kubernetes -/, Kind=NetworkPolicy 没有匹配项

Question

我想在命名空间上设置拒绝所有导出策略

这是yaml文件

apiVersion: v1
kind: NetworkPolicy
metadata:
  name: default-deny-egress-namespace
  namespace: myns
spec:
  podSelector:
    matchLabels: {}
  policyTypes:
  - Egress

这给了我以下错误

error: unable to recognize "deny-all-egress-namespace.yaml": no matches for /, Kind=NetworkPolicy

我在服务器的 1.7 版上

Answer 1

NetworkPolicy 在 networking.k8s.io 下与 v1 组版本。

像这样试试。

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: default-deny-egress-namespace
  namespace: myns
spec:
  podSelector:
    matchLabels: {}
  policyTypes:
  - Egress

Engress introduced in Kubernetes v1.8

v1.8+ 也支持上述 NetworkPolicy 结构

查看 documentation