Creating a Security Group Policy (Cloud Native Network 2.0)

For clusters using the cloud native network 2.0 model, you can configure security group policies to limit the traffic that accesses the servers where containers are deployed. If no security group policies are configured, all incoming and outgoing traffic of the servers is allowed by default.

This chapter describes how to create a security group policy for a cluster using the cloud native network 2.0 model.

Procedure

Log in to the management console.
In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.

In the navigation pane on the left, choose Prevention > Container Firewalls.
(Optional) If you have enabled the enterprise project, select the enterprise project where the target server resides from the drop-down list.
Click Synchronize above the cluster list to synchronize the policies created on CCE.
The task takes about 1 to 2 minutes. Wait for a while and click in the upper right corner of the list to refresh and view the latest data.

Click Manage Policy in the Operation column of a cluster using the cloud native network 2.0 model.
Click Create above the policy list. The Create a Security Group Policy dialog box is displayed.

Enter the policy information as prompted. For details about related parameters, see Table 1.

**Table 1** Parameters for creating a security group policy
Parameter	Description
Policy	Enter a policy name.
Namespace	A namespace to be selected.
Workload Type	Select a load type. The following types are supported: Deployment StatefulSets DaemonSets
Workload	Select the target workload.
Associate a Security Group	Select a security group to be associated. Each policy can be associated with a maximum of five groups. The existing security groups in the list are those you have created in the VPC service. To create a security group, click Create a Security Group to go to the VPC console. For details, see Create a Security Group.