jupyter中的网络策略配置，控制jupyter-user-pod 是否能访问别的pod

zhanglu

jupyter装文件中values.yaml,中：networkPolicy默认为true

networkPolicy:
  enabled: true

禁止pod 和pod相互访问
在需要pod之间相互通讯是需要设置成

networkPolicy:
  enabled: false

原理介绍：
该配置是k8s 中的

(base) root@node1:/opt/app/genostack_v3_service/jupyter# kubectl get netpol -n jhub
NAME         POD-SELECTOR                                              AGE
hub          app=jupyterhub,component=hub,release=jhub                 19m
proxy        app=jupyterhub,component=proxy,release=jhub               19m
singleuser   app=jupyterhub,component=singleuser-server,release=jhub   19m

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: restrict-pod-access
  namespace: default
spec:
  podSelector:
    matchLabels:
      app: restricted-app
  policyTypes:
    - Egress
  egress:
    - to: []
      ports: []