$ oc get -n <project> egressnetworkpolicy
As a cluster administrator, you can modify network traffic rules for an existing egress firewall.
OpenShift SDN CNI is deprecated as of OpenShift Container Platform 4.14. As of OpenShift Container Platform 4.15, the network plugin is not an option for new installations. In a subsequent future release, the OpenShift SDN network plugin is planned to be removed and no longer supported. Red Hat will provide bug fixes and support for this feature until it is removed, but this feature will no longer receive enhancements. As an alternative to OpenShift SDN CNI, you can use OVN Kubernetes CNI instead. |
As a cluster administrator, you can update the egress firewall for a project.
A cluster using the OpenShift SDN network plugin.
Install the OpenShift CLI (oc
).
You must log in to the cluster as a cluster administrator.
Find the name of the EgressNetworkPolicy object for the project. Replace <project>
with the name of the project.
$ oc get -n <project> egressnetworkpolicy
Optional: If you did not save a copy of the EgressNetworkPolicy object when you created the egress network firewall, enter the following command to create a copy.
$ oc get -n <project> egressnetworkpolicy <name> -o yaml > <filename>.yaml
Replace <project>
with the name of the project. Replace <name>
with the name of the object. Replace <filename>
with the name of the file to save the YAML to.
After making changes to the policy rules, enter the following command to replace the EgressNetworkPolicy object. Replace <filename>
with the name of the file containing the updated EgressNetworkPolicy object.
$ oc replace -f <filename>.yaml