Traefik load balancer and network policy

Rancher 1.x
1

Hello,

I use the network policy on rancher (1.6) and I disable “within stack” and “everything else” networking.

Now, my issue is my traefik load balancer.
It is not working anymore - network is not there anymore - Is there / is it possible to add a specific tag on some service telling that another service can access it ?

Using the Containers based on Labels rules is not really helpful, because

  • either we need to use 1 tag with same value, then service that are behind the load balancer will be able to communicate each other (no isolation)
  • either we need to use 1 tag with distinct value, then traefik service will need a looot of tag, and managing this will be painful

Perhaps somebody has another idea ?

Thank you!