Calico Global Network Policy for k8s

Minikube Setup

minikube start \
 --extra-config=kubelet.network-plugin=cni \
 --extra-config=kubelet.pod-cidr=10.123.0.0/16 \
 --extra-config=controller-manager.allocate-node-cidrs=true \
 --extra-config=controller-manager.cluster-cidr=10.123.0.0/16 \
 --memory 8192

Deploy Calico

kubectl create -f k8s-apps/calico.yaml

Apply Initial Network Policies

kubectl label namespaces kube-system name=kube-system
calicoctl create -f deny-all.yaml
calicoctl create -f allow-coredns.yaml
calicoctl create -f allow-dns-egress.yaml
calicoctl create -f allow-kube-system.yaml 

Debug k8s Networking with Busybox

kubectl create -f k8s-apps/busybox.yaml