Skill UI

This skill guides the implementation and auditing of advanced container network policies using Calico's specialized CRDs (like GlobalNetworkPolicy and NetworkSet). It enables granular traffic control, zero-trust architectures, and advanced egress filtering based on domain names, which are critical for maintaining strict compliance and isolating workloads across multiple namespaces.

This skill guides the implementation of fine-grained network security policies in Kubernetes using Calico CNI. It covers establishing a default-deny baseline, understanding policy ordering, and applying advanced rules like service-account-based selectors. Use it for hardening cluster security, enforcing zero-trust models, and managing network segmentation within containerized environments.

A comprehensive guide detailing how to implement portable Kubernetes NetworkPolicies to enforce zero-trust microsegmentation. Learn to apply default-deny rules, control ingress and egress traffic, and restrict lateral movement between pods and namespaces across various CNI platforms (Calico, Cilium). Ideal for establishing robust security posture and meeting compliance requirements.

A comprehensive guide for managing and operating the KubeSphere network extension. This skill provides detailed instructions on installing, upgrading, enabling, or disabling the network extension, managing Calico IPPool resources, configuring NetworkPolicies, and troubleshooting network isolation flows within a Kubernetes cluster environment. Essential for platform engineers and DevOps teams.