tree dbe5c792c78318206a3a2752b76b1f670e4c5dce
parent 0bc0e1585643ad7f940a37f4d1072f44599420d2
author David Grove <dgrove-oss@users.noreply.github.com> 1582030353 -0500
committer GitHub <noreply@github.com> 1582030353 -0500
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJeS94RCRBK7hj4Ov3rIwAAdHIIAEpwBqy0o/j1wc7L29OXSzLq
 99Vy7XPAsJ9wWSBiB+Bdd/KGd6hL3wo7xWgIf3F9SYOO0sTw0nkjF6xNmGQ7B0l2
 9wmmXCqNP9db+NTSx8TNYEAkXDVTAzhcDxuV6liBi5IJXDCKUGSE+T2fMlNl/sdp
 66FUlthzGg5LYGpt4YybpyBdiUAc2Z9j1JLrj3bDoHoJITxapBU4QyaMG7RGztAn
 O2lO9nkvVfFRKUuOEWRvhD4ZNZ5lMT80A/TUy4ypMY3CwCS2SUnGZeqCHwZKQYYb
 EOL7cLrF7TBJeyBrMaJxG9Oxf81cUOn9T9GmBL4oKuskwG8UVFd8E8KVc5TbbwM=
 =jKZK
 -----END PGP SIGNATURE-----
 

NetworkPolicy to isolate pods running user actions (#584)

Add NetworkPolicy to enforce moderate levels of network isolation:
  1. User action pods only accept incoming connections from invokers
  2. Back-end control plane pods only accept incoming connections
     from other control plane pods.