Bug 1717996
| Summary: | api-allow-http-and-https network policy example incorrect | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Samuel Padgett <spadgett> |
| Component: | Management Console | Assignee: | Samuel Padgett <spadgett> |
| Status: | CLOSED ERRATA | QA Contact: | Yadan Pei <yapei> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 4.1.0 | CC: | aos-bugs, jokerman, mmccomas, yapei |
| Target Milestone: | --- | ||
| Target Release: | 4.1.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: |
Previously, the web console NetworkPolicy YAML template `api-allow-http-and-https` was incorrect and couldn't be created without modifications. This has been fixed, and the template now works properly as-is.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2019-06-26 08:50:23 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
NetworkPolicy example 'api-allow-http-and-https' is correct now.
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: api-allow-http-and-https
namespace: yapei1
spec:
podSelector:
matchLabels:
app: api
ingress:
- from:
- podSelector:
matchLabels:
role: monitoring
ports:
- protocol: TCP
port: 80
- protocol: TCP
port: 443
Verified on 4.1.0-0.nightly-2019-06-20-015058
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:1589 |
The network policy example YAML template is incorrect. It should be ``` apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: api-allow-http-and-https namespace: default spec: podSelector: matchLabels: app: api ingress: - from: - podSelector: matchLabels: role: monitoring ports: - protocol: TCP port: 80 - protocol: TCP port: 443 ```