Skip to content

Network Policy API Subgroup Blog

The Road to a More Scalable and Unified Network Policy API

The Admin and Baseline Network Policies (ANP and BANP) have been available in v1alpha1 for some time, with several open source implementations giving security enthusiasts a sneak peek into how they can experiment with and adopt them in real-world environments. In this blog, we’ll go through some of the new changes introduced in v1alpha2 and 🤞 the upcoming beta!

In particular, the sub-group has been addressing complexities in the existing two APIs, along with making terminology changes to better represent their functionality. A central part of this effort is rethinking how cluster-wide and namespace-level policies interact, ensuring the API evolves into a more consistent and powerful tool for Kubernetes users. To achieve this, the separate APIs are being unified into a single, modular, and extensible design.

Image

Keep in mind, that we always welcome volunteers to help accelerate this effort. If you’re interested, you can learn more about how to get involved here.

Getting started with the AdminNetworkPolicy API

AdminNetworkPolicy API has been an exciting new addition towards the Kubernetes networking space and is currently on its way towards beta. If you want to learn how to use the API and how it interoperates with the existing NetworkPolicy API, you've landed at the right place :) This blog post will take you through the ins-and-outs of the AdminNetworkPolicy objects, as well as providing some basic sample specs for typical use-cases that the API solves.