Skip to content

DOCS-3097: Fix inaccuracies on the StagedNetworkPolicy reference - #3116

Merged
ctauchen merged 8 commits into
tigera:mainfrom
ctauchen:DOCS-3097-fact-check-stagednetworkpolicy
Oct 19, 2026
Merged

ctauchen merged 8 commits into
tigera:mainfrom
ctauchen:DOCS-3097-fact-check-stagednetworkpolicy

Conversation

@ctauchen

@ctauchen ctauchen commented Oct 16, 2026 •

Copy link
Copy Markdown
Collaborator

Fixes statements on the StagedNetworkPolicy reference that a test cluster showed to be wrong.

Jira: https://tigera.atlassian.net/browse/DOCS-3097

  • The sample policy fails unless its internal-access tier exists. The page now says so.
  • The name rule allowed _ and uppercase. The validator rejects both.
  • The Spec table had no stagedAction field. It now lists the values and the Delete constraint.
  • The Rule table links to an HTTPMatch section that this page did not have. The page now imports and renders it.
  • 3.31 only: a policy outside the default tier must be named <tier>.<name>.

Changes next, 3.33 and 3.32, reproduced on v3.33.0 and v3.32.2, and 3.31, reproduced on v3.31.7.

  • In next and 3.33, the name rule now says to use at most one ., because calicoctl rejects more. With native v3 CRDs, kubectl accepts names with more dots.
  • In next and 3.33, the page says that with native v3 CRDs, tier RBAC is not applied to list and watch.
  • In next and 3.33, the selector operator lists are no longer exhaustive, and the label selector uses lowercase in. Upper-case IN fails to parse.

Next and 3.33 were verified in both API server mode and native v3 CRD mode.

Not changed:

Preview:

Copilot AI lite review requested due to automatic review settings October 16, 2026 07:23
@netlify

netlify Bot commented Oct 16, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview succeeded!

Built without sensitive environment variables

Name Link
🔨 Latest commit 9c0d77e
🔍 Latest deploy log https://app.netlify.com/projects/tigera/deploys/6ad6400eec1b50267deb8ea0
😎 Deploy Preview https://deploy-preview-3116--tigera.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
Lighthouse
Lighthouse
1 paths audited
Performance: 65 (🔴 down 11 from production)
Accessibility: 98 (no change from production)
Best Practices: 92 (no change from production)
SEO: 100 (no change from production)
PWA: -
View the detailed breakdown and full score reports
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify

netlify Bot commented Oct 16, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for calico-docs-preview-next ready!

Name Link
🔨 Latest commit 9c0d77e
🔍 Latest deploy log https://app.netlify.com/projects/calico-docs-preview-next/deploys/6ad6400e6ae858fac40d1aa4
😎 Deploy Preview https://deploy-preview-3116--calico-docs-preview-next.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

Resolve the documented naming constraints and the inaccurate HTTPMatch content exposed by the new imports.

2 open findings
What changed in this PR

Updates StagedNetworkPolicy references across current and versioned Calico documentation.

Changes:

  • Clarifies tier prerequisites and naming rules.
  • Documents stagedAction where verified.
  • Adds HTTPMatch reference content.
File Summary
calico/​reference/​resources/​stagednetworkpolicy.mdx Updates the current reference.
calico_versioned_docs/​version-3.33/​reference/​resources/​stagednetworkpolicy.mdx Updates the 3.33 reference.
calico_versioned_docs/​version-3.32/​reference/​resources/​stagednetworkpolicy.mdx Updates the 3.32 reference.
calico_versioned_docs/​version-3.31/​reference/​resources/​stagednetworkpolicy.mdx Updates the 3.31 reference with version-specific naming.

🧠 Review effort: Lite


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

| Field | Description | Accepted Values | Schema | Default |
| --------- | ------------------------------------------------------------------ | --------------------------------------------------- | ------ | --------- |
| name | The name of the network policy. Required. | Alphanumeric string with optional `.`, `_`, or `-`. | string | |
| name | The name of the network policy. Required. | Lowercase alphanumeric string with optional `-` and `.`. | string | |
| Field | Description | Accepted Values | Schema | Default |
| --------- | ------------------------------------------------------------------ | --------------------------------------------------- | ------ | --------- |
| name | The name of the network policy. Required. | Alphanumeric string with optional `.`, `_`, or `-`. | string | |
| name | The name of the network policy. Required. | Lowercase alphanumeric string with optional `-` and `.`. | string | |
…Ds in the next StagedNetworkPolicy reference
…Ds in the 3.33 StagedNetworkPolicy reference
The one-period limit comes from the Calico validator, which runs in calicoctl and in the Calico API server. Write it as a plain rule, as the 3.32 page does.
Every version says the name is lowercase alphanumeric with optional hyphens and at most one period.
@ctauchen
ctauchen marked this pull request as ready for review October 19, 2026 16:18
@ctauchen
ctauchen requested a review from a team as a code owner October 19, 2026 16:18
@ctauchen
ctauchen merged commit 02245ea into tigera:main Oct 19, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants