如何禁用kubernetes中2个不同命名空间中的Pod之间的交叉通信 [英] How to disable cross communicate between pods which are in 2 different namespaces in kubernetes

问题描述

我有2个命名空间和1个pod，每个中运行1个服务.

I have 2 namespaces and 1 pod, 1 service running in each.

示例

Namespace 1: default
Pod: pod1
Service: pod1service

Namespace 2: test
Pod: pod1
Service: pod1service

我实际上可以从namespace2容器向namespace1容器发出HTTP请求.

I can actually make HTTP request from namespace2 pod to namespace1 pod.

curl -H "Content-Type: application/json" -X GET http://pod1service.default.svc.cluster.local/some/api

如何禁用2个差异名称空间之间的通信?

How do i disable communication between 2 differet namespaces?

推荐答案

您需要配置网络插件

You need to configure network policies. For that to work you also need to use a network addon that supports policies.

这篇关于如何禁用kubernetes中2个不同命名空间中的Pod之间的交叉通信的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！