Skip to content

Commit b31281f

Browse files
committed
Add supplement list of compliant CNI plugins
1 parent 740830f commit b31281f

File tree

1 file changed

+27
-0
lines changed

1 file changed

+27
-0
lines changed
Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
---
2+
title: "KaaS Networking Standard: Implementation Notes"
3+
type: Supplement
4+
track: KaaS
5+
status: Draft
6+
supplements:
7+
- scs-XXXX-v1-kaas-networking.md
8+
---
9+
## List of compliant CNI Plugins
10+
11+
The Kubernetes Network Policy SIG maintains a [list of work-in-progress implementations](https://network-policy-api.sigs.k8s.io/implementations/) of the AdminNetworkPolicy and BaselineAdminNetworkPolicy resources.
12+
Besides their own validation implementation of [kube-network-policies](https://github.com/kubernetes-sigs/kube-network-policies), at the time of writing they list the following CNI plugins:
13+
14+
- [OVN-Kubernetes](https://github.com/ovn-org/ovn-kubernetes/)
15+
- [Antrea](https://github.com/antrea-io/antrea/)
16+
- [KubeOVN](https://github.com/kubeovn/kube-ovn)
17+
- [Calico](https://github.com/projectcalico/calico)
18+
- [Cilium](https://github.com/cilium/cilium)
19+
20+
All of these plugins also implement the basic NetworkPolicy API, and are therefore compliant both with the standard's requirements and recommendations.
21+
22+
The CNI plugin [Flannel](https://github.com/flannel-io/flannel) does not support network policies by itself, but can be combined with Calico for policy enforcement.
23+
This configuration is known as [Canal](https://docs.tigera.io/calico/latest/getting-started/kubernetes/flannel/install-for-flannel) and will likely profit from Calico's support for AdminNetworkPolicy.
24+
25+
There are more CNI plugins that support the NetworkPolicy API, but are not known to work on support of the AdminNetworkPolicy extensions.
26+
As such they are still compliant with the current version of the Standard.
27+
However, these seem to be either vendor-specific, like the [Azure CNI](https://learn.microsoft.com/de-de/azure/aks/configure-azure-cni), or unmaintained, like [Weave](https://github.com/weaveworks/weave).

0 commit comments

Comments
 (0)