kubernetes - namespace 选择器中带有OR选项的NetworkPolicy

Question

如何在namespaceSelector中编写以下内容:

key = val或key1 = val1？

以下示例适用于AND，如何为OR选项编写内容？

matchExpressions:
            - {key: app, operator: In, values: [application]}
            - {key: app1, operator: In, values: [application1]}

我找到在值之间进行“或”操作的选项(请参见下图)，但在键之间却没有。

{key: app, operator: In, values: [application, app2, app3]}

Answer 1

对于matchExpressions的定义是，所有表达式都必须匹配(AND)。在官方 Kubernetes documentation中，您可以阅读:

All of the requirements, from both matchLabels and matchExpressions are ANDed together – they must all be satisfied in order to match.

您可以在网络策略中添加多个 from术语，因为它们只需要匹配一个(OR)。有关 behavior of to and from selectors的更多信息。