https://jira.akraino.org This file is an XML representation of an issue en-us 9.4.5 940005 11-04-2023 https://jira.akraino.org/browse/ICN-213 Integrated Cloud Native NFV <p>Investigate Network Policy Gap for OpenNESS integration</p> ICN-213

OpenNESS gap for Network Policy

Task High Done Done Chenjie Xu Huifeng Le Wed, 11 Dec 2019 04:43:54 +0000 Thu, 16 Jul 2020 00:22:47 +0000 Thu, 9 Jan 2020 03:31:35 +0000 0 2 <p>The gap analysis has been added to the Akraino ICN OpenNESS wiki page as following:</p> <p><a href="https://wiki.akraino.org/display/AK/OpenNESS+19.12+Investigation#OpenNESS19.12Investigation-NetworkPolicy" class="external-link" target="_blank" rel="nofollow noopener">https://wiki.akraino.org/display/AK/OpenNESS+19.12+Investigation#OpenNESS19.12Investigation-NetworkPolicy</a></p> <p>1. To deploy a Network Policy allowing ingress traffic on port 5000 (tcp and udp) from 192.168.1.0/24 network to OpenVINO consumer application pod, create the following specification file for this Network Policy:</p> <p>apiVersion: networking.k8s.io/v1<br/> kind: NetworkPolicy<br/> metadata:<br/>   name: openvino-policy<br/>   namespace: default<br/> spec:<br/>   podSelector:<br/>     matchLabels:<br/>       name: openvino-cons-app<br/>   policyTypes:<br/>   - Ingress<br/>   ingress:<br/>   - from:<br/>     - ipBlock:<br/>           cidr: 192.168.1.0/24<br/>     ports:<br/>     - protocol: TCP<br/>       port: 5000<br/>     - protocol: UDP<br/>        port: 5000</p> <p>2. Create the Network Policy:<br/> kubectl apply -f network_policy.yml</p> <p>By default, in a Network Edge environment, all ingress traffic is blocked (services running inside of deployed applications are not reachable) and all egress traffic is enabled (pods are able to reach the internet). The following NetworkPolicy definition is used:</p> <p>apiVersion: networking.k8s.io/v1 <br/> metadata: <br/>   name: block-all-ingress <br/>   namespace: default # selects default namespace <br/> spec: <br/>   podSelector: {} # matches all the pods in the default namespace <br/>   policyTypes: <br/>   - Ingress <br/>   ingress: [] # no rules allowing ingress traffic = ingress blocked</p> Development Epic Link ICN-191 Rank 0|i002x0: