network-policy

Cloud native networking and network security

Tools for understanding, measuring, and applying network policies effectively in kubernetes

Network Policy Agent is a daemonset that is responsible for enforcing configured network policies on the cluster.

Demos for several kubernetes security features

Community curated list of System and Network policy templates for the KubeArmor and Cilium

View your Kubernetes NetworkPolicy manifests as graph in Lens IDE

Claude Code-style declarative permission rules for DeepSeek Harness: ordered allow/deny/ask rules with tool-name, argument (glob/regex), and workspace-path matching on the tools/pre-execute waterfall, session-log audit, and HMR reload.

Content for the "Intelligent Cloud Bootcamp: Advanced Kubernetes" workshop

A lightweight operator to manage FQDN based egress network policies

eBPF egress firewall for Kubernetes — see and enforce what every pod talks to (domains, HTTP paths, headers, IPs), attributed per pod, enforced in the kernel. No sidecar, no proxy, no TLS MITM.

Kubesonde: network policy testing and verification in K8s

A controller(CES) for controlling container egress traffic. Working with F5 AFM.

This workshop shows how to create Network Policies for Pods in Kubernetes.

An application container validation runtime for pre-Kubernetes deployment workflows

A tool to visualize network policy information from the Kubernetes Master API

Helm-ET is a network policy generator for third-party Helm charts

OWASP x Project Calico x Okta Container and Kubernetes Security Policy Design

Kubernetes operator: auto-generate NetworkPolicy from traffic patterns (learning/enforcing modes)

CNCF Project Focus Episode 3. Cilium and eBPF: kube-proxy replacement, kernel-speed network policy, and the iptables misconception.

Cross-platform zero-trust microsegmentation engine enforcing network policies at the kernel level (eBPF, WFP, pf) with etcd-backed policy distribution and hybrid cloud security orchestration (AWS/GCP/Azure).