-
Epic
-
Resolution: Done
-
Undefined
-
None
-
None
-
None
-
None
-
Evaluate compliance with OpenShift Network Policies initiative
-
None
-
0% To Do, 0% In Progress, 100% Done
-
False
-
-
False
-
Not Selected
-
None
-
None
Network Observability needs to evaluate the need the for network policies/admin network policies in our namespaces to comply with the OpenShift initiative to have namespaces restrict ingress/egress/inter-cluster traffic in a reasonable way. The initial goal is to have basic restriction which may be loose and then to tighten the policies based on feedback and real-world experience.
See: https://docs.google.com/document/d/1z9MEZAIZNpdPZV_NWVLGM1tMPFhgwW4q6BpJSgbOdJg/edit
Additional notes:
- Netobserv already has a network policy install available via
NETOBSERV-1377... - ...but it's opt-in. We should make it "secured by default" hence opt-out.
- Also it doesn't cover egress, which we had troubles to implement. Let's try harder.