KubeFM cover image

KubeFM

Network Policies are the wrong abstraction, with Ori Shoshan

Dec 12, 2023
01:07:22

Network Policy usage is inverted.

It's easier to list the services that you want to connect to, but Network Policy forces you to list all clients that can connect to your pod.

How would you even know that another team plans to connect your apps?

But if Network Policy is not the right tool, then what should you use?

In this KubeFM podcast, you will explore:

  • How Network Policies are not as bad as you might think, but they are low-level APIs that are not always practical to use directly.

  • Intent-based Access Control (IBAC) as a higher-level abstraction to describe your network segmentation requirements.

  • How you can use IBAC to generate Network Policies, Istio Authorization Policies, AWS IAM & Roles, and more.

More info

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
App store bannerPlay store banner