SourceClusterNetworkPolicy in GKE: Balancing control and autonomy for your microservices
Security teams can enforce global compliance and prevent unauthorized data movement without hindering developers' ability to manage their own app communication. This creates a safer multi-tenant environment by balancing central control with developer autonomy.
- ClusterNetworkPolicy (CNP) is an open-source standard developed by the Kubernetes SIG-Policy Working Group.
- Establishes a three-tier hierarchy (Admin, Network Policy, and Baseline) to resolve policy conflicts between security admins and developers.
- Developed in collaboration with the Kubernetes and Cilium open-source communities.
- Available in preview for GKE version 1.36 and later.