08、网络策略编辑器

https://app.networkpolicy.io/
https://editor.networkpolicy.io/?id=YgjtL8lVOHMeUxlF

只允许流量从网关进入，默认出口网关流量不做限制

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-gateway
  namespace: nuwa
spec:
  podSelector: {}
  ingress:
    - from:
        - namespaceSelector:
            matchLabels:
              ns: fuxi-pro
    - from:
        - podSelector: {}