CIDR-based deny security policies #7111
Description
Proposal / RFE
Is your feature request related to a problem?
I'd like to restrict all pods in my Kubernetes cluster from accessing sensitive parts of the corporate network (CIDR ranges) without resorting to a hardware firewall.
Describe the solution you'd like
A cluster admin can define a set of rules that apply to all pod egress. NetworkPolicy/CiliumNetworkPolicy objects controlled by users could further restrict this.
Metadata
Metadata
Assignees
Labels
Impacts the kubernetes API, or kubernetes -> cilium internals translation layers.This was reported by a user in the Cilium community, eg via Slack.This introduces new functionality.These issues are not marked stale by our issue bot.Impacts whether traffic is allowed or denied based on user-defined policies.