3 ms·
Can someone enlighten me on this: if Authorization policies (which pods can communicate with which services) was built in kube-proxy, wouldn't it solve the use
by never_inline 3y ago
Can someone enlighten me on this: if Authorization policies (which pods can communicate with which services) was built in kube-proxy, wouldn't it solve the use case for a large percent of service mesh deployments?
- gotbeans 3y agoKube proxy works configuring ip tables (oversimplified) and its scope is limitted to l4. It doesn't operate at L7.
- adhamsalama 3y agoIsn't that what k8s network policies do?
- never_inline 3y agoThe support varies by CNI so I wouldn't call it "built-in". But yeah I forgot this existed.
- adhamsalama 3y agoIsn't that what k8s network policies do