cross namespace network traffic allow plugin #1399

SuyogShinde942 · 2025-02-24T04:40:56Z

Implemented cross namespace allow/ deny network traffic plugin
Updated the readme for implementation of allow and deny namespace traffic.

devdattakulkarni · 2025-02-24T11:00:05Z

plugins/network_traffic.py

+                        deny_namespace in expr.get("values", [])
+                        for expr in expressions
+                    )
+                    if not remove_entry:


This is a bit involved logic. Let's test it with three namespaces (hs1, hs2, hs3). Start with allowing network traffic between and . This should lead to the Network policy of hs1 to contain two entries [hs2, hs3]. Then deny the network traffic between hs1 and hs3. If the implementation is correct, the NetworkPolicy object for hs1 should only hold [hs2].

This is already tested at my end

plugins/kubectl-kubeplus-commands

plugins/network_traffic.py

examples/getting-started.md

devdattakulkarni · 2025-02-24T11:12:51Z

@SuyogShinde942 I have added some comments.

…tion

examples/getting-started.md

devdattakulkarni · 2025-03-04T15:39:43Z

@SuyogShinde942 I have one more suggestion related to documentation.

…tion

SuyogShinde942 and others added 8 commits January 26, 2025 12:24

resolve: replicas issue and add network testing section

bf5c3c1

network isolation testing - provider.conf

e23d1f0

resolve: replicas issue and add network testing section

82d2e2d

consumerui ui dockerfile optimization

990e28e

Merge branch 'cloud-ark:master' into master

138bcee

cross namespace network traffic allow plugin

81d6e72

Merge branch 'cloud-ark:master' into master

d1b6e79

cross namespace network traffic allow plugin

4e1a59d