6.2. 示例 NetworkPolicy 对象

kind: NetworkPolicy
apiVersion: extensions/v1beta1
metadata:
  name: allow-27107 
spec:
  podSelector: 
    matchLabels:
      app: mongodb
  ingress:
  - from:
    - podSelector: 
        matchLabels:
          app: app
    ports: 
    - protocol: TCP
      port: 27017

kind: NetworkPolicy
apiVersion: extensions/v1beta1
metadata:
  name: allow-27107 

spec:
  podSelector: 

    matchLabels:
      app: mongodb
  ingress:
  - from:
    - podSelector: 

        matchLabels:
          app: app
    ports: 

    - protocol: TCP
      port: 27017