cruise-automation / k-rail

Kubernetes security tool for policy enforcement
Apache License 2.0
444 stars 55 forks source link

New: Add policy for Service type LoadBalancer #65

Closed bvandewalle closed 4 years ago

bvandewalle commented 4 years ago

This PR adds a new policy for services type LoadBalancers

At least in Google Cloud, a LoadBalancer is created as a public Load balancer by default but as a private one if there is a specific annotation as for example:

"cloud.google.com/load-balancer-type": "Internal"

This policy will only allow the load-balancer if it got specific annotations. The allowed set of annotations is given as a config to the policy