np-guard / netpol-synthesizer Goto Github PK

Controlled by a flag, the synthesizer should output a set of Istio AuthorizationPolicies, instead of K8s NetworkPolicies.

Define format and handle accordingly

If source and target are in different namespaces, we should adjust the network policy accordingly.
Since we will probably not have namespace labels, we should use namespaceSelector: {} or use the new (since 1.21) k8s feature where each namespace has a label kubernetes.io/metadata.name with its name as the value.