Yandex Cloud
Search
Discuss with expertTry it for free
  • Customer Stories
  • Documentation
  • Blog
  • All Services
    • Cloud Interconnect
    • Cloud Backup
    • Cloud Registry
    • Yandex AI Studio
    • Compute Cloud
    • Object Storage
    • Managed Service for Kubernetes®
    • Yandex BareMetal
    • Smart Web Security
    • Security Deck
    • Managed Service for PostgreSQL
    • Managed Service for ClickHouse®
    • Monium
    • Cloud CDN
    • Network Load Balancer
    • Virtual Private Cloud
    • Cloud DNS
    • Application Load Balancer
    • Yandex Cloud Video
    • Stackland
    • Yandex Cloud Router
    • Yandex Managed Service for Trino
    • Managed Service for MySQL®
    • Managed Service for Valkey™
    • Managed Service for Apache Spark™
    • Yandex StoreDoc
    • Managed Service for OpenSearch
    • Managed Service for Apache Kafka®
    • Data Transfer
    • Yandex MPP Analytics Engine for PostgreSQL
    • Yandex Managed Service for Apache Airflow®
    • Data Processing
    • Yandex MetaData Hub
    • Managed Service for YDB
    • Managed Service for Sharded PostgreSQL
    • Managed Service for YTsaurus
    • Yandex WebSQL
    • DataLens
    • Yandex Search API
    • SpeechSense
    • SpeechKit
    • DataSphere
    • Vision OCR
    • Translate
    • Yandex Identity Hub
    • Key Management Service
    • Certificate Manager
    • Yandex Lockbox
    • Audit Trails
    • SmartCaptcha
    • Cloud Desktop
    • SourceCraft Code Assistant
    • Container Registry
    • Managed Service for GitLab
    • Managed Service for Prometheus®
    • Cloud Functions
    • API Gateway
    • Yandex Cloud Postbox
    • Message Queue
    • Serverless Integrations
    • IoT Core
    • Data Streams
    • Serverless Containers
    • Cloud Notification Service
    • Yandex Query
    • Identity and Access Management
    • Yandex Cloud Console
    • Resource Manager
    • Yandex Cloud Billing
    • Yandex Cloud Quota Manager
    • Cloud Apps
  • System Status
  • Marketplace
    • Featured
    • Infrastructure & Network
    • Data Platform
    • AI for business
    • Security
    • DevOps tools
    • Serverless
    • Monitoring & Resources
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
    • Price calculator
    • Pricing plans
  • Customer Stories
  • Documentation
  • Blog
© 2026 Direct Cursus Technology L.L.C.
Yandex Managed Service for Kubernetes
  • Comparing with other Yandex Cloud services
  • Getting started
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
    • Overview
    • Service
    • NetworkPolicy
  • Release notes

In this article:

  • NetworkPolicy
  • ObjectMeta
  • NetworkPolicySpec
  • IngressRule
  • IPBlock
  1. Network Load Balancer tools
  2. NetworkPolicy

Fields and annotations of the NetworkPolicy resource

Written by
Yandex Cloud
Updated at July 13, 2026
View in Markdown
  • NetworkPolicy
  • ObjectMeta
  • NetworkPolicySpec
    • IngressRule
    • IPBlock

NetworkPolicy is a resource for managing access to services published via Network Load Balancer based on IP addresses.

NetworkPolicy is a standard Kubernetes resource. This reference describes the resource fields and annotations supported by Network Load Balancer for Managed Service for Kubernetes. For a complete reference for the resource, see this Kubernetes guide.

Learn more information about network policies here.

NetworkPolicyNetworkPolicy

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata: <ObjectMeta>
spec: <NetworkPolicySpec>

Field

Value / Type

Description

apiVersion

networking.k8s.io/v1

This is a required field.
Kubernetes API version.

kind

NetworkPolicy

Resource type.

metadata

ObjectMeta

This is a required field.
Resource metadata.

spec

NetworkPolicySpec

This is a required field.
Resource specification.

Example
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: whitelist-netpol
  namespace: ns-example
spec:
  podSelector:
    matchLabels:
      role: db
  policyTypes:
  - Ingress
  ingress:
  - from:
    - ipBlock:
        cidr: 198.18.235.0/24
    - ipBlock:
        cidr: 198.18.248.0/24
    - ipBlock:
        cidr: 172.16.1.0/12

ObjectMetaObjectMeta

name: <string>
namespace: <string>

Field

Value / Type

Description

name

string

This is a required field.
Policy name.

namespace

string

Namespace for the policy.

NetworkPolicySpecNetworkPolicySpec

podSelector: <selectorRules>
policyTypes:
  - Ingress
ingress:
  - <IngressRule>
  - ...

Field

Value / Type

Description

podSelector

LabelSelector

This is a required field.
Pod filtering rules.

See this Kubernetes guide.

policyTypes

[]Policy

This is a required field.
Policy type. The only value is Ingress.

ingress

[]IngressRule

This is a required field.
List of traffic filtering rules.

IngressRuleIngressRule

from:
  - ipBlock: <IPBlock>
  - ...

Field

Value / Type

Description

from

[]IPBlock

This is a required field.
List of IP address ranges allowed to access the load balancer.

IPBlockIPBlock

ipBlock:
  cidr: <string>

Field

Value / Type

Description

cidr

string

This is a required field.
Range of IP addresses allowed to access the load balancer.

The 198.18.235.0/24 and 198.18.248.0/24 ranges are always specified as they are reserved by Network Load Balancer for node health checks.

Was the article helpful?

Previous
Service
Next
Release notes
© 2026 Direct Cursus Technology L.L.C.