Source
ClusterNetworkPolicy in GKE: Balancing control and autonomy for your microservices
Google Kubernetes Engine (GKE) introduced ClusterNetworkPolicy, a cluster-wide resource based on an open-source standard for central network security management. It enables administrators to implement consistent, non-bypassable policies across all microservices.
Why it matters
Security teams can enforce global compliance and prevent unauthorized data movement without hindering developers' ability to manage their own app communication. This creates a safer multi-tenant environment by balancing central control with developer autonomy.
The details
- CNP features a tiered evaluation system consisting of admin, network policy, and baseline.
- The feature is currently in preview for GKE version 1.36 and later.
- It was developed with the Kubernetes SIG-Policy Working Group and Cilium community.
Show entities and relationshipsHide entities and relationships
In this article
Organizations
Companies
Key connections
Kubernetes SIG-Policy Working Group owns ClusterNetworkPolicy
Kubernetes SIG-Policy Working Group developed the open-source ClusterNetworkPolicy standard.
Kubernetes SIG-Network owns Kubernetes NetworkPolicy
Kubernetes SIG-Network specifies the namespace-scoped NetworkPolicy API.
Cilium Community owns Cilium
Cilium Community maintains the open-source Cilium networking implementation.
Google Kubernetes Engine uses ClusterNetworkPolicy
Google Kubernetes Engine introduced support for ClusterNetworkPolicy to enable centralized network security.
Google Kubernetes Engine is built with Cilium
Google Kubernetes Engine collaborated with the Cilium community to build its implementation of the ClusterNetworkPolicy API.
Google is a partner of Kubernetes Community
Google worked with the Kubernetes community to design the ClusterNetworkPolicy API.
Show 7 more connectionsShow fewer connections
Google is a partner of Cilium Community
Google collaborated closely with the Cilium community to implement ClusterNetworkPolicy.
ClusterNetworkPolicy competes with Kubernetes NetworkPolicy
ClusterNetworkPolicy extends standard NetworkPolicy by providing cluster-wide hierarchical rules rather than namespace-scoped rules.
ClusterNetworkPolicy is related to Zero Trust
ClusterNetworkPolicy enables platform teams to enforce a zero-trust posture across Kubernetes clusters.
ClusterNetworkPolicy is related to Role-Based Access Control
ClusterNetworkPolicy integrates with role-based access control to manage security tiers.
Google Kubernetes Engine is related to Microservices Architecture
Google Kubernetes Engine uses ClusterNetworkPolicy to balance control and autonomy for microservices.
Kubernetes SIG-Policy Working Group is a member of Kubernetes Community
Kubernetes SIG-Policy Working Group is a working group within the broader Kubernetes community.
Kubernetes SIG-Network is a member of Kubernetes Community
Kubernetes SIG-Network is a special interest group within the Kubernetes community.
Related events
Google Introduces ClusterNetworkPolicy to Google Kubernetes Engine
Get the weekly recap
The stories like this one, picked and explained — once a week, straight to your inbox.