Skip to content

Commit 59c8a3d

Browse files
network traffic plugin changes and getting started with network isolation
1 parent bce3971 commit 59c8a3d

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

examples/getting-started.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -185,8 +185,15 @@ kubectl exec -it $HELLOWORLD_POD_HS1 -n hs1 --kubeconfig=provider.conf -- curl $
185185

186186
# Test connectivity from hs2 to hs1 using the IP
187187
kubectl exec -it $HELLOWORLD_POD_HS2 -n hs2 --kubeconfig=provider.conf -- curl $HS1_POD_IP:5000
188+
189+
kubectl get networkpolicy -o yaml restrict-cross-ns-traffic -n hs1
190+
kubectl get networkpolicy -o yaml restrict-cross-ns-traffic -n hs2
188191
```
189192

193+
194+
You should see that each policy’s ingress section now includes a rule that uses a namespaceSelector matching the other namespace (using the label `kubernetes.io/metadata.name`).
195+
196+
190197
The connection should be allowed
191198

192199

@@ -204,7 +211,7 @@ kubectl exec -it $HELLOWORLD_POD_HS1 -n hs1 --kubeconfig=provider.conf -- curl $
204211
kubectl exec -it $HELLOWORLD_POD_HS2 -n hs2 --kubeconfig=provider.conf -- curl $HS1_POD_IP:5000
205212
```
206213

207-
You should see that each policy’s ingress section now includes a rule that uses a namespaceSelector matching the other namespace (using the label `kubernetes.io/metadata.name`).
214+
208215

209216
## Clean Up
210217

0 commit comments

Comments
 (0)