Access policy reference ¶

Default allowed external hosts ¶

The following hosts are by default accessible for every workload:

You do not need to specify these hosts in your access policies.

Advanced: Access Kubernetes API ¶

Kubernetes offers an API to query or manipulate the state of its objects. For details about the Kubernetes API, see the official documentation.

To allow outbound network access from your workload to the Kubernetes API server, you must explicitly add a label to your workload manifest:

apiVersion: "nais.io/v1alpha1"
kind: "Application"
metadata:
  name: my-app
  namespace: my-team
  labels:
    apiserver-access: "enabled"