anchor.diff:  === Configuring the RunOnceDuration Plug-in
   
   The plug-in configuration should include the default active deadline for
  -run-once pods. This deadline will be enforced globally, but can be superseded on
  +run-once pods. This deadline is enforced globally, but can be superseded on
   a per-project basis.
   
   ====
  
positive.code: ====
  endif::openshift-enterprise,openshift-origin[]
  
  [[admin-guide-limit-pod-access-egress]]
  == Limiting Pod Access with Egress Firewall
  
  As an {product-title} cluster administrator, you can use egress policy to limit
  the addresses that some or all pods can access from within the cluster, so that:
  
negative.code: ====
  
  [[admin-guide-config-pod-access]]
  ==== Configuring Pod Access Limits
  
  To configure pod access limits, you must use the `oc` command or the REST API.
  You can use `oc [create|replace|delete]` to manipulate `*EgressNetworkPolicy*`
  