An open-data team wants one NetworkPolicy object to restrict both i…

Question

An open-data team wants one NetworkPolicy object to restrict both inbound connections to selected Pods and outbound connections from those Pods. What must they configure?

Accepted Answer

Set policyTypes to include both Ingress and Egress and define the corresponding ingress and egress rule sections as needed. — One policy can guard both doors — list Ingress and Egress in policyTypes and fill in both rule sections.

Answer

Create two Deployments — one for ingress filtering and one for egress filtering — linked by an ExternalName Service.

Answer

Annotate the Pod with dual-stack=true; policyTypes is ignored when IPv6 is enabled.

Answer

Use only ingress rules; egress is always implied as deny-all whenever ingress is present.

An open-data team wants one NetworkPolicy object to restrict both inbound connections to selected Pods and outbound connections from those Pods. What must they configure?

Short Explanation

Full Explanation