From 46230dedf5db310465d6a873cf40230060ea9869 Mon Sep 17 00:00:00 2001 From: Aline Abler Date: Wed, 12 Jun 2024 11:16:36 +0200 Subject: [PATCH 1/2] Make mention of the new CiliumNetworkPolicy in the appropriate documentation --- .../ROOT/pages/how-to/remove-default-networkpolicies.adoc | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/modules/ROOT/pages/how-to/remove-default-networkpolicies.adoc b/docs/modules/ROOT/pages/how-to/remove-default-networkpolicies.adoc index 39f3a979..d8ad3a50 100644 --- a/docs/modules/ROOT/pages/how-to/remove-default-networkpolicies.adoc +++ b/docs/modules/ROOT/pages/how-to/remove-default-networkpolicies.adoc @@ -1,9 +1,10 @@ = Remove Default NetworkPolicies -In every namespace 2 `NetworkPolicies` are created and maintained by {product}: +In every namespace 2 `NetworkPolicies` and one `CiliumNetworkPolicy` are created and maintained by {product}: -. `allow-from-other-namespaces`: This policy allows the Router and other system components to connect to the pods. -. `allow-from-same-namespace`: This policy allows connections between pods in the same namespace. +. `networkpolicy/allow-from-other-namespaces`: This policy allows the Router and other system components to connect to the pods. +. `networkpolicy/allow-from-same-namespace`: This policy allows connections between pods in the same namespace. +. `ciliumnetworkpolicy/allow-from-cluster-nodes`: This policy allows cluster nodes to connect to the pods. NOTE: {product} automatically reverts any changes made in these policy objects. From 670fabf8b0d9bedaf3f058aad8b4bbd641d53afd Mon Sep 17 00:00:00 2001 From: Aline Abler Date: Wed, 12 Jun 2024 12:04:26 +0200 Subject: [PATCH 2/2] Apply suggestions from code review Co-authored-by: Simon Gerber --- .../ROOT/pages/how-to/remove-default-networkpolicies.adoc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/modules/ROOT/pages/how-to/remove-default-networkpolicies.adoc b/docs/modules/ROOT/pages/how-to/remove-default-networkpolicies.adoc index d8ad3a50..4accb40e 100644 --- a/docs/modules/ROOT/pages/how-to/remove-default-networkpolicies.adoc +++ b/docs/modules/ROOT/pages/how-to/remove-default-networkpolicies.adoc @@ -2,9 +2,9 @@ In every namespace 2 `NetworkPolicies` and one `CiliumNetworkPolicy` are created and maintained by {product}: -. `networkpolicy/allow-from-other-namespaces`: This policy allows the Router and other system components to connect to the pods. +. `networkpolicy/allow-from-other-namespaces`: This policy allows system components such as the monitoring stack to connect to the pods. . `networkpolicy/allow-from-same-namespace`: This policy allows connections between pods in the same namespace. -. `ciliumnetworkpolicy/allow-from-cluster-nodes`: This policy allows cluster nodes to connect to the pods. +. `ciliumnetworkpolicy/allow-from-cluster-nodes`: This policy allows the OpenShift ingress router and other system components that run in the host network namespace to connect to the pods. NOTE: {product} automatically reverts any changes made in these policy objects.