Skip to main content
Network Policies control pod-to-pod and pod-to-external traffic at the network level. Radar supports standard Kubernetes NetworkPolicy as well as Cilium’s CiliumNetworkPolicy and CiliumClusterwideNetworkPolicy CRDs, providing visibility into what traffic is allowed, denied, and which workloads are unprotected.

​
What Radar Shows

Topology: NetworkPolicy and CiliumNetworkPolicy nodes appear in the topology graph with edges connecting them to the workloads they protect. See at a glance which deployments have network policies applied and which are exposed.
Network Policy Topology

Network Policies in Topology View - policies connected to protected workloads

Policy Flow Diagram: Each NetworkPolicy detail drawer includes a visual flow diagram showing ingress and egress rules as a directional graph - sources on the left, targets on the right, with ports and protocols labeled. Quickly understand what a policy allows without reading YAML.
Policy Flow Diagram

Policy Flow Diagram - visual representation of ingress and egress rules

Dashboard Coverage Card: The home dashboard includes a Network Policy Coverage card showing total policy count, the percentage of workloads covered by at least one policy, and a count of uncovered workloads. Click through to browse all policies.
Network Policy Coverage Card

Dashboard Coverage Card - policy count, coverage percentage, and uncovered workloads

Cilium Policy Detail View:
  • Endpoint selector targeting
  • Ingress/egress rules with allow and deny semantics
  • Cilium-specific entity selectors (world, cluster, host)
  • CIDR rules, port/protocol specifications
  • Related workloads with clickable links
CiliumNetworkPolicy Detail

CiliumNetworkPolicy Detail - endpoint selector, ingress deny from world, egress allow to cluster

Standard NetworkPolicy Detail View:
  • Pod selector and namespace selector rules
  • Ingress and egress rules with CIDR blocks, ports, and protocols
  • Policy type indicators (Ingress, Egress, or both)
  • Related resources showing protected workloads
Traffic View Integration: When Hubble is available, dropped flows are correlated with the network policies that caused them, showing which policy denied specific traffic in real time.
Traffic Drop Correlation

Traffic View - dropped flow with POLICY_DENIED reason and selecting policy correlation

​
Supported Resources