Block deployment egress traffic to a list of domains

Kubernetes
#1

Hi,
I need to restrict outbound traffic from a specific deployment pods to a list of websites.
The goal is to let some app like helm-exporter to talk only with helm artifact repositories and nothing else on the internet.

I know I can use IP ranges in network policies by default but we don’t know how much these websites IPs will change in future and we’d like to use just a simple domain list in some kind of policy.

We’re using Azure CNI and no service mesh.
Thanks

#2

No one has ever tried? :slight_smile:

#3

you can use the azure firewall to control this case Control egress traffic using Azure Firewall in Azure Kubernetes Service (AKS) - Azure Kubernetes Service | Microsoft Learn