The gap analysis has been added to the Akraino ICN OpenNESS wiki page as following:

https://wiki.akraino.org/display/AK/OpenNESS+19.12+Investigation#OpenNESS19.12Investigation-NetworkPolicy

1. To deploy a Network Policy allowing ingress traffic on port 5000 (tcp and udp) from 192.168.1.0/24 network to OpenVINO consumer application pod, create the following specification file for this Network Policy:

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: openvino-policy
  namespace: default
spec:
  podSelector:
    matchLabels:
      name: openvino-cons-app
  policyTypes:
  - Ingress
  ingress:
  - from:
    - ipBlock:
          cidr: 192.168.1.0/24
    ports:
    - protocol: TCP
      port: 5000
    - protocol: UDP
       port: 5000

2. Create the Network Policy:
kubectl apply -f network_policy.yml

By default, in a Network Edge environment, all ingress traffic is blocked (services running inside of deployed applications are not reachable) and all egress traffic is enabled (pods are able to reach the internet). The following NetworkPolicy definition is used:

apiVersion: networking.k8s.io/v1
metadata:
  name: block-all-ingress
  namespace: default # selects default namespace
spec:
  podSelector: {} # matches all the pods in the default namespace
  policyTypes:
  - Ingress
  ingress: [] # no rules allowing ingress traffic = ingress blocked