Skip to content

[Request] NetworkPolicies on Services #205

@andrewazores

Description

@andrewazores

Describe the feature

Only the main Cryostat Deployment (Cryostat and the Grafana dashboard) are intended to be accessible widely, so the auth proxy instance placed in front of these has a Service and a Route.

The database, storage, and optional report generation Deployments are pieces of infrastructure supporting the Cryostat Deployment and are not intended to accept traffic from any other origins. These should have NetworkPolicies to reject other traffic on clusters that support these policies, for an extra layer of protection.

Anything other information?

No response

Metadata

Metadata

Labels

featNew feature or request

Type

No type

Projects

Status

In progress

Status

In progress

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions