Network Policy

db-policy.yaml

apiVersion: networking.k8s.io/v1

kind: NetworkPolicy

metadata:
  name: db 

spec:
  podSelector:
    matchLabels:
      name: db

  policyTypes:
    - Ingress

  ingress:
    - from:
        - ipBlock:
            cidr: 172.17.0.0/16
            except:
              - 172.17.1.0/24

        - namespaceSelector:
            matchLabels:
              name: dev
          podSelector:
            matchLabels:
              name: backend

      ports:
        - protocol: TCP
          port: 3306