General network policy for namespaces

A system comprising:

• a supervisor cluster having a master node and supporting a plurality of namespaces;
• an entity residing and operating in each of the namespaces in the plurality of namespaces;
• and
• a network providing access among each of the respective entities, the network including one or more firewalls;
• wherein the master node is configured to:
• receive a security policy definition describing allowed traffic on the network;
• and
• send the security policy definition to a network manager that formulates a set of rules for the one or more firewalls controlling the allowed traffic on the network according to the security policy definition, wherein the one or more firewalls enforce the set of rules controlling the allowed traffic on the network.

A non-transitory computer-readable medium comprising instructions, which, when executed, cause a computer system to carry out a method for controlling network traffic among a plurality of namespaces, the method comprising:

• creating a security policy definition describing allowed traffic on a network, the network including one or more firewalls, wherein one or more entities reside and operate in each namespace of the plurality of namespaces and have access to each other via the network;
• and sending the security policy definition to a node that supports the plurality of namespaces,
• wherein the node sends the security policy definition to a network manager that formulates a set of rules for the one or more firewalls controlling the allowed traffic on the network according to the security policy definition, and
• wherein the one or more firewalls enforce the set of rules controlling the allowed traffic on the network.