TGViewer
Kubesploit Kubesploit @kubesploit · 2.13K subscribers
Post #722 317

Forwarded from KubeFM

Network Policy usage is inverted.

It's easier to list the services that you want to connect to, but Network Policy forces you to list all clients that can connect to your pod.

How would you even know that another team plans to connect your apps?

But if Network Policy is not the right tool, then what should you use?

In this KubeFM podcast, you will explore:

- How Network Policies are not as bad as you might think, but they are low-level APIs that are not always practical to use directly.
- Intent-based Access Control (IBAC) as a higher-level abstraction to describe your network segmentation requirements.
- How you can use IBAC to generate Network Policies, Istio Authorization Policies, AWS IAM & Roles, and more.

Watch it here: https://kube.fm/network-policies-ori

Listen on:

- Apple Podcast https://kube.fm/apple
- Spotify https://kube.fm/spotify
- Amazon Music https://kube.fm/amazon
- Overcast https://kube.fm/overcast
- Pocket casts https://kube.fm/pocket-casts
- Deezer https://kube.fm/deezer
More from @kubesploit
  1. Oct 12, 2026This tutorial shows how to use helmsniff to render thousands of Helm charts and report ris…
  2. Oct 9, 2026This tutorial shows you how to secure Kubernetes with five Kyverno policies for resource l…
  3. Oct 9, 2026This case study shows how a hidden iptables-legacy NAT rule added by Tailscale changed sou…
  4. Oct 9, 2026LearnKube Day includes ten five-minute lightning talks from Kubernetes practitioners shari…
  5. Oct 8, 2026This article explains how to keep public EKS load balancer protected with AWS WAF, Shield…
  6. Oct 7, 2026This tutorial teaches how to secure Kubernetes AI platforms with RBAC, NetworkPolicy, secr…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →