ClusterNetworkPolicy in GKE: Balancing control and autonomy for your microservices

Google Kubernetes Engine (GKE) now supports ClusterNetworkPolicy (CNP), a cluster-wide resource for managing network security. CNP balances control and autonomy by allowing administrators to enforce consistent, non-bypassable policies while still allowing developers to manage their application policies. This is achieved through a hierarchical tier system, including an admin tier, network policy tier, and baseline tier. This structure helps align network security with organizational roles and resolves conflicts between different teams' policies. To get started, read on for technical details and an example policy.