这是我的网络政策：
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: deny
namespace: openstack
spec:
podSelector:
matchLabels: {}
policyTypes:
- Egress
- Ingress
我应用此策略并登录到 1 个 pod，它仍然可以连接到 google.com。
-
-2018-08-29 11:36:33-- http://google.com/
Resolving google.com (google.com)... 172.217.4.46, 2607:f8b0:4009:804::200e
Connecting to google.com (google.com)|172.217.4.46|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: http://www.google.com/ [following]
--2018-08-29 11:36:33-- http://www.google.com/
Resolving www.google.com (www.google.com)... 172.217.4.36, 2607:f8b0:4009:804::2004
Connecting to www.google.com (www.google.com)|172.217.4.36|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: ‘index.html.85’
index.html.85 [ <=> ] 11.09K --.-KB/s in 0.001s
2018-08-29 11:36:33 (7.77 MB/s) - ‘index.html.85’ saved [11355]
有谁可以解释为什么出口不起作用？谢谢