Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update page for in-cluster network communication #786

Open
OlleLarsson opened this issue Feb 8, 2024 · 2 comments
Open

Update page for in-cluster network communication #786

OlleLarsson opened this issue Feb 8, 2024 · 2 comments
Assignees
Labels
documentation Improvements or additions to documentation

Comments

@OlleLarsson
Copy link
Contributor

Describe the bug

We should update this page (?) with information about a list of weaknesses such as the cross-namespace forwarding exploit.

Screenshots

Additional context

@OlleLarsson OlleLarsson added the documentation Improvements or additions to documentation label Feb 8, 2024
@OlleLarsson
Copy link
Contributor Author

@cristiklein please add more as I didn't quite catch what more we wanted to add to the page 😅

@cristiklein
Copy link
Collaborator

@OlleLarsson A few more details:

Currently, the Network Model page condenses too many networking topics. I'm listing them from "inside to outside":

  1. How does Pod-to-Pod communication work inside the Workload Cluster?
  2. How to enforce network separation via NetworkPolicies?
  3. How does Service Discovery (i.e., DNS via Kubernetes Services) work inside the Workload Cluster?
  4. How to expose Pods outside the Workload Cluster (Ingress)?
  5. How to configure DNS when exposing Pods outside?
  6. How to add rate-limiting to Ingresses?
  7. How to add TLS encryption to Ingresses?

I believe that Application Developers would benefit from separating these topics on at least two pages. I propose 1-3 "inside" and 4-7 "outside".

The cross-namespace exploit topic fits perfectly in 2.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation
Projects
None yet
Development

No branches or pull requests

2 participants