Threat Modeling Framework
How to secure your Kubernetes pods using GitLab Container Network Security

How to secure your Kubernetes pods using GitLab Container Network Security

10/23/2020 · Fernando Diaz

What this post added

This post introduces and details the implementation of Network Policies using Cilium as a GitLab-managed application. It explains how Network Policies act as a firewall for Kubernetes cluster networks, controlling pod communication. The post covers the configuration of ingress and egress traffic using various selectors (podSelector, namespaceSelector, ipBlock) and provides an example YAML for a Network Policy. It also describes the installation process of Cilium as a managed application and highlights the Threat Monitoring dashboard, which visualizes packet flow metrics (inbound/outbound packets, dropped packets) and allows for the creation and editing of Network Policies through an intuitive UI. The post also links to other relevant GitLab security resources.

Read the original post ↗