networkpolicy

Documentation

Index

• func ForApp(req router.Request, resp router.Response) error
• func ForBuilder(req router.Request, resp router.Response) error
• func ForIngress(req router.Request, resp router.Response) error
• func ForService(req router.Request, resp router.Response) error

Functions

func ForApp

func ForApp(req router.Request, resp router.Response) error

ForApp creates a single Kubernetes NetworkPolicy that restricts incoming network traffic to all pods in an app, so that they cannot be reached by pods from other projects.

func ForBuilder

func ForBuilder(req router.Request, resp router.Response) error

ForBuilder creates a Kubernetes NetworkPolicy to allow traffic to the buildkitd pods from the acorn-api only. It also only allows outgoing traffic to CoreDNS, the Acorn registry, and the Internet.

func ForIngress

func ForIngress(req router.Request, resp router.Response) error

ForIngress creates Kubernetes NetworkPolicies to allow traffic to exposed HTTP ports on Acorn apps from the ingress controller. If the ingress controller namespace is not defined, traffic from all namespaces will be allowed instead.

func ForService

func ForService(req router.Request, resp router.Response) error

ForService creates a Kubernetes NetworkPolicy to allow traffic to published TCP/UDP ports on Acorn apps that are exposed with LoadBalancer Services. This NetworkPolicy will allow traffic from all IP addresses.