

GitHub action to automatically synthesize K8s NetworkPolicies, based on analyzing the application's deployment YAML files.

Sync Consul registry to Calico GlobalNetworkSet

Control access to/from custom resources by their names with calico

Produces a set of network policies, given a json describing the connectivity in a given cluster

Domain-based egress networkpolicy, alternative to Calico DNS policy

Network observability for Kubernetes

A kubernetes controller running on bare-metal firewalls, creating nftables rules, configures suricata, collects network metrics

Kubernetes Network Policy Tutorial

A static code analyzer to generate network connection topology for micro-service applications

View your Kubernetes NetworkPolicy manifests as graph, online version available at https://artturik.github.io/network-policy-viewer