From 5a8bd9216a6aa3478cc9163530cbce363e746bf2 Mon Sep 17 00:00:00 2001 From: Dan Winship Date: Wed, 4 Aug 2021 11:50:21 -0400 Subject: [PATCH] Add a manual anchor to an interesting spot in the NetworkPolicy docs --- content/en/docs/concepts/services-networking/network-policies.md | 1 + 1 file changed, 1 insertion(+) diff --git a/content/en/docs/concepts/services-networking/network-policies.md b/content/en/docs/concepts/services-networking/network-policies.md index ec29f1d813..9c6bff5e75 100644 --- a/content/en/docs/concepts/services-networking/network-policies.md +++ b/content/en/docs/concepts/services-networking/network-policies.md @@ -154,6 +154,7 @@ contains two elements in the `from` array, and allows connections from Pods in t When in doubt, use `kubectl describe` to see how Kubernetes has interpreted the policy. + __ipBlock__: This selects particular IP CIDR ranges to allow as ingress sources or egress destinations. These should be cluster-external IPs, since Pod IPs are ephemeral and unpredictable. Cluster ingress and egress mechanisms often require rewriting the source or destination IP