Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions calico/reference/resources/tier.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ spec:

| Field | Description | Accepted Values | Schema | Default |
| ------------- | ------------------------------------------------------------------------------------------------------------------------------------ | --------------- | ------ | --------------------- |
| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value indicates highest order (lowest precedence) | | float | `nil` (highest order) |
| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value is treated as order `1000000`, the order of the `default` Tier | | float | `1000000` |
| defaultAction | (Optional) Indicates the default action, when this Tier applies to an endpoint, but takes no action on the packet | `Deny`, `Pass` | string | `Deny` |

All Policies created by $[prodname] orchestrator integrations are created in the default (last) Tier.
All Policies created by $[prodname] orchestrator integrations are created in the `default` Tier (order `1000000`), except Kubernetes ClusterNetworkPolicies, which are created in the `kube-admin` (order `1000`) and `kube-baseline` (order `10000000`) Tiers. If you install $[prodname] with the operator and the `projectcalico.org/v3` API is available (through the $[prodname] API server or v3 CRDs), the operator also creates a `calico-system` Tier (order `100`) for the policies it installs to allow $[prodname] component traffic.
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ spec:

| Field | Description | Accepted Values | Schema | Default |
| ------------- | ------------------------------------------------------------------------------------------------------------------------------------ | --------------- | ------ | --------------------- |
| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value indicates highest order (lowest precedence) | | float | `nil` (highest order) |
| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value is treated as order `1000000`, the order of the `default` Tier | | float | `1000000` |
| defaultAction | (Optional) Indicates the default action, when this Tier applies to an endpoint, but takes no action on the packet | `Deny`, `Pass` | string | `Deny` |

All Policies created by $[prodname] orchestrator integrations are created in the default (last) Tier.
All Policies created by $[prodname] orchestrator integrations are created in the `default` Tier (order `1000000`), except Kubernetes AdminNetworkPolicies and BaselineAdminNetworkPolicies, which are created in the `adminnetworkpolicy` (order `1000`) and `baselineadminnetworkpolicy` (order `10000000`) Tiers.
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ spec:

| Field | Description | Accepted Values | Schema | Default |
| ------------- | ------------------------------------------------------------------------------------------------------------------------------------ | --------------- | ------ | --------------------- |
| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value indicates highest order (lowest precedence) | | float | `nil` (highest order) |
| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value is treated as order `1000000`, the order of the `default` Tier | | float | `1000000` |
| defaultAction | (Optional) Indicates the default action, when this Tier applies to an endpoint, but takes no action on the packet | `Deny`, `Pass` | string | `Deny` |

All Policies created by $[prodname] orchestrator integrations are created in the default (last) Tier.
All Policies created by $[prodname] orchestrator integrations are created in the `default` Tier (order `1000000`), except Kubernetes ClusterNetworkPolicies, which are created in the `kube-admin` (order `1000`) and `kube-baseline` (order `10000000`) Tiers. If you install $[prodname] with the operator and the `projectcalico.org/v3` API is available (through the $[prodname] API server or v3 CRDs), the operator also creates a `calico-system` Tier (order `100`) for the policies it installs to allow $[prodname] component traffic.
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ spec:

| Field | Description | Accepted Values | Schema | Default |
| ------------- | ------------------------------------------------------------------------------------------------------------------------------------ | --------------- | ------ | --------------------- |
| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value indicates highest order (lowest precedence) | | float | `nil` (highest order) |
| order | (Optional) Indicates priority of this Tier, with lower order taking precedence. No value is treated as order `1000000`, the order of the `default` Tier | | float | `1000000` |
| defaultAction | (Optional) Indicates the default action, when this Tier applies to an endpoint, but takes no action on the packet | `Deny`, `Pass` | string | `Deny` |

All Policies created by $[prodname] orchestrator integrations are created in the default (last) Tier.
All Policies created by $[prodname] orchestrator integrations are created in the `default` Tier (order `1000000`), except Kubernetes ClusterNetworkPolicies, which are created in the `kube-admin` (order `1000`) and `kube-baseline` (order `10000000`) Tiers. If you install $[prodname] with the operator and the `projectcalico.org/v3` API is available (through the $[prodname] API server or v3 CRDs), the operator also creates a `calico-system` Tier (order `100`) for the policies it installs to allow $[prodname] component traffic.
Loading