:_mod-docs-content-type: ASSEMBLY
[id="external-secrets-operator-config-net-policy"]
= Configuring network policy for the operand
include::_attributes/common-attributes.adoc[]
:context: external-secrets-operator-uninstall

toc::[]

[role="_abstract"]
The {external-secrets-operator} for {product-title} includes pre-defined `NetworkPolicies` for security that rejects all egress traffic and allows traffic towards services that are required for the operand functionality. You must configure additional custom policies to allow the `external-secrets` controller to egress traffic towards external providers. These configurable policies are set through the `ExternalSecretsConfig` custom resource to establish the egress allow policy.

// Adding network policy to connect to permit all egress traffic
include::modules/external-secrets-operator-egress-allow-all-traffic.adoc[leveloffset=+1]

// Adding network policy to connect to a specific provider
include::modules/external-secrets-operator-egress-specific-provider.adoc[leveloffset=+1]

// Default ingress and egress rules
include::modules/external-secrets-operator-ingress-egress-rules.adoc[leveloffset=+1]


