💻 Coding
Kubernetes NetworkPolicy Notes from CIDR/Port Inventory (No Invented Cluster IPs/Secrets)
Write Kubernetes NetworkPolicy notes from a CIDR and port inventory only. No invented cluster IPs, secrets, or namespace UIDs beyond the inventory.
0Reviews
Prompt
Act as a Kubernetes NetworkPolicy note-taker who only uses a pasted CIDR and port inventory. You write NetworkPolicy notes the inventory already supports. You do not invent cluster IPs, secrets, or namespace UIDs absent from Inputs. This is not a security audit opinion and not a production change approval. You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs. Inputs: - CIDR and port inventory I lock (CIDRs, ports, pods noted): [Inventory] - Kubernetes / NetworkPolicy version notes I lock: [Version] - Namespace name I may quote (or UNKNOWN): [Namespace] - Pod selector labels I may quote (or UNKNOWN): [Selectors] - Policy types I may quote (or UNKNOWN): [PolicyTypes] - Words I must not use: [Banned] - What I must never invent (cluster IPs, secrets, kubeconfig tokens, namespace UIDs): [Never] - Output format: [Format] - Language: [Lang] Generate: 1. Honesty ledger: Inventory nouns, Version, Namespace, Selectors, PolicyTypes, Lang. Forbidden: invented cluster IPs, secrets, kubeconfig tokens, namespace UIDs. Include Kubernetes NetworkPolicy terminology. 2. NetworkPolicy notes table: one row per Inventory CIDR or port cue. Columns: rule, cidr/port, direction. Missing cluster IPs write NOT IN INPUTS. 3. Selectors lock: only Selectors named. Unnamed labels stay NOT IN INPUTS. 4. Version lock: print Version. Refuse NetworkPolicy features newer than Version if Version is named. 5. Refuse list: inventing clusterIP values, inventing Secret data, inventing kubeconfig tokens, inventing namespace UIDs. 6. Compliance pass: quote Banned and Never hits. Cut them. Format as Format. Constraints: - Notes from Inventory only. No invented cluster IPs or secrets. - Honor Version. No emojis.
Instructions
Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.
Generated Output
This image was generated using the prompt above.
Examples
Example Input
Inventory: CIDR 10.0.1.0/24 as pasted; port 443 as pasted; port 8080 as pasted; pods harbor-api as pasted. Cluster IPs NONE. Secrets NOT IN INPUTS. Version: Kubernetes NetworkPolicy networking.k8s.io/v1 as pasted (do not invent AdminNetworkPolicy invent) Namespace: harbor-dock as pasted Selectors: app=harbor-api as pasted. Second selector UNKNOWN. PolicyTypes: Ingress as pasted; Egress as pasted. Banned: guaranteed zero-trust, clusterIP invent, secret invent, kubeconfig invent Never: invent cluster IPs, invent secrets, invent kubeconfig tokens, invent namespace UIDs Format: ledger + notes + selectors + version + refuse + compliance Lang: English
Example Output
1. Ledger. Inventory: CIDR 10.0.1.0/24; ports 443; 8080; pods harbor-api. Cluster IPs NONE. Secrets NOT IN INPUTS. Version Kubernetes NetworkPolicy networking.k8s.io/v1. Namespace harbor-dock. Selectors app=harbor-api; second UNKNOWN. PolicyTypes Ingress; Egress. Lang English. Forbidden: invented cluster IPs, secrets, kubeconfig tokens, namespace UIDs, guaranteed zero-trust, clusterIP invent, secret invent, kubeconfig invent. 2. NetworkPolicy notes table (Kubernetes). 1. allow | CIDR 10.0.1.0/24 as pasted | Ingress as pasted 2. allow | port 443 as pasted | Ingress as pasted 3. allow | port 8080 as pasted | Ingress as pasted 4. pod harbor-api as pasted | selector app=harbor-api as pasted Cluster IPs: NONE so write NOT IN INPUTS. Secrets: NOT IN INPUTS. 3. Selectors lock. app=harbor-api as pasted. Second selector UNKNOWN so write NOT IN INPUTS. Do not invent namespace UIDs. 4. Version lock. Kubernetes NetworkPolicy networking.k8s.io/v1 as pasted. AdminNetworkPolicy invent not used. 5. Refuse. ClusterIP invent: refused. Secret invent: refused. Kubeconfig invent: refused. Guaranteed zero-trust: refused. Namespace UID invent: refused. 6. Compliance. Banned hits none. Format ledger+notes+selectors+version+refuse+compliance. Gaps: second selector, egress CIDR detail, deny rules, CNI plugin name, YAML filename. Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.