From 8bc271bfa5ec1e79afd75ad0701054c721972d28 Mon Sep 17 00:00:00 2001 From: Steven Smith Date: Mon, 1 Nov 2021 14:42:59 -0400 Subject: [PATCH] Update matchLabels parameter in network-policy --- modules/nw-networkpolicy-multitenant-isolation.adoc | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/modules/nw-networkpolicy-multitenant-isolation.adoc b/modules/nw-networkpolicy-multitenant-isolation.adoc index 8ab369f009fd..1cd544ef3c58 100644 --- a/modules/nw-networkpolicy-multitenant-isolation.adoc +++ b/modules/nw-networkpolicy-multitenant-isolation.adoc @@ -43,13 +43,17 @@ spec: - from: - namespaceSelector: matchLabels: - network.openshift.io/policy-group: ingress + policy-group.network.openshift.io/ingress="" podSelector: {} policyTypes: - Ingress EOF ---- - ++ +[NOTE] +==== +`policy-group.network.openshift.io/ingress=""` is the preferred namespace selector label for OpenShift SDN. You can use the `network.openshift.io/policy-group: ingress` namespace selector label, but this is a legacy label. +==== .. A policy named `allow-from-openshift-monitoring`: + [source,terminal]