aporeto-microservice-policies

microservicepolicies.txt

$ cat restrict-microservices-all.yml 
APIVersion: 0
data:
  networkaccesspolicies:
    - action: Reject
      logsEnabled: true
      fallback: true
      name: reject-microservice-fallback
      object:
        - - $namespace=/aporeto/gigaom/mct/gcp/*
      propagate: true
      subject:
        - - $namespace=/aporeto/gigaom/mct/azure/*
          - $type=Docker
identities:
  - networkaccesspolicy
label: reject-microservice-fallback
$ apoctl api import --file restrict-microservices-all.yml -n /aporeto/gigaom/mct
successfully imported data in /aporeto/gigaom/mct
$ cat allow-microservices-http.yml 
APIVersion: 0
data:
  networkaccesspolicies:
    - logsEnabled: true
      name: allow-microservices-http
      object:
        - - $namespace=/aporeto/gigaom/mct/gcp/*
      ports:
        - tcp/80
      propagate: true
      subject:
        - - $namespace=/aporeto/gigaom/mct/azure/*
          - $type=Docker
identities:
  - networkaccesspolicy
label: allow-microservices-http
$ apoctl api import --file allow-microservices-http.yml -n /aporeto/gigaom/mct
successfully imported data in /aporeto/gigaom/mct