summaryrefslogtreecommitdiffstats
path: root/site/intel-pod17/software/charts/kubernetes/container-networking/policies.yaml
blob: 1d34c8a5eae3c3653fa4bb47c9496cf00db0119a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
---
schema: nc/Policy/v1
metadata:
  schema: metadata/Document/v1
  name: site-policy
  labels:
    name: site-policy
  layeringDefinition:
    abstract: false
    layer: site
    parentSelector:
      name: type-policy
    actions:
    - method: merge
      path: .
  storagePolicy: cleartext
data:
  policy:
    sitelevel:
      priority: 5
      rules: []
    hostendpoints:
      priority: 9
      rules:
      - apiVersion: projectcalico.org/v3
        kind: HostEndpoint
        metadata:
          name: pod17-node1-oam
          labels:
            host: nc-control
            intf-alias: oam
        spec:
          interfaceName: dmz.170
          node: pod17-node1
          expectedIPs:
          - 10.10.170.21
      - apiVersion: projectcalico.org/v3
        kind: HostEndpoint
        metadata:
          name: pod17-node1-ksn
          labels:
            host: nc-control
            intf-alias: ksn
        spec:
          interfaceName: data1.172
          node: pod17-node1
      - apiVersion: projectcalico.org/v3
        kind: HostEndpoint
        metadata:
          name: pod17-node2-oam
          labels:
            host: nc-control
            intf-alias: oam
        spec:
          interfaceName: dmz.170
          node: pod17-node2
          expectedIPs:
          - 10.10.170.22
      - apiVersion: projectcalico.org/v3
        kind: HostEndpoint
        metadata:
          name: pod17-node2-ksn
          labels:
            host: nc-control
            intf-alias: ksn
        spec:
          interfaceName: data1.172
          node: pod17-node2
      - apiVersion: projectcalico.org/v3
        kind: HostEndpoint
        metadata:
          name: pod17-node3-oam
          labels:
            host: nc-control
            intf-alias: oam
        spec:
          interfaceName: dmz.170
          node: pod17-node3
          expectedIPs:
          - 10.10.170.23
      - apiVersion: projectcalico.org/v3
        kind: HostEndpoint
        metadata:
          name: pod17-node3-ksn
          labels:
            host: nc-control
            intf-alias: ksn
        spec:
          interfaceName: data1.172
          node: pod17-node3
      - apiVersion: projectcalico.org/v3
        kind: HostEndpoint
        metadata:
          name: pod17-node4-oam
          labels:
            host: nc-compute
            intf-alias: oam
        spec:
          interfaceName: dmz.170
          node: pod17-node4
          expectedIPs:
          - 10.10.170.24
      - apiVersion: projectcalico.org/v3
        kind: HostEndpoint
        metadata:
          name: pod17-node4-ksn
          labels:
            host: nc-compute
            intf-alias: ksn
        spec:
          interfaceName: data1.172
          node: pod17-node4
      - apiVersion: projectcalico.org/v3
        kind: HostEndpoint
        metadata:
          name: pod17-node5-oam
          labels:
            host: nc-compute
            intf-alias: oam
        spec:
          interfaceName: dmz.170
          node: pod17-node5
          expectedIPs:
          - 10.10.170.25
      - apiVersion: projectcalico.org/v3
        kind: HostEndpoint
        metadata:
          name: pod17-node5-ksn
          labels:
            host: nc-compute
            intf-alias: ksn
        spec:
          interfaceName: data1.172
          node: pod17-node5
...