Skip to content

Commit 41cef81

Browse files
authored
Merge pull request #92754 from JoeAldinger/OCPBUGS-55471
OCPBUGS-55471:fixes OVN-K external IP docs
2 parents 7b69cc0 + 4b409b9 commit 41cef81

File tree

2 files changed

+10
-10
lines changed

2 files changed

+10
-10
lines changed

modules/nw-networkpolicy-optimize-ovn.adoc

Lines changed: 9 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -104,11 +104,11 @@ spec:
104104
You can apply this optimization when only multiple selectors are expressed as one. In cases where selectors are based on different labels, it may not be possible to apply this optimization. In those cases, consider applying some new labels for network policy optimization specifically.
105105

106106
[id="nw-networkpolicy-external-ip-ovn_{context}"]
107-
== NetworkPolicies and external IPs in OVN-Kubernetes
107+
== NetworkPolicy CR and external IPs in OVN-Kubernetes
108108

109-
In OVN-Kubernetes, `NetworkPolicies` enforce strict isolation rules. If a service is exposed using an external IP, `NetworkPolicies` can block access from other namespaces unless explicitly configured.
109+
In OVN-Kubernetes, the `NetworkPolicy` custom resource (CR) enforces strict isolation rules. If a service is exposed using an external IP, a network policy can block access from other namespaces unless explicitly configured to allow traffic.
110110

111-
To allow access to external IPs across namespaces, create a `NetworkPolicy` that explicitly permits ingress from the required namespaces and ensures traffic is allowed to the designated service ports. Without allowing traffic to the required ports, access might still be restricted.
111+
To allow access to external IPs across namespaces, create a `NetworkPolicy` CR that explicitly permits ingress from the required namespaces and ensures traffic is allowed to the designated service ports. Without allowing traffic to the required ports, access might still be restricted.
112112

113113
.Example output
114114
[source,yaml]
@@ -117,7 +117,7 @@ To allow access to external IPs across namespaces, create a `NetworkPolicy` that
117117
kind: NetworkPolicy
118118
metadata:
119119
annotations:
120-
name: <policy_name> <1>
120+
name: <policy_name>
121121
namespace: openshift-ingress
122122
spec:
123123
ingress:
@@ -130,12 +130,14 @@ To allow access to external IPs across namespaces, create a `NetworkPolicy` that
130130
- from:
131131
- namespaceSelector:
132132
matchLabels:
133-
kubernetes.io/metadata.name: <namespace_name> <2>
133+
kubernetes.io/metadata.name: <my_namespace>
134134
podSelector: {}
135135
policyTypes:
136136
- Ingress
137137
----
138-
<1> Specify the policy name.
139-
<2> Specify the namespace name.
138+
+
139+
Where::
140+
`<policy_name>`: Specifies your name for the policy.
141+
`<my_namespace>`: Specifies the name of the namespace where the policy is deployed.
140142

141143
For more details, see "About network policy".

networking/understanding-networking.adoc

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ include::_attributes/common-attributes.adoc[]
66

77
toc::[]
88

9-
Understanding the fundamentals of networking in {product-title} ensures efficient and secure communication within your clusters and is essential for effective network administration. Key elements of networking in your environment include understanding how pods and services communicate, the role of IP addresses, and the use of DNS for service discovery.
9+
Understanding the fundamentals of networking in {product-title} ensures efficient and secure communication within your clusters and is essential for effective network administration. Key elements of networking in your environment include understanding how pods and services communicate, the role of IP addresses, and the use of DNS for service discovery.
1010

1111
// Introduction
1212
include::modules/nw-understanding-networking-networking-in-OpenShift.adoc[leveloffset=+1]
@@ -27,8 +27,6 @@ include::modules/nw-understanding-networking-what-is-a-client.adoc[leveloffset=+
2727
// Concepts and components
2828
include::modules/nw-understanding-networking-concepts-components.adoc[leveloffset=+1]
2929

30-
include::modules/nw-ne-changes-externalip-ovn.adoc[leveloffset=+1]
31-
3230
[role="_additional-resources"]
3331
.Additional resources
3432

0 commit comments

Comments
 (0)