gke-network-policy-demo

(★ 101)

This guide demonstrates how to improve the security of your Kubernetes Engine by applying fine-grained restrictions to network communication. You will provision a simple HTTP server and two client pods in a Kubernetes Engine cluster, then use a Network Policy restrict connections from client pods.

File Explorer

Download Latest Version (.zip)

- architecture.png
- terraform_fingerprint_error.png
- - hello-client.yaml
  - hello-server.yaml
- network-policy-namespaced.yaml
- network-policy.yaml
- bastion.tf
- firewall.tf
- main.tf
- network.tf
- provider.tf
- variables.tf
- versions.tf
- - boilerplate.bazel.txt
  - boilerplate.BUILD.txt
  - boilerplate.bzl.txt
  - boilerplate.css.txt
  - boilerplate.Dockerfile.txt
  - boilerplate.go.preamble
  - boilerplate.go.txt
  - boilerplate.html.preamble
  - boilerplate.html.txt
  - boilerplate.java.txt
  - boilerplate.js.txt
  - boilerplate.Makefile.txt
  - boilerplate.py.preamble
  - boilerplate.py.txt
  - boilerplate.scss.txt
  - boilerplate.sh.preamble
  - boilerplate.sh.txt
  - boilerplate.tf.txt
  - boilerplate.ts.txt
  - boilerplate.WORKSPACE.txt
  - boilerplate.xml.preamble
  - boilerplate.xml.txt
  - boilerplate.yaml.txt
- make.sh
- verify_boilerplate.py
.gitignore
common.sh
CONTRIBUTING.md
create.sh
enable-apis.sh
generate-tfvars.sh
Jenkinsfile
LICENSE
Makefile
OWNERS
README-QWIKLABS.md
README.md
setup_manifests.sh
teardown.sh
validate.sh

# Installation Guide

1. Get the code

git clone https://github.com/GoogleCloudPlatform/gke-network-policy-demo

Downloads the entire project code from GitHub to your computer.

cd gke-network-policy-demo

Moves into the project folder you just downloaded.

2. Make

Medium Recommended

Prerequisites

Git Needed to download the project code from GitHub.
Make Usually pre-installed on Linux/macOS. On Windows, install separately (e.g. via MSYS2 or WSL).

make setup-project

Compiles the code based on the generated build configuration to produce an executable.

make tf-apply

Compiles the code based on the generated build configuration to produce an executable.

make teardown

Compiles the code based on the generated build configuration to produce an executable.

✅ If it finishes without errors, it worked. Try running the generated executable directly.

Pulled directly from this repo's README.