BZ#1927841: host network routers and OVN-K

mikemckiernan · mikemckiernan · commit e11e63a28686 · 2021-04-07T10:45:21.000-04:00
This is a followup request from Andrew. We
overlooked this page for the admonition.
diff --git a/modules/nw-networkpolicy-project-defaults.adoc b/modules/nw-networkpolicy-project-defaults.adoc
@@ -31,7 +31,12 @@ configured for your cluster. The default template name is `project-request`.
 
 . In the template, add each `NetworkPolicy` object as an element to the `objects` parameter. The `objects` parameter accepts a collection of one or more objects.
 +
-In the following example, the `objects` parameter collection includes several `NetworkPolicy` objects:
+In the following example, the `objects` parameter collection includes several `NetworkPolicy` objects.
++
+[IMPORTANT]
+====
+For the OVN-Kubernetes network provider plug-in, when the Ingress Controller is configured to use the `HostNetwork` endpoint publishing strategy, there is no supported way to apply network policy so that ingress traffic is allowed and all other traffic is denied.
+====
 +
 [source,yaml]
 ----

Original file line number	Diff line number	Diff line change
@@ -31,7 +31,12 @@ configured for your cluster. The default template name is `project-request`.
`31`	`31`
`32`	`32`	. In the template, add each `NetworkPolicy` object as an element to the `objects` parameter. The `objects` parameter accepts a collection of one or more objects.
`33`	`33`	`+`
`34`		-In the following example, the `objects` parameter collection includes several `NetworkPolicy` objects:
	`34`	+In the following example, the `objects` parameter collection includes several `NetworkPolicy` objects.
	`35`	`++`
	`36`	`+[IMPORTANT]`
	`37`	`+====`
	`38`	+For the OVN-Kubernetes network provider plug-in, when the Ingress Controller is configured to use the `HostNetwork` endpoint publishing strategy, there is no supported way to apply network policy so that ingress traffic is allowed and all other traffic is denied.
	`39`	`+====`
`35`	`40`	`+`
`36`	`41`	`[source,yaml]`
`37`	`42`	`----`