{"action":"opened","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/13573","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/13573/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/13573/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/13573/events","html_url":"https://github.com/openshift/origin/issues/13573","id":217941402,"number":13573,"title":"Egress Firewall - Invalid value: \"\": invalid CIDR address:","user":{"login":"canit00","id":17949679,"avatar_url":"https://avatars1.githubusercontent.com/u/17949679?v=3","gravatar_id":"","url":"https://api.github.com/users/canit00","html_url":"https://github.com/canit00","followers_url":"https://api.github.com/users/canit00/followers","following_url":"https://api.github.com/users/canit00/following{/other_user}","gists_url":"https://api.github.com/users/canit00/gists{/gist_id}","starred_url":"https://api.github.com/users/canit00/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/canit00/subscriptions","organizations_url":"https://api.github.com/users/canit00/orgs","repos_url":"https://api.github.com/users/canit00/repos","events_url":"https://api.github.com/users/canit00/events{/privacy}","received_events_url":"https://api.github.com/users/canit00/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-03-29T16:57:10Z","updated_at":"2017-03-29T16:57:10Z","closed_at":null,"body":"Currently unable to deploy egress firewall rule using dnsName as outlined in the [latest documentation](https://docs.openshift.org/latest/admin_guide/managing_networking.html#admin-guide-limit-pod-access-egress).\r\n\r\n*Would like the ability to utilize egress firewall using dnsName*\r\n\r\n[version]\r\noc v1.4.1+3f9807a\r\nkubernetes v1.4.0+776c994\r\nopenshift v1.4.1+3f9807a\r\nkubernetes v1.4.0+776c994\r\n\r\n##### Steps To Reproduce\r\noc create -f example-egress-fw.json\r\n\r\n```\r\n{\r\n    \"kind\": \"EgressNetworkPolicy\",\r\n    \"apiVersion\": \"v1\",\r\n    \"metadata\": {\r\n        \"name\": \"default\"\r\n    },\r\n    \"spec\": {\r\n        \"egress\": [\r\n            {\r\n                \"type\": \"Allow\",\r\n                \"to\": {\r\n                    \"cidrSelector\": \"1.2.3.0/24\"\r\n                }\r\n            },\r\n            {\r\n                \"type\": \"Allow\",\r\n                \"to\": {\r\n                    \"dnsName\": \"www.foo.com\"\r\n                }\r\n            },\r\n            {\r\n                \"type\": \"Deny\",\r\n                \"to\": {\r\n                    \"cidrSelector\": \"0.0.0.0/0\"\r\n                }\r\n            }\r\n        ]\r\n    }\r\n}\r\n```\r\n\r\n##### Current Result\r\n***Error:***\r\n\r\n```\r\nThe EgressNetworkPolicy \"default\" is invalid: spec.egress[1].to: Invalid value: \"\": invalid CIDR address: \r\n```\r\n\r\n##### Expected Result\r\nThe ability to deploy egress firewall using dnsName - per documentation.\r\n\r\n##### Additional Information\r\nThe catch here is when reading the [OCP egress FW documentation](https://docs.openshift.com/container-platform/3.4/admin_guide/managing_pods.html#admin-guide-limit-pod-access-egress) it does not mention the ***to dnsName***.\r\n\r\nWhen deploying the example noted in the OCP documentation deployment works.\r\n\r\n```\r\n{\r\n    \"kind\": \"EgressNetworkPolicy\",\r\n    \"apiVersion\": \"v1\",\r\n    \"metadata\": {\r\n        \"name\": \"default\"\r\n    },\r\n    \"spec\": {\r\n        \"egress\": [\r\n            {\r\n                \"type\": \"Allow\",\r\n                \"to\": {\r\n                    \"cidrSelector\": \"1.2.3.0/24\"\r\n                }\r\n            },\r\n            {\r\n                \"type\": \"Deny\",\r\n                \"to\": {\r\n                    \"cidrSelector\": \"0.0.0.0/0\"\r\n                }\r\n            }\r\n        ]\r\n    }\r\n}\r\n```"}}
{"actor":{"display_login":"canit00"}}