diff --git a/content/en/docs/project-administration/project-network-isolation.md b/content/en/docs/project-administration/project-network-isolation.md index 548d58c23..6806efea4 100644 --- a/content/en/docs/project-administration/project-network-isolation.md +++ b/content/en/docs/project-administration/project-network-isolation.md @@ -23,7 +23,7 @@ For the implementation of the Network Policy, you can refer to [KubeSphere Netwo 1. Log in to KubeSphere as `project-admin`. Go to your project and select **Network Isolation** in **Project Settings**. By default, project network isolation is disabled. - ![project-network-isolation](/images/docs/project-administration/project-network-isolation/project-network-isolation.jpg) + ![project-network-isolation](/images/docs/project-administration/project-network-isolation/project-network-isolation.png) 2. To enable project network isolation, click **On**. @@ -35,7 +35,7 @@ For the implementation of the Network Policy, you can refer to [KubeSphere Netwo 3. You can also disable network isolation on this page. - ![isolation-off](/images/docs/project-administration/project-network-isolation/isolation-off.jpg) + ![isolation-off](/images/docs/project-administration/project-network-isolation/isolation-off.png) {{< notice note >}} @@ -51,7 +51,7 @@ If the default policy does not meet your needs when network isolation is enabled Network policies at the project level within a cluster are used to control whether resources in this project can be accessed by other projects within the same cluster, and which Services you can access. -Assume a NGINX Deployment workload has been created in another project `demo-project-2` and is exposed via the Service `nginx` on the port `80` with `TCP`. Here is an example of how to set ingress and egress traffic rules. +Assume an NGINX Deployment workload has been created in another project `demo-project-2` and is exposed via the Service `nginx` on the port `80` with `TCP`. Here is an example of how to set ingress and egress traffic rules. {{< notice note >}} @@ -71,11 +71,11 @@ For more information about how to create workloads, see [Deployments](../../proj 5. Select the project `demo-project-2`. - ![ingress-rule](/images/docs/project-administration/project-network-isolation/ingress-rule.jpg) + ![ingress-rule](/images/docs/project-administration/project-network-isolation/ingress-rule.png) 6. Click **OK** and you can see that the project is now in the allowlist. - ![ingress-rule-added](/images/docs/project-administration/project-network-isolation/ingress-rule-added.jpg) + ![ingress-rule-added](/images/docs/project-administration/project-network-isolation/ingress-rule-added.png) {{< notice note >}} @@ -95,13 +95,13 @@ If the network is not accessible after you set the network policy, then you need 5. Select the project `demo-project-2` from the drop-down list. -6. Select the Service that is allowed to receive egress traffic. In this case, check `nginx`. +6. Select the Service that is allowed to receive egress traffic. In this case, select `nginx`. - ![engress-rule](/images/docs/project-administration/project-network-isolation/engress-rule.jpg) + ![engress-rule](/images/docs/project-administration/project-network-isolation/engress-rule.png) 7. Click **OK** and you can see that the Service is now in the allowlist. - ![egress-rule-added](/images/docs/project-administration/project-network-isolation/egress-rule-added.jpg) + ![egress-rule-added](/images/docs/project-administration/project-network-isolation/egress-rule-added.png) {{< notice note >}} @@ -123,11 +123,11 @@ KubeSphere uses CIDR to distinguish between peers. Assume a Tomcat Deployment wo 4. Select the protocol `TCP` and enter `80` as the port number. - ![ingress-CIDR](/images/docs/project-administration/project-network-isolation/ingress-CIDR.jpg) + ![ingress-CIDR](/images/docs/project-administration/project-network-isolation/ingress-CIDR.png) 5. Click **OK** and you can see that the rule has been added. - ![ingress-cidr-set](/images/docs/project-administration/project-network-isolation/ingress-cidr-set.jpg) + ![ingress-cidr-set](/images/docs/project-administration/project-network-isolation/ingress-cidr-set.png) {{< notice note >}} @@ -147,11 +147,11 @@ Assume the IP address of an external client is `http://10.1.0.1:80`, then you ne 4. Select the protocol `TCP` and enter `80` as the port number. - ![egress-CIDR](/images/docs/project-administration/project-network-isolation/egress-CIDR.jpg) + ![egress-CIDR](/images/docs/project-administration/project-network-isolation/egress-CIDR.png) 5. Click **OK** and you can see that the rule has been added. - ![egress-CIDR-added](/images/docs/project-administration/project-network-isolation/egress-CIDR-added.jpg) + ![egress-CIDR-added](/images/docs/project-administration/project-network-isolation/egress-CIDR-added.png) {{< notice note >}} diff --git a/static/images/docs/project-administration/project-network-isolation/egress-CIDR-added.jpg b/static/images/docs/project-administration/project-network-isolation/egress-CIDR-added.jpg deleted file mode 100644 index 70181493f..000000000 Binary files a/static/images/docs/project-administration/project-network-isolation/egress-CIDR-added.jpg and /dev/null differ diff --git a/static/images/docs/project-administration/project-network-isolation/egress-CIDR-added.png b/static/images/docs/project-administration/project-network-isolation/egress-CIDR-added.png new file mode 100644 index 000000000..fbd923fdd Binary files /dev/null and b/static/images/docs/project-administration/project-network-isolation/egress-CIDR-added.png differ diff --git a/static/images/docs/project-administration/project-network-isolation/egress-CIDR.jpg b/static/images/docs/project-administration/project-network-isolation/egress-CIDR.jpg deleted file mode 100644 index 3cd989c4c..000000000 Binary files a/static/images/docs/project-administration/project-network-isolation/egress-CIDR.jpg and /dev/null differ diff --git a/static/images/docs/project-administration/project-network-isolation/egress-CIDR.png b/static/images/docs/project-administration/project-network-isolation/egress-CIDR.png new file mode 100644 index 000000000..824983ae3 Binary files /dev/null and b/static/images/docs/project-administration/project-network-isolation/egress-CIDR.png differ diff --git a/static/images/docs/project-administration/project-network-isolation/egress-rule-added.jpg b/static/images/docs/project-administration/project-network-isolation/egress-rule-added.jpg deleted file mode 100644 index 15cc46ea3..000000000 Binary files a/static/images/docs/project-administration/project-network-isolation/egress-rule-added.jpg and /dev/null differ diff --git a/static/images/docs/project-administration/project-network-isolation/egress-rule-added.png b/static/images/docs/project-administration/project-network-isolation/egress-rule-added.png new file mode 100644 index 000000000..23d1f2845 Binary files /dev/null and b/static/images/docs/project-administration/project-network-isolation/egress-rule-added.png differ diff --git a/static/images/docs/project-administration/project-network-isolation/engress-rule.jpg b/static/images/docs/project-administration/project-network-isolation/engress-rule.jpg deleted file mode 100644 index c23d24b8e..000000000 Binary files a/static/images/docs/project-administration/project-network-isolation/engress-rule.jpg and /dev/null differ diff --git a/static/images/docs/project-administration/project-network-isolation/engress-rule.png b/static/images/docs/project-administration/project-network-isolation/engress-rule.png new file mode 100644 index 000000000..72b4eb4eb Binary files /dev/null and b/static/images/docs/project-administration/project-network-isolation/engress-rule.png differ diff --git a/static/images/docs/project-administration/project-network-isolation/ingress-CIDR.jpg b/static/images/docs/project-administration/project-network-isolation/ingress-CIDR.jpg deleted file mode 100644 index 1586e865f..000000000 Binary files a/static/images/docs/project-administration/project-network-isolation/ingress-CIDR.jpg and /dev/null differ diff --git a/static/images/docs/project-administration/project-network-isolation/ingress-CIDR.png b/static/images/docs/project-administration/project-network-isolation/ingress-CIDR.png new file mode 100644 index 000000000..2f81690c0 Binary files /dev/null and b/static/images/docs/project-administration/project-network-isolation/ingress-CIDR.png differ diff --git a/static/images/docs/project-administration/project-network-isolation/ingress-cidr-set.jpg b/static/images/docs/project-administration/project-network-isolation/ingress-cidr-set.jpg deleted file mode 100644 index 4e49f0842..000000000 Binary files a/static/images/docs/project-administration/project-network-isolation/ingress-cidr-set.jpg and /dev/null differ diff --git a/static/images/docs/project-administration/project-network-isolation/ingress-cidr-set.png b/static/images/docs/project-administration/project-network-isolation/ingress-cidr-set.png new file mode 100644 index 000000000..3a582757e Binary files /dev/null and b/static/images/docs/project-administration/project-network-isolation/ingress-cidr-set.png differ diff --git a/static/images/docs/project-administration/project-network-isolation/ingress-rule-added.jpg b/static/images/docs/project-administration/project-network-isolation/ingress-rule-added.jpg deleted file mode 100644 index e6317146c..000000000 Binary files a/static/images/docs/project-administration/project-network-isolation/ingress-rule-added.jpg and /dev/null differ diff --git a/static/images/docs/project-administration/project-network-isolation/ingress-rule-added.png b/static/images/docs/project-administration/project-network-isolation/ingress-rule-added.png new file mode 100644 index 000000000..c9c587a97 Binary files /dev/null and b/static/images/docs/project-administration/project-network-isolation/ingress-rule-added.png differ diff --git a/static/images/docs/project-administration/project-network-isolation/ingress-rule.jpg b/static/images/docs/project-administration/project-network-isolation/ingress-rule.jpg deleted file mode 100644 index b24cd36ca..000000000 Binary files a/static/images/docs/project-administration/project-network-isolation/ingress-rule.jpg and /dev/null differ diff --git a/static/images/docs/project-administration/project-network-isolation/ingress-rule.png b/static/images/docs/project-administration/project-network-isolation/ingress-rule.png new file mode 100644 index 000000000..8924efb9c Binary files /dev/null and b/static/images/docs/project-administration/project-network-isolation/ingress-rule.png differ diff --git a/static/images/docs/project-administration/project-network-isolation/isolation-off.jpg b/static/images/docs/project-administration/project-network-isolation/isolation-off.jpg deleted file mode 100644 index 99f2b8a2e..000000000 Binary files a/static/images/docs/project-administration/project-network-isolation/isolation-off.jpg and /dev/null differ diff --git a/static/images/docs/project-administration/project-network-isolation/isolation-off.png b/static/images/docs/project-administration/project-network-isolation/isolation-off.png new file mode 100644 index 000000000..4726173ac Binary files /dev/null and b/static/images/docs/project-administration/project-network-isolation/isolation-off.png differ diff --git a/static/images/docs/project-administration/project-network-isolation/project-network-isolation.jpg b/static/images/docs/project-administration/project-network-isolation/project-network-isolation.jpg deleted file mode 100644 index d5ae43814..000000000 Binary files a/static/images/docs/project-administration/project-network-isolation/project-network-isolation.jpg and /dev/null differ diff --git a/static/images/docs/project-administration/project-network-isolation/project-network-isolation.png b/static/images/docs/project-administration/project-network-isolation/project-network-isolation.png new file mode 100644 index 000000000..cb3888510 Binary files /dev/null and b/static/images/docs/project-administration/project-network-isolation/project-network-isolation.png differ