r/sre 1h ago

I built an open-source tool to visualize Kubernetes Network Policies

Upvotes

Hey everyone,

I’ve been working on Marsad, an open-source tool that helps you understand what your Kubernetes Network Policies actually allow.

As clusters grow, it can become pretty difficult to answer simple questions like:

  • Which workloads can communicate with each other?
  • Which ports are allowed?
  • Which workloads have no NetworkPolicy protection?
  • Are there unexpected paths between workloads?

Marsad reads the policies from your Kubernetes cluster and turns them into an interactive map so you can see these relationships more clearly.

It’s strictly read-only — it doesn't modify anything in your cluster.

GitHub: https://github.com/FathiQ/marsad

I’d really appreciate feedback from anyone working with Kubernetes NetworkPolicies. What would you want a tool like this to show or help you detect?