How to secure your Kubernetes pods using GitLab Container Network Security
Oct 23, 2020Fernando Diaz

Summary
This post introduces GitLab's Container Network Security feature, which leverages Cilium as a managed application to implement Kubernetes Network Policies. It explains the concepts of Network Policies, their selectors (podSelector, namespaceSelector, ipBlock), and provides an example YAML configuration. It details the installation process of Cilium as a GitLab-managed application and highlights the Threat Monitoring dashboard powered by Hubble for visualizing packet flow metrics and managing Network Policies through an intuitive UI. The post also links to related security resources.
More from the Security Control Framework trail
- Track organization-wide security risk in one dashboard
- Dependency Firewall: Block risky packages before the build
- Two front doors: Module-level access in a Django GRC app
- How GitLab tracks vulnerabilities through refactors and reformatting
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting