Skip to content
This repository has been archived by the owner on Jul 22, 2024. It is now read-only.

Lab 5 - Command does not limit ingress #36

Open
bhpratt opened this issue Jan 11, 2018 · 1 comment
Open

Lab 5 - Command does not limit ingress #36

bhpratt opened this issue Jan 11, 2018 · 1 comment

Comments

@bhpratt
Copy link
Contributor

bhpratt commented Jan 11, 2018

This command does not correctly limit ingress: kubectl annotate ns advanced-policy-demo "net.beta.kubernetes.io/network-policy={\"ingress\":{\"isolation\":\"DefaultDeny\"}}"

When we verify the YAML later in the lab, ingress is still set to allow:

- apiVersion: v1
  kind: profile
  metadata:
    name: k8s_ns.advanced-policy-demo
    tags:
    - k8s_ns.advanced-policy-demo
  spec:
    egress:
    - action: allow
      destination: {}
      source: {}
    ingress:
    - action: allow
      destination: {}
      source: {}
@vwilburn
Copy link
Contributor

A side discussion: although Ingress incurs a charge, we'll leave this content in and mark it optional. The ending test will NOT ask questions about this paid feature.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants