Kubernetes YAML Networking/Allow ingress from labeled pods

Permit traffic only from a specific app tier.

Back to sheet Browse commands

Sign in to save

Section: NetworkPolicy

Allow ingress from labeled pods

yaml

yaml

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: api-allow-from-web
spec:
  podSelector:
    matchLabels:
      app: api
  policyTypes: ["Ingress"]
  ingress:
    - from:
        - podSelector:
            matchLabels:
              app: web
      ports:
        - protocol: TCP
          port: 8080

Learn the surrounding workflow

Compare similar commands or jump into common fixes when this command is part of a bigger troubleshooting path.

Compare commands View fixes

Related commands

Same sheet · prioritizing NetworkPolicy

Default deny ingress policy

Block incoming traffic until explicitly allowed.

Open In sheetyamlsame section

ClusterIP Service YAML

Expose Pods internally in the cluster.

Open In sheetyaml

Basic Ingress YAML

Route traffic by host and path.

Open In sheetyaml

NodePort Service YAML

Expose the service on each node's IP.

Open In sheetyaml

Enable TLS on Ingress

Terminate HTTPS with a Secret-backed certificate.

Open In sheetyaml

LoadBalancer Service YAML

Request external load balancing from the platform.

Open In sheetyaml