Skip to content

Commit a0fb810

Browse files
committed
OSDOCS3304: Update ovnkubernetes NetworkPolicy example
1 parent 408001a commit a0fb810

File tree

1 file changed

+20
-10
lines changed

1 file changed

+20
-10
lines changed

modules/cluster-logging-deploy-multitenant.adoc

Lines changed: 20 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -40,21 +40,31 @@ $ oc adm pod-network join-projects --to=openshift-operators-redhat openshift-log
4040
$ oc label namespace openshift-operators-redhat project=openshift-operators-redhat
4141
----
4242

43-
.. Create a network policy object in the `openshift-logging` namespace that allows ingress from the `openshift-operators-redhat` project to the `openshift-logging` project. For example:
43+
.. Create a network policy object in the `openshift-logging` namespace that allows ingress from the `openshift-operators-redhat`, `openshift-monitoring` and `openshift-ingress` projects to the openshift-logging project. For example:
4444
+
4545
[source,yaml]
4646
----
47-
kind: NetworkPolicy
4847
apiVersion: networking.k8s.io/v1
48+
kind: NetworkPolicy
4949
metadata:
50-
name: allow-openshift-operators-redhat
51-
namespace: openshift-logging
50+
name: allow-from-openshift-monitoring-ingress-operators-redhat
5251
spec:
5352
ingress:
54-
- from:
55-
- podSelector: {}
56-
- from:
57-
- namespaceSelector:
58-
matchLabels:
59-
project: "openshift-operators-redhat"
53+
- from:
54+
- podSelector: {}
55+
- from:
56+
- namespaceSelector:
57+
matchLabels:
58+
project: "openshift-operators-redhat"
59+
- from:
60+
- namespaceSelector:
61+
matchLabels:
62+
name: "openshift-monitoring"
63+
- from:
64+
- namespaceSelector:
65+
matchLabels:
66+
network.openshift.io/policy-group: ingress
67+
podSelector: {}
68+
policyTypes:
69+
- Ingress
6070
----

0 commit comments

Comments
 (0)