From e11e63a28686b8918d9484e1a8889cec05539dea Mon Sep 17 00:00:00 2001 From: Mike McKiernan Date: Tue, 6 Apr 2021 16:46:54 -0400 Subject: [PATCH] BZ#1927841: host network routers and OVN-K This is a followup request from Andrew. We overlooked this page for the admonition. --- modules/nw-networkpolicy-project-defaults.adoc | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/modules/nw-networkpolicy-project-defaults.adoc b/modules/nw-networkpolicy-project-defaults.adoc index 212502505391..04dc8235a82c 100644 --- a/modules/nw-networkpolicy-project-defaults.adoc +++ b/modules/nw-networkpolicy-project-defaults.adoc @@ -31,7 +31,12 @@ configured for your cluster. The default template name is `project-request`. . In the template, add each `NetworkPolicy` object as an element to the `objects` parameter. The `objects` parameter accepts a collection of one or more objects. + -In the following example, the `objects` parameter collection includes several `NetworkPolicy` objects: +In the following example, the `objects` parameter collection includes several `NetworkPolicy` objects. ++ +[IMPORTANT] +==== +For the OVN-Kubernetes network provider plug-in, when the Ingress Controller is configured to use the `HostNetwork` endpoint publishing strategy, there is no supported way to apply network policy so that ingress traffic is allowed and all other traffic is denied. +==== + [source,yaml] ----