From the course: OpenShift Essential Training: Container Orchestration and Deployment
Unlock this course with a free trial
Join today to access over 24,900 courses taught by industry experts.
Network policies - OpenShift Tutorial
From the course: OpenShift Essential Training: Container Orchestration and Deployment
Network policies
- [Instructor] Ever wondered how to control traffic between pods in OpenShift? In this video, we are diving into a crucial security topic, network policies. Imagine if every room in your office had no doors, and anyone could walk in and take whatever they wanted from any room. That's how an OpenShift cluster works by default, where all pods can talk to each other with no limitation whatsoever. But what if you need a little bit of control? That's where network policies come in. OpenShift clusters start with a default allow all policy, meaning any pod can talk to any other pod. This can be quite risky in environments where sensitive data is present. By using network policies, we can granularly manage which pods can communicate with others. This also helps you reduce attack surface through isolation, ensuring that if one pod gets compromised, the attack will not spread further. Network policies work based on labels. They decide who can talk to whom based on those labels. Through labels…