Adding network policies to enforce minimal connectivity

[zivnevo]

Automatically generated NetworkPolicies

[zivnevo]

✅Rule no-ftp is satisfied

✅Rule no-telnet is satisfied

✅Rule no-smtp is satisfied

✅Rule no-imap is satisfied

✅Rule require-label-to-access-payments-service is satisfied

All rules are satisfied

[zivnevo]

query	src_ns	src_pods	dst_ns	dst_pods	connection
, config: .
	[default]	[app in (checkoutservice,frontend,recommendationservice)]	[default]	[productcatalogservice]	TCP 3550
	[default]	[app in (checkoutservice,frontend)]	[default]	[shippingservice]	TCP 50051
	[default]	[frontend]	[default]	[checkoutservice]	TCP 5050
	[default]	[cartservice]	[default]	[redis-cart]	TCP 6379
	[default]	[app in (checkoutservice,frontend)]	[default]	[currencyservice]	TCP 7000
	[default]	[app in (checkoutservice,frontend)]	[default]	[cartservice]	TCP 7070
		ip block: 0.0.0.0/0	[default]	[frontend]	TCP 8080
		ip block: ::/0	[default]	[frontend]	TCP 8080
	[default]	[checkoutservice]	[default]	[emailservice]	TCP 8080
	[default]	[frontend]	[default]	[recommendationservice]	TCP 8080
	[default]	[loadgenerator]	[default]	[frontend]	TCP 8080
	[default]	[frontend]	[default]	[adservice]	TCP 9555

[zivnevo]

query	src_ns	src_pods	dst_ns	dst_pods	connection
Removed connections between persistent peers
	[default]	[*]	[default]	[productcatalogservice]	All but TCP 3550
	[default]	[recommendationservice]	[default]	[*]	All but TCP 3550
	[default]	[*]	[default]	[shippingservice]	All but TCP 50051
	[default]	[*]	[default]	[checkoutservice]	All but TCP 5050
	[default]	[cartservice]	[default]	[*]	All but TCP 6379
	[default]	[*]	[default]	[currencyservice]	All but TCP 7000
	[default]	[*]	[default]	[cartservice]	All but TCP 7070
	[default]	[*]	[default]	[app in (emailservice,recommendationservice)]	All but TCP 8080
	[default]	[loadgenerator]	[default]	[*]	All but TCP 8080
	[default]	[*]	[default]	[adservice]	All but TCP 9555
	[default]	[*]	[default]	[app in (loadgenerator,paymentservice)]	All connections
	[default]	[app not in (cartservice,checkoutservice,frontend,loadgenerator,recommendationservice)]	[default]	[*]	All connections
	[default]	[cartservice]	[default]	[app not in (cartservice,loadgenerator,paymentservice,redis-cart)]	All connections
	[default]	[checkoutservice]	[default]	[app in (adservice,frontend,recommendationservice,redis-cart)]	All connections
	[default]	[frontend]	[default]	[app in (emailservice,redis-cart)]	All connections
	[default]	[loadgenerator]	[default]	[app not in (frontend,loadgenerator,paymentservice)]	All connections
	[default]	[recommendationservice]	[default]	[app not in (loadgenerator,paymentservice,productcatalogservice,recommendationservice)]	All connections
Removed connections between persistent peers and ipBlocks
		ip block: 0.0.0.0/0	[default]	[*]	All but TCP 8080
		ip block: ::/0	[default]	[*]	All but TCP 8080
		ip block: 0.0.0.0/0	[default]	[app not in (frontend)]	All connections
		ip block: ::/0	[default]	[app not in (frontend)]	All connections
	[default]	[*]		ip block: 0.0.0.0/0	All connections
	[default]	[*]		ip block: ::/0	All connections