This chapter documents the policy language used to configure network policies in Cilium. Security policies can be specified and imported via the following mechanisms:
- Using Kubernetes NetworkPolicy and CiliumNetworkPolicy resources. See the section Network Policy for more details. In this mode, Kubernetes will automatically distribute the policies to all agents.
- Directly imported into the agent via CLI or API Reference of the agent. This method does not automatically distribute policies to all agents. It is in the responsibility of the user to import the policy in all required agents.
New in version future: Use of the KVstore to distribute security policies is on the roadmap but has not been implemented yet.