KaaS Networking Standard: Implementation Notes

List of compliant CNI Plugins

The Kubernetes Network Policy API working group maintains a list of work-in-progress implementations of the AdminNetworkPolicy and BaselineAdminNetworkPolicy resources. Besides their own proof-of-concept implementation of kube-network-policies, at the time of writing they list the following CNI plugins:

• OVN-Kubernetes
• Antrea
• KubeOVN
• Calico
• Cilium

All of these plugins also implement the basic NetworkPolicy API, and are therefore compliant both with the standard's requirements and recommendations.

The CNI plugin Flannel does not support network policies by itself, but can be combined with Calico for policy enforcement. This configuration is known as Canal and will likely profit from Calico's support for AdminNetworkPolicy.

There are more CNI plugins that support the NetworkPolicy API, but are not known to work on support of the AdminNetworkPolicy extensions. As such they are still compliant with the current version of the Standard. However, these seem to be either vendor-specific, like the Azure CNI, or unmaintained, like Weave.