Policy for Kubernetes services
Apply Calico Enterprise policy to Kubernetes node ports
Restrict access to Kubernetes NodePort services using a Calico Enterprise GlobalNetworkPolicy at the host endpoint.
Apply Calico Enterprise policy to services exposed externally as cluster IPs
Expose Kubernetes Service ClusterIPs over BGP using Calico Enterprise and restrict who can reach them with network policy.