search

projectcalico / calico

Cloud native networking and network security
https://docs.tigera.io/calico/latest/about/
Apache License 2.0
5.99k stars 1.33k forks source link

Support Admin Network Policy API from upstream K8s #7578

Open tssurya opened 1 year ago

tssurya commented 1 year ago

Upstream sig-network-policy-api working group has implemented the https://github.com/kubernetes/enhancements/issues/2091 admin network policy API. The API lives here: https://github.com/kubernetes-sigs/network-policy-api We have two APIs

These cannot be overridden by the network policies that are created on a namespace scoped level. Wondering if Calico developer's have taken a look at the new API and if its possible for converting that into the current mechanisms calico uses? API is in v1alpha1 version and are hoping to move to beta end of this year. Would appreciate feedback!

Josh-Tigera commented 1 year ago

This is on our roadmap and we have an open design-doc but we haven't started implementing this in earnest yet.

tuxtof commented 2 months ago

Hello @Josh-Tigera any update ? ETA ? about this support

Josh-Tigera commented 2 months ago

This is an implementation in progress, but I'm not sure if it has been schedule for a release yet. @mazdakn is leading the effort and may know more.

mazdakn commented 2 months ago

@tuxtof we are working on it atm, and the feature hopefully will be released in the next Calico version later this year.

mazdakn commented 1 month ago

AdminNetworkPolicy implementation: https://github.com/projectcalico/calico/pull/9206

caseydavenport commented 3 weeks ago

With that PR merged, and with v3.29 on the horizon, I think we can close this issue for now.

Once v3.29 is released, any gaps / bugs can be raised as their own issues. Thanks all!

caseydavenport commented 3 weeks ago

I'm going to re-open this as @mazdakn pointed out that v3.29 will have AdminNetworkPolicy but not yet BaselineNetworkPolicy, which is scheduled for v3.30!

remram44 commented 3 weeks ago

You mean v3.30?