> ## Documentation Index
> Fetch the complete documentation index at: https://radarhq.io/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Kubernetes & Cilium network policy visibility

> See network policies in Radar: NetworkPolicy and Cilium policy nodes in topology with edges to the workloads they protect - spot which workloads have coverage at a glance.

[Network Policies](https://kubernetes.io/docs/concepts/services-networking/network-policies/) control pod-to-pod and pod-to-external traffic at the network level. Radar supports standard Kubernetes NetworkPolicy as well as Cilium's CiliumNetworkPolicy and CiliumClusterwideNetworkPolicy CRDs, providing visibility into what traffic is allowed, denied, and which workloads are unprotected.

### What Radar Shows

**Topology:** NetworkPolicy and CiliumNetworkPolicy nodes appear in the topology graph with edges connecting them to the workloads they protect. See at a glance which deployments have network policies applied and which are exposed.

<Frame caption="Network Policies in Topology View  -  policies connected to protected workloads">
  <img src="https://mintcdn.com/skyhook/WMkyX9-pHguEy9dC/images/oss/netpol-topology.png?fit=max&auto=format&n=WMkyX9-pHguEy9dC&q=85&s=b0040241489075b915b803797b4498ed" alt="Network Policy Topology" width="1440" height="900" data-path="images/oss/netpol-topology.png" />
</Frame>

**Policy Flow Diagram:** Each NetworkPolicy detail drawer includes a visual flow diagram showing ingress and egress rules as a directional graph  -  sources on the left, targets on the right, with ports and protocols labeled. Quickly understand what a policy allows without reading YAML.

<Frame caption="Policy Flow Diagram  -  visual representation of ingress and egress rules">
  <img src="https://mintcdn.com/skyhook/WMkyX9-pHguEy9dC/images/oss/netpol-flow-diagram.png?fit=max&auto=format&n=WMkyX9-pHguEy9dC&q=85&s=6ec5ebbccb569ecc2ac186f67b989e0c" alt="Policy Flow Diagram" width="509" height="278" data-path="images/oss/netpol-flow-diagram.png" />
</Frame>

**Dashboard Coverage Card:** The home dashboard includes a Network Policy Coverage card showing total policy count, the percentage of workloads covered by at least one policy, and a count of uncovered workloads. Click through to browse all policies.

<Frame caption="Dashboard Coverage Card  -  policy count, coverage percentage, and uncovered workloads">
  <img src="https://mintcdn.com/skyhook/WMkyX9-pHguEy9dC/images/oss/netpol-dashboard-card.png?fit=max&auto=format&n=WMkyX9-pHguEy9dC&q=85&s=ee5bc476f70c6a4e305b374ff2b9ab48" alt="Network Policy Coverage Card" width="458" height="260" data-path="images/oss/netpol-dashboard-card.png" />
</Frame>

**Cilium Policy Detail View:**

* Endpoint selector targeting
* Ingress/egress rules with allow and deny semantics
* Cilium-specific entity selectors (world, cluster, host)
* CIDR rules, port/protocol specifications
* Related workloads with clickable links

<Frame caption="CiliumNetworkPolicy Detail  -  endpoint selector, ingress deny from world, egress allow to cluster">
  <img src="https://mintcdn.com/skyhook/WMkyX9-pHguEy9dC/images/oss/netpol-cilium-renderer.png?fit=max&auto=format&n=WMkyX9-pHguEy9dC&q=85&s=469a7f800c71b0b0bb5f5e60e6d70d4e" alt="CiliumNetworkPolicy Detail" width="549" height="851" data-path="images/oss/netpol-cilium-renderer.png" />
</Frame>

**Standard NetworkPolicy Detail View:**

* Pod selector and namespace selector rules
* Ingress and egress rules with CIDR blocks, ports, and protocols
* Policy type indicators (Ingress, Egress, or both)
* Related resources showing protected workloads

**Traffic View Integration:** When Hubble is available, dropped flows are correlated with the network policies that caused them, showing which policy denied specific traffic in real time.

<Frame caption="Traffic View  -  dropped flow with POLICY_DENIED reason and selecting policy correlation">
  <img src="https://mintcdn.com/skyhook/WMkyX9-pHguEy9dC/images/oss/netpol-traffic-correlation.png?fit=max&auto=format&n=WMkyX9-pHguEy9dC&q=85&s=1811c9fd6292c68e0c1513dcf792e2f3" alt="Traffic Drop Correlation" width="2456" height="1530" data-path="images/oss/netpol-traffic-correlation.png" />
</Frame>

### Supported Resources

| Resource                       | Group                  | Topology | Detail View | AI Summary |
| ------------------------------ | ---------------------- | -------- | ----------- | ---------- |
| NetworkPolicy                  | `networking.k8s.io/v1` | Yes      | Yes         | Yes        |
| CiliumNetworkPolicy            | `cilium.io/v2`         | Yes      | Yes         | Yes        |
| CiliumClusterwideNetworkPolicy | `cilium.io/v2`         | Yes      | Yes         | Yes        |