Protect status server with network policy
Open
kind/feature
- Dominant language
- Go
- Stars
- 2.2k
- Forks
- 1.1k
- Avg merge
- 3d 22h
- Merged PRs (30d)
- 39
Description
### What you would like to be added?
Add a network policy that allows only TrainJob pods to send requests to the status server.
### Why is this needed?
This is adds an additional defence in depth. The status server is an internal endpoint that should only be called by train job pods.
Follow on from https://github.com/kubeflow/trainer/pull/3227#discussion_r2858259021
### Love this feature?
Give it a 👍 We prioritize the features with most 👍
Contributor guide
Assessment
This issue has not been assessed yet.