SAP-archive / karydia

Kubernetes Security Walnut

Other

77 stars 10 forks source link

Add NetworkPolicy Reconcile #56

Closed marwinski closed 5 years ago

marwinski commented 5 years ago

The network policies that are automatically applied to namespaces are currently not reconciled. This means that changes in the default network policy file are not reflected and changes made by a user to a particular namespace are not reverted.

CodeClinch commented 5 years ago

Scope

[x] Reconcile karydia network policies on namespace level ()
- [x] Changes (will be reset to default)
- [x] Delete (will be created again)
[x] namespaces can be excluded form the automatic network policy handling
[x] There shall be the possibility to specify a default network policy on namespace level. This will overwrite the karydia default.
[x] If a namespace is created the default network policy shall be applied.

Out of scope

Changes of the default karydia network policy file (currently karydia has to be restarted to get this changes. After restart the reconcile will begin)
Namespaces can only be excluded during start of karydia. It is not planed to extend the white list during runtime.