Skip to content

Commit 914705c

Browse files
mazdaknctauchen
authored andcommitted
markup
1 parent d851316 commit 914705c

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

calico/network-policy/policy-tiers/tiered-policy.mdx

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ spec:
7777
kubernetes.io/metadata.name: default
7878
```
7979
80-
$[prodname] places the above resource in `kube-admin` tier.
80+
$[prodname] enforces Kubernetes `ClusterNetworkPolicy` resources with `spec.tier: Admin` in the `kube-admin` tier.
8181

8282
In addition to `ClusterNetworkPolicy` resources, you can also add $[prodname] `NetworkPolicy`/`GlobalNetworkPolicy` resources
8383
to the kube-admin `Tier`. The `ClusterNetworkPolicy` `priority` field maps to the `order` field in the $[prodname]
@@ -98,7 +98,7 @@ spec:
9898
priority: 1
9999
subject:
100100
namespaces:
101-
matchLabels: {}
101+
matchLabels: {}
102102
ingress:
103103
- name: deny-all-ingress
104104
action: "Deny"
@@ -107,7 +107,7 @@ spec:
107107
matchLabels: {}
108108
```
109109

110-
$[prodname] places the above resource in `kube-baseline` tier.
110+
$[prodname] places a Kubernetes `ClusterNetworkPolicy` with `spec.tier: Baseline`, like the one above, in the `kube-baseline` tier.
111111

112112
In addition to the `ClusterNetworkPolicy` resource, you can also add $[prodname] `NetworkPolicy`/`GlobalNetworkPolicy` resources
113113
to the kube-baseline `Tier`. The `ClusterNetworkPolicy` `priority` field maps to the `order` field in the $[prodname]

0 commit comments

Comments
 (0)