Enable Policy Recommendations for a Kubernetes Namespace

Discover how to review and activate AI-driven network policy recommendations to strengthen your cluster security.

Dashboards
Dashboard View
Cluster

TIME RANGE

From: 15 minutes ago
Customize Layout

Packets By Policy

1
3
9
30
90
300
900
3K
9K
50K
Denied
Allowed

Endpoints

0

Unprotected

0

Unlabeled

0

Failed

44

Total

DNS Request Count

0
300
600
900
1.2K
13 minutes ago
3 minutes ago
	Successful	986

	Failed	2,004

	Total	2,990

URL Requests

Url
Service
Requests
Requires L7 logging to be enabled

DNS Request Latency

Min	~ 0 ms	

Max	7.84 ms	

Avg	0.78 ms	

Policies

0

Denying Traffic

2

Unused

30

Total
	INGRESS	EGRESS
allow-fluentd-node	264.3 KB	10.2 MB
calico-node-alertmanager	60.1 KB	38.0 KB
calico-node-alertmanager-mesh	1.2 KB	0 B
cluster-dns	290.7 KB	482.1 KB
cnx-apiserver-access	38.0 KB	88.7 KB
See the full list

Process Instances

Process Name
Endpoint
Count
/usr/bin/es-gateway
tigera-secure-es-gateway-5bc66988f7-*
2
/bin/alertmanager
alertmanager-calico-node-alertmanager-*
2
/usr/bin/ruby
fluentd-node-*
2
/linseed
tigera-linseed-675fd8bd8-*
2
/usr/share/kibana/bin/../node/glibc-217/bin/node
tigera-secure-kb-767db9ff48-*
2
/src/server
frontend-c48bb8c56-*
1
/src/checkoutservice
checkoutservice-855ff8d99-*
1
/bin/prometheus
prometheus-calico-node-prometheus-*
1
/usr/bin/voltron
tigera-manager-555b66b456-*
1
/usr/bin/ui-apis
tigera-manager-555b66b456-*
1
/usr/bin/elastic-operator
elastic-operator-*
1
/usr/bin/kube-controllers
es-calico-kube-controllers-67bcb4fd55-*
1
/bin/elasticsearch_exporter
tigera-elasticsearch-metrics-54dd9bfdd6-*
1
/usr/bin/policy-recommendation
tigera-policy-recommendation-84c4c66994-*
1
/app/cartservice
cartservice-59d7459964-*
1
/coredns
coredns-56f6fc8fd7-*
1
/usr/local/bin/python3.12
loadgenerator-6fd8676bfc-*
1
python
recommendationservice-7d59447ccc-*
1

HTTP Response Codes

Requires L7 logging to be enabled

--

1xx Continue

--

2xx Success

--

3xx Redirect

--

4xx Bad Request

--

5xx Server Error

HTTP Request Duration

Requires L7 logging to be enabled

--

1xx Continue

--

2xx Success

--

3xx Redirect

--

4xx Bad Request

--

5xx Server Error

Services

Name
Latency
Request_Tput
Error_Rate
Inbound_Tput
Outbound_Tput
Requires L7 logging to be enabled

Tigera - Dashboard

Tigera - Policy Recommendations

Policy Recommendations
Recommendations0
Active1
Dismissed0

These policies have been automatically generated for namespaces in your cluster.

Global Settings
Bulk Actions
Policy Name
Namespace
Allowed Bytes
Denied Bytes
Created On
Last System Update
Status
There are no recommended policies available

Policy Tiers

View Policy

Policies
Policy Tiers
Policy Listing
Denying traffic
Unused
Staged
Enforced
Filter by label selectors
Add Tier
View Metrics
Export YAML
Recommend a Policy
adminnetworkpolicy
Add Policy
namespace-isolation

d

e

f

a

u

l

t

-

s

w

p

x

i

Staged
default
ns
12 endpoints

Allowed/sec

45.3 kB

45.3 kB

Denied/sec

0 B

0 B

Add Policy
default

Whats this?

Add Policy
baselineadminnetworkpolicy

d

e

f

a

u

l

t

global
44 endpoints

Allowed/sec

143.6 B

140.8 B

Denied/sec

0 B

0 B

No Policy Traffic

Allowed/sec

680 B

38.1 B

Denied/sec

0 B

0 B

Add Policy