diff --git a/calico/reference/resources/tier.mdx b/calico/reference/resources/tier.mdx index 6864bea45b..4c77b6dc6c 100644 --- a/calico/reference/resources/tier.mdx +++ b/calico/reference/resources/tier.mdx @@ -56,7 +56,7 @@ spec: | Field | Description | Accepted Values | Schema | Default | | ------------- | ------------------------------------------------------------------------------------------------------------------------------------ | --------------- | ------ | --------------------- | -| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value indicates highest order (lowest precedence) | | float | `nil` (highest order) | +| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value is treated as order `1000000`, the order of the `default` Tier | | float | `1000000` | | defaultAction | (Optional) Indicates the default action, when this Tier applies to an endpoint, but takes no action on the packet | `Deny`, `Pass` | string | `Deny` | -All Policies created by $[prodname] orchestrator integrations are created in the default (last) Tier. +All Policies created by $[prodname] orchestrator integrations are created in the `default` Tier (order `1000000`), except Kubernetes ClusterNetworkPolicies, which are created in the `kube-admin` (order `1000`) and `kube-baseline` (order `10000000`) Tiers. If you install $[prodname] with the operator and the `projectcalico.org/v3` API is available (through the $[prodname] API server or v3 CRDs), the operator also creates a `calico-system` Tier (order `100`) for the policies it installs to allow $[prodname] component traffic. diff --git a/calico_versioned_docs/version-3.31/reference/resources/tier.mdx b/calico_versioned_docs/version-3.31/reference/resources/tier.mdx index 8d27bf5411..885318f2ea 100644 --- a/calico_versioned_docs/version-3.31/reference/resources/tier.mdx +++ b/calico_versioned_docs/version-3.31/reference/resources/tier.mdx @@ -56,7 +56,7 @@ spec: | Field | Description | Accepted Values | Schema | Default | | ------------- | ------------------------------------------------------------------------------------------------------------------------------------ | --------------- | ------ | --------------------- | -| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value indicates highest order (lowest precedence) | | float | `nil` (highest order) | +| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value is treated as order `1000000`, the order of the `default` Tier | | float | `1000000` | | defaultAction | (Optional) Indicates the default action, when this Tier applies to an endpoint, but takes no action on the packet | `Deny`, `Pass` | string | `Deny` | -All Policies created by $[prodname] orchestrator integrations are created in the default (last) Tier. +All Policies created by $[prodname] orchestrator integrations are created in the `default` Tier (order `1000000`), except Kubernetes AdminNetworkPolicies and BaselineAdminNetworkPolicies, which are created in the `adminnetworkpolicy` (order `1000`) and `baselineadminnetworkpolicy` (order `10000000`) Tiers. diff --git a/calico_versioned_docs/version-3.32/reference/resources/tier.mdx b/calico_versioned_docs/version-3.32/reference/resources/tier.mdx index 6864bea45b..4c77b6dc6c 100644 --- a/calico_versioned_docs/version-3.32/reference/resources/tier.mdx +++ b/calico_versioned_docs/version-3.32/reference/resources/tier.mdx @@ -56,7 +56,7 @@ spec: | Field | Description | Accepted Values | Schema | Default | | ------------- | ------------------------------------------------------------------------------------------------------------------------------------ | --------------- | ------ | --------------------- | -| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value indicates highest order (lowest precedence) | | float | `nil` (highest order) | +| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value is treated as order `1000000`, the order of the `default` Tier | | float | `1000000` | | defaultAction | (Optional) Indicates the default action, when this Tier applies to an endpoint, but takes no action on the packet | `Deny`, `Pass` | string | `Deny` | -All Policies created by $[prodname] orchestrator integrations are created in the default (last) Tier. +All Policies created by $[prodname] orchestrator integrations are created in the `default` Tier (order `1000000`), except Kubernetes ClusterNetworkPolicies, which are created in the `kube-admin` (order `1000`) and `kube-baseline` (order `10000000`) Tiers. If you install $[prodname] with the operator and the `projectcalico.org/v3` API is available (through the $[prodname] API server or v3 CRDs), the operator also creates a `calico-system` Tier (order `100`) for the policies it installs to allow $[prodname] component traffic. diff --git a/calico_versioned_docs/version-3.33/reference/resources/tier.mdx b/calico_versioned_docs/version-3.33/reference/resources/tier.mdx index 6864bea45b..4c77b6dc6c 100644 --- a/calico_versioned_docs/version-3.33/reference/resources/tier.mdx +++ b/calico_versioned_docs/version-3.33/reference/resources/tier.mdx @@ -56,7 +56,7 @@ spec: | Field | Description | Accepted Values | Schema | Default | | ------------- | ------------------------------------------------------------------------------------------------------------------------------------ | --------------- | ------ | --------------------- | -| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value indicates highest order (lowest precedence) | | float | `nil` (highest order) | +| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value is treated as order `1000000`, the order of the `default` Tier | | float | `1000000` | | defaultAction | (Optional) Indicates the default action, when this Tier applies to an endpoint, but takes no action on the packet | `Deny`, `Pass` | string | `Deny` | -All Policies created by $[prodname] orchestrator integrations are created in the default (last) Tier. +All Policies created by $[prodname] orchestrator integrations are created in the `default` Tier (order `1000000`), except Kubernetes ClusterNetworkPolicies, which are created in the `kube-admin` (order `1000`) and `kube-baseline` (order `10000000`) Tiers. If you install $[prodname] with the operator and the `projectcalico.org/v3` API is available (through the $[prodname] API server or v3 CRDs), the operator also creates a `calico-system` Tier (order `100`) for the policies it installs to allow $[prodname] component traffic.