This is a cache of https://docs.okd.io/4.12/networking/ovn_kubernetes_network_provider/viewing-egress-firewall-ovn.html. It is a snapshot of the page at 2024-12-01T18:36:40.803+0000.
Viewing an <strong>egress</strong> firewall for a project - OVN-Kubernetes network plugin | Networking | OKD 4.12
×

As a cluster administrator, you can list the names of any existing egress firewalls and view the traffic rules for a specific egress firewall.

Viewing an egressFirewall object

You can view an egressFirewall object in your cluster.

Prerequisites
  • A cluster using the OVN-Kubernetes network plugin.

  • Install the OpenShift Command-line Interface (CLI), commonly known as oc.

  • You must log in to the cluster.

Procedure
  1. Optional: To view the names of the egressFirewall objects defined in your cluster, enter the following command:

    $ oc get egressfirewall --all-namespaces
  2. To inspect a policy, enter the following command. Replace <policy_name> with the name of the policy to inspect.

    $ oc describe egressfirewall <policy_name>
    Example output
    Name:		default
    Namespace:	project1
    Created:	20 minutes ago
    Labels:		<none>
    Annotations:	<none>
    Rule:		Allow to 1.2.3.0/24
    Rule:		Allow to www.example.com
    Rule:		Deny to 0.0.0.0/0