# Information about access control lists

**URL:** <https://discuss.kubernetes.io/t/information-about-access-control-lists/16250>\
**Category:** General Discussions\
**Created:** [June 9, 2021, 7:35am UTC](https://discuss.kubernetes.io/t/information-about-access-control-lists/16250 "2021-06-09T07:35:03Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![shreyas\_shetty](https://avatars.discourse-cdn.com/v4/letter/s/9d8465/32.png) [@shreyas\_shetty](https://discuss.kubernetes.io/u/shreyas_shetty)\
**Post date:** [June 9, 2021, 7:35am UTC](https://discuss.kubernetes.io/t/information-about-access-control-lists/16250/1 "2021-06-09T07:35:03Z")

</div>

Hi I have some service xyz deployed in the kubernetes cluster. And for this service Ingress rules are defined for example: rules are defined to talk to the payment gateway. so basically this service will be communicating outside the kubernetes cluster. My concern is that it should only communicate with the payment gateway and should not communicate with any other entities outside the cluster So I want to introduce access control lists at the ingress level. So can you help me how this can be achieved?  
It would be really helpful if you can provide link which talks about ACL’s

---

<div class="post-metadata">

**Author:** ![shreyas\_shetty](https://avatars.discourse-cdn.com/v4/letter/s/9d8465/32.png) [@shreyas\_shetty](https://discuss.kubernetes.io/u/shreyas_shetty)\
**Post date:** [June 15, 2021, 5:49am UTC](https://discuss.kubernetes.io/t/information-about-access-control-lists/16250/2 "2021-06-15T05:49:39Z")

</div>

Hi @protosam any help would be appreciated.

---

<div class="post-metadata">

**Author:** ![mrbobbytables](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/mrbobbytables/32/7_2.png) [@mrbobbytables](https://discuss.kubernetes.io/u/mrbobbytables)\
**Post date:** [June 15, 2021, 3:17pm UTC](https://discuss.kubernetes.io/t/information-about-access-control-lists/16250/3 "2021-06-15T15:17:03Z")

</div>

I think what you’re looking for is [network policies](https://kubernetes.io/docs/concepts/services-networking/network-policies/). They will let you setup rules about which pods can talk to each other.

One note though - you must use a CNI driver that supports them (e.g. calico or cilium).

---

<div class="post-metadata">

**Author:** ![shreyas\_shetty](https://avatars.discourse-cdn.com/v4/letter/s/9d8465/32.png) [@shreyas\_shetty](https://discuss.kubernetes.io/u/shreyas_shetty)\
**Post date:** [June 16, 2021, 5:17am UTC](https://discuss.kubernetes.io/t/information-about-access-control-lists/16250/4 "2021-06-16T05:17:11Z")

</div>

Hi @mrbobbytables just a small question does network policies work with kubenet plugin?  
If kubenet plugin doesn’t support network policies, I am using public cloud [Azure] so I should use Azure CNI with calico right?

---

<div class="post-metadata">

**Author:** ![protosam](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/protosam/32/7732_2.png) [@protosam](https://discuss.kubernetes.io/u/protosam)\
**Post date:** [June 16, 2021, 5:22am UTC](https://discuss.kubernetes.io/t/information-about-access-control-lists/16250/5 "2021-06-16T05:22:39Z")

</div>

[This](https://docs.microsoft.com/en-us/azure/aks/configure-azure-cni) is the documentation related to networking on AKS.

The simplest way to determine if this works for you or not is to just create a namespace and test things out. In the [what’s next](https://kubernetes.io/docs/concepts/services-networking/network-policies/#what-s-next) section of the network policies documentation, it points you to [this](https://kubernetes.io/docs/tasks/administer-cluster/declare-network-policy/) very basic walkthrough. I would suppose that if things in that walkthrough work, then you’re good to proceed on network policies.