You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: rest_api/network_apis/egressfirewall-k8s-ovn-org-v1.adoc
+26-9Lines changed: 26 additions & 9 deletions
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,11 @@ toc::[]
11
11
Description::
12
12
+
13
13
--
14
-
EgressFirewall describes the current egress firewall for a Namespace. Traffic from a pod to an IP address outside the cluster will be checked against each EgressFirewallRule in the pod's namespace's EgressFirewall, in order. If no rule matches (or no EgressFirewall is present) then the traffic will be allowed by default.
14
+
EgressFirewall describes the current egress firewall for a Namespace.
15
+
Traffic from a pod to an IP address outside the cluster will be checked against
16
+
each EgressFirewallRule in the pod's namespace's EgressFirewall, in
17
+
order. If no rule matches (or no EgressFirewall is present) then the traffic
18
+
will be allowed by default.
15
19
--
16
20
17
21
Type::
@@ -191,18 +195,23 @@ Type::
191
195
192
196
| `dnsName`
193
197
| `string`
194
-
| dnsName is the domain name to allow/deny traffic to. If this is set, cidrSelector and nodeSelector must be unset. For a wildcard DNS name, the '*' will match only one label. Additionally, only a single '*' can be used at the beginning of the wildcard DNS name. For example, '*.example.com' will match 'sub1.example.com' but won't match 'sub2.sub1.example.com'
198
+
| dnsName is the domain name to allow/deny traffic to. If this is set, cidrSelector and nodeSelector must be unset.
199
+
For a wildcard DNS name, the '*' will match only one label. Additionally, only a single '*' can be
200
+
used at the beginning of the wildcard DNS name. For example, '*.example.com' will match 'sub1.example.com'
201
+
but won't match 'sub2.sub1.example.com'.
195
202
196
203
| `nodeSelector`
197
204
| `object`
198
-
| nodeSelector will allow/deny traffic to the Kubernetes node IP of selected nodes. If this is set, cidrSelector and DNSName must be unset.
205
+
| nodeSelector will allow/deny traffic to the Kubernetes node IP of selected nodes. If this is set,
206
+
cidrSelector and DNSName must be unset.
199
207
200
208
|===
201
209
=== .spec.egress[].to.nodeSelector
202
210
Description::
203
211
+
204
212
--
205
-
nodeSelector will allow/deny traffic to the Kubernetes node IP of selected nodes. If this is set, cidrSelector and DNSName must be unset.
213
+
nodeSelector will allow/deny traffic to the Kubernetes node IP of selected nodes. If this is set,
214
+
cidrSelector and DNSName must be unset.
206
215
--
207
216
208
217
Type::
@@ -221,11 +230,14 @@ Type::
221
230
222
231
| `matchExpressions[]`
223
232
| `object`
224
-
| A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
233
+
| A label selector requirement is a selector that contains values, a key, and an operator that
234
+
relates the key and values.
225
235
226
236
| `matchLabels`
227
237
| `object (string)`
228
-
| matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
238
+
| matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
239
+
map is equivalent to an element of matchExpressions, whose key field is "key", the
240
+
operator is "In", and the values array contains only "value". The requirements are ANDed.
A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
260
+
A label selector requirement is a selector that contains values, a key, and an operator that
261
+
relates the key and values.
249
262
--
250
263
251
264
Type::
@@ -267,11 +280,15 @@ Required::
267
280
268
281
| `operator`
269
282
| `string`
270
-
| operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
283
+
| operator represents a key's relationship to a set of values.
284
+
Valid operators are In, NotIn, Exists and DoesNotExist.
271
285
272
286
| `values`
273
287
| `array (string)`
274
-
| values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
288
+
| values is an array of string values. If the operator is In or NotIn,
289
+
the values array must be non-empty. If the operator is Exists or DoesNotExist,
290
+
the values array must be empty. This array is replaced during a strategic
Copy file name to clipboardExpand all lines: rest_api/network_apis/network-apis-index.adoc
+5-1Lines changed: 5 additions & 1 deletion
Original file line number
Diff line number
Diff line change
@@ -69,7 +69,11 @@ Type::
69
69
Description::
70
70
+
71
71
--
72
-
EgressFirewall describes the current egress firewall for a Namespace. Traffic from a pod to an IP address outside the cluster will be checked against each EgressFirewallRule in the pod's namespace's EgressFirewall, in order. If no rule matches (or no EgressFirewall is present) then the traffic will be allowed by default.
72
+
EgressFirewall describes the current egress firewall for a Namespace.
73
+
Traffic from a pod to an IP address outside the cluster will be checked against
74
+
each EgressFirewallRule in the pod's namespace's EgressFirewall, in
75
+
order. If no rule matches (or no EgressFirewall is present) then the traffic
0 commit comments