Skip to main content
Nais Docs
  • Home
  • Explanations
    • What is Nais?
    • What is a team?
    • Under the hood
  • Tutorials
    • Hello Nais
  • Workloads
    • 💡 Explanations
      • The runtime environment
      • Good practices
      • HTTP client connection management
      • Image repository
      • Zero Trust
    • 🎯 How-To
      • Set up access policies
      • Communicate with other workloads
      • Reduce costs
      • Debugging workloads
      • Disable read-only file system
      • Overriding user and group that runs container process
      • Troubleshooting
      • Upload third-party image to image repository
    • 📚 Reference
      • Access policy reference
      • Container security
      • Default workload variables
      • Environments
      • Editor schemas for Kubernetes-style manifests
    • Application
      • 💡 Explanations
        • Exposing your application
      • 🎯 How-To
        • Create application
        • Delete your application
        • Expose an application
        • Redirect a client
      • 📚 Reference
        • Automatic Scaling
        • Nais Application example YAML
        • Ingress reference
        • Nais Application reference
    • Nais job
      • 🎯 How-To
        • Create job
        • Delete your job
      • 📚 Reference
        • Nais Job example YAML
        • Nais Job reference
  • Build and deploy
    • 💡 Explanations
      • Applying a manifest
      • Environment mixins
      • Nais manifests
    • 🎯 How-To
      • Build and deploy with GitHub Actions
      • Dependabot with auto-merge
      • Set up a complete deploy pipeline
      • Schema validation and auto-completion
      • Templating (deprecated)
      • Using the image outside of Nais
    • 📚 Reference
      • Deploy with the Nais CLI
      • Manifest reference
  • Auth
    • 💡 Explanations
    • 🎯 How-To
      • Log in users
    • 📚 Reference
    • Workload Identity
  • Observability
    • 🎯 How-To
      • Get started with auto-instrumentation
    • 📚 Reference
      • OpenTelemetry Auto-Instrumentation Configuration
      • Observability Glossary
    • Frontend
      • 🎯 How-To
        • Custom frontend metrics
        • Set up Faro
        • Set up Faro with Next.js
        • Sourcemap deobfuscation
        • Frontend-to-backend trace propagation
      • 📚 Reference
        • Auto-configuration reference
        • Frontend observability troubleshooting
    • Tracing
      • 🎯 How-To
        • Avoid false errors from expected 4xx responses
        • Trace context propagation
        • Correlate traces and logs
        • Get started with Grafana Tempo
      • 📚 Reference
        • Span Metrics
        • OpenTelemetry Trace Semantic Conventions
        • TraceQL Reference
    • Alerting
      • 🎯 How-To
        • Create alert in Grafana
        • Customize Prometheus alerts
        • Create alert with Prometheus
      • 📚 Reference
        • Prometheus Alerting Rule Reference
    • Logging
      • 🎯 How-To
        • Disable persistent application logs
        • View logs from the command line
        • Adding logs to your Grafana dashboard
        • Metrics and alerts for logs
        • Get started with Grafana Loki
        • Get started with Team Logs
      • 📚 Reference
        • Log Destinations
        • LogQL Reference
        • Loki Labels Reference
        • Loki Metrics Reference
    • Metrics
      • 🎯 How-To
        • Create a dashboard in Grafana
        • Expose metrics from your application
        • Push metrics to Prometheus
      • 📚 Reference
        • Global Metrics
        • Grafana Glossary
        • Metrics reference
        • OpenTelemetry Metrics
        • PromQL Reference
    • Tutorials
      • Getting Started with Observability in Nais
      • Adding Custom Spans and Metrics with OpenTelemetry
  • Persistence
    • 💡 Explanations
      • Responsibilities
    • BigQuery
      • 🎯 How-To
        • Using BigQuery from your application
        • Create an instance of BigQuery
    • CloudSQL
      • 💡 Explanations
        • Cloud SQL credentials
        • Cloud SQL Instance
        • Cloud SQL Proxy
        • Cloud SQL System Users and Roles
        • Grants and privileges
        • Non-personal database users
      • 🎯 How-To
        • Additional users
        • Certification sync issues
        • Change the tier of your database instance
        • Connect to a cloned database
        • Postgres database metrics
        • Debugging
        • Deleting the database
        • Enable audit logging
        • Failing to assign private IP to an existing Cloud SQL instance
        • Legacy Cloud SQL migration (deprecated)
        • Change your Cloud SQL instance
        • Workaround for password synchronization issues
        • Personal database access
        • Reset database credentials
        • Restore a database from a daily backup
        • Shrink Cloud SQL disk size
        • Upgrade major version
      • 📚 Reference
    • Postgres (preview)
      • 🎯 How-To
        • Create Postgres
        • Delete Postgres
        • Manage Postgres
        • Connect to Postgres as a personal user
        • Restore a Postgres branch from backup
        • Use Postgres in a workload
      • 💡 Explanations
        • Postgres branches
      • 📚 Reference
        • Example YAML
        • Extensions
        • Personal access
        • Manifest reference
        • Workload credentials
    • Buckets
      • 🎯 How-To
        • Create a bucket
        • Deleting a bucket
      • 📚 Reference
    • Kafka
      • 💡 Explanations
        • Working with Kafka Offsets
        • Tiered storage
      • 🎯 How-To
        • Accessing topics from an application
        • Create a Kafka topic
        • Delete Kafka topic and data
        • Using Kafka Streams with internal topics
        • Manage access
        • Remove access to topics from an application
        • Avro and schema
        • Get temporary Kafka credentials
        • How to turn on Tiered Storage for your Kafka topic
        • Troubleshooting
      • 📚 Reference
        • Environment variables for Kafka
        • Kafka metrics
        • Kafka Pools
        • Nais Topic example YAML
        • Nais Topic reference
    • OpenSearch
      • 🎯 How-To
        • Create OpenSearch
        • Create OpenSearch with GitHub Actions
        • Use OpenSearch in your workload
        • Delete OpenSearch
        • Get access to the dashboard
        • Get temporary OpenSearch credentials
        • Upgrade major version
      • 📚 Reference
        • Nais OpenSearch example YAML
        • Nais OpenSearch reference
    • Valkey
      • 🎯 How-To
        • Create Valkey
        • Create Valkey with GitHub Actions
        • Use Valkey in your workload
        • Delete Valkey
      • 📚 Reference
        • Nais Valkey example YAML
        • Nais Valkey reference
  • Other services
    • CDN
      • 🎯 How-To
        • Upload assets to the CDN
        • Manage CDN assets
      • 📚 Reference
        • CDN Upload Action
    • Config
      • 🎯 How-To
        • Create and manage configs in Console
        • Use a config in your workload
      • 📚 Reference
    • Secrets
      • 🎯 How-To
        • Create and manage secrets in Console
        • Use a secret in your workload
        • Get a platform-managed secret value using the CLI
      • 📚 Reference
    • Vulnerabilities
      • 🎯 How-To
        • Alert on vulnerabilities
        • Generate SBOM
      • 📚 Reference
    • Feature Toggling
    • Anti-Virus Scanning
    • Leader Election
      • 🎯 How-To
        • Enable Leader Election
  • Operate
    • 💡 Explanations
      • Labels
    • 🎯 How-To
      • Setup command line access
      • Create a Nais team
      • Add labels to your resources
    • 📚 Reference
      • Label reference
    • Nais Console
      • Nais API
    • CLI
    • naisdevice
      • 🎯 How-To
        • Install naisdevice
        • Troubleshooting naisdevice
        • Uninstall naisdevice
        • Update naisdevice
  • Tags
All tags

access-policy

2 pages

  • Set up access policies

    Define access policies for your workload to allow inbound and outbound traffic. These examples apply to workloads in the same environment.

  • Zero Trust

    Nais embraces the zero trust security model, where the core principle is to "never trust, always verify".