Skip to main content
apiVersion: v1alpha1
kind: NetworkRuleConfig
name: ingress-apid # Name of the config document.
# Port selector defines which ports and protocols on the host are affected by the rule.
portSelector:
    # Ports defines a list of port ranges or single ports.
    ports:
        - 50000
    protocol: tcp # Protocol defines traffic protocol (e.g. TCP or UDP).
# Ingress defines which source subnets are allowed to access the host ports/protocols defined by the `portSelector`.
ingress:
    - subnet: 192.168.0.0/16 # Subnet defines a source subnet.
FieldTypeDescriptionValue(s)
namestringName of the config document.
portSelectorRulePortSelectorPort selector defines which ports and protocols on the host are affected by the rule.
ingressIngressRuleIngress defines which source subnets are allowed to access the host ports/protocols defined by the portSelector.

​
portSelector

RulePortSelector is a port selector for the network rule.
FieldTypeDescriptionValue(s)
portsPortRanges
protocolProtocolProtocol defines traffic protocol (e.g. TCP or UDP).tcp
udp
icmp
icmpv6

​
ingress[]

IngressRule is a ingress rule.
FieldTypeDescriptionValue(s)
subnetPrefixSubnet defines a source subnet.
exceptPrefixExcept defines a source subnet to exclude from the rule, it gets excluded from the subnet.