Skip to content

Commit 7277714

Browse files
authored
Add clarity about egress/ingress combination
In reference to kubernetes/kubernetes#97489 Add clarity in the documentation about the case of having an egress and ingress policy where one is blocking and the other is allowing.
1 parent 803400b commit 7277714

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

content/en/docs/concepts/services-networking/network-policies.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,8 @@ Pods become isolated by having a NetworkPolicy that selects them. Once there is
3535

3636
Network policies do not conflict; they are additive. If any policy or policies select a pod, the pod is restricted to what is allowed by the union of those policies' ingress/egress rules. Thus, order of evaluation does not affect the policy result.
3737

38+
For a network flow between two pods to be allowed, both the egress policy on the source pod and the ingress policy on the destination pod need to allow the traffic. If either the egress policy on the source, or the ingress policy on the destination denies the traffic, the traffic will be denied.
39+
3840
## The NetworkPolicy resource {#networkpolicy-resource}
3941

4042
See the [NetworkPolicy](/docs/reference/generated/kubernetes-api/{{< param "version" >}}/#networkpolicy-v1-networking-k8s-io) reference for a full definition of the resource.

0 commit comments

Comments
 (0)