implementing-network-policies-for-kubernetes - Implementing Network Policies for Kubernetes
Enforce Pod-level network segmentation using Kubernetes NetworkPolicy to restrict lateral movement and implement zero trust.
Tags
Updated: 2026-09-20Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Verify CNI plugin support
- Enforce default deny policy
- Allow DNS egress traffic
- Configure application network policies
- Configure cross-namespace policies
- Restrict egress traffic
- Block cloud metadata endpoints
Inputs
- Kubernetes cluster
- CNI plugin
- kubectl CLI
- Pod labels and selectors
Outputs
- NetworkPolicy YAML manifests
- Configured Kubernetes NetworkPolicy resources
Requirements
- Kubernetes cluster 1.20+
- NetworkPolicy-supported CNI plugin
- kubectl CLI with admin permissions