openshift/openshift-docs
1
0
Fork 0
mirror of https://github.com/openshift/openshift-docs.git synced 2026-02-05 12:46:18 +01:00
Code Issues Releases Activity

OSDOCS#15779: Network policies for the SSCSI Operator

Browse Source
This commit is contained in:
srir
2025-10-09 21:11:17 +05:30
committed by openshift-cherrypick-robot
parent cf6d45679b
commit d4e4954e6a
2 changed files with 30 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
modules/persistent-storage-csi-secrets-store-network-policies.adoc Normal file
View File

@@ -0,0 +1,27 @@
// Module included in the following assemblies:
//
// * storage/container_storage_interface/persistent-storage-csi-secrets-store.adoc
//
:_mod-docs-content-type: CONCEPT
[id="persistent-storage-csi-secrets-store-network-policies_{context}"]
= Support for network policies
The {secrets-store-operator} includes pre-defined `NetworkPolicies` resources for enhanced security. These policies govern the ingress and egress traffic for both the SS-CSI Operator and its associated driver.
The following table summarizes the default ingress and egress rules:
[cols="1,1,1,1", options="header"]
|===
| Component | Ingress ports | Egress ports | Description
| {secrets-store-operator}
| `8443`
| `6443`
| Accesses metrics and communicates with the API server
| {secrets-store-driver}
| `8095`
| `6443`
| Accesses metrics and communicates with the API server
|===

4
storage/container_storage_interface/persistent-storage-csi-secrets-store.adoc
View File

@@ -1,6 +1,6 @@
:_mod-docs-content-type: ASSEMBLY
[id="persistent-storage-csi-secrets-store"]
= {secrets-store-driver}
= Secrets Store Container Storage Interface Driver Operator
include::_attributes/common-attributes.adoc[]
:context: persistent-storage-csi-secrets-store
@@ -24,6 +24,8 @@ include::modules/persistent-storage-csi-secrets-store-disconnect-environment.ado
For more information about disconnected environments, see xref:../../disconnected/about.adoc#about[About disconnected environments].
====
include::modules/persistent-storage-csi-secrets-store-network-policies.adoc[leveloffset=+1]
include::modules/persistent-storage-csi-secrets-store-driver-install.adoc[leveloffset=+1]
.Next steps