- Lab
- Cloud
- Security
Network Policy with Calico
This lab covers the Kubernetes feature of Network Policy. The lab utilizes the `kops` installer to create a cluster using the Calico network overlay. The student is guided through the process of first creating a network policy that prohibits pod access, followed by another policy that grants pod access to certain clients and a named server.
Path Info
Table of Contents
-
Challenge
Create the Kubernetes Cluster
You'll start by creating the cluster for the lab. (For specific commands, see the Project Guide and the videos.)
-
Challenge
Configure the Required Namespace
You'll next create the namespace.
-
Challenge
Create the Demo Pods
You'll create the pods within the namespace, and test the web server.
-
Challenge
Enable Isolation
You'll enable isolation.
-
Challenge
Test Isolation
With isolation enabled, you'll test that in fact you cannot access the web server.
-
Challenge
Allow Restricted Access Using a Network Policy
You'll now allow restricted access.
-
Challenge
Verify Access to nginx from the access Pod
From within a pod, you'll ensure you can access the web server.
-
Challenge
Verify That Access to nginx Is Not Allowed from Another Pod
And, you'll then test that from another pod you cannot access the web server.
-
Challenge
Delete the Namespace to Clean Up
Finally, you'll clean things up.
What's a lab?
Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Guided walkthrough
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.