openshift/openshift-docs
1
0
Fork 0
mirror of https://github.com/openshift/openshift-docs.git synced 2026-02-05 12:46:18 +01:00
Code Issues Releases Activity

Merge pull request #86626 from openshift-cherrypick-robot/cherry-pick-85972-to-enterprise-4.18

Browse Source
This commit is contained in:
Joe Aldinger
2024-12-30 10:16:32 -05:00
committed by GitHub
parent a05a6cbede 99862354ec
commit 67ffab549e
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
modules/nw-ovn-k-adminnetwork-policy.adoc
View File

@@ -63,7 +63,7 @@ spec:
custom-anp: tenant-1
----
<1> Specify a name for your ANP.
<2> The `spec.priority` field supports a maximum of 100 ANP in the values of 0-99 in a cluster. The lower the value the higher the precedence. Creating `AdminNetworkPolicy` with the same priority creates a nondeterministic outcome.
<2> The `spec.priority` field supports a maximum of 100 ANPs in the range of values `0-99` in a cluster. The lower the value, the higher the precedence because the range is read in order from the lowest to highest value. Because there is no guarantee which policy takes precedence when ANPs are created at the same priority, set ANPs at different priorities so that precedence is deliberate.
<3> Specify the namespace to apply the ANP resource.
<4> ANP have both ingress and egress rules. ANP rules for `spec.ingress` field accepts values of `Pass`, `Deny`, and `Allow` for the `action` field.
<5> Specify a name for the `ingress.name`.

2
modules/nw-ovn-k-anp-best-practices.adoc
View File

@@ -9,7 +9,7 @@
When building `AdminNetworkPolicy` (ANP) resources, you might consider the following when creating your policies:
* Because there is no guarantee which policy will take precedence when overlapping ANP are created, you should create ANP at different priorities so that precedence is well defined.
* You can create ANPs that have the same priority. If you do create two ANPs at the same priority, ensure that they do not apply overlapping rules to the same traffic. Only one rule per value is applied and there is no guarantee which rule is applied when there is more than one at the same priority value. Because there is no guarantee which policy takes precedence when overlapping ANPs are created, set ANPs at different priorities so that precedence is well defined.
* Administrators must create ANP that apply to user namespaces not system namespaces.