NetworkPolicy Rule Builder

NetworkPolicies control pod-to-pod and pod-to-network traffic. The NetworkPolicy Rule Builder writes a networking.k8s.io/v1 NetworkPolicy where you declare which ingress and egress traffic is allowed.

You select target pods with matchLabels, pick Ingress and/or Egress, then add rules. Each rule has peers (podSelector, namespaceSelector or ipBlock) and ports (protocol + port). The resulting YAML is valid networking.k8s.io/v1.

Names are validated as RFC 1123 labels and at least one policy type is required. Problems are reported in a clear panel. Everything runs locally and nothing is uploaded.

• networking.k8s.io/v1 - correct NetworkPolicy schema.
• Ingress + Egress - both directions.
• Peers - podSelector, namespaceSelector, ipBlock (+except).
• Ports - protocol + port per rule.
• Validation - RFC 1123 names and required types.
• Copy / Download / Print - get networkpolicy.yaml wherever you need it.

1. Name the policy and target pods (matchLabels).
2. Pick Ingress/Egress and add rules with peers + ports.
3. Watch the preview and export.

Example 1 - allow frontend. ingress from podSelector role=frontend on TCP 6379.

Example 2 - allow egress to CIDR. egress to 10.0.0.0/24 on TCP 5978.

Example 3 - deny all ingress. ingress type, no rules.

• Correct schema - valid networking.k8s.io/v1 NetworkPolicy.
• Visual rules - peers and ports per direction.
• Validated - names and types checked.
• Clean output - empty fields omitted.
• Private - everything runs in the browser.
• Copy, download or print - get the manifest where you need it.