tencent cloud

masukan

Network Policy

Terakhir diperbarui:2024-02-01 10:16:11

    Overview

    Add-on description

    Network Policy is a resource provided by Kubernetes for defining pod-based network isolation policies. It describes whether a group of pods can communicate with other groups of pods and other network entities. This add-on provides a controller for implementing resources of this type. You can use this add-on if you want to control the network traffic of specific applications at the IP address or port layer (layer 3 or layer 4 of OSI).

    Kubernetes objects deployed in a cluster

    Kubernetes Object Name
    Type
    Requested Resource
    Namespace
    networkpolicy
    DaemonSet
    Each instance: CPU: 250m, Memory: 250Mi
    kube-system
    networkpolicy
    ClusterRole
    -
    kube-system
    networkpolicy
    ClusterRoleBinding
    -
    kube-system
    networkpolicy
    ServiceAccount
    -
    kube-system

    Component Permission Description

    Permission Description

    The permission of this component is the minimal dependency required for the current feature to operate.
    Access to the namespaces, pods, services, nodes, endpoints, and networkpolicies within the cluster is required, thus necessitating list/get/watch permission.

    Permission Definition

    kind: ClusterRole
    apiVersion: rbac.authorization.k8s.io/v1
    metadata:
    name: networkpolicy
    rules:
    - apiGroups:
    - ""
    resources:
    - namespaces
    - pods
    - services
    - nodes
    - endpoints
    verbs:
    - list
    - get
    - watch
    - apiGroups:
    - "networking.k8s.io"
    resources:
    - networkpolicies
    verbs:
    - list
    - get
    - watch
    - apiGroups:
    - extensions
    resources:
    - networkpolicies
    verbs:
    - get
    - list
    - watch

    Directions

    1. Log in to the TKE console and select Cluster in the left sidebar.
    2. On the “Cluster Management page, click the ID of the target cluster to go to the cluster details page.
    3. In the left sidebar, click Add-on Management to go to the Add-on List page.
    4. On the Add-on List page, click Create and select NetworkPolicy in the pop-up Create Add-on window. For details of NetworkPolicy configuration, see Best Practices for Network Policy.
    5. Click Done.
    Hubungi Kami

    Hubungi tim penjualan atau penasihat bisnis kami untuk membantu bisnis Anda.

    Dukungan Teknis

    Buka tiket jika Anda mencari bantuan lebih lanjut. Tiket kami tersedia 7x24.

    Dukungan Telepon 7x24