Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Change wording on toServices limitations (see cilium#20067)
PR cilium#21052 updated Cilium documentation to say that, in network policy rules, `toServices` statements cannot be combined with `toPorts` statements. I believe it would be more informative for Cilium users to say (following RFC 2119) that `toServices` _must not_ be combined with `toPorts`, as technically Cilium accepts such a network policy as valid but handles it in the unexpected and potentially dangerous (e.g. if a setup relies on Cilium network policy to implement egress filtering) manner described in cilium#20067. Signed-off-by: Anton Tykhyy <atykhyy@gmail.com>
- Loading branch information