Skip to content

Commit f055de4

Browse files
authored
Merge pull request #92832 from stevsmit/OCPBUGS-55517
Adds nodeport limitation to UDN docs
2 parents 3fa6623 + af87d05 commit f055de4

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

modules/nw-udn-limitations.adoc

+3-1
Original file line numberDiff line numberDiff line change
@@ -24,4 +24,6 @@ While user-defined networks (UDN) offer highly customizable network configuratio
2424
2525
* *Creation and modification limitation*: The `ClusterUserDefinedNetwork` CR and the `UserDefinedNetwork` CR cannot be modified after being created.
2626
27-
* *Default network service access*: A user-defined network pod is isolated from the default network, which means that most default network services are inaccessible. For example, a user-defined network pod cannot currently access the {product-title} image registry. Because of this limitation, source-to-image builds do not work in a user-defined network namespace. Additionally, other functions do not work, including functions to create applications based on the source code in a Git repository, such as `oc new-app <command>`, and functions to create applications from an {product-title} template that use source-to-image builds. This limitation might also affect other `openshift-*.svc` services.
27+
* *Default network service access*: A user-defined network pod is isolated from the default network, which means that most default network services are inaccessible. For example, a user-defined network pod cannot currently access the {product-title} image registry. Because of this limitation, source-to-image builds do not work in a user-defined network namespace. Additionally, other functions do not work, including functions to create applications based on the source code in a Git repository, such as `oc new-app <command>`, and functions to create applications from an {product-title} template that use source-to-image builds. This limitation might also affect other `openshift-*.svc` services.
28+
29+
* *Connectivity limitation*: NodePort services on user-defined networks are not guaranteed isolation. For example, NodePort traffic from a pod to a service on the same node is not accessible, whereas traffic from a pod on a different node succeeds.

0 commit comments

Comments
 (0)