From 73352534149eb0328078cf4c27d0cc2c7563f648 Mon Sep 17 00:00:00 2001 From: Shmulik Froimovich <104766183+shmfr@users.noreply.github.com> Date: Wed, 5 Jul 2023 12:25:11 +0300 Subject: [PATCH] Explainability with hcs (#477) * Initial implementation of the optimized TcpLikeProperties (and HyperCubeSet) holding all connections including src_peers, dst_peers and protocols Signed-off-by: Tanya * Extended testcase3 to produce connectivity_map Signed-off-by: Tanya * Fixed a problem in HyperCubeSet (wrongly changing self in _and_aux. Added optimized_denied_ingress_props and optimized_denied_egress_props (in addition to allowed ones). Improved non_captured_conns computation Signed-off-by: Tanya * Small fix Signed-off-by: Tanya * Further fix of the hyper cube set Signed-off-by: Tanya * Further fix of the hyper cube set Signed-off-by: Tanya * Avoiding redundant and heavy copy of layers. Signed-off-by: Tanya * General changes from the Optimized_HC_set branch. Signed-off-by: Tanya * General changes from the Optimized_HC_set branch. Signed-off-by: Tanya * Avoiding lint warnings Signed-off-by: Tanya Signed-off-by: Tanya * Avoiding lint warnings Signed-off-by: Tanya Signed-off-by: Tanya * Added support of IpBlocks in optimized hyper cube set implementation. Signed-off-by: Tanya * More accurate update of base_peer_set. Signed-off-by: Tanya * Added dedundant fw_rules creation for testing (to be further removed). Signed-off-by: Tanya * Initial implementation of Calico optimized connections handling. Fixed protocol handling: 0 is a valid protocol number (HOPOPT). Allowing any protocol in the range [0...255], though ProtocolNameResolver does not contain names of all of the possible 256 protocols. Fixed handling non-captured peers in K8S (cannot be handled as denied). Signed-off-by: Tanya * Fixed the construction of connectivity graph (when some of src_peer or dst_peers dimensions is all values). Added optimization for fw_rules_map - join different entries having the same values (fw_rules). Signed-off-by: Tanya * Multiple fixes: 1. To represent No connections, do not build TcpLikeProperties (TcpLikeProperties with no dimensions represent All connections). 2. Support subsets in query in optimized solution. 3. For comparison of optimized solution to the original one, add connections from peers to themselves. 4. More accurate comparison for 'dot' connectivity queries. 5. Generalized convert_named_ports (to not assume dimensions order) 6. Handling the possibility when projection on one dimension is empty. Signed-off-by: Tanya * Properly handling 'False' represented by TcpLikeProperties. Properly handling HostEPs in optimized TcpLikeProperties. Signed-off-by: Tanya * Added support to ICMP data in optimized HC set (handled in TCPLikeProperties) Fixed handling of non-captured pods in optimized solution. Added using True/False HC_set (make_all_properties()/make_empty_properties()) Signed-off-by: Tanya * Added command line flag optimized_run, having 3 possibilities: 'false' - only original run 'true' - only optimized run 'debug'- both runs and comparison of their results. Printing parsing time, queries time and total run time. Signed-off-by: Tanya * Small fixes; Workaround for the bug in HC set: using mutual contained_in, instead of == Signed-off-by: Tanya * Small fixes; Signed-off-by: Tanya * Fixed building tcp_like_properties form connectivity graph Signed-off-by: Tanya Signed-off-by: Tanya * Optimized the comparison between original and optimized connections (for -opt=debug option) Added more debug prints. Better handling of peer_set copying in TcpLikeProperties. Signed-off-by: Tanya * Implemented optimized Istio policy handling. Further optimization - calculating ref_ip_blocks only in non-optimized run. Signed-off-by: Tanya * Added Ingress policy support in the optimized solution. Improved comments. Signed-off-by: Tanya * Added Istio Ingress policy support in the optimized solution. Signed-off-by: Tanya * Further optimization: converting HC set directly to fw rules. Signed-off-by: Tanya * Small bug fix Signed-off-by: Tanya * Fixed printing peer sets in FWRules. Signed-off-by: Tanya * More released comparison between original and optimized fw-rules (allowing differences in auto-connections). Signed-off-by: Tanya * Splitting istio opt properties to tcp and non-tcp properties. Fixed handling non captured peers in Istio policy. Signed-off-by: Tanya * Fixed creation TcpLikeProperties with empty methods or protocols. Signed-off-by: Tanya * Optimizing sidecar priorities handling by refinement of sidecar.selected_peers in parse time. Istio sidecar optimized connectivity implementation. Removing unused methods. Better non-captured handling. Signed-off-by: Tanya * Adding newline at the end of connectivity test expected results. Signed-off-by: Tanya * Handling exclude_ipv6 print in optimized calculation. Signed-off-by: Tanya * Fixing initialization of MethodSet in HTTPRoute (None means no methods, MethodSet() means empty method set, which would create empty connections). Signed-off-by: Tanya * Changed output format of ICMP data. Signed-off-by: Tanya * Making default the original (not optimized) implementation in run_all_tests Signed-off-by: Tanya * 1. Merge with master 2. Improved filtering of ipv6 blocks in optimized solution. Signed-off-by: Tanya * Simplifying and improving make_tcp_like_properties function. Fixing lint errors. Signed-off-by: Tanya * Fixing lint errors. Signed-off-by: Tanya * Fixing lint errors. Signed-off-by: Tanya * Removed unised classes ConnectivityGraphPrototype and ConnectivityGraphOptimized. In creating TcpLikeProperties, methods and protocols cannot be None. Signed-off-by: Tanya Signed-off-by: Tanya * Avoid using creation of TcpLikeProperties directly with init; using make_tcp_like_properties, make_tcp_like_properties_from_dict, make_empty_properties or make_all_properties instead. Use icmp_type and icmp_code full domain intervals instead of None in parameters to TcpLikeProperties creation methods. Removed unused or commented-out code. Fixed project_on_one_dimension to return None (to represent all values) for non-active dimensions. Signed-off-by: Tanya * Fixing lint errors. Signed-off-by: Tanya * Fixing lint errors. Signed-off-by: Tanya * Fixing ConnectionSet.__str__ to be accurate, since it is used in sorting functions. Signed-off-by: Tanya * Fixed excluding unused ipv6 blocks in the optimized solution. Signed-off-by: Tanya * Renamed TcpLikeProperties to ConnectivityProperties. Signed-off-by: Tanya * Fixing lint errors. Signed-off-by: Tanya * Fixing lint errors. Signed-off-by: Tanya * track expl data Signed-off-by: Shmulik Froimovich * explain connectivity Signed-off-by: Shmulik Froimovich * explain connectivity Signed-off-by: Shmulik Froimovich * Simplified and cleaned interfaces. Signed-off-by: Tanya * Fixed lint errors. Removed assertion which is no longer correct. Signed-off-by: Tanya * Fixed lint errors. Signed-off-by: Tanya * Added a new class ConnectivityCube that manages forth and back translations of all dimensions of ConnectivityProperties, (translations between input format and internal format). Consequently, changed API of ConnectivityProperties methods to use the above new class. Improved documentation. Signed-off-by: Tanya * Added set_dims method to set multiple dimensions at once. Signed-off-by: Tanya * Added get_protocol_set_with_single_protocol function to ProtocolSet. Signed-off-by: Tanya * Fixing lint errors. Signed-off-by: Tanya * Fixed connectivity properties unit tests to match the new API. Signed-off-by: Tanya * Aligned get_cube_dict to return str for all dimensions. Fixed resolving named ports for excluded_named_ports in the optimized solution. Signed-off-by: Tanya * Removed unused ICMPDAtaSet class and its unit tests. Optimized ConnectivityProperties properties creation for semantic True (all full dimensions). Removed unused methods. Signed-off-by: Tanya * Cleaner code using the new ConnectivityCube API. Signed-off-by: Tanya * Added missing copy() in ConnectionSet. Fixed lint errors. Signed-off-by: Tanya * Added missing copy() in ConnectionSet. Fixed lint errors. Signed-off-by: Tanya * When running with -opt=debug, printing the original results of ConnectivityMap query. Signed-off-by: Tanya * Made cleaner interface of ConectivityCube class, using __setitem__, __getitem__ and update functions. Made cleaner interface of creating empty/full/by cube ConnectivityProperties. Signed-off-by: Tanya * explain connectivity Signed-off-by: Shmulik Froimovich * Made cleaner interface of ConectivityCube class, using __setitem__, __getitem__ and update functions. Made cleaner interface of creating empty/full/by cube ConnectivityProperties. Signed-off-by: Tanya * explain connectivity Signed-off-by: Shmulik Froimovich * Fixed lint error. Signed-off-by: Tanya * Small fix Signed-off-by: Tanya * Added documentation and small code beautifications. Signed-off-by: Tanya * Improved documentation. Simplified interface by adding ConnectivityCube.make_from_dict method. Signed-off-by: Tanya * Small fix. Signed-off-by: Tanya * Moved empty dimension values to DimensionsManager. Fixed project_on_one_dimension method. Signed-off-by: Tanya * Moved empty dimension values to DimensionsManager. Fixed lint errors. Signed-off-by: Tanya * Update nca/CoreDS/ConnectivityProperties.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/CoreDS/ConnectivityProperties.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/CoreDS/ConnectivityProperties.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/CoreDS/ConnectivityProperties.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/CoreDS/ConnectivityProperties.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/CoreDS/ConnectivityProperties.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Fixed small errors. Signed-off-by: Tanya * Update nca/CoreDS/ConnectivityProperties.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/CoreDS/ConnectivityProperties.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/CoreDS/ConnectivityProperties.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/CoreDS/ConnectivityProperties.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/CoreDS/ConnectivityProperties.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/Parsers/CalicoPolicyYamlParser.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Fixed lint errors. Signed-off-by: Tanya * Removed base_peer_set from ConnectivityProperties and ConnectivityCube. Instead, added a singleton class BasePeerSet that keeps all peers and translates PeerSets to CanonicalIntervalSets and vice versa. Signed-off-by: Tanya * Removed base_peer_set from ConnectivityProperties and ConnectivityCube. Instead, added a singleton class BasePeerSet that keeps all peers and translates PeerSets to CanonicalIntervalSets and vice versa. Signed-off-by: Tanya * Added check to BasePeerSet.get_peer_interval_of that all peers are translated to intervals. Signed-off-by: Tanya * updates after merge with HC branch Signed-off-by: Shmulik Froimovich * updates after merge with HC branch Signed-off-by: Shmulik Froimovich * removed unused function Signed-off-by: Shmulik Froimovich * added some function descriptions Signed-off-by: Shmulik Froimovich * txt_no_fe_rules format added Signed-off-by: Shmulik Froimovich * Added OptimizedPolicyConnections class to hold allowed, denied and pass connections and captured peers. Signed-off-by: Tanya * Fixed lint errors. Signed-off-by: Tanya * The BasePeerSet singleton should be reset in the main (for the cases when running multiple tests, for example from run_all_tests) Signed-off-by: Tanya * Added support to calico PASS rules in optimized solution. Signed-off-by: Tanya * Added support to calico PASS rules in optimized solution. Signed-off-by: Tanya * Simplified calico parsing method to avoid lint error. Fixed typo in the code. Signed-off-by: Tanya * handling ipBlocks and base ip range * Generalized ServiceEntry implementation for optimized solution. Signed-off-by: Tanya * Fixing lint errors. Signed-off-by: Tanya * xml support for explain_all and default-policy fix Signed-off-by: Shmulik Froimovich * Removed unused functions. Optimized BasePeerSet.get_peer_interval_of method. Signed-off-by: Tanya * Separated ConnectivityCube class to its own file. Removed unused methods/params/imports. Signed-off-by: Tanya * Update nca/NetworkConfig/NetworkConfig.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/Resources/NetworkPolicy.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Added assertions avoiding incorrect comparisons of "src_peers" and "dst_peers" dimensions. Split complex ConnectivityMapQuery.exec method to multiple methods. Signed-off-by: Tanya * Update nca/CoreDS/Peer.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/CoreDS/ConnectionSet.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/CoreDS/ConnectionSet.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Added shortcut function ConnectivityProperties.make_conn_props_from_dict. Moved BasePeerSet.reset() to run_args. Signed-off-by: Tanya * Fixed lint errors. Signed-off-by: Tanya * Code reuse optimization. Added documentation. Removed unused method. Improved ConnectivityProperties.project_on_one_dimension() method. Signed-off-by: Tanya * Update nca/NetworkConfig/NetworkLayer.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/NetworkConfig/NetworkLayer.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/NetworkConfig/NetworkLayer.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Update nca/NetworkConfig/NetworkLayer.py Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> * Removed unused functions and imports. Avoid including IpBlocks in non-captured peers. Signed-off-by: Tanya * Making more accurate default all properties, according to all peers in the current config. Signed-off-by: Tanya * output_endpoints support. Signed-off-by: Shmulik Froimovich * support ep modes Signed-off-by: Shmulik Froimovich * Documentation added Signed-off-by: Shmulik Froimovich * minor fix Signed-off-by: Shmulik Froimovich * use Expl' functions only when activated by user Signed-off-by: Shmulik Froimovich * some lintings Signed-off-by: Shmulik Froimovich * supporting scheme files Signed-off-by: Shmulik Froimovich * support only text output formats and '[',']' in peer names Signed-off-by: Shmulik Froimovich * linting Signed-off-by: Shmulik Froimovich * small fixes Signed-off-by: Shmulik Froimovich * small fixes Signed-off-by: Shmulik Froimovich * adding beautifulsoup4 to requirements Signed-off-by: Shmulik Froimovich * small fix Signed-off-by: Shmulik Froimovich * use TCP conns when istio layer is present Signed-off-by: Shmulik Froimovich * some fixes and improvements. Signed-off-by: Shmulik Froimovich * extra line Signed-off-by: Shmulik Froimovich * adding test Signed-off-by: Shmulik Froimovich * adding test Signed-off-by: Shmulik Froimovich * changed 'run_all_tests' so opt parameter can be override by tests Signed-off-by: Shmulik Froimovich * added expected results Signed-off-by: Shmulik Froimovich * parsing xml without the need of lxml Signed-off-by: Shmulik Froimovich * parsing xml without the need of lxml Signed-off-by: Shmulik Froimovich * update expected results (for new xml parser) Signed-off-by: Shmulik Froimovich * update expected results and make it deterministic Signed-off-by: Shmulik Froimovich * some fixes and new tests Signed-off-by: Shmulik Froimovich * temp support in setting peers from the peer container, till fix will be merged to master Signed-off-by: Shmulik Froimovich * new expected results Signed-off-by: Shmulik Froimovich * new expected results Signed-off-by: Shmulik Froimovich * manually adding tests Signed-off-by: Shmulik Froimovich * manually updating test times Signed-off-by: Shmulik Froimovich * fixed some testing env agnostic issues Signed-off-by: Shmulik Froimovich * better handling of ipblocks and some small fixes. Signed-off-by: Shmulik Froimovich * removing explanation for ipblocks Signed-off-by: Shmulik Froimovich * adding policies in one place Signed-off-by: Shmulik Froimovich * adding some documentations and test Signed-off-by: Shmulik Froimovich * updated expected results Signed-off-by: Shmulik Froimovich * fixed run_all_tests path problem Signed-off-by: Shmulik Froimovich * duplicate line removed Signed-off-by: Shmulik Froimovich * updated testes and some docs. Signed-off-by: Shmulik Froimovich * little better explanation Signed-off-by: Shmulik Froimovich * some small fixes Signed-off-by: Shmulik Froimovich * base_name added Signed-off-by: Shmulik Froimovich * better documentation for using IP-blocks Signed-off-by: Shmulik Froimovich * added a ip-block test Signed-off-by: Shmulik Froimovich * base_name check Signed-off-by: Shmulik Froimovich * base_name check Signed-off-by: Shmulik Froimovich * base_name and sync Signed-off-by: Shmulik Froimovich --------- Signed-off-by: Tanya Signed-off-by: Shmulik Froimovich Co-authored-by: Tanya Co-authored-by: Adi Sosnovich <82078442+adisos@users.noreply.github.com> --- README.md | 5 + docs/SchemeFileFormat.md | 18 +- nca/FWRules/ConnectivityGraph.py | 2 +- nca/FWRules/FWRule.py | 3 +- nca/FWRules/InteractiveConnectivityGraph.py | 2 +- nca/FileScanners/GenericTreeScanner.py | 3 + nca/NetworkConfig/NetworkConfig.py | 3 + nca/NetworkConfig/NetworkConfigQuery.py | 33 +- nca/NetworkConfig/NetworkConfigQueryRunner.py | 14 +- nca/NetworkConfig/NetworkLayer.py | 24 + nca/NetworkConfig/PoliciesFinder.py | 38 +- nca/NetworkConfig/ResourcesHandler.py | 3 +- nca/NetworkConfig/TopologyObjectsFinder.py | 15 + nca/SchemeRunner.py | 4 + nca/Utils/ExplTracker.py | 500 ++ nca/Utils/NcaLogger.py | 19 +- nca/Utils/OutputConfiguration.py | 2 +- nca/Utils/Utils.py | 16 + nca/nca_cli.py | 9 + setup.cfg | 1 + .../basic_connectivity_expl_output.txt | 4019 +++++++++++++++++ ...onnectivity_specific_nodes_expl_output.txt | 28 + .../istio-ingress_expl_output.txt | 952 ++++ .../poc1_expl_output.txt | 3089 +++++++++++++ .../subset_deployment_expl_output.txt | 630 +++ .../test25_expl_output.txt | 264 ++ .../test4_expl_output.txt | 24 + .../k8s_tests_expected_runtime.csv | 7 + tests/k8s_cmdline_tests.yaml | 106 +- tests/livesim_tests/livesim_topology.yaml | 2 +- tests/run_all_tests.py | 9 +- 31 files changed, 9786 insertions(+), 58 deletions(-) create mode 100644 nca/Utils/ExplTracker.py create mode 100644 nca/Utils/Utils.py create mode 100644 tests/expected_cmdline_output_files/basic_connectivity_expl_output.txt create mode 100644 tests/expected_cmdline_output_files/basic_connectivity_specific_nodes_expl_output.txt create mode 100644 tests/expected_cmdline_output_files/istio-ingress_expl_output.txt create mode 100644 tests/expected_cmdline_output_files/poc1_expl_output.txt create mode 100644 tests/expected_cmdline_output_files/subset_deployment_expl_output.txt create mode 100644 tests/expected_cmdline_output_files/test25_expl_output.txt create mode 100644 tests/expected_cmdline_output_files/test4_expl_output.txt diff --git a/README.md b/README.md index eae766d2d..9081d100c 100644 --- a/README.md +++ b/README.md @@ -101,6 +101,11 @@ The arguments to `--resource_list` and to `--base_resource_list` should be one o - `--output_endpoints`\ Choose endpoints type in output (pods/deployments).\ *default:* deployments + - `--explain`\ + A pair of node names (comma separated) to explain the policies affecting their connection or lack of it. Relevant only for connectivity query.\ + Connections including IP-Blocks will show only the configurations of the node in that connection (since, IP-Blocks does + not have configurations). IP-Blocks should be places in CIDR format as seen in the query results (run the connectivity query first, to see the nodes there).\ + e.g. default/pod-A1,default/deployment-B1. - `--print_ipv6`\ include IPv6 range in the query results even when the policies of the config do not contain any IPv6 addresses. diff --git a/docs/SchemeFileFormat.md b/docs/SchemeFileFormat.md index bc4b8e25c..141f65329 100644 --- a/docs/SchemeFileFormat.md +++ b/docs/SchemeFileFormat.md @@ -78,15 +78,15 @@ For example: `my_set/prod_ns/deny_all_policy`. If there are multiple policies na #### Output Configuration object The supported entries in the outputConfiguration object are as follows: -| Field | Description | Value | -|------------------|-----------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------| -| outputFormat | Output format specification. | string [ txt / yaml / csv / md / dot / jpg/ txt_no_fw_rules] | -| outputPath | A file path to redirect output into. | string | -| outputEndpoints | Choose endpoints type in output. | string [ pods / deployments ] | -| subset | A dict object with the defined subset elements to display in the output | [subset](#subset) object | -| fullExplanation | Choose if to print all counterexamples causing the query result in the output | bool | -| excludeIPv6Range | If the policies of the config do not contain any IPv6 addresses, do not include IPv6 range in the query results | bool [default: True] | - +| Field | Description | Value | +|------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------| +| outputFormat | Output format specification. | string [ txt / yaml / csv / md / dot / jpg/ txt_no_fw_rules] | +| outputPath | A file path to redirect output into. | string | +| outputEndpoints | Choose endpoints type in output. | string [ pods / deployments ] | +| subset | A dict object with the defined subset elements to display in the output | [subset](#subset) object | +| fullExplanation | Choose if to print all counterexamples causing the query result in the output | bool | +| excludeIPv6Range | If the policies of the config do not contain any IPv6 addresses, do not include IPv6 range in the query results | bool [default: True] | +| explain | A pair of node names (comma separated) to explain the policies affecting their connection or lack of it. Relevant only for connectivityMap query. Connections including IP-Blocks will show only the configurations of the node in that connection (since, IP-Blocks does not have configurations). IP-Blocks should be places in CIDR format as seen in the query results (run the connectivity query first, to see the nodes there). | string [ ns/node1,ns/node2 ] | #### Subset object The supported entries in the subset object are as follows: diff --git a/nca/FWRules/ConnectivityGraph.py b/nca/FWRules/ConnectivityGraph.py index eb3a1e21b..3bc0ef2da 100644 --- a/nca/FWRules/ConnectivityGraph.py +++ b/nca/FWRules/ConnectivityGraph.py @@ -343,7 +343,7 @@ def get_connectivity_dot_format_str(self, connectivity_restriction=None): dot_graph = DotGraph(name) peers_groups = self._get_equals_groups() - # we are going to treat a a peers_group as one peer. + # we are going to treat a peers_group as one peer. # the first peer in the peers_group is representing the group # we will add the text of all the peers in the group to this peer for peers_group, group_connection in peers_groups: diff --git a/nca/FWRules/FWRule.py b/nca/FWRules/FWRule.py index 19f1d3bde..37fe6c8c3 100644 --- a/nca/FWRules/FWRule.py +++ b/nca/FWRules/FWRule.py @@ -383,7 +383,8 @@ def get_pod_str(self): """ :return: string for the field src_pods or dst_pods in representation for txt rule format """ - return f'[{self._get_pods_names()}]' + sorted_pods_names = ', '.join(sorted(self._get_pods_names().split(', '))) + return f'[{sorted_pods_names}]' def _get_pods_names(self): res = '' diff --git a/nca/FWRules/InteractiveConnectivityGraph.py b/nca/FWRules/InteractiveConnectivityGraph.py index 8d6a38a70..166c157e0 100644 --- a/nca/FWRules/InteractiveConnectivityGraph.py +++ b/nca/FWRules/InteractiveConnectivityGraph.py @@ -127,7 +127,7 @@ def read_input_file(self): """ try: with open(self.input_svg_file) as svg_file: - self.soup = BeautifulSoup(svg_file.read(), 'xml') + self.soup = BeautifulSoup(svg_file.read(), 'html') except Exception as e: print(f'Failed to open file: {self.input_svg_file}\n{e} for reading', file=sys.stderr) diff --git a/nca/FileScanners/GenericTreeScanner.py b/nca/FileScanners/GenericTreeScanner.py index 2196fe384..60efbe6c6 100644 --- a/nca/FileScanners/GenericTreeScanner.py +++ b/nca/FileScanners/GenericTreeScanner.py @@ -21,6 +21,7 @@ class YamlFile: class ObjectWithLocation: line_number = 0 + path = '' column_number = 0 @@ -36,6 +37,7 @@ def to_yaml_objects(yaml_node): if isinstance(yaml_node, yaml.SequenceNode): res = YamlList() res.line_number = yaml_node.start_mark.line + res.path = yaml_node.start_mark.name res.column_number = yaml_node.start_mark.column for obj in yaml_node.value: res.append(to_yaml_objects(obj)) @@ -43,6 +45,7 @@ def to_yaml_objects(yaml_node): if isinstance(yaml_node, yaml.MappingNode): res = YamlDict() res.line_number = yaml_node.start_mark.line + 1 + res.path = yaml_node.start_mark.name res.column_number = yaml_node.start_mark.column + 1 for obj in yaml_node.value: res[obj[0].value] = to_yaml_objects(obj[1]) diff --git a/nca/NetworkConfig/NetworkConfig.py b/nca/NetworkConfig/NetworkConfig.py index 9e91b6564..54274dc71 100644 --- a/nca/NetworkConfig/NetworkConfig.py +++ b/nca/NetworkConfig/NetworkConfig.py @@ -9,6 +9,7 @@ from nca.CoreDS.ConnectivityProperties import ConnectivityProperties from nca.Resources.NetworkPolicy import NetworkPolicy, OptimizedPolicyConnections from .NetworkLayer import NetworkLayersContainer, NetworkLayerName +from nca.Utils.ExplTracker import ExplTracker @dataclass @@ -275,6 +276,8 @@ def allowed_connections_optimized(self, layer_name=None): :return: allowed_conns: all allowed connections for relevant peers. :rtype: OptimizedPolicyConnections """ + if ExplTracker().is_active(): + ExplTracker().set_peers(self.peer_container.peer_set) if layer_name is not None: if layer_name not in self.policies_container.layers: return self.policies_container.layers.empty_layer_allowed_connections_optimized(self.peer_container, diff --git a/nca/NetworkConfig/NetworkConfigQuery.py b/nca/NetworkConfig/NetworkConfigQuery.py index a44dcd26e..8ed42d9d9 100644 --- a/nca/NetworkConfig/NetworkConfigQuery.py +++ b/nca/NetworkConfig/NetworkConfigQuery.py @@ -24,6 +24,7 @@ PoliciesAndRulesExplanations, PodsListsExplanations, ConnectionsDiffExplanation, IntersectPodsExplanation, \ PoliciesWithCommonPods, PeersAndConnections, ComputedExplanation from .NetworkLayer import NetworkLayerName +from nca.Utils.ExplTracker import ExplTracker class QueryType(Enum): @@ -805,17 +806,24 @@ def compute_connectivity_output_optimized(self): "dst_peers": opt_peers_to_compare}) base_peers_num = len(opt_peers_to_compare) subset_peers = self.compute_subset(opt_peers_to_compare) + all_peers = subset_peers if len(subset_peers) != base_peers_num: # remove connections where both of src_peers and dst_peers are out of the subset subset_conns = ConnectivityProperties.make_conn_props_from_dict({"src_peers": subset_peers}) | \ ConnectivityProperties.make_conn_props_from_dict({"dst_peers": subset_peers}) all_conns_opt &= subset_conns + src_peers, dst_peers = ExplTracker().extract_peers(all_conns_opt) + all_peers = src_peers | dst_peers all_conns_opt = self.config.filter_conns_by_peer_types(all_conns_opt, opt_peers_to_compare) + expl_conns = all_conns_opt if self.config.policies_container.layers.does_contain_layer(NetworkLayerName.Istio): output_res, opt_fw_rules_tcp, opt_fw_rules_non_tcp = \ self.get_props_output_split_by_tcp(all_conns_opt, opt_peers_to_compare) + expl_conns, _ = self.convert_props_to_split_by_tcp(all_conns_opt) else: output_res, opt_fw_rules = self.get_props_output_full(all_conns_opt, opt_peers_to_compare) + if ExplTracker().is_active(): + ExplTracker().set_connections_and_peers(expl_conns, all_peers) return output_res, opt_fw_rules, opt_fw_rules_tcp, opt_fw_rules_non_tcp def exec(self): @@ -900,7 +908,9 @@ def get_props_output_full(self, props, peers_to_compare): if self.output_config.outputFormat in ['dot', 'jpg']: dot_full = self.dot_format_from_props(props, peers_to_compare) return dot_full, None - # TODO - handle 'txt_no_fw_rules' output format + if self.output_config.outputFormat == 'txt_no_fw_rules': + conns_wo_fw_rules = self.txt_no_fw_rules_format_from_props(props, peers_to_compare) + return conns_wo_fw_rules, None # handle other formats formatted_rules, fw_rules = self.fw_rules_from_props(props, peers_to_compare) return formatted_rules, fw_rules @@ -966,7 +976,12 @@ def get_props_output_split_by_tcp(self, props, peers_to_compare): # concatenate the two graphs into one dot file res_str = dot_tcp + dot_non_tcp return res_str, None, None - # TODO - handle 'txt_no_fw_rules' output format + if self.output_config.outputFormat in ['txt_no_fw_rules']: + txt_no_fw_rules_tcp = self.txt_no_fw_rules_format_from_props(props_tcp, peers_to_compare, connectivity_tcp_str) + txt_no_fw_rules_non_tcp = self.txt_no_fw_rules_format_from_props(props_non_tcp, peers_to_compare, + connectivity_non_tcp_str) + res_str = txt_no_fw_rules_tcp + txt_no_fw_rules_non_tcp + return res_str, None, None # handle formats other than dot and txt_no_fw_rules formatted_rules_tcp, fw_rules_tcp = self.fw_rules_from_props(props_tcp, peers_to_compare, connectivity_tcp_str) formatted_rules_non_tcp, fw_rules_non_tcp = self.fw_rules_from_props(props_non_tcp, peers_to_compare, @@ -1033,6 +1048,20 @@ def dot_format_from_props(self, props, peers, connectivity_restriction=None): conn_graph.add_edges_from_cube_dict(props.get_connectivity_cube(cube), self.config.peer_container) return conn_graph.get_connectivity_dot_format_str(connectivity_restriction) + def txt_no_fw_rules_format_from_props(self, props, peers, connectivity_restriction=None): + """ + :param ConnectivityProperties props: properties describing allowed connections + :param PeerSet peers: the peers to consider for dot output + :param Union[str,None] connectivity_restriction: specify if connectivity is restricted to + TCP / non-TCP , or not + :rtype str + :return the connectivity map in txt_no_fw_rules format, considering connectivity_restriction if required + """ + conn_graph = ConnectivityGraph(peers, self.config.get_allowed_labels(), self.output_config) + for cube in props: + conn_graph.add_edges_from_cube_dict(props.get_connectivity_cube(cube), self.config.peer_container) + return conn_graph.get_connections_without_fw_rules_txt_format(connectivity_restriction) + def fw_rules_from_connections_dict(self, connections, peers_to_compare, connectivity_restriction=None): """ :param dict connections: the connections' dict (map from connection-set to peer pairs) diff --git a/nca/NetworkConfig/NetworkConfigQueryRunner.py b/nca/NetworkConfig/NetworkConfigQueryRunner.py index 32d114a61..d2f4fdd81 100644 --- a/nca/NetworkConfig/NetworkConfigQueryRunner.py +++ b/nca/NetworkConfig/NetworkConfigQueryRunner.py @@ -11,6 +11,7 @@ from nca.Resources.NetworkPolicy import NetworkPolicy from .NetworkConfig import NetworkConfig from . import NetworkConfigQuery +from nca.Utils.ExplTracker import ExplTracker @dataclass @@ -40,9 +41,9 @@ def compute_final_results(self, output_format): extracts the final query results from self variables from self.query_iterations_output computes the final str output of the query, other results returned as is from query_result. - :param str output_format: the output format to form the final output - if output format is json, dumps the output list into one-top-leveled string - if output format is yaml, dumps the output list into str of a list of yaml objects + :param str output_format: the output format to form the final output. + if output format is json, dumps the output list into one-top-leveled string. + if output format is yaml, dumps the output list into str of a list of yaml objects. otherwise, writes the output list items split by \n :return the results: numerical result, output - str , num of not executed :rtype: int, str, int @@ -169,7 +170,12 @@ def _run_query_for_each_config(self): query_result = QueryResult() for config in self.configs_array: query_result.update(self._execute_one_config_query(self.query_name, self._get_config(config))) - return query_result.compute_final_results(self.output_configuration.outputFormat) + expl_out = '' + if ExplTracker().is_active() and self.output_configuration.explain and \ + ExplTracker().is_output_format_supported(self.output_configuration.outputFormat): + expl_out = '\n\nExplainability results:\n'+ExplTracker().explain(self.output_configuration.explain.split(',')) + numerical_result, output, num_not_executed = query_result.compute_final_results(self.output_configuration.outputFormat) + return numerical_result, output + expl_out, num_not_executed def _run_query_on_configs_vs_base_config(self, cmd_line_flag): query_result = QueryResult() diff --git a/nca/NetworkConfig/NetworkLayer.py b/nca/NetworkConfig/NetworkLayer.py index 52cd7190c..94086d686 100644 --- a/nca/NetworkConfig/NetworkLayer.py +++ b/nca/NetworkConfig/NetworkLayer.py @@ -12,6 +12,7 @@ from nca.CoreDS.ProtocolSet import ProtocolSet from nca.Resources.IstioNetworkPolicy import IstioNetworkPolicy from nca.Resources.NetworkPolicy import PolicyConnections, OptimizedPolicyConnections, NetworkPolicy +from nca.Utils.ExplTracker import ExplTracker # TODO: add a layer for connectivity based on service type (culsterIP / LB / NodePort)? / containers ports? @@ -309,6 +310,12 @@ def _allowed_xgress_conns_optimized(self, is_ingress, peer_container): else: conn_cube.update({"src_peers": not_captured_not_hep, "dst_peers": all_peers_and_ips}) not_captured_not_hep_conns = ConnectivityProperties.make_conn_props(conn_cube) + if ExplTracker().is_active(): + src_peers, dst_peers = ExplTracker().extract_peers(not_captured_not_hep_conns) + ExplTracker().add_default_policy(src_peers, + dst_peers, + is_ingress + ) res_conns.all_allowed_conns |= not_captured_not_hep_conns captured_not_hep = base_peer_set_no_hep & res_conns.captured @@ -370,12 +377,14 @@ def _allowed_xgress_conns_optimized(self, is_ingress, peer_container): "dst_peers": non_captured_peers}) res_conns.all_allowed_conns |= all_nc_conns - res_conns.denied_conns non_captured_dns_entries = dns_entries - res_conns.captured + non_captured_conns = all_nc_conns - res_conns.denied_conns if non_captured_dns_entries: # update allowed non-captured conns to DNSEntry dst with TCP only all_nc_dns_conns = \ ConnectivityProperties.make_conn_props_from_dict({"src_peers": all_peers_and_ips, "dst_peers": non_captured_dns_entries, "protocols": tcp_protocol}) + non_captured_conns |= all_nc_dns_conns res_conns.all_allowed_conns |= all_nc_dns_conns else: nc_all_conns = ConnectivityProperties.make_conn_props_from_dict({"src_peers": non_captured_peers, @@ -385,7 +394,15 @@ def _allowed_xgress_conns_optimized(self, is_ingress, peer_container): nc_dns_conns = ConnectivityProperties.make_conn_props_from_dict({"src_peers": non_captured_peers, "dst_peers": dns_entries, "protocols": tcp_protocol}) + non_captured_conns = nc_all_conns - res_conns.denied_conns + non_captured_conns |= nc_dns_conns res_conns.all_allowed_conns |= nc_dns_conns + if ExplTracker().is_active(): + src_peers, dst_peers = ExplTracker().extract_peers(non_captured_conns) + ExplTracker().add_default_policy(src_peers, + dst_peers, + is_ingress + ) return res_conns @@ -406,6 +423,7 @@ def _allowed_xgress_conns_optimized(self, is_ingress, peer_container): res_conns = OptimizedPolicyConnections() all_peers_and_ips = peer_container.get_all_peers_group(True) all_peers_no_ips = peer_container.get_all_peers_group() + non_captured_conns = None if is_ingress: # everything is allowed and non captured non_captured_conns = ConnectivityProperties.make_conn_props_from_dict({"src_peers": all_peers_and_ips, @@ -418,4 +436,10 @@ def _allowed_xgress_conns_optimized(self, is_ingress, peer_container): non_captured_conns = ConnectivityProperties.make_conn_props_from_dict({"src_peers": non_captured_peers, "dst_peers": all_peers_and_ips}) res_conns.all_allowed_conns = res_conns.allowed_conns | non_captured_conns + if non_captured_conns and ExplTracker().is_active(): + src_peers, dst_peers = ExplTracker().extract_peers(non_captured_conns) + ExplTracker().add_default_policy(src_peers, + dst_peers, + is_ingress + ) return res_conns diff --git a/nca/NetworkConfig/PoliciesFinder.py b/nca/NetworkConfig/PoliciesFinder.py index e9aeb48bb..4a6d910d1 100644 --- a/nca/NetworkConfig/PoliciesFinder.py +++ b/nca/NetworkConfig/PoliciesFinder.py @@ -14,6 +14,7 @@ from nca.Parsers.IngressPolicyYamlParser import IngressPolicyYamlParser from nca.Parsers.IstioTrafficResourcesYamlParser import IstioTrafficResourcesYamlParser from .NetworkConfig import PoliciesContainer +from nca.Utils.ExplTracker import ExplTracker class PoliciesFinder: @@ -73,47 +74,68 @@ def parse_policies_in_parse_queue(self): # noqa: C901 if policy_type == NetworkPolicy.PolicyType.CalicoProfile: parsed_element = CalicoPolicyYamlParser(policy, self.peer_container, file_name, self.optimized_run) # only during parsing adding extra labels from profiles (not supporting profiles with rules) - parsed_element.parse_policy() + parsed_policy = parsed_element.parse_policy() elif policy_type == NetworkPolicy.PolicyType.K8sNetworkPolicy: parsed_element = K8sPolicyYamlParser(policy, self.peer_container, file_name, self.optimized_run) - self._add_policy(parsed_element.parse_policy()) + parsed_policy = parsed_element.parse_policy() + self._add_policy(parsed_policy) # add info about missing resources self.missing_dns_pods_with_labels.update(parsed_element.missing_pods_with_labels) elif policy_type == NetworkPolicy.PolicyType.IstioAuthorizationPolicy: parsed_element = IstioPolicyYamlParser(policy, self.peer_container, file_name) - self._add_policy(parsed_element.parse_policy()) + parsed_policy = parsed_element.parse_policy() + self._add_policy(parsed_policy) elif policy_type == NetworkPolicy.PolicyType.IstioSidecar: if not istio_sidecar_parser: istio_sidecar_parser = IstioSidecarYamlParser(policy, self.peer_container, file_name) else: istio_sidecar_parser.reset(policy, self.peer_container, file_name) - istio_sidecar_parser.parse_policy() + parsed_policy = istio_sidecar_parser.parse_policy() elif policy_type == NetworkPolicy.PolicyType.Ingress: parsed_element = IngressPolicyYamlParser(policy, self.peer_container, file_name) - self._add_policy(parsed_element.parse_policy()) + parsed_policy = parsed_element.parse_policy() + self._add_policy(parsed_policy) # add info about missing resources self.missing_k8s_ingress_peers |= parsed_element.missing_k8s_ingress_peers elif policy_type == NetworkPolicy.PolicyType.Gateway: if not istio_traffic_parser: istio_traffic_parser = IstioTrafficResourcesYamlParser(self.peer_container) - istio_traffic_parser.parse_gateway(policy, file_name) + parsed_policy = istio_traffic_parser.parse_gateway(policy, file_name) # add info about missing resources self.missing_istio_gw_pods_with_labels.update(istio_traffic_parser.missing_istio_gw_pods_with_labels) elif policy_type == NetworkPolicy.PolicyType.VirtualService: if not istio_traffic_parser: istio_traffic_parser = IstioTrafficResourcesYamlParser(self.peer_container) - istio_traffic_parser.parse_virtual_service(policy, file_name) + parsed_policy = istio_traffic_parser.parse_virtual_service(policy, file_name) else: parsed_element = CalicoPolicyYamlParser(policy, self.peer_container, file_name, self.optimized_run) - self._add_policy(parsed_element.parse_policy()) + parsed_policy = parsed_element.parse_policy() + self._add_policy(parsed_policy) + # the name is sometimes modified when parsed, like in the ingress case, when "allowed" is added + if ExplTracker().is_active(): + if parsed_policy: + policy_name = parsed_policy.name + ExplTracker().add_policy_to_peers(parsed_policy) + else: # certain istio policies are parsed later (sidecar / virtual-service) + policy_name = policy.get('metadata').get('name') + ExplTracker().add_item(policy.path, + policy.line_number, + policy_name + ) if istio_traffic_parser: istio_traffic_policies = istio_traffic_parser.create_istio_traffic_policies() for istio_traffic_policy in istio_traffic_policies: self._add_policy(istio_traffic_policy) + if ExplTracker().is_active(): + ExplTracker().derive_item(istio_traffic_policy.name) + ExplTracker().add_policy_to_peers(istio_traffic_policy) if istio_sidecar_parser: istio_sidecars = istio_sidecar_parser.get_istio_sidecars() for istio_sidecar in istio_sidecars: self._add_policy(istio_sidecar) + if ExplTracker().is_active(): + ExplTracker().derive_item(istio_sidecar.name) + ExplTracker().add_policy_to_peers(istio_sidecar) def parse_yaml_code_for_policy(self, policy_object, file_name): policy_type = NetworkPolicy.get_policy_type_from_dict(policy_object) diff --git a/nca/NetworkConfig/ResourcesHandler.py b/nca/NetworkConfig/ResourcesHandler.py index 27a4c60ad..3457f5ed8 100644 --- a/nca/NetworkConfig/ResourcesHandler.py +++ b/nca/NetworkConfig/ResourcesHandler.py @@ -12,6 +12,7 @@ from .PoliciesFinder import PoliciesFinder from .TopologyObjectsFinder import PodsFinder, NamespacesFinder, ServicesFinder from .PeerContainer import PeerContainer +from nca.Utils.ExplTracker import ExplTracker class ResourceType(Enum): @@ -396,7 +397,7 @@ def _parse_resources_path(self, resource_list, resource_flags): elif resource_item == 'istio': self._handle_istio_inputs(resource_flags) else: - fast_load = ResourceType.Policies not in resource_flags + fast_load = (ResourceType.Policies not in resource_flags) and not ExplTracker().is_active() resource_scanner = TreeScannerFactory.get_scanner(resource_item, fast_load=fast_load) if resource_scanner is None: continue diff --git a/nca/NetworkConfig/TopologyObjectsFinder.py b/nca/NetworkConfig/TopologyObjectsFinder.py index 5c1e90f31..85983d86b 100644 --- a/nca/NetworkConfig/TopologyObjectsFinder.py +++ b/nca/NetworkConfig/TopologyObjectsFinder.py @@ -11,6 +11,7 @@ from nca.Parsers.IstioServiceEntryYamlParser import IstioServiceEntryYamlParser from nca.Parsers.K8sServiceYamlParser import K8sServiceYamlParser from nca.Utils.NcaLogger import NcaLogger +from nca.Utils.ExplTracker import ExplTracker class PodsFinder: @@ -109,6 +110,8 @@ def _add_pod_from_yaml(self, pod_object): for port in container.get('ports') or []: pod.add_named_port(port.get('name'), port.get('containerPort'), port.get('protocol', 'TCP')) self._add_peer(pod) + if ExplTracker().is_active(): + ExplTracker().add_item(pod_object.path, pod_object.line_number, pod.full_name(), pod.workload_name) def _add_peer(self, peer): """ @@ -164,6 +167,12 @@ def _add_pod_from_workload_yaml(self, workload_resource): for port in container.get('ports') or []: pod.add_named_port(port.get('name'), port.get('containerPort'), port.get('protocol', 'TCP')) self._add_peer(pod) + if ExplTracker().is_active(): + ExplTracker().add_item(workload_resource.path, + workload_resource.line_number, + pod.full_name(), + pod.workload_name + ) def _add_networkset_from_yaml(self, networkset_object): """ @@ -194,6 +203,8 @@ def _add_networkset_from_yaml(self, networkset_object): for cidr in cidrs: ipb.add_cidr(cidr) self._add_peer(ipb) + if ExplTracker().is_active(): + ExplTracker().add_item(networkset_object.path, networkset_object.line_number, ipb.full_name()) def _add_hep_from_yaml(self, hep_object): """ @@ -217,6 +228,8 @@ def _add_hep_from_yaml(self, hep_object): hep.add_profile(profile) self._add_peer(hep) + if ExplTracker().is_active(): + ExplTracker().add_item(hep_object.path, hep_object.line_number, hep.full_name()) def _add_wep_from_yaml(self, wep_object): """ @@ -243,6 +256,8 @@ def _add_wep_from_yaml(self, wep_object): wep.add_profile(profile) self._add_peer(wep) + if ExplTracker().is_active(): + ExplTracker().add_item(wep_object.path, wep_object.line_number, wep.full_name(), wep.workload_name) def _add_dns_entries_from_yaml(self, srv_entry_object): """ diff --git a/nca/SchemeRunner.py b/nca/SchemeRunner.py index 6504500c8..9c54ee03b 100644 --- a/nca/SchemeRunner.py +++ b/nca/SchemeRunner.py @@ -10,6 +10,7 @@ from nca.Parsers.GenericYamlParser import GenericYamlParser from nca.NetworkConfig.NetworkConfigQueryRunner import NetworkConfigQueryRunner from nca.NetworkConfig.ResourcesHandler import ResourcesHandler +from nca.Utils.ExplTracker import ExplTracker class SchemeRunner(GenericYamlParser): @@ -147,6 +148,9 @@ def run_scheme(self): global_ns_list = self._handle_resources_list(self.scheme.get('namespaceList', None)) global_resource_list = self._handle_resources_list(self.scheme.get('resourceList', None)) resources_handler = ResourcesHandler() + if self.optimized_run == 'true': + # we need to track configurations for the queries to use later-on + ExplTracker().activate() resources_handler.set_global_peer_container(global_ns_list, global_pod_list, global_resource_list, self.optimized_run) diff --git a/nca/Utils/ExplTracker.py b/nca/Utils/ExplTracker.py new file mode 100644 index 000000000..6f55a9dea --- /dev/null +++ b/nca/Utils/ExplTracker.py @@ -0,0 +1,500 @@ +# +# Copyright 2022 - IBM Inc. All rights reserved +# SPDX-License-Identifier: Apache2.0 +# + +from nca.Utils.Utils import Singleton +from nca.Utils.NcaLogger import NcaLogger +from nca.CoreDS.Peer import PeerSet, IpBlock +from bs4 import BeautifulSoup +from bs4.element import Tag +from nca.CoreDS.ConnectivityProperties import ConnectivityProperties + + +class ExplTracker(metaclass=Singleton): + """ + The Explainability Tracker is used for tracking the elements and their configuration, + so it will be able to specify which configurations are responsible for each peer and each connection + or lack of connection between them. + + The ExplTracker is Singleton + Members: + ExplDescriptorContainer - A container for all expl' items' in the system. + Each entry has a peer or a policy with their name, file and line number of the configurations. + + ExplPeerToPolicyContainer - A container for finding the affecting policies from peers in egress and ingress + For each peer name it has a ExplPolicies class object with 3 items: + all_policies - a set of all the policies affecting the current peer + egress_dst - a dict of destination peers allowed in the current peer's egress and for each of them, + the policies that allows it + ingress_src - a dict of source peers allowed in the current peer's ingress and for each of them, + the policies that allows it + That way, when given a src and dst peers we can extract which policies allow the connection in each side. + When there is no connection, we list all the policies that affect the peers, so the user may have all the info + to find problems. + + _is_active - flag for checking if expl' was activated + + all_conns - all the calculated connection. This is used to shortcut the check if 2 peers are connected or not + + all_peers - all the peers. This is used for the explain-all feature. + + ep - endpoints configurations (use either full_name for pod mode, or workload_name for deployments mode) + """ + + DEFAULT_POLICY = 'Default-Policy' + SUPPORTED_OUTPUT_FORMATS = ['txt', 'txt_no_fw_rules'] + + def __init__(self, ep=''): + + self.ExplDescriptorContainer = dict() # a map from str (resource/policy name) to a dict object with entries: + # 'path','line','workload_name' + self.ExplPeerToPolicyContainer = dict() # a map from str (peer name) to ExplPolicies object + self._is_active = False + self.all_conns = None + self.all_peers = None + self.ep = ep + + class ExplPolicies: + """ + ExplPolicies holds the policies affecting peers in relation to other peers. + That is, for each peer it holds all the peers in its egress and ingress and the policies + that has effect on the connection to that peers. + """ + + def __init__(self): + self.egress_dst = dict() # a map from str (peer name) to a set of str (policy names) + self.ingress_src = dict() # a map from str (peer name) to a set of str (policy names) + self.all_policies = set() + + @staticmethod + def _add_policy_to_map(peer_set, peer_map, policy_name): + """ + Adds a policy to the map of affecting policies, for each peer in the peer_set + :param PeerSet peer_set: a set of peers to add the policy to + :param dict peer_map: a map of peer-to-policies that holds the policies affecting each peer + :param str policy_name: the policy to add + """ + for peer in peer_set: + peer_name = peer.full_name() + if not peer_map.get(peer_name): + peer_map[peer_name] = set() + # We don't want Default-Policy if we have any other policy, + # so we first remove it and then add the policy (even if we currently add + # the Default-Policy itself). + peer_map[peer_name].discard(ExplTracker.DEFAULT_POLICY) + peer_map[peer_name].add(policy_name) + + def add_policy(self, policy_name, egress_dst, ingress_src): + """ + Adds a given policy to the relevant peer-to-policies map (egress map, ingress map) + :param str policy_name: name of the policy + :param PeerSet egress_dst: the set of egress destinations peers to add the policy too + :param PeerSet ingress_src: the set of ingress source peers to add the policy too + """ + self.all_policies.add(policy_name) + + if egress_dst: + self._add_policy_to_map(egress_dst, self.egress_dst, policy_name) + + if ingress_src: + self._add_policy_to_map(ingress_src, self.ingress_src, policy_name) + + def _reset(self): + self.ExplDescriptorContainer = {} + self.ExplPeerToPolicyContainer = {} + self._is_active = False + self.all_conns = None + self.all_peers = None + self.ep = '' + + self.add_item('', 0, self.DEFAULT_POLICY) + + def activate(self): + """ + Make the ExplTracker active + """ + self._reset() + self._is_active = True + + def set_endpoints(self, ep): + """ + Set the endpoints configuration + """ + self.ep = ep + + def is_active(self): + """ + Return the active state of the ExplTracker + :return: bool + """ + return self._is_active + + def is_output_format_supported(self, output_format): + """ + Checks if the given output format is supported + :param string output_format: the output format to check + :return: True/False + """ + return output_format in self.SUPPORTED_OUTPUT_FORMATS + + def add_item(self, path, ln, full_name, workload_name=''): + """ + Adds an item describing a configuration block + :param str path: the path to the configuration file + :param int ln: the line starting the configuration block in its file + :param str full_name: the full name of the configuration block (doc) + :param str workload_name: the workload name of the configuration block (doc) + """ + if full_name: + # When DirScanner iterates over a directory it fetches files with Windows path. + # We need to convert it to Linux path. + path = path.replace('\\', '/') + # handle Livesim special case, where we need the full path to access the file, + # but for testing we need it to be environment agnostic. + _, middle, relative_path = path.rpartition("network-config-analyzer") + if middle: + path = "network-config-analyzer" + relative_path + self.ExplDescriptorContainer[full_name] = {'path': path, 'line': ln, 'workload_name': workload_name} + else: + NcaLogger().log_message('Explainability error: configuration-block name can not be empty', level='E') + + def derive_item(self, new_name): + """ + Handles resources that change their name after parsing, like virtual-service + that adds the service name and suffix "/allowed" + Expecting the original name to be before the "/" character. + :param str new_name: the name for the new derived element + """ + name_parts = new_name.split('/') + name = name_parts[0] + if self.ExplDescriptorContainer.get(name): + self.ExplDescriptorContainer[new_name] = {'path': self.ExplDescriptorContainer[name].get('path'), + 'line': self.ExplDescriptorContainer[name].get('line'), + 'base_name': name + } + else: + NcaLogger().log_message(f'Explainability error: derived item {new_name} found no base item', + level='E') + + def add_peer_policy(self, peer_name, policy_name, egress_dst, ingress_src): + """ + Add a new policy to a peer + :param str peer_name: peer name to add the policy to + :param srt policy_name: name of the policy + :param egress_dst: a list of peers that the given policy affect, egress wise. + :param ingress_src: a list of peers that the given policy affect, ingress wise. + """ + if self.ExplDescriptorContainer.get(peer_name): + if not self.ExplPeerToPolicyContainer.get(peer_name): + self.ExplPeerToPolicyContainer[peer_name] = self.ExplPolicies() + self.ExplPeerToPolicyContainer[peer_name].add_policy(policy_name, + egress_dst, + ingress_src, + ) + else: + NcaLogger().log_message(f'Explainability error: Trying to add policy {policy_name} to peer {peer_name},' + f' but peer not found in Expl Database', level='E') + + def extract_peers(self, conns): + """ + Utility function to extract the peer names held in a connectivity element + :param ConnectivityProperties conns: + :return: PeerSet src_peers, PeerSet dst_peers: sets of collected peers + """ + src_peers = PeerSet() + dst_peers = PeerSet() + for cube in conns: + conn_cube = conns.get_connectivity_cube(cube) + src_peers |= conn_cube["src_peers"] if conn_cube["src_peers"] else self.all_peers + dst_peers |= conn_cube["dst_peers"] if conn_cube["dst_peers"] else self.all_peers + return src_peers, dst_peers + + def set_peers(self, peers): + """ + Update the peers into ExplTracker + :param PeerSet peers: all the peers in the container + """ + self.all_peers = peers + + def set_connections_and_peers(self, conns, peers): + """ + Update the calculated connections and topology peers into ExplTracker + :param ConnectivityProperties conns: the connectivity mapping calculated by the query + :param PeerSet peers: all the peers in the container + """ + self.all_conns = conns + self.all_peers = peers + # add all missing 'special' peers (like 0.0.0.0/0) with default policy. + for peer in self.all_peers: + peer_name = peer.full_name() + if not self.ExplPeerToPolicyContainer.get(peer_name): + if not self.ExplDescriptorContainer.get(peer_name): + self.add_item('', 0, peer_name) + self.add_default_policy(PeerSet([peer]), peers, False) + self.add_default_policy(peers, PeerSet([peer]), True) + + def _get_peer_by_name(self, peer_name): + """ + Get Peer objects from all_peers by peer name. + :param str peer_name: the name of the peer to retrieve + :return: peer object + """ + for peer in self.all_peers: + if peer.full_name() == peer_name: + return peer + return None + + def are_peers_connected(self, src, dst): + """ + Check if a given pair of peers are connected + :param str src: name of the source peer + :param str dst: name of the destination peer + :return: bool: True for connected, False for disconnected + """ + if not self.all_conns and not self.all_peers: + NcaLogger().log_message('Explainability error: Connections were not set yet, but peer query was called', level='E') + + src_peer = self._get_peer_by_name(src) + dst_peer = self._get_peer_by_name(dst) + + return True if self.all_conns & ConnectivityProperties.make_conn_props_from_dict( + {"src_peers": PeerSet({src_peer}), "dst_peers": PeerSet({dst_peer})}) else False + + def add_policy_to_peers(self, policy): + policy.sync_opt_props() + for peer in policy.selected_peers: + src_peers, _ = self.extract_peers(policy.optimized_allow_ingress_props) + _, dst_peers = self.extract_peers(policy.optimized_allow_egress_props) + peer_name = peer.full_name() + self.add_peer_policy(peer_name, policy.name, dst_peers, src_peers) + + def add_default_policy(self, src, dst, is_ingress): + """ + Add the default policy to the peers which were not affected by a specific policy. + :param PeerSet src: the peer list for the source of the policy + :param PeerSet dst: the peer list for the destination of the policy + :param is_ingress: is this an ingress or egress policy + """ + if is_ingress: + nodes = dst + egress_list = {} + ingress_list = src + else: + nodes = src + egress_list = dst + ingress_list = {} + + for node in nodes: + # we don't add Default-Policy if there is already an explicit + # policy allowing the connectivity + if self.is_policy_list_empty(node.full_name(), is_ingress): + node_name = node.full_name() + self.add_peer_policy(node_name, + ExplTracker.DEFAULT_POLICY, + egress_list, + ingress_list, + ) + + def is_policy_list_empty(self, node_name, check_ingress): + """ + A service function to check if the expl' list of ingress or egress is empty. + :param str node_name: the node to check + :param bool check_ingress: list to check (ingress or egress) + :return: + """ + peer = self.ExplPeerToPolicyContainer.get(node_name) + if peer: + if check_ingress and peer.ingress_src: + return False + if not check_ingress and peer.egress_dst: + return False + return True + + def prepare_node_str(self, node_name, results, direction=None): + """ + A utility function to help format a node explainability description + :param str node_name: the name of the node currently described + :param list results: the names of the configurations affecting this node + :param str direction: src/dst + :return str: string with the description + """ + if len(results) < 2: + NcaLogger().log_message(f'Explainability error: There are no Policy or Node configurations. got only' + f' {len(results)} results,') + + out = [] + if direction: + out = [f'\n({direction}){self.get_printout_ep_name(node_name)}:'] + if self.ExplDescriptorContainer.get(node_name).get("path") == '': + out.append('IP blocks have no configurations') + return "" + for index, name in enumerate(results): + ep_name = name + if index == 0: + # results always starts with the policy configurations - make a headline + out.append('Policy Configurations:') + if index > 0 and index == len(results)-1: + # the last one is always the resource configuration - make a headline + out.append('Resource Configurations:') + ep_name = self.get_printout_ep_name(name) + if not self.ExplDescriptorContainer.get(name): + out.append(f'{ep_name} - explainability entry not found') + continue + base_name = self.ExplDescriptorContainer.get(name).get("base_name") + if base_name: + ep_name = base_name + path = self.ExplDescriptorContainer.get(name).get("path") + if path == '': # special element (like Default Policy) + out.append(f'{ep_name}') + else: + out.append(f'{ep_name}: line {self.ExplDescriptorContainer.get(name).get("line")} ' + f'in file {path}') + return out + + def get_printout_ep_name(self, peer): + """ + Get the name of the peer based on the endpoints configurations: + full_name for Pods mode + workload_name for Deployments mode + :param peer: the peer to query + :return: string: name of peer + """ + if self.ep == 'deployments': + printout_name = self.ExplDescriptorContainer.get(peer).get('workload_name') + if printout_name == '': + printout_name = peer + return printout_name + else: + return peer + + def explain_all(self): + """ + Get a full expl' description of all the peers in the connectivity map + :return: string: xml format of all the expl' entries for every 2 nodes. + """ + soup = BeautifulSoup(features='html') + entry_id = 0 + # use the peer names as defined in the end-points configuration, + # also use one peer for each deployment + peer_names = set() + deployment_names = set() + for peer in self.all_peers: + # if in deployments mode, use one pod from each deployment + deployment_name = self.get_printout_ep_name(peer.full_name()) + if isinstance(peer, IpBlock): + deployment_name = peer.name + if self.ep == 'deployments' and deployment_name in deployment_names: + continue + deployment_names.add(deployment_name) + peer_names.add(peer.full_name()) + peer_names = sorted(list(peer_names)) + + for peer1 in peer_names: + for peer2 in peer_names: + if peer1 == peer2: + text = self.explain([peer1]) + else: + text = self.explain([peer1, peer2]) + # Create the XML entry element + entry = soup.new_tag('entry') + entry_id += 1 + entry['id'] = str(entry_id) + entry['src'] = self.get_printout_ep_name(peer1) + entry['dst'] = self.get_printout_ep_name(peer2) + text_elem = Tag(soup, name='text') + text_elem.string = text + entry.append(text_elem) + soup.append(entry) + return soup.prettify() + + def get_working_ep_name(self, name): + """ + if ep is in 'deployments' mode, the given name will be the workload name but the full name is always used as index + :param name: str: the name to convert to full_name (it is not already the full name) + :return: str: full name of the element + """ + + # Replace '[' with '(' and ']' with ')' + name = name.replace('[', '(').replace(']', ')') + + if self.ep == 'deployments': + # convert from workload name to fullname + for fullname, data in self.ExplDescriptorContainer.items(): + workload_name = data.get('workload_name') + if name == workload_name or name == fullname: + # found the workload name, return its fullname + # or, it has no workload name + return fullname + return '' + else: + # we are in 'pods' mode so the name is already the fullname + return name + + def explain(self, nodes): + """ + The magic function to explain the connectivity or the LACK of it between the given nodes + It has 2 modes: + single node - if a single node is given, all the configurations on that node are displayed. + two nodes - if 2 nodes are given, either they hava a connection between them and the configurations responsible for + the connection are displayed. or, they lack a connection, in which case, all affecting configurations + on those 2 nodes are displayed. + All nodes - if the single node get the value 'ALL', all the topology will be explained. + :param list(str) nodes: nodes to explain + :return: str: the explanation out string + """ + if len(nodes) < 1: + return '' + elif len(nodes) > 2: + NcaLogger().log_message(f'Explainability error: only 1 or 2 nodes are allowed for explainability query,' + f' found {len(nodes)} ', level='E') + return '' + + if nodes[0] == 'ALL': + out = self.explain_all() + return out + + src_node = self.get_working_ep_name(nodes[0]) + for node in nodes: + ep_node = self.get_working_ep_name(node) + if not self.ExplDescriptorContainer.get(ep_node): + NcaLogger().log_message(f'Explainability error - {node} ' + f'was not found in the connectivity results', level='E') + return '' + if not self.ExplPeerToPolicyContainer.get(ep_node): + NcaLogger().log_message(f'Explainability error - {self.node} ' + f'has no explanability results', level='E') + return '' + + out = [] + if len(nodes) == 2: + # 2 nodes scenario + dst_node = self.get_working_ep_name(nodes[1]) + if self.are_peers_connected(src_node, dst_node): + # connection valid + out.append(f'\nConfigurations affecting the connectivity between ' + f'(src){self.get_printout_ep_name(src_node)} and (dst){self.get_printout_ep_name(dst_node)}:') + src_results = self.ExplPeerToPolicyContainer[src_node].egress_dst.get(dst_node) + dst_results = self.ExplPeerToPolicyContainer[dst_node].ingress_src.get(src_node) + else: + out.append(f'Configurations affecting the LACK of connectivity between ' + f'(src){self.get_printout_ep_name(src_node)} and (dst){self.get_printout_ep_name(dst_node)}:') + src_results = self.ExplPeerToPolicyContainer[src_node].all_policies + dst_results = self.ExplPeerToPolicyContainer[dst_node].all_policies + + src_results = sorted(list(src_results)) if src_results else [] + src_results.append(src_node) + dst_results = sorted(list(dst_results)) if dst_results else [] + dst_results.append(dst_node) + out.extend(self.prepare_node_str(src_node, src_results, 'src')) + out.extend(self.prepare_node_str(dst_node, dst_results, 'dst')) + else: # only one node + results = self.ExplPeerToPolicyContainer[src_node].all_policies + results = sorted(list(results)) + results.append(src_node) + out.append(f'Configurations affecting {self.get_printout_ep_name(src_node)}:') + out.extend(self.prepare_node_str(src_node, results)) + + # convert the list of expl' directives into string + out = '\n'.join(out) + return out diff --git a/nca/Utils/NcaLogger.py b/nca/Utils/NcaLogger.py index 162a67712..338d96cc9 100644 --- a/nca/Utils/NcaLogger.py +++ b/nca/Utils/NcaLogger.py @@ -3,18 +3,7 @@ # SPDX-License-Identifier: Apache2.0 # import sys - - -class Singleton(type): - """ - A metaclass implementing singleton for NcaLogger - """ - _instances = {} - - def __call__(cls, *args, **kwargs): - if cls not in cls._instances: - cls._instances[cls] = super(Singleton, cls).__call__(*args, **kwargs) - return cls._instances[cls] +from nca.Utils.Utils import Singleton class NcaLogger(metaclass=Singleton): @@ -88,7 +77,7 @@ def log_message(self, msg, file=None, level=None): Log a message :param sting msg: message to log :param a file-like-object file: output stream - :param str level: the level of the message: (I)nfo, (W)arning + :param str level: the level of the message: (I)nfo, (W)arning, (E)rror """ if level == 'I': msg = f'Info: {msg}' @@ -96,6 +85,10 @@ def log_message(self, msg, file=None, level=None): msg = f'Warning: {msg}' if not file: file = sys.stderr + elif level == 'E': + msg = f'Error: {msg}' + if not file: + file = sys.stderr if self._is_collecting_msgs: if self.is_mute(): diff --git a/nca/Utils/OutputConfiguration.py b/nca/Utils/OutputConfiguration.py index bef6fe4f4..e0bdccf60 100644 --- a/nca/Utils/OutputConfiguration.py +++ b/nca/Utils/OutputConfiguration.py @@ -21,7 +21,7 @@ def __init__(self, output_config_dict=None, query_name=''): 'fwRulesMaxIter': 10, 'outputFormat': 'txt', 'outputPath': None, 'fwRulesOverrideAllowedLabels': None, 'prURL': None, 'connectivityFilterIstioEdges': True, 'outputEndpoints': 'deployments', - 'subset': {}, 'fullExplanation': False, 'excludeIPv6Range': True} + 'subset': {}, 'explain': None, 'fullExplanation': False, 'excludeIPv6Range': True} super().__init__(default_output_config) if output_config_dict is not None: diff --git a/nca/Utils/Utils.py b/nca/Utils/Utils.py new file mode 100644 index 000000000..adc22afa6 --- /dev/null +++ b/nca/Utils/Utils.py @@ -0,0 +1,16 @@ +# +# Copyright 2022 - IBM Inc. All rights reserved +# SPDX-License-Identifier: Apache2.0 +# + + +class Singleton(type): + """ + A metaclass implementing singleton for NcaLogger + """ + _instances = {} + + def __call__(cls, *args, **kwargs): + if cls not in cls._instances: + cls._instances[cls] = super(Singleton, cls).__call__(*args, **kwargs) + return cls._instances[cls] diff --git a/nca/nca_cli.py b/nca/nca_cli.py index 70a3ab429..448827d25 100644 --- a/nca/nca_cli.py +++ b/nca/nca_cli.py @@ -15,6 +15,7 @@ from nca.NetworkConfig.NetworkConfigQueryRunner import NetworkConfigQueryRunner from nca.NetworkConfig.ResourcesHandler import ResourcesHandler from nca.SchemeRunner import SchemeRunner +from nca.Utils.ExplTracker import ExplTracker def _valid_path(path_location, allow_ghe=False, allowed_platforms=None): @@ -155,6 +156,7 @@ def run_args(args): # noqa: C901 'prURL': args.pr_url or None, 'outputEndpoints': args.output_endpoints, 'subset': {}, + 'explain': [], 'excludeIPv6Range': not args.print_ipv6}) expected_output = None # default values are for sanity query @@ -182,6 +184,11 @@ def run_args(args): # noqa: C901 all_labels.append(lbl_dict) output_config['subset'].update({'label_subset': all_labels}) + if args.explain is not None and args.optimized_run == 'true': + output_config['explain'] = args.explain + ExplTracker().activate() + ExplTracker().set_endpoints(output_config.outputEndpoints) + if args.equiv is not None: np_list = args.equiv if args.equiv != [''] else None query_name = 'twoWayContainment' @@ -304,6 +311,8 @@ def nca_main(argv=None): help='A file/GHE url/cluster-type to read pod list from (may be specified multiple times)') parser.add_argument('--resource_list', '-r', type=_resource_list_valid_path, action='append', help='Network policies entries or Filesystem or GHE location of base network resources ') + parser.add_argument('--explain', '-expl', type=str, + help='A node or 2 nodes (a connection), to explain the configurations affecting them') parser.add_argument('--deployment_subset', '-ds', type=str, help='A list of deployment names to subset the query by') parser.add_argument('--namespace_subset', '-nss', type=str, diff --git a/setup.cfg b/setup.cfg index 5ba72fdd5..e350894d9 100644 --- a/setup.cfg +++ b/setup.cfg @@ -23,6 +23,7 @@ install_requires = PyYAML==6.0 greenery==4.0.0 networkx==3.1 + beautifulsoup4==4.12.0 python_requires = >=3.8 diff --git a/tests/expected_cmdline_output_files/basic_connectivity_expl_output.txt b/tests/expected_cmdline_output_files/basic_connectivity_expl_output.txt new file mode 100644 index 000000000..52b17a60d --- /dev/null +++ b/tests/expected_cmdline_output_files/basic_connectivity_expl_output.txt @@ -0,0 +1,4019 @@ +final fw rules for query: , config: test_subset_topology.yaml: +src_ns: [default] src_pods: [Pod1] dst_ns: [ns2] dst_pods: [Pod3] conn: All connections +src_ns: [default] src_pods: [Pod1] dst_ns: [ns3] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [Pod4] dst_ns: [ns1] dst_pods: [Pod2] conn: All connections +src_ns: [default] src_pods: [Pod4] dst_ns: [ns2] dst_pods: [deployment-D] conn: All connections +src_ns: [ns1] src_pods: [Pod2] dst_ns: [default] dst_pods: [Pod1] conn: All connections +src_ns: [ns1] src_pods: [deployment-A] dst_ns: [default] dst_pods: [deployment-E] conn: All connections +src_ns: [ns1] src_pods: [deployment-B] dst_ns: [ns1] dst_pods: [deployment-A] conn: All connections +src_ns: [ns2] src_pods: [deployment-C] dst_ns: [ns1] dst_pods: [deployment-A] conn: All connections +src_ns: [ns3] src_pods: [*] dst_ns: [default] dst_pods: [Pod4] conn: All connections + + +Explainability results: + + + Configurations affecting default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)default/Pod4(Pod): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)default/Pod5(Pod): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)default/deployment-E(Deployment): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)default/deployment-Eb(Deployment): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)ns1/Pod2(Pod): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)ns1/deployment-A(Deployment): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)ns1/deployment-B(Deployment): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)default/Pod1(Pod) and (dst)ns2/Pod3(Pod): + +(src)default/Pod1(Pod): +Policy Configurations: +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)ns2/Pod6(Pod): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)ns2/deployment-C(Deployment): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)ns2/deployment-D(Deployment): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)ns2/deployment-F(Deployment): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)default/Pod1(Pod) and (dst)ns3/Pod7(Pod): + +(src)default/Pod1(Pod): +Policy Configurations: +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)default/Pod1(Pod) and (dst)ns3/Pod8(Pod): + +(src)default/Pod1(Pod): +Policy Configurations: +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)default/Pod1(Pod): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)default/Pod5(Pod): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)default/deployment-E(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)default/deployment-Eb(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)default/Pod4(Pod) and (dst)ns1/Pod2(Pod): + +(src)default/Pod4(Pod): +Policy Configurations: +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)ns1/deployment-A(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)ns1/deployment-B(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)ns2/Pod3(Pod): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)ns2/Pod6(Pod): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)ns2/deployment-C(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)default/Pod4(Pod) and (dst)ns2/deployment-D(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)ns2/deployment-F(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)ns3/Pod7(Pod): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)ns3/Pod8(Pod): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)default/Pod1(Pod): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)default/Pod4(Pod): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)default/deployment-E(Deployment): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)default/deployment-Eb(Deployment): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)ns1/Pod2(Pod): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)ns1/deployment-A(Deployment): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)ns1/deployment-B(Deployment): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)ns2/Pod3(Pod): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)ns2/Pod6(Pod): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)ns2/deployment-C(Deployment): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)ns2/deployment-D(Deployment): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)ns2/deployment-F(Deployment): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)ns3/Pod7(Pod): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod5(Pod) and (dst)ns3/Pod8(Pod): + +(src)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)default/Pod1(Pod): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)default/Pod4(Pod): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)default/Pod5(Pod): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)default/deployment-Eb(Deployment): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns1/Pod2(Pod): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns1/deployment-A(Deployment): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns1/deployment-B(Deployment): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns2/Pod3(Pod): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns2/Pod6(Pod): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns2/deployment-C(Deployment): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns2/deployment-D(Deployment): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns2/deployment-F(Deployment): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns3/Pod7(Pod): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns3/Pod8(Pod): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)default/Pod1(Pod): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)default/Pod4(Pod): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)default/Pod5(Pod): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)default/deployment-E(Deployment): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)ns1/Pod2(Pod): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)ns1/deployment-A(Deployment): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)ns1/deployment-B(Deployment): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)ns2/Pod3(Pod): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)ns2/Pod6(Pod): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)ns2/deployment-C(Deployment): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)ns2/deployment-D(Deployment): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)ns2/deployment-F(Deployment): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)ns3/Pod7(Pod): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-Eb(Deployment) and (dst)ns3/Pod8(Pod): + +(src)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)ns1/Pod2(Pod) and (dst)default/Pod1(Pod): + +(src)ns1/Pod2(Pod): +Policy Configurations: +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)default/Pod4(Pod): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)default/Pod5(Pod): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)default/deployment-E(Deployment): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)default/deployment-Eb(Deployment): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)ns1/deployment-A(Deployment): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)ns1/deployment-B(Deployment): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)ns2/Pod3(Pod): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)ns2/Pod6(Pod): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)ns2/deployment-C(Deployment): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)ns2/deployment-D(Deployment): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)ns2/deployment-F(Deployment): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)ns3/Pod7(Pod): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/Pod2(Pod) and (dst)ns3/Pod8(Pod): + +(src)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)default/Pod1(Pod): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)default/Pod4(Pod): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)default/Pod5(Pod): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)ns1/deployment-A(Deployment) and (dst)default/deployment-E(Deployment): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)default/deployment-Eb(Deployment): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns1/Pod2(Pod): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns1/deployment-B(Deployment): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns2/Pod3(Pod): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns2/Pod6(Pod): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns2/deployment-C(Deployment): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns2/deployment-D(Deployment): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns2/deployment-F(Deployment): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns3/Pod7(Pod): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns3/Pod8(Pod): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)default/Pod1(Pod): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)default/Pod4(Pod): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)default/Pod5(Pod): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)default/deployment-E(Deployment): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)default/deployment-Eb(Deployment): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns1/Pod2(Pod): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns1/deployment-A(Deployment): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns2/Pod3(Pod): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns2/Pod6(Pod): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns2/deployment-C(Deployment): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns2/deployment-D(Deployment): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns2/deployment-F(Deployment): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns3/Pod7(Pod): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns3/Pod8(Pod): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)default/Pod1(Pod): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)default/Pod4(Pod): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)default/Pod5(Pod): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)default/deployment-E(Deployment): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)default/deployment-Eb(Deployment): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)ns1/Pod2(Pod): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)ns1/deployment-A(Deployment): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)ns1/deployment-B(Deployment): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)ns2/Pod6(Pod): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)ns2/deployment-C(Deployment): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)ns2/deployment-D(Deployment): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)ns2/deployment-F(Deployment): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)ns3/Pod7(Pod): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod3(Pod) and (dst)ns3/Pod8(Pod): + +(src)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)default/Pod1(Pod): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)default/Pod4(Pod): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)default/Pod5(Pod): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)default/deployment-E(Deployment): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)default/deployment-Eb(Deployment): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)ns1/Pod2(Pod): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)ns1/deployment-A(Deployment): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)ns1/deployment-B(Deployment): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)ns2/Pod3(Pod): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)ns2/deployment-C(Deployment): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)ns2/deployment-D(Deployment): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)ns2/deployment-F(Deployment): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)ns3/Pod7(Pod): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/Pod6(Pod) and (dst)ns3/Pod8(Pod): + +(src)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)default/Pod1(Pod): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)default/Pod4(Pod): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)default/Pod5(Pod): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)default/deployment-E(Deployment): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)default/deployment-Eb(Deployment): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns1/Pod2(Pod): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns1/deployment-A(Deployment): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns1/deployment-B(Deployment): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns2/Pod3(Pod): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns2/Pod6(Pod): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns2/deployment-D(Deployment): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns2/deployment-F(Deployment): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns3/Pod7(Pod): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns3/Pod8(Pod): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)default/Pod1(Pod): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)default/Pod4(Pod): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)default/Pod5(Pod): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)default/deployment-E(Deployment): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)default/deployment-Eb(Deployment): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns1/Pod2(Pod): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns1/deployment-A(Deployment): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns1/deployment-B(Deployment): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns2/Pod3(Pod): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns2/Pod6(Pod): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns2/deployment-C(Deployment): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns2/deployment-F(Deployment): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns3/Pod7(Pod): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns3/Pod8(Pod): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)default/Pod1(Pod): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)default/Pod4(Pod): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)default/Pod5(Pod): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)default/deployment-E(Deployment): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)default/deployment-Eb(Deployment): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)ns1/Pod2(Pod): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)ns1/deployment-A(Deployment): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)ns1/deployment-B(Deployment): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)ns2/Pod3(Pod): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)ns2/Pod6(Pod): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)ns2/deployment-C(Deployment): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)ns2/deployment-D(Deployment): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)ns3/Pod7(Pod): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-F(Deployment) and (dst)ns3/Pod8(Pod): + +(src)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)default/Pod1(Pod): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)ns3/Pod7(Pod) and (dst)default/Pod4(Pod): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)default/Pod5(Pod): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)default/deployment-E(Deployment): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)default/deployment-Eb(Deployment): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)ns1/Pod2(Pod): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)ns1/deployment-A(Deployment): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)ns1/deployment-B(Deployment): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)ns2/Pod3(Pod): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)ns2/Pod6(Pod): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)ns2/deployment-C(Deployment): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)ns2/deployment-D(Deployment): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)ns2/deployment-F(Deployment): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod7(Pod) and (dst)ns3/Pod8(Pod): + +(src)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)default/Pod1(Pod): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)ns3/Pod8(Pod) and (dst)default/Pod4(Pod): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)default/Pod5(Pod): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod5(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod5config: line 402 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod5(Pod): line 238 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)default/deployment-E(Deployment): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)default/deployment-Eb(Deployment): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-Eb(Deployment): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-Eb(Deployment): line 144 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)ns1/Pod2(Pod): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/Pod2(Pod): +Policy Configurations: +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod2config: line 320 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/Pod2(Pod): line 202 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)ns1/deployment-A(Deployment): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)ns1/deployment-B(Deployment): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)ns2/Pod3(Pod): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod3(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod3config: line 349 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod3(Pod): line 214 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)ns2/Pod6(Pod): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/Pod6(Pod): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod6config: line 415 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/Pod6(Pod): line 250 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)ns2/deployment-C(Deployment): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)ns2/deployment-D(Deployment): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)ns2/deployment-F(Deployment): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-F(Deployment): +Policy Configurations: +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-F(Deployment): line 166 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns3/Pod8(Pod) and (dst)ns3/Pod7(Pod): + +(src)ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns3/Pod7(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod7(Pod): line 262 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns3/Pod8(Pod): +Policy Configurations: +config-n3: line 463 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns3/Pod8(Pod): line 274 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/basic_connectivity_specific_nodes_expl_output.txt b/tests/expected_cmdline_output_files/basic_connectivity_specific_nodes_expl_output.txt new file mode 100644 index 000000000..e07f0722f --- /dev/null +++ b/tests/expected_cmdline_output_files/basic_connectivity_specific_nodes_expl_output.txt @@ -0,0 +1,28 @@ +final fw rules for query: , config: test_subset_topology.yaml: +src_ns: [default] src_pods: [Pod1] dst_ns: [ns2] dst_pods: [Pod3] conn: All connections +src_ns: [default] src_pods: [Pod1] dst_ns: [ns3] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [Pod4] dst_ns: [ns1] dst_pods: [Pod2] conn: All connections +src_ns: [default] src_pods: [Pod4] dst_ns: [ns2] dst_pods: [deployment-D] conn: All connections +src_ns: [ns1] src_pods: [Pod2] dst_ns: [default] dst_pods: [Pod1] conn: All connections +src_ns: [ns1] src_pods: [deployment-A] dst_ns: [default] dst_pods: [deployment-E] conn: All connections +src_ns: [ns1] src_pods: [deployment-B] dst_ns: [ns1] dst_pods: [deployment-A] conn: All connections +src_ns: [ns2] src_pods: [deployment-C] dst_ns: [ns1] dst_pods: [deployment-A] conn: All connections +src_ns: [ns3] src_pods: [*] dst_ns: [default] dst_pods: [Pod4] conn: All connections + + +Explainability results: +Configurations affecting the LACK of connectivity between (src)default/Pod1(Pod) and (dst)ns2/deployment-D(Deployment): + +(src)default/Pod1(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod1config: line 288 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod1(Pod): line 190 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/istio-ingress_expl_output.txt b/tests/expected_cmdline_output_files/istio-ingress_expl_output.txt new file mode 100644 index 000000000..9e2a86fba --- /dev/null +++ b/tests/expected_cmdline_output_files/istio-ingress_expl_output.txt @@ -0,0 +1,952 @@ +final fw rules for query: , config: **: +src: 0.0.0.0/0 dst_ns: [default,prod,qa] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [istio-ingressgateway] dst_ns: [prod] dst_pods: [ratings-v1-857bb87c57] conn: TCP {'dst_ports': '9080', 'hosts': 'eu.bookinfo.com, uk.bookinfo.com, reviews.prod.svc.cluster.local', 'paths': '/reviews(/*)?'} +src_ns: [default] src_pods: [istio-ingressgateway] dst_ns: [qa] dst_pods: [*] conn: TCP {'dst_ports': '7777', 'hosts': 'eu.bookinfo.com, uk.bookinfo.com, reviews.prod.svc.cluster.local'} +src_ns: [default] src_pods: [productpage-v1-6f9df695b7, reviews-v3-869ff44845] dst: 0.0.0.0/0 conn: All connections +src_ns: [default] src_pods: [productpage-v1-6f9df695b7, reviews-v3-869ff44845] dst_ns: [default,prod,qa] dst_pods: [*] conn: All connections +src_ns: [prod,qa] src_pods: [*] dst: 0.0.0.0/0 conn: All connections +src_ns: [prod,qa] src_pods: [*] dst_ns: [default,prod,qa] dst_pods: [*] conn: All connections + + +Explainability results: + + + Configurations affecting 0.0.0.0/0: + + + + + Configurations affecting the connectivity between (src)0.0.0.0/0 and (dst)default/istio-ingressgateway(Deployment): + +(dst)default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + + + + + Configurations affecting the connectivity between (src)0.0.0.0/0 and (dst)default/productpage-v1(Deployment-StatefulSet): + +(dst)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)0.0.0.0/0 and (dst)default/reviews-v3(Deployment-StatefulSet): + +(dst)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)0.0.0.0/0 and (dst)prod/details-v1(Deployment-StatefulSet): + +(dst)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)0.0.0.0/0 and (dst)prod/ratings-v1(Deployment-StatefulSet): + +(dst)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)0.0.0.0/0 and (dst)qa/reviews-v1(Deployment-StatefulSet): + +(dst)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)0.0.0.0/0 and (dst)qa/reviews-v2(Deployment-StatefulSet): + +(dst)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the LACK of connectivity between (src)default/istio-ingressgateway(Deployment) and (dst)0.0.0.0/0: + +(src)default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +bookinfo-rule: line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/virtual_services.yaml +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + + + + + Configurations affecting default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +bookinfo-rule: line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/virtual_services.yaml +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/istio-ingressgateway(Deployment) and (dst)default/productpage-v1(Deployment-StatefulSet): + +(src)default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +bookinfo-rule: line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/virtual_services.yaml +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + +(dst)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the LACK of connectivity between (src)default/istio-ingressgateway(Deployment) and (dst)default/reviews-v3(Deployment-StatefulSet): + +(src)default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +bookinfo-rule: line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/virtual_services.yaml +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + +(dst)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the LACK of connectivity between (src)default/istio-ingressgateway(Deployment) and (dst)prod/details-v1(Deployment-StatefulSet): + +(src)default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +bookinfo-rule: line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/virtual_services.yaml +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + +(dst)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/istio-ingressgateway(Deployment) and (dst)prod/ratings-v1(Deployment-StatefulSet): + +(src)default/istio-ingressgateway(Deployment): +Policy Configurations: +bookinfo-rule: line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/virtual_services.yaml +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + +(dst)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/istio-ingressgateway(Deployment) and (dst)qa/reviews-v1(Deployment-StatefulSet): + +(src)default/istio-ingressgateway(Deployment): +Policy Configurations: +bookinfo-rule: line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/virtual_services.yaml +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + +(dst)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/istio-ingressgateway(Deployment) and (dst)qa/reviews-v2(Deployment-StatefulSet): + +(src)default/istio-ingressgateway(Deployment): +Policy Configurations: +bookinfo-rule: line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/virtual_services.yaml +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + +(dst)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/productpage-v1(Deployment-StatefulSet) and (dst)0.0.0.0/0: + +(src)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/productpage-v1(Deployment-StatefulSet) and (dst)default/istio-ingressgateway(Deployment): + +(src)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + + + + + Configurations affecting default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/productpage-v1(Deployment-StatefulSet) and (dst)default/reviews-v3(Deployment-StatefulSet): + +(src)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/productpage-v1(Deployment-StatefulSet) and (dst)prod/details-v1(Deployment-StatefulSet): + +(src)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/productpage-v1(Deployment-StatefulSet) and (dst)prod/ratings-v1(Deployment-StatefulSet): + +(src)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/productpage-v1(Deployment-StatefulSet) and (dst)qa/reviews-v1(Deployment-StatefulSet): + +(src)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/productpage-v1(Deployment-StatefulSet) and (dst)qa/reviews-v2(Deployment-StatefulSet): + +(src)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/reviews-v3(Deployment-StatefulSet) and (dst)0.0.0.0/0: + +(src)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/reviews-v3(Deployment-StatefulSet) and (dst)default/istio-ingressgateway(Deployment): + +(src)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + + + + + Configurations affecting the connectivity between (src)default/reviews-v3(Deployment-StatefulSet) and (dst)default/productpage-v1(Deployment-StatefulSet): + +(src)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/reviews-v3(Deployment-StatefulSet) and (dst)prod/details-v1(Deployment-StatefulSet): + +(src)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/reviews-v3(Deployment-StatefulSet) and (dst)prod/ratings-v1(Deployment-StatefulSet): + +(src)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/reviews-v3(Deployment-StatefulSet) and (dst)qa/reviews-v1(Deployment-StatefulSet): + +(src)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)default/reviews-v3(Deployment-StatefulSet) and (dst)qa/reviews-v2(Deployment-StatefulSet): + +(src)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/details-v1(Deployment-StatefulSet) and (dst)0.0.0.0/0: + +(src)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/details-v1(Deployment-StatefulSet) and (dst)default/istio-ingressgateway(Deployment): + +(src)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + + + + + Configurations affecting the connectivity between (src)prod/details-v1(Deployment-StatefulSet) and (dst)default/productpage-v1(Deployment-StatefulSet): + +(src)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/details-v1(Deployment-StatefulSet) and (dst)default/reviews-v3(Deployment-StatefulSet): + +(src)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/details-v1(Deployment-StatefulSet) and (dst)prod/ratings-v1(Deployment-StatefulSet): + +(src)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/details-v1(Deployment-StatefulSet) and (dst)qa/reviews-v1(Deployment-StatefulSet): + +(src)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/details-v1(Deployment-StatefulSet) and (dst)qa/reviews-v2(Deployment-StatefulSet): + +(src)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/ratings-v1(Deployment-StatefulSet) and (dst)0.0.0.0/0: + +(src)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/ratings-v1(Deployment-StatefulSet) and (dst)default/istio-ingressgateway(Deployment): + +(src)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + + + + + Configurations affecting the connectivity between (src)prod/ratings-v1(Deployment-StatefulSet) and (dst)default/productpage-v1(Deployment-StatefulSet): + +(src)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/ratings-v1(Deployment-StatefulSet) and (dst)default/reviews-v3(Deployment-StatefulSet): + +(src)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/ratings-v1(Deployment-StatefulSet) and (dst)prod/details-v1(Deployment-StatefulSet): + +(src)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/ratings-v1(Deployment-StatefulSet) and (dst)qa/reviews-v1(Deployment-StatefulSet): + +(src)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)prod/ratings-v1(Deployment-StatefulSet) and (dst)qa/reviews-v2(Deployment-StatefulSet): + +(src)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v1(Deployment-StatefulSet) and (dst)0.0.0.0/0: + +(src)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v1(Deployment-StatefulSet) and (dst)default/istio-ingressgateway(Deployment): + +(src)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + + + + + Configurations affecting the connectivity between (src)qa/reviews-v1(Deployment-StatefulSet) and (dst)default/productpage-v1(Deployment-StatefulSet): + +(src)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v1(Deployment-StatefulSet) and (dst)default/reviews-v3(Deployment-StatefulSet): + +(src)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v1(Deployment-StatefulSet) and (dst)prod/details-v1(Deployment-StatefulSet): + +(src)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v1(Deployment-StatefulSet) and (dst)prod/ratings-v1(Deployment-StatefulSet): + +(src)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v1(Deployment-StatefulSet) and (dst)qa/reviews-v2(Deployment-StatefulSet): + +(src)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v2(Deployment-StatefulSet) and (dst)0.0.0.0/0: + +(src)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v2(Deployment-StatefulSet) and (dst)default/istio-ingressgateway(Deployment): + +(src)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/istio-ingressgateway(Deployment): +Policy Configurations: +Default-Policy +Resource Configurations: +default/istio-ingressgateway(Deployment): line 1 in file ./istio_testcases/example_policies/istio-ingress-test/resources/istio-ingress-gateway-deployment.yaml + + + + + Configurations affecting the connectivity between (src)qa/reviews-v2(Deployment-StatefulSet) and (dst)default/productpage-v1(Deployment-StatefulSet): + +(src)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/productpage-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/productpage-v1(Deployment-StatefulSet): line 512 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v2(Deployment-StatefulSet) and (dst)default/reviews-v3(Deployment-StatefulSet): + +(src)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)default/reviews-v3(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +default/reviews-v3(Deployment-StatefulSet): line 2596 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v2(Deployment-StatefulSet) and (dst)prod/details-v1(Deployment-StatefulSet): + +(src)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)prod/details-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/details-v1(Deployment-StatefulSet): line 4 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v2(Deployment-StatefulSet) and (dst)prod/ratings-v1(Deployment-StatefulSet): + +(src)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)prod/ratings-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +prod/ratings-v1(Deployment-StatefulSet): line 1028 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting the connectivity between (src)qa/reviews-v2(Deployment-StatefulSet) and (dst)qa/reviews-v1(Deployment-StatefulSet): + +(src)qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + +(dst)qa/reviews-v1(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v1(Deployment-StatefulSet): line 1536 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + + + + Configurations affecting qa/reviews-v2(Deployment-StatefulSet): +Policy Configurations: +Default-Policy +Resource Configurations: +qa/reviews-v2(Deployment-StatefulSet): line 2066 in file ./istio_testcases/example_policies/istio-ingress-test/resources/bookinfo_pods_list.json + + \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/poc1_expl_output.txt b/tests/expected_cmdline_output_files/poc1_expl_output.txt new file mode 100644 index 000000000..4628937b9 --- /dev/null +++ b/tests/expected_cmdline_output_files/poc1_expl_output.txt @@ -0,0 +1,3089 @@ +final fw rules for query: , config: microservices-netpols.yaml: +src: 0.0.0.0/0 dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 +src: 0.0.0.0/0 dst_ns: [kube-system] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [cartservice] dst_ns: [default] dst_pods: [redis-cart] conn: TCP 6379 +src_ns: [default] src_pods: [cartservice] dst_ns: [kube-system] dst_pods: [*] conn: UDP 53 +src_ns: [default] src_pods: [checkoutservice] dst_ns: [default] dst_pods: [cartservice] conn: TCP 7070 +src_ns: [default] src_pods: [checkoutservice] dst_ns: [default] dst_pods: [currencyservice] conn: TCP 7000 +src_ns: [default] src_pods: [checkoutservice] dst_ns: [default] dst_pods: [emailservice] conn: TCP 8080 +src_ns: [default] src_pods: [checkoutservice] dst_ns: [default] dst_pods: [paymentservice, shippingservice] conn: TCP 50051 +src_ns: [default] src_pods: [checkoutservice] dst_ns: [default] dst_pods: [productcatalogservice] conn: TCP 3550 +src_ns: [default] src_pods: [checkoutservice] dst_ns: [kube-system] dst_pods: [*] conn: UDP 53 +src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [adservice] conn: TCP 9555 +src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [cartservice] conn: TCP 7070 +src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [checkoutservice] conn: TCP 5050 +src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [currencyservice] conn: TCP 7000 +src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [productcatalogservice] conn: TCP 3550 +src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [recommendationservice] conn: TCP 8080 +src_ns: [default] src_pods: [frontend] dst_ns: [default] dst_pods: [shippingservice] conn: TCP 50051 +src_ns: [default] src_pods: [frontend] dst_ns: [kube-system] dst_pods: [*] conn: UDP 53 +src_ns: [default] src_pods: [loadgenerator] dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 +src_ns: [default] src_pods: [loadgenerator] dst_ns: [kube-system] dst_pods: [*] conn: UDP 53 +src_ns: [default] src_pods: [recommendationservice] dst_ns: [default] dst_pods: [productcatalogservice] conn: TCP 3550 +src_ns: [default] src_pods: [recommendationservice] dst_ns: [kube-system] dst_pods: [*] conn: UDP 53 +src_ns: [kube-system] src_pods: [*] dst: 0.0.0.0/0 conn: All connections +src_ns: [kube-system] src_pods: [*] dst_ns: [default] dst_pods: [frontend] conn: TCP 8080 +src_ns: [kube-system] src_pods: [*] dst_ns: [kube-system] dst_pods: [*] conn: All connections + + +Explainability results: + + + Configurations affecting 0.0.0.0/0: + + + + + Configurations affecting the LACK of connectivity between (src)0.0.0.0/0 and (dst)default/adservice(Deployment): + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)0.0.0.0/0 and (dst)default/cartservice(Deployment): + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)0.0.0.0/0 and (dst)default/checkoutservice(Deployment): + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)0.0.0.0/0 and (dst)default/currencyservice(Deployment): + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)0.0.0.0/0 and (dst)default/emailservice(Deployment): + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)0.0.0.0/0 and (dst)default/frontend(Deployment): + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)0.0.0.0/0 and (dst)default/loadgenerator(Deployment): + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)0.0.0.0/0 and (dst)default/paymentservice(Deployment): + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)0.0.0.0/0 and (dst)default/productcatalogservice(Deployment): + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)0.0.0.0/0 and (dst)default/recommendationservice(Deployment): + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)0.0.0.0/0 and (dst)default/redis-cart(Deployment): + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)0.0.0.0/0 and (dst)default/shippingservice(Deployment): + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)0.0.0.0/0 and (dst)kube-system/kube-dns-livesim(Pod): + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)0.0.0.0/0: + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)default/cartservice(Deployment): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)default/checkoutservice(Deployment): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)default/currencyservice(Deployment): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)default/emailservice(Deployment): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)default/frontend(Deployment): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)default/loadgenerator(Deployment): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)default/paymentservice(Deployment): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)default/productcatalogservice(Deployment): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)default/recommendationservice(Deployment): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)default/redis-cart(Deployment): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)default/shippingservice(Deployment): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/adservice(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/cartservice(Deployment) and (dst)0.0.0.0/0: + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/cartservice(Deployment) and (dst)default/adservice(Deployment): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/cartservice(Deployment) and (dst)default/checkoutservice(Deployment): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/cartservice(Deployment) and (dst)default/currencyservice(Deployment): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/cartservice(Deployment) and (dst)default/emailservice(Deployment): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/cartservice(Deployment) and (dst)default/frontend(Deployment): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/cartservice(Deployment) and (dst)default/loadgenerator(Deployment): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/cartservice(Deployment) and (dst)default/paymentservice(Deployment): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/cartservice(Deployment) and (dst)default/productcatalogservice(Deployment): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/cartservice(Deployment) and (dst)default/recommendationservice(Deployment): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/cartservice(Deployment) and (dst)default/redis-cart(Deployment): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/cartservice(Deployment) and (dst)default/shippingservice(Deployment): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/cartservice(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/checkoutservice(Deployment) and (dst)0.0.0.0/0: + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/checkoutservice(Deployment) and (dst)default/adservice(Deployment): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/checkoutservice(Deployment) and (dst)default/cartservice(Deployment): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/checkoutservice(Deployment) and (dst)default/currencyservice(Deployment): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/checkoutservice(Deployment) and (dst)default/emailservice(Deployment): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/checkoutservice(Deployment) and (dst)default/frontend(Deployment): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/checkoutservice(Deployment) and (dst)default/loadgenerator(Deployment): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/checkoutservice(Deployment) and (dst)default/paymentservice(Deployment): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/checkoutservice(Deployment) and (dst)default/productcatalogservice(Deployment): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/checkoutservice(Deployment) and (dst)default/recommendationservice(Deployment): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/checkoutservice(Deployment) and (dst)default/redis-cart(Deployment): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/checkoutservice(Deployment) and (dst)default/shippingservice(Deployment): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/checkoutservice(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)0.0.0.0/0: + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)default/adservice(Deployment): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)default/cartservice(Deployment): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)default/checkoutservice(Deployment): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)default/emailservice(Deployment): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)default/frontend(Deployment): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)default/loadgenerator(Deployment): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)default/paymentservice(Deployment): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)default/productcatalogservice(Deployment): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)default/recommendationservice(Deployment): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)default/redis-cart(Deployment): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)default/shippingservice(Deployment): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/currencyservice(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)0.0.0.0/0: + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)default/adservice(Deployment): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)default/cartservice(Deployment): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)default/checkoutservice(Deployment): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)default/currencyservice(Deployment): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)default/frontend(Deployment): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)default/loadgenerator(Deployment): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)default/paymentservice(Deployment): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)default/productcatalogservice(Deployment): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)default/recommendationservice(Deployment): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)default/redis-cart(Deployment): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)default/shippingservice(Deployment): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/emailservice(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/frontend(Deployment) and (dst)0.0.0.0/0: + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/frontend(Deployment) and (dst)default/adservice(Deployment): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/frontend(Deployment) and (dst)default/cartservice(Deployment): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/frontend(Deployment) and (dst)default/checkoutservice(Deployment): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/frontend(Deployment) and (dst)default/currencyservice(Deployment): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/frontend(Deployment) and (dst)default/emailservice(Deployment): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/frontend(Deployment) and (dst)default/loadgenerator(Deployment): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/frontend(Deployment) and (dst)default/paymentservice(Deployment): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/frontend(Deployment) and (dst)default/productcatalogservice(Deployment): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/frontend(Deployment) and (dst)default/recommendationservice(Deployment): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/frontend(Deployment) and (dst)default/redis-cart(Deployment): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/frontend(Deployment) and (dst)default/shippingservice(Deployment): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/frontend(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/loadgenerator(Deployment) and (dst)0.0.0.0/0: + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/loadgenerator(Deployment) and (dst)default/adservice(Deployment): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/loadgenerator(Deployment) and (dst)default/cartservice(Deployment): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/loadgenerator(Deployment) and (dst)default/checkoutservice(Deployment): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/loadgenerator(Deployment) and (dst)default/currencyservice(Deployment): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/loadgenerator(Deployment) and (dst)default/emailservice(Deployment): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/loadgenerator(Deployment) and (dst)default/frontend(Deployment): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/loadgenerator(Deployment) and (dst)default/paymentservice(Deployment): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/loadgenerator(Deployment) and (dst)default/productcatalogservice(Deployment): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/loadgenerator(Deployment) and (dst)default/recommendationservice(Deployment): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/loadgenerator(Deployment) and (dst)default/redis-cart(Deployment): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/loadgenerator(Deployment) and (dst)default/shippingservice(Deployment): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/loadgenerator(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)0.0.0.0/0: + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)default/adservice(Deployment): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)default/cartservice(Deployment): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)default/checkoutservice(Deployment): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)default/currencyservice(Deployment): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)default/emailservice(Deployment): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)default/frontend(Deployment): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)default/loadgenerator(Deployment): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)default/productcatalogservice(Deployment): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)default/recommendationservice(Deployment): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)default/redis-cart(Deployment): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)default/shippingservice(Deployment): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/paymentservice(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)0.0.0.0/0: + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)default/adservice(Deployment): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)default/cartservice(Deployment): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)default/checkoutservice(Deployment): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)default/currencyservice(Deployment): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)default/emailservice(Deployment): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)default/frontend(Deployment): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)default/loadgenerator(Deployment): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)default/paymentservice(Deployment): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)default/recommendationservice(Deployment): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)default/redis-cart(Deployment): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)default/shippingservice(Deployment): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/productcatalogservice(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/recommendationservice(Deployment) and (dst)0.0.0.0/0: + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/recommendationservice(Deployment) and (dst)default/adservice(Deployment): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/recommendationservice(Deployment) and (dst)default/cartservice(Deployment): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/recommendationservice(Deployment) and (dst)default/checkoutservice(Deployment): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/recommendationservice(Deployment) and (dst)default/currencyservice(Deployment): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/recommendationservice(Deployment) and (dst)default/emailservice(Deployment): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/recommendationservice(Deployment) and (dst)default/frontend(Deployment): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/recommendationservice(Deployment) and (dst)default/loadgenerator(Deployment): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/recommendationservice(Deployment) and (dst)default/paymentservice(Deployment): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/recommendationservice(Deployment) and (dst)default/productcatalogservice(Deployment): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/recommendationservice(Deployment) and (dst)default/redis-cart(Deployment): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/recommendationservice(Deployment) and (dst)default/shippingservice(Deployment): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)default/recommendationservice(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)0.0.0.0/0: + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)default/adservice(Deployment): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)default/cartservice(Deployment): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)default/checkoutservice(Deployment): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)default/currencyservice(Deployment): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)default/emailservice(Deployment): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)default/frontend(Deployment): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)default/loadgenerator(Deployment): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)default/paymentservice(Deployment): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)default/productcatalogservice(Deployment): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)default/recommendationservice(Deployment): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)default/shippingservice(Deployment): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/redis-cart(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)0.0.0.0/0: + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)default/adservice(Deployment): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)default/cartservice(Deployment): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)default/checkoutservice(Deployment): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)default/currencyservice(Deployment): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)default/emailservice(Deployment): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)default/frontend(Deployment): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)default/loadgenerator(Deployment): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)default/paymentservice(Deployment): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)default/productcatalogservice(Deployment): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)default/recommendationservice(Deployment): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)default/redis-cart(Deployment): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/shippingservice(Deployment) and (dst)kube-system/kube-dns-livesim(Pod): + +(src)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + +(dst)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)0.0.0.0/0: + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + + + + Configurations affecting the LACK of connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/adservice(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/adservice(Deployment): +Policy Configurations: +adservice-netpol: line 73 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/adservice(Deployment): line 690 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/cartservice(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/cartservice(Deployment): +Policy Configurations: +cartservice-netpol: line 157 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/cartservice(Deployment): line 418 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/checkoutservice(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/checkoutservice(Deployment): +Policy Configurations: +checkoutservice-netpol: line 93 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/checkoutservice(Deployment): line 75 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/currencyservice(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/currencyservice(Deployment): +Policy Configurations: +currencyservice-netpol: line 197 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/currencyservice(Deployment): line 522 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/emailservice(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/emailservice(Deployment): +Policy Configurations: +emailservice-netpol: line 223 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/emailservice(Deployment): line 19 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/frontend(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/frontend(Deployment): +Policy Configurations: +frontend-netpol: line 1 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/frontend(Deployment): line 204 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/loadgenerator(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/loadgenerator(Deployment): +Policy Configurations: +loadgenerator-netpol: line 243 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/loadgenerator(Deployment): line 471 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/paymentservice(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/paymentservice(Deployment): +Policy Configurations: +paymentservice-netpol: line 271 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/paymentservice(Deployment): line 304 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/productcatalogservice(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/productcatalogservice(Deployment): +Policy Configurations: +productcatalogservice-netpol: line 291 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/productcatalogservice(Deployment): line 360 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/recommendationservice(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/recommendationservice(Deployment): +Policy Configurations: +recommendationservice-netpol: line 323 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/recommendationservice(Deployment): line 144 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/redis-cart(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/redis-cart(Deployment): +Policy Configurations: +redis-cart-netpol: line 357 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/redis-cart(Deployment): line 637 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting the LACK of connectivity between (src)kube-system/kube-dns-livesim(Pod) and (dst)default/shippingservice(Deployment): + +(src)kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + +(dst)default/shippingservice(Deployment): +Policy Configurations: +shippingservice-netpol: line 377 in file ./fw_rules_tests/policies/microservices-netpols.yaml +Resource Configurations: +default/shippingservice(Deployment): line 579 in file ./fw_rules_tests/podlist/kubernetes-manifests.yaml + + + + + Configurations affecting kube-system/kube-dns-livesim(Pod): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system/kube-dns-livesim(Pod): line 9 in file network-config-analyzer/nca/NetworkConfig/LiveSim/dns/dns_pods.yaml + + \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/subset_deployment_expl_output.txt b/tests/expected_cmdline_output_files/subset_deployment_expl_output.txt new file mode 100644 index 000000000..ba6472b6c --- /dev/null +++ b/tests/expected_cmdline_output_files/subset_deployment_expl_output.txt @@ -0,0 +1,630 @@ +final fw rules for query: , config: test_subset_topology.yaml: +src_ns: [default] src_pods: [Pod4] dst_ns: [ns2] dst_pods: [deployment-D] conn: All connections +src_ns: [ns1] src_pods: [deployment-A] dst_ns: [default] dst_pods: [deployment-E] conn: All connections +src_ns: [ns1] src_pods: [deployment-B] dst_ns: [ns1] dst_pods: [deployment-A] conn: All connections +src_ns: [ns2] src_pods: [deployment-C] dst_ns: [ns1] dst_pods: [deployment-A] conn: All connections + + +Explainability results: + + + Configurations affecting default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)default/deployment-E(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)ns1/deployment-A(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)ns1/deployment-B(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/Pod4(Pod) and (dst)ns2/deployment-C(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)default/Pod4(Pod) and (dst)ns2/deployment-D(Deployment): + +(src)default/Pod4(Pod): +Policy Configurations: +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)default/Pod4(Pod): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns1/deployment-A(Deployment): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns1/deployment-B(Deployment): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns2/deployment-C(Deployment): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/deployment-E(Deployment) and (dst)ns2/deployment-D(Deployment): + +(src)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)default/Pod4(Pod): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)ns1/deployment-A(Deployment) and (dst)default/deployment-E(Deployment): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns1/deployment-B(Deployment): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns2/deployment-C(Deployment): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-A(Deployment) and (dst)ns2/deployment-D(Deployment): + +(src)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)default/Pod4(Pod): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)default/deployment-E(Deployment): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns1/deployment-A(Deployment): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns2/deployment-C(Deployment): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns1/deployment-B(Deployment) and (dst)ns2/deployment-D(Deployment): + +(src)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)default/Pod4(Pod): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)default/deployment-E(Deployment): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns1/deployment-A(Deployment): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns1/deployment-B(Deployment): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-C(Deployment) and (dst)ns2/deployment-D(Deployment): + +(src)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)default/Pod4(Pod): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/Pod4(Pod): +Policy Configurations: +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +pod4config: line 370 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/Pod4(Pod): line 226 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)default/deployment-E(Deployment): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)default/deployment-E(Deployment): +Policy Configurations: +allow-dep-e: line 580 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-default: line 430 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +default/deployment-E(Deployment): line 122 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns1/deployment-A(Deployment): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-A(Deployment): +Policy Configurations: +allow-dep-a: line 490 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-A(Deployment): line 30 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns1/deployment-B(Deployment): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns1/deployment-B(Deployment): +Policy Configurations: +allow-dep-b: line 522 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n1: line 441 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns1/deployment-B(Deployment): line 53 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting the LACK of connectivity between (src)ns2/deployment-D(Deployment) and (dst)ns2/deployment-C(Deployment): + +(src)ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + +(dst)ns2/deployment-C(Deployment): +Policy Configurations: +allow-dep-c: line 540 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-C(Deployment): line 78 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + + + + Configurations affecting ns2/deployment-D(Deployment): +Policy Configurations: +allow-dep-d: line 560 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +deny-all-n2: line 452 in file ./fw_rules_tests/podlist/test_subset_topology.yaml +Resource Configurations: +ns2/deployment-D(Deployment): line 99 in file ./fw_rules_tests/podlist/test_subset_topology.yaml + + \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/test25_expl_output.txt b/tests/expected_cmdline_output_files/test25_expl_output.txt new file mode 100644 index 000000000..5bd20d4b9 --- /dev/null +++ b/tests/expected_cmdline_output_files/test25_expl_output.txt @@ -0,0 +1,264 @@ +final fw rules for query: , config: test25-networkpolicy.yaml: +src_ns: [default] src_pods: [my-test-deployment-C] dst_ns: [default] dst_pods: [my-test-deployment-B] conn: All connections + + +Explainability results: + + + Configurations affecting default/my-test-deployment-A(Deployment): +Policy Configurations: +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-A(Deployment): line 1 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/my-test-deployment-A(Deployment) and (dst)default/my-test-deployment-B(Deployment): + +(src)default/my-test-deployment-A(Deployment): +Policy Configurations: +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-A(Deployment): line 1 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-B(Deployment): +Policy Configurations: +allow-ingress-to-b: line 12 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-B(Deployment): line 104 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/my-test-deployment-A(Deployment) and (dst)default/my-test-deployment-C(Deployment): + +(src)default/my-test-deployment-A(Deployment): +Policy Configurations: +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-A(Deployment): line 1 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-C(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-C(Deployment): line 34 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/my-test-deployment-A(Deployment) and (dst)default/my-test-deployment-D(Deployment): + +(src)default/my-test-deployment-A(Deployment): +Policy Configurations: +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-A(Deployment): line 1 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-D(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-D(Deployment): line 69 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/my-test-deployment-B(Deployment) and (dst)default/my-test-deployment-A(Deployment): + +(src)default/my-test-deployment-B(Deployment): +Policy Configurations: +allow-ingress-to-b: line 12 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-B(Deployment): line 104 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-A(Deployment): +Policy Configurations: +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-A(Deployment): line 1 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting default/my-test-deployment-B(Deployment): +Policy Configurations: +allow-ingress-to-b: line 12 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-B(Deployment): line 104 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/my-test-deployment-B(Deployment) and (dst)default/my-test-deployment-C(Deployment): + +(src)default/my-test-deployment-B(Deployment): +Policy Configurations: +allow-ingress-to-b: line 12 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-B(Deployment): line 104 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-C(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-C(Deployment): line 34 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/my-test-deployment-B(Deployment) and (dst)default/my-test-deployment-D(Deployment): + +(src)default/my-test-deployment-B(Deployment): +Policy Configurations: +allow-ingress-to-b: line 12 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-B(Deployment): line 104 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-D(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-D(Deployment): line 69 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/my-test-deployment-C(Deployment) and (dst)default/my-test-deployment-A(Deployment): + +(src)default/my-test-deployment-C(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-C(Deployment): line 34 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-A(Deployment): +Policy Configurations: +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-A(Deployment): line 1 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the connectivity between (src)default/my-test-deployment-C(Deployment) and (dst)default/my-test-deployment-B(Deployment): + +(src)default/my-test-deployment-C(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-C(Deployment): line 34 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-B(Deployment): +Policy Configurations: +allow-ingress-to-b: line 12 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-B(Deployment): line 104 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting default/my-test-deployment-C(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-C(Deployment): line 34 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/my-test-deployment-C(Deployment) and (dst)default/my-test-deployment-D(Deployment): + +(src)default/my-test-deployment-C(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-C(Deployment): line 34 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-D(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-D(Deployment): line 69 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/my-test-deployment-D(Deployment) and (dst)default/my-test-deployment-A(Deployment): + +(src)default/my-test-deployment-D(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-D(Deployment): line 69 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-A(Deployment): +Policy Configurations: +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-A(Deployment): line 1 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/my-test-deployment-D(Deployment) and (dst)default/my-test-deployment-B(Deployment): + +(src)default/my-test-deployment-D(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-D(Deployment): line 69 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-B(Deployment): +Policy Configurations: +allow-ingress-to-b: line 12 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-B(Deployment): line 104 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting the LACK of connectivity between (src)default/my-test-deployment-D(Deployment) and (dst)default/my-test-deployment-C(Deployment): + +(src)default/my-test-deployment-D(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-D(Deployment): line 69 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + +(dst)default/my-test-deployment-C(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-C(Deployment): line 34 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + + + + Configurations affecting default/my-test-deployment-D(Deployment): +Policy Configurations: +allow-egress-to-b: line 35 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +deny-all-default: line 1 in file ./fw_rules_tests/policies/test25-networkpolicy.yaml +Resource Configurations: +default/my-test-deployment-D(Deployment): line 69 in file ./fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + + \ No newline at end of file diff --git a/tests/expected_cmdline_output_files/test4_expl_output.txt b/tests/expected_cmdline_output_files/test4_expl_output.txt new file mode 100644 index 000000000..4668d14af --- /dev/null +++ b/tests/expected_cmdline_output_files/test4_expl_output.txt @@ -0,0 +1,24 @@ +final fw rules for query: , config: test4-networkpolicy.yaml: +src: 0.0.0.0/0 dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst: 0.0.0.0/0 conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections +src_ns: [default] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: TCP 85-90 +src_ns: [ibm-system-new] src_pods: [*] dst: 0.0.0.0/0 conn: All connections +src_ns: [ibm-system-new] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections +src_ns: [ibm-system-new] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: TCP 80-90 +src_ns: [kube-system-new-dummy-to-ignore] src_pods: [*] dst: 0.0.0.0/0 conn: All connections +src_ns: [kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections +src_ns: [kube-system-new-dummy-to-ignore] src_pods: [*] dst_ns: [kube-system-new] dst_pods: [*] conn: TCP 80-88 +src_ns: [kube-system-new] src_pods: [*] dst: 0.0.0.0/0 conn: All connections +src_ns: [kube-system-new] src_pods: [*] dst_ns: [default,ibm-system-new,kube-system-new-dummy-to-ignore] dst_pods: [*] conn: All connections + + +Explainability results: + +Configurations affecting the connectivity between (src)kube-system-new/calico-node(DaemonSet) and (dst)0.0.0.0/0: + +(src)kube-system-new/calico-node(DaemonSet): +Policy Configurations: +Default-Policy +Resource Configurations: +kube-system-new/calico-node(DaemonSet): line 1007 in file ./fw_rules_tests/podlist/pods_list_4.json \ No newline at end of file diff --git a/tests/expected_runtime/k8s_tests_expected_runtime.csv b/tests/expected_runtime/k8s_tests_expected_runtime.csv index bfed1bbef..37a0e2cc5 100644 --- a/tests/expected_runtime/k8s_tests_expected_runtime.csv +++ b/tests/expected_runtime/k8s_tests_expected_runtime.csv @@ -48,6 +48,13 @@ test,run_time(seconds) "k8s_cmdline_tests.yaml, query name: subset_label",0.24 "k8s_cmdline_tests.yaml, query name: subset_label2",0.22 "k8s_cmdline_tests.yaml, query name: two_way_containment_policies",0.08 +"k8s_cmdline_tests.yaml, query name: basic_connectivity_specific_nodes-expl",1.08 +"k8s_cmdline_tests.yaml, query name: basic_connectivity-expl",1.08 +"k8s_cmdline_tests.yaml, query name: poc1-expl",1.08 +"k8s_cmdline_tests.yaml, query name: subset-deployment-expl",1.08 +"k8s_cmdline_tests.yaml, query name: test25-expl",1.08 +"k8s_cmdline_tests.yaml, query name: test4-expl",1.08 +"k8s_cmdline_tests.yaml, query name: istio-ingress-expl",4.1 fw_rules_tests/policies/cyclonus-simple-example-scheme.yaml,0.08 fw_rules_tests/policies/label_expr_test_1-scheme.yaml,0.38 fw_rules_tests/policies/poc1-scheme.yaml,0.64 diff --git a/tests/k8s_cmdline_tests.yaml b/tests/k8s_cmdline_tests.yaml index 52c45dcb4..1cf9adfa5 100644 --- a/tests/k8s_cmdline_tests.yaml +++ b/tests/k8s_cmdline_tests.yaml @@ -63,56 +63,56 @@ - name: basic_subset_label args: > --connectivity fw_rules_tests/podlist/test_subset_topology.yaml - --ns_list fw_rules_tests/podlist/test_subset_topology.yaml + --ns_list fw_rules_tests/podlist/test_subset_topology.yaml --pod_list fw_rules_tests/podlist/test_subset_topology.yaml - --label_subset app:appA --label_subset dep:F + --label_subset app:appA --label_subset dep:F --expected_output expected_cmdline_output_files/basic_subset_label_query_output.txt expected: 0 - name: subset_label args: > --connectivity fw_rules_tests/podlist/test_subset_topology.yaml - --ns_list fw_rules_tests/podlist/test_subset_topology.yaml + --ns_list fw_rules_tests/podlist/test_subset_topology.yaml --pod_list fw_rules_tests/podlist/test_subset_topology.yaml - --label_subset app:appA,release:v22b --label_subset dep:F,release:v22b + --label_subset app:appA,release:v22b --label_subset dep:F,release:v22b --expected_output expected_cmdline_output_files/subset_label_query_output.txt expected: 0 - name: subset_label2 args: > --connectivity fw_rules_tests/podlist/test_subset_topology.yaml - --ns_list fw_rules_tests/podlist/test_subset_topology.yaml + --ns_list fw_rules_tests/podlist/test_subset_topology.yaml --pod_list fw_rules_tests/podlist/test_subset_topology.yaml - --label_subset app:appA,release:v22bc --label_subset dep:F,release:v22b + --label_subset app:appA,release:v22bc --label_subset dep:F,release:v22b --expected_output expected_cmdline_output_files/subset_label2_query_output.txt expected: 0 - name: basic_subset_deployment args: > --connectivity fw_rules_tests/podlist/test_subset_topology.yaml - --ns_list fw_rules_tests/podlist/test_subset_topology.yaml + --ns_list fw_rules_tests/podlist/test_subset_topology.yaml --pod_list fw_rules_tests/podlist/test_subset_topology.yaml - --deployment_subset deployment-A,deployment-D + --deployment_subset deployment-A,deployment-D --expected_output expected_cmdline_output_files/basic_subset_deployment_query_output.txt expected: 0 - name: basic_subset_namespace args: > --connectivity fw_rules_tests/podlist/test_subset_topology.yaml - --ns_list fw_rules_tests/podlist/test_subset_topology.yaml + --ns_list fw_rules_tests/podlist/test_subset_topology.yaml --pod_list fw_rules_tests/podlist/test_subset_topology.yaml - --namespace_subset ns1,ns3 + --namespace_subset ns1,ns3 --expected_output expected_cmdline_output_files/basic_subset_namespace_query_output.txt expected: 0 - name: all_subset_mix args: > --connectivity fw_rules_tests/podlist/test_subset_topology.yaml - --ns_list fw_rules_tests/podlist/test_subset_topology.yaml + --ns_list fw_rules_tests/podlist/test_subset_topology.yaml --pod_list fw_rules_tests/podlist/test_subset_topology.yaml - --namespace_subset ns3 - --deployment_subset deployment-D - --label_subset app:appA --label_subset dep:F + --namespace_subset ns3 + --deployment_subset deployment-D + --label_subset app:appA --label_subset dep:F --expected_output expected_cmdline_output_files/all_subset_mix_query_output.txt expected: 0 @@ -422,3 +422,81 @@ --pod_list helm_tests/helm_test6/ --expected_output expected_cmdline_output_files/helm_test_resolved_yaml_next_to_multi_charts.txt expected: 0 + +- name: basic_connectivity_specific_nodes-expl + args: > + --connectivity fw_rules_tests/podlist/test_subset_topology.yaml + --ns_list fw_rules_tests/podlist/test_subset_topology.yaml + --pod_list fw_rules_tests/podlist/test_subset_topology.yaml + --explain default/Pod1[Pod],ns2/deployment-D[Deployment] + -opt=true + -d + --expected_output expected_cmdline_output_files/basic_connectivity_specific_nodes_expl_output.txt + expected: 0 + +- name: basic_connectivity-expl + args: > + --connectivity fw_rules_tests/podlist/test_subset_topology.yaml + --ns_list fw_rules_tests/podlist/test_subset_topology.yaml + --pod_list fw_rules_tests/podlist/test_subset_topology.yaml + --explain ALL + -opt=true + -d + --expected_output expected_cmdline_output_files/basic_connectivity_expl_output.txt + expected: 0 + +- name: poc1-expl + args: > + --connectivity fw_rules_tests/policies/microservices-netpols.yaml + --ns_list fw_rules_tests/podlist/poc_ns_list.json + --pod_list fw_rules_tests/podlist/kubernetes-manifests.yaml + --explain ALL + -opt=true + -d + --expected_output expected_cmdline_output_files/poc1_expl_output.txt + expected: 0 + +- name: subset-deployment-expl + args: > + --connectivity fw_rules_tests/podlist/test_subset_topology.yaml + --ns_list fw_rules_tests/podlist/test_subset_topology.yaml + --pod_list fw_rules_tests/podlist/test_subset_topology.yaml + --deployment_subset deployment-A,deployment-D + --explain ALL + -opt=true + -d + --expected_output expected_cmdline_output_files/subset_deployment_expl_output.txt + expected: 0 + +- name: test25-expl + args: > + --connectivity fw_rules_tests/policies/test25-networkpolicy.yaml + --ns_list fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + --pod_list fw_rules_tests/podlist/test_fw_rules_pod_list.yaml + --explain ALL + -opt=true + -d + --expected_output expected_cmdline_output_files/test25_expl_output.txt + expected: 0 + +- name: test4-expl + args: > + --connectivity fw_rules_tests/policies/test4-networkpolicy.yaml + --ns_list fw_rules_tests/podlist/ns_list.json + --pod_list fw_rules_tests/podlist/pods_list_4.json + --explain kube-system-new/calico-node(DaemonSet),0.0.0.0/0 + -opt=true + -d + --expected_output expected_cmdline_output_files/test4_expl_output.txt + expected: 0 + +- name: istio-ingress-expl + args: > + --connectivity istio_testcases/example_policies/istio-ingress-test/resources/ + --ns_list istio_testcases/example_policies/istio-ingress-test + --pod_list istio_testcases/example_policies/istio-ingress-test + --explain ALL + -opt=true + -d + --expected_output expected_cmdline_output_files/istio-ingress_expl_output.txt + expected: 0 diff --git a/tests/livesim_tests/livesim_topology.yaml b/tests/livesim_tests/livesim_topology.yaml index 2d3c67e60..a9564e678 100644 --- a/tests/livesim_tests/livesim_topology.yaml +++ b/tests/livesim_tests/livesim_topology.yaml @@ -258,4 +258,4 @@ spec: name: httpbin ports: - containerPort: 80 ---- \ No newline at end of file +--- diff --git a/tests/run_all_tests.py b/tests/run_all_tests.py index 42e6fc662..ccb26c280 100644 --- a/tests/run_all_tests.py +++ b/tests/run_all_tests.py @@ -42,7 +42,12 @@ def __init__(self, args, base_dir=None): def _fix_path_args_with_base_dir(self, base_dir): for idx, arg in enumerate(self.args): if '/' in arg and not arg.startswith(('https://github', 'https://raw.githubusercontent')): - self.args[idx] = os.path.join(base_dir, arg) + # exclude cases where the arg is not a path + if self.args[idx - 1] in ['--explain', '-expl']: + continue + full_path = os.path.join(base_dir, arg) + self.args[idx] = full_path + def get_arg_value(self, arg_str_list): for index, arg in enumerate(self.args): @@ -57,7 +62,7 @@ def __init__(self, test_dict, cli_tests_base_dir, test_name, hc_opt): self.test_dict = test_dict self.query_name = self.test_dict['name'] self.test_name = test_name - self.args_obj = TestArgs(test_dict['args'].split() + ['-opt='+hc_opt], cli_tests_base_dir) + self.args_obj = TestArgs(['-opt='+hc_opt] + test_dict['args'].split(), cli_tests_base_dir) class SchemeFile: