Network Policy API Meeting for 2025-12-02
Source: YouTube · Kubernetes · published Dec 3, 2025 · 58:24
Summary:
The SIG Network Policy API subproject meeting focused on clarifying undefined behaviors in network policy implementations and standardizing specifications. Key discussions included documenting how different implementations handle network policies, specifically regarding CIDR rules matching cluster internal traffic, FQDN wildcard matching semantics, and potentially adding a service provider tier to the cluster network policy.
Key Takeaways:
• Participants identified undefined behaviors in network policy implementations that require documentation and standardization.
• Discussions addressed whether CIDR rules should match cluster internal traffic, noting variations among different implementations.
• FQDN wildcard matching semantics were debated, focusing on the security implications of recursive subdomain matching.
• A proposal was introduced to add a service provider tier to the cluster network policy hierarchy, positioned above the admin tier.
• API naming conventions for destination ports and named ports were discussed.
Conclusion:
The meeting concluded with action items to file issues for further discussion on these topics to help reach consensus.
Sources:
- Meeting introduction and agenda
- Undefined behavior in network policy implementations
- CIDR rules matching cluster
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hey everyone, welcome to the SIG network policy API sub project meeting. Today is the 2nd of December 2025. Let's all follow the CNCF code of conduct and be nice to each other. We have a few items on the agenda, so we'll just go through them in order like usual. If there is any new people who are attending this meeting for the first time, feel free to raise your hands and introduce yourself. We are a friendly bunch. Okay, let's get started. The first item is from Benship. Uh Dan, you're on the call, so want to take the floor? >> Yeah. Um I was just sort of trying to write up some documentation of how network policy and works and realized that there's some undefined behavior there. If if you went to open that, I don't know if you did, but it didn't show up in your screen share. Okay. Yeah, …