Calico's Scalable Network Policy Model for Kubernetes

Why Implement Microsegmentation

Challenges Implementing Microsegmentation

Defining a Policy Model

Defining Policy Standards

Building the Policy Model

Deploying the Demo Applications

Implementing Calico Policy Tiers

Policy Example 1 - Cluster-wide Policy

Policy Example 2 - Tenant-isolation Policy

Policy Example 3 - Platform Policy

Policy Example 4 - Namespace-isolation Policy

Policy Example 5 - Workload-isolation Policy

Policy Example 6 - Default Deny Policy

Learning Track Summary

Whitepaper - Scalable Security and DevSecOps with Calico’s Network Policy Model for Kubernetes

Github Repo