Network segmentation

An important security aspect in any Kubernetes cluster is how Pods communicate between each other and also ingress and egress communication. Currently, there isn’t any graphical view on Kubernetes to check how the network communications are performed in real time, and neither allowed nor blocked flows. To help with that, ACS brings the Network Graph feature, which allows you to view the active communications in real time and also define and apply NPs to allow or block network traffic. Click on the Network Graph menu to access the feature:

Figure 12.54 – Network Graph feature

Select the rhacs-operator namespace to view what the network graph looks like:

Figure 12.55 – Network graph for the rhacs-operator namespace

You can change the view to see only active connections, allowed connections, or all types of connection flows.

Network flows

Red Hat Advanced Cluster Security can learn the network...