Policy for Kubernetes services
Apply Calico Cloud policy to Kubernetes node ports
Restrict access to Kubernetes NodePort services using a Calico Cloud GlobalNetworkPolicy at the host endpoint.
Apply Calico Cloud policy to services exposed externally as cluster IPs
Expose Kubernetes Service ClusterIPs over BGP using Calico Cloud and restrict who can reach them with network policy.