From b51b1d6b1d4274b8728f5023de4ec232924791a7 Mon Sep 17 00:00:00 2001 From: Qiming Teng Date: Fri, 8 Apr 2022 16:00:56 +0800 Subject: [PATCH] Move NetworkPolicy into examples --- .../services-networking/network-policies.md | 37 +------------------ content/en/examples/examples_test.go | 2 + .../service/networking/networkpolicy.yaml | 35 ++++++++++++++++++ 3 files changed, 38 insertions(+), 36 deletions(-) create mode 100644 content/en/examples/service/networking/networkpolicy.yaml diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md index 884cfc960d..dc4e2b76ca 100644 --- a/content/en/docs/concepts/services-networking/network-policies.md +++ b/content/en/docs/concepts/services-networking/network-policies.md @@ -45,42 +45,7 @@ See the [NetworkPolicy](/docs/reference/generated/kubernetes-api/{{< param "vers An example NetworkPolicy might look like this: -```yaml -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: test-network-policy - namespace: default -spec: - podSelector: - matchLabels: - role: db - policyTypes: - - Ingress - - Egress - ingress: - - from: - - ipBlock: - cidr: 172.17.0.0/16 - except: - - 172.17.1.0/24 - - namespaceSelector: - matchLabels: - project: myproject - - podSelector: - matchLabels: - role: frontend - ports: - - protocol: TCP - port: 6379 - egress: - - to: - - ipBlock: - cidr: 10.0.0.0/24 - ports: - - protocol: TCP - port: 5978 -``` +{{< codenew file="service/networking/networkpolicy.yaml" >}} {{< note >}} POSTing this to the API server for your cluster will have no effect unless your chosen networking solution supports network policy. diff --git a/content/en/examples/examples_test.go b/content/en/examples/examples_test.go index eaf6e5808e..27eae2eadf 100644 --- a/content/en/examples/examples_test.go +++ b/content/en/examples/examples_test.go @@ -647,6 +647,7 @@ func TestExampleObjectSchemas(t *testing.T) { "service/networking": { "curlpod": {&apps.Deployment{}}, "custom-dns": {&api.Pod{}}, + "default-ingressclass": {&networking.IngressClass{}}, "dual-stack-default-svc": {&api.Service{}}, "dual-stack-ipfamilies-ipv6": {&api.Service{}}, "dual-stack-ipv6-svc": {&api.Service{}}, @@ -662,6 +663,7 @@ func TestExampleObjectSchemas(t *testing.T) { "name-virtual-host-ingress": {&networking.Ingress{}}, "name-virtual-host-ingress-no-third-host": {&networking.Ingress{}}, "namespaced-params": {&networking.IngressClass{}}, + "networkpolicy": {&networking.NetworkPolicy{}}, "network-policy-allow-all-egress": {&networking.NetworkPolicy{}}, "network-policy-allow-all-ingress": {&networking.NetworkPolicy{}}, "network-policy-default-deny-egress": {&networking.NetworkPolicy{}}, diff --git a/content/en/examples/service/networking/networkpolicy.yaml b/content/en/examples/service/networking/networkpolicy.yaml new file mode 100644 index 0000000000..e91eed2f67 --- /dev/null +++ b/content/en/examples/service/networking/networkpolicy.yaml @@ -0,0 +1,35 @@ +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: test-network-policy + namespace: default +spec: + podSelector: + matchLabels: + role: db + policyTypes: + - Ingress + - Egress + ingress: + - from: + - ipBlock: + cidr: 172.17.0.0/16 + except: + - 172.17.1.0/24 + - namespaceSelector: + matchLabels: + project: myproject + - podSelector: + matchLabels: + role: frontend + ports: + - protocol: TCP + port: 6379 + egress: + - to: + - ipBlock: + cidr: 10.0.0.0/24 + ports: + - protocol: TCP + port: 5978 +