没有匹配 /, Kind=NetworkPolicy

Question

我想在命名空间上设置拒绝所有出口策略

这是yaml文件

apiVersion: v1
kind: NetworkPolicy
metadata:
  name: default-deny-egress-namespace
  namespace: myns
spec:
  podSelector:
    matchLabels: {}
  policyTypes:
  - Egress

这给了我以下错误

error: unable to recognize "deny-all-egress-namespace.yaml": no matches for /, Kind=NetworkPolicy

我的服务器是1.7版本

Answer 1

NetworkPolicy 在 networking.k8s.io 组下 v1 版本。

这样试试。

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: default-deny-egress-namespace
  namespace: myns
spec:
  podSelector:
    matchLabels: {}
  policyTypes:
  - Egress

Engress introduced in Kubernetes v1.8

并且 v1.8+ 支持以上 NetworkPolicy 结构

勾选documentation

没有匹配 /, Kind=NetworkPolicy

no matches for /, Kind=NetworkPolicy

kubernetes

kubernetes-networkpolicy