Techniques for verifying network policies in container frameworks

A computing device, comprising:

• a processor;
• and
• a memory storing instructions that, when executed by the processor, causes the computing device to:
• obtain a set of connectivity paths of a containerized environment, the set of connectivity paths individually indicating connections between pairs of containers in the containerized environment;
• identify a first container and a second container of a pair of containers based at least in part on a connectivity path of the set of connectivity paths;
• determine a network policy corresponding to the connectivity path, the network policy indicating an expected result of a particular connection between the first container and the second container;
• initialize a connection from the first container to the second container;
• identify a result of the connection;
• and
• cause the result to be presented at a user device based at least in part on identifying that the result is different from the expected result indicated by the network policy corresponding to the connectivity path.

A non-transitory computer-readable medium storing computer-executable instructions that, when executed by one or more processors of a computing device, cause the computing device to:

• obtain a set of connectivity paths of a containerized environment, the set of connectivity paths individually indicating connections between pairs of containers in the containerized environment;
• identify a first container and a second container of a pair of containers based at least in part on a connectivity path of the set of connectivity paths;
• determine a network policy corresponding to the connectivity path, the network policy indicating an expected result of a particular connection between the first container and the second container;
• initialize a connection from the first container to the second container;
• identify a result of the connection;
• and
• cause the result to be presented at a user device based at least in part on identifying that the result is different from the expected result indicated by the network policy corresponding to the connectivity path.