Skip to content

cross namespace network traffic allow plugin #1399

Merged
devdattakulkarni merged 11 commits intocloud-ark:masterfrom
SuyogShinde942:master
Mar 9, 2025
Merged

cross namespace network traffic allow plugin #1399
devdattakulkarni merged 11 commits intocloud-ark:masterfrom
SuyogShinde942:master

Conversation

@SuyogShinde942
Copy link
Copy Markdown
Contributor

  1. Implemented cross namespace allow/ deny network traffic plugin
  2. Updated the readme for implementation of allow and deny namespace traffic.

deny_namespace in expr.get("values", [])
for expr in expressions
)
if not remove_entry:
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a bit involved logic. Let's test it with three namespaces (hs1, hs2, hs3). Start with allowing network traffic between and . This should lead to the Network policy of hs1 to contain two entries [hs2, hs3]. Then deny the network traffic between hs1 and hs3. If the implementation is correct, the NetworkPolicy object for hs1 should only hold [hs2].

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is already tested at my end

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok.

@devdattakulkarni
Copy link
Copy Markdown
Contributor

@SuyogShinde942 I have added some comments.

@devdattakulkarni
Copy link
Copy Markdown
Contributor

@SuyogShinde942 I have one more suggestion related to documentation.

@devdattakulkarni devdattakulkarni merged commit 9c156ef into cloud-ark:master Mar 9, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants