Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[conn-list explain] explanation output consider possible improvements #506

Open
2 tasks
adisos opened this issue Feb 16, 2025 · 1 comment
Open
2 tasks

Comments

@adisos
Copy link
Collaborator

adisos commented Feb 16, 2025

  • more explanations to review and consider if can be improved:
- [NP] frontend/asset-cache-netpol // Ingress rule #1 (protocols/ports not referenced)
- [NP] frontend/default-deny-in-namespace-frontend // Ingress (captured but not selected by any Ingress rule - no rules defined)
  • is ANP also explained in the "detailed" format? ( " is selected by the policy, but is not selected by any rule"
@adisos adisos changed the title explanation output consider possible improvements [conn-list explain] explanation output consider possible improvements Feb 16, 2025
@adisos
Copy link
Collaborator Author

adisos commented Feb 16, 2025

revisit the following: (from list --dirpath tests/vm_example/)

Connections between default/new-vm-3[Pod] => default/new-vm-2[Pod]:

Allowed connections:
        Allowed TCP:[80] due to the following policies // rules:
                Egress (Allowed)
                        [NP] default/policy2 // Egress rule #1
                Ingress (Allowed)
                        [NP] default/policy3 // Ingress rule #1

Denied connections:
        Denied TCP:[1-79,81-65535], UDP, SCTP due to the following policies // rules:
                Egress (Denied)
                        NP list:
                                - [NP] default/default-deny // Egress (default/new-vm-3[Pod] is selected by the policy, but default/new-vm-2[Pod] is not selected by any Egress rule - no rules defined)
                                - [NP] default/policy0 // Egress (default/new-vm-3[Pod] is selected by the policy, but default/new-vm-2[Pod] is not selected by any Egress rule)
                                - [NP] default/policy11 // Egress (default/new-vm-3[Pod] is selected by the policy, but default/new-vm-2[Pod] is not selected by any Egress rule)
                                - [NP] default/policy13 // Egress (default/new-vm-3[Pod] is selected by the policy, but default/new-vm-2[Pod] is not selected by any Egress rule)
                                - [NP] default/policy2 // Egress rule #1 (protocols/ports not referenced)
                                - [NP] default/policy5 // Egress (default/new-vm-3[Pod] is selected by the policy, but default/new-vm-2[Pod] is not selected by any Egress rule)

                Ingress (Denied)
                        NP list:
                                - [NP] default/default-deny // Ingress (default/new-vm-2[Pod] is selected by the policy, but default/new-vm-3[Pod] is not selected by any Ingress rule - no rules defined)
                                - [NP] default/policy14 // Ingress (default/new-vm-2[Pod] is selected by the policy, but default/new-vm-3[Pod] is not selected by any Ingress rule)
                                - [NP] default/policy16 // Ingress (default/new-vm-2[Pod] is selected by the policy, but default/new-vm-3[Pod] is not selected by any Ingress rule)
                                - [NP] default/policy18 // Ingress (default/new-vm-2[Pod] is selected by the policy, but default/new-vm-3[Pod] is not selected by any Ingress rule)
                                - [NP] default/policy3 // Ingress rule #1 (protocols/ports not referenced)
                                - [NP] default/policy6 // Ingress (default/new-vm-2[Pod] is selected by the policy, but default/new-vm-3[Pod] is not selected by any Ingress rule)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant