If you're building and deploying cloud-native applications and microservices, then Kubernetes is the must-have platform. Kubernetes provides superior container-orchestration, deployment, scaling, and management. When it comes to securing application traffic within Kubernetes, consider using Network Policies.
A Network Policy resource can be implemented and deployed to enforce layer-3 segmentation of inter-pod network traffic. Network Policies crafted with layer-7 rulesets can also be achieved albeit through the use and deployment of a custom CNI implementation - such as that provided by Cilium.
This lab is designed to show you how to install and setup Kubernetes layer-7 Network Policies using Cilium. You will be walked through the process of deploying a sample Star Wars-themed API. You'll then learn how to secure inbound application traffic to the API by creating and deploying a layer-7 network policy.
Upon completion of this lab, you will be able to:
You should:
This lab will start with the following AWS resources provisioned automatically for you:
To achieve the lab end state, you will be walked through the process of:
20th August, 2020 - Fixed an issue preventing network policy from working
11th August, 2020 - Fixed an issue preventing Kubernetes from starting
Jeremy is a Content Lead Architect and DevOps SME here at Cloud Academy where he specializes in developing DevOps technical training documentation.
He has a strong background in software engineering, and has been coding with various languages, frameworks, and systems for the past 25+ years. In recent times, Jeremy has been focused on DevOps, Cloud (AWS, Azure, GCP), Security, Kubernetes, and Machine Learning.
Jeremy holds professional certifications for AWS, Azure, GCP, Terraform, Kubernetes (CKA, CKAD, CKS).