[따배쿠 CKA]30.Network Policy

작업 클러스터: hk8s
Create a new NetworkPolicy named allow-port-from-namespace in the exiting namespace devops.

Ensure that the new NetworkPolicy allow pods in namespace migops to connect to port 80 of Pods in namespace devops.

kubectl get namespaces migops --show-labels 

 : 강의에 의하면 labels에는 team=migops

kubectl get namespace devops --show-labels

 : 강의에 의하면 labels에는 team=devops

k get pod -n devops --show-labels

NAME       LABELS

web           app=web

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-port-from-namespace
  namespace: devops
spec:
  podSelector:
    matchLabels:
      app: web
  policyTypes:
    - Ingress
  ingress:
    - from:
        - namespaceSelector:
            matchLabels:
              team: migops
        - podSelector: {}
      ports:
        - protocol: TCP
          port: 80