docs: Clarify wildcards and subdomains in FQDN policies

Signed-off-by: flxman <felix.farjsjo@gmail.com>
tklauser · Nov 21, 2022 · 933bdcb · 933bdcb
1 parent cf354e9
commit 933bdcb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Documentation/security/policy/language.rst b/Documentation/security/policy/language.rst
@@ -556,7 +556,7 @@ IPs to be allowed are selected via:
 
   * ``*`` within a domain allows 0 or more valid DNS characters, except for the
     ``.`` separator. ``*.cilium.io`` will match ``sub.cilium.io`` but not
-    ``cilium.io``. ``part*ial.com`` will match ``partial.com`` and
+    ``cilium.io`` or ``sub.sub.cilium.io``. ``part*ial.com`` will match ``partial.com`` and
     ``part-extra-ial.com``.
   * ``*`` alone matches all names, and inserts all cached DNS IPs into this
     rule.