AWS eks documentation change
Summary
Fixed image caption typo and clarified IP version handling in network policies
Security assessment
Typo fix ('llustration' → 'Illustration') and grammatical improvements for clarity. Clarifies existing security behavior (IPv4/IPv6 policy isolation) but doesn't introduce new security documentation or address vulnerabilities.
Diff
diff --git a/eks/latest/userguide/cni-network-policy.md b/eks/latest/userguide/cni-network-policy.md index 960fdf8d6..9cb2f22c8 100644 --- a//eks/latest/userguide/cni-network-policy.md +++ b//eks/latest/userguide/cni-network-policy.md @@ -83 +83 @@ The policy applies to pods with the label `role: webapp` in the `sun` namespace. - + @@ -142 +142 @@ Network policies in the Amazon VPC CNI plugin for Kubernetes are supported in th - * Network policies only apply either `IPv4` or `IPv6` addresses, but not both. In an `IPv4` cluster, the VPC CNI assigns `IPv4` address to pods and applies `IPv4` policies. In an `IPv6` cluster, the VPC CNI assigns `IPv6` address to pods and applies `IPv6` policies. Any `IPv4` network policy rules applied to an `IPv6` cluster are ignored. Any `IPv6` network policy rules applied to an `IPv4` cluster are ignored. + * Network policies only apply to either `IPv4` or `IPv6` addresses, but not both. In an `IPv4` cluster, the VPC CNI assigns an `IPv4` address to pods and applies `IPv4` policies. In an `IPv6` cluster, the VPC CNI assigns an `IPv6` address to pods and applies `IPv6` policies. Any `IPv4` network policy rules applied to an `IPv6` cluster are ignored. Any `IPv6` network policy rules applied to an `IPv4` cluster are ignored.