Implement Network Policies

Guide found here.

Notes

• Prerequisite knowledge of how different parts of RF communicate with each other / other parts of BB will be necessary for implementation

Definition of Done

• Default deny policy for inter-package communication is implemented
• Default allow policy for intra-package communication is implemented
• Specific policies for other packages are added, i.e. SSO, database, etc.
• Only necessary connections are allowed but RF still fully functions

added Big Bang Third Party RapidFort labels

marked this issue as related to #1 (closed)

added 1 deleted label

added statusblocked label and removed 1 deleted label

removed statusblocked label

changed milestone to %4/15

changed milestone to %4/22

We should be able to get the bulk of networkpolicies implemented given the current state of the package.

Following standard practices for Big Bang netpols:

• default deny all
• allow all within namespace
• all ingress from gateway/virtualservice
• any other standard netpols

I would exclude a monitoring netpol for now, as we are unsure if that integration will be required and valuable yet.

created branch 11-implement-network-policies to address this issue

mentioned in merge request !18 (merged)

added statusdoing label

assigned to @jmcclintock

mentioned in commit 8a6bb711

closed with merge request !18 (merged)

mentioned in commit 704ab80b