Secure service access with multi-cluster network policy

A system, comprising:

• one or processors coupled to one or more memories that store instructions, that when executed by the one or more processors, cause the system to:
• receive a data packet from a first pod in a first cluster of a cluster set through a pod interface, wherein the data packet targets a second pod in a second cluster of the cluster set;
• determine a label identity for the first pod from a table of pods and label identities;
• add the label identity for the first pod in a header of the data packet;
• and
• communicate the data packet from the first cluster to the second cluster through a gateway node.

One or more non-transitory computer-readable media comprising instructions that, when executed by one or more processors of a computing system, cause the computing system to perform a method for exchanging data between clusters, the method comprising:

• receiving a data packet from a first pod in a first cluster of a cluster set through a pod interface, wherein the data packet targets a second pod in a second cluster of the cluster set;
• determining a label identity for the first pod from a table of pods and label identities;
• adding the label identity for the first pod in a header of the data packet;
• and
• communicating the data packet from the first cluster to the second cluster through a gateway node.