Docs: add note about kube-apiserver entity

Adds a note to the docs that `kube-apiserver` entity is not available for ingress traffic in AKS, EKS and GKE. Signed-off-by: darox <maderdario@gmail.com>
cilium · May 16, 2024 · 3989f02 · 3989f02
1 parent e1cf5a1
commit 3989f02
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/Documentation/security/policy/language.rst b/Documentation/security/policy/language.rst
@@ -361,6 +361,10 @@ all
     The all entity represents the combination of all known clusters as well
     world and whitelists all communication.
 
+.. note:: The ``kube-apiserver`` entity is unavailable in some Kubernetes 
+   distributions, such as Azure AKS and GCP GKE for ingress traffic. You could still use ``cluster`` which
+   is broader.
+
 Access to/from kube-apiserver
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~