@@ -77,13 +77,13 @@ spec:
7777 Action specifies the effect this rule will have on matching
7878 traffic. Currently the following actions are supported:
7979
80- - Accept: Accepts the selected traffic, allowing it to
81- egress. No further ClusterNetworkPolicy or NetworkPolicy
82- rules will be processed.
80+ - Accept: Accepts the selected traffic, and ensures that response
81+ traffic including "related" ICMP traffic is also allowed. No further
82+ egress ClusterNetworkPolicy or NetworkPolicy rules will be processed
83+ but any ingress rules at the destination do apply.
8384
84- - Deny: Drops the selected traffic. No further
85- ClusterNetworkPolicy or NetworkPolicy rules will be
86- processed.
85+ - Deny: Drops the selected traffic. No further ClusterNetworkPolicy or
86+ NetworkPolicy rules will be processed.
8787
8888 - Pass: Skips all further ClusterNetworkPolicy rules in the
8989 current tier for the selected traffic, and passes
@@ -588,11 +588,11 @@ spec:
588588 action :
589589 description : |-
590590 Action specifies the effect this rule will have on matching
591- traffic. Currently the following actions are supported:
591+ traffic. Currently, the following actions are supported:
592592
593- - Accept: Accepts the selected traffic, allowing it into
594- the destination . No further ClusterNetworkPolicy or
595- NetworkPolicy rules will be processed.
593+ - Accept: Accepts the selected traffic, and ensures that response
594+ traffic including "related" ICMP traffic is also allowed . No further
595+ ingress ClusterNetworkPolicy or NetworkPolicy rules will be processed.
596596
597597 Note: while Accept ensures traffic is accepted by
598598 Kubernetes network policy, it is still possible that the
0 commit comments