2i2c-org / infrastructure

Infrastructure for configuring and deploying our community JupyterHubs.
https://infrastructure.2i2c.org
BSD 3-Clause "New" or "Revised" License
108 stars 65 forks source link

Enable networkpolicy enforcement for nasa-veda hub #4652

Open yuvipanda opened 3 months ago

yuvipanda commented 3 months ago

With https://github.com/2i2c-org/infrastructure/issues/4576, the nasa-veda cluster is a multi-tenant cluster with a public access component. We should enable network policy enforcement here.

Ref https://github.com/NASA-IMPACT/veda-jupyterhub/issues/47 which tracks the overall issue.

Definition of done

Timeline

This needs to be fully complete before end of september, as that's the quarterly cadence for the VEDA project

consideRatio commented 3 months ago

Related tech issue in eksctl: https://github.com/eksctl-io/eksctl/issues/7770, which is relevant following AWS announcement: https://aws.amazon.com/blogs/containers/amazon-vpc-cni-now-supports-kubernetes-network-policies/.

yuvipanda commented 3 months ago

I opened https://github.com/2i2c-org/infrastructure/issues/4653 to track refinement of this issue.