const (
// PathTypeExact matches the URL path exactly and with case sensitivity.
PathTypeExact = PathType("Exact")
// PathTypePrefix matches based on a URL path prefix split by '/'. Matching
// is case sensitive and done on a path element by element basis. A path
// element refers to the list of labels in the path split by the '/'
// separator. A request is a match for path p if every p is an element-wise
// prefix of p of the request path. Note that if the last element of the
// path is a substring of the last element in request path, it is not a
// match (e.g. /foo/bar matches /foo/bar/baz, but does not match
// /foo/barbaz). If multiple matching paths exist in an Ingress spec, the
// longest matching path is given priority.
// Examples:
// - /foo/bar does not match requests to /foo/barbaz
// - /foo/bar matches request to /foo/bar and /foo/bar/baz
// - /foo and /foo/ both match requests to /foo and /foo/. If both paths are
// present in an Ingress spec, the longest matching path (/foo/) is given
// priority.
PathTypePrefix = PathType("Prefix")
// PathTypeImplementationSpecific matching is up to the IngressClass.
// Implementations can treat this as a separate PathType or treat it
// identically to Prefix or Exact path types.
PathTypeImplementationSpecific = PathType("ImplementationSpecific")
)
const (
// IngressClassParametersReferenceScopeNamespace indicates that the
// referenced Parameters resource is namespace-scoped.
IngressClassParametersReferenceScopeNamespace = "Namespace"
// IngressClassParametersReferenceScopeCluster indicates that the
// referenced Parameters resource is cluster-scoped.
IngressClassParametersReferenceScopeCluster = "Cluster"
)
const (
// AnnotationIsDefaultIngressClass can be used to indicate that an
// IngressClass should be considered default. When a single IngressClass
// resource has this annotation set to true, new Ingress resources without a
// class specified will be assigned this default class.
AnnotationIsDefaultIngressClass = "ingressclass.kubernetes.io/is-default-class"
)
GroupName is the group name use in this package
const GroupName = "networking.k8s.io"
var (
ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling")
ErrIntOverflowGenerated = fmt.Errorf("proto: integer overflow")
ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group")
)
var (
// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)
AddToScheme = localSchemeBuilder.AddToScheme
)
SchemeGroupVersion is group version used to register these objects
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1"}
func Resource(resource string) schema.GroupResource
Resource takes an unqualified resource and returns a Group qualified GroupResource
HTTPIngressPath associates a path with a backend. Incoming urls matching the path are forwarded to the backend.
type HTTPIngressPath struct {
// path is matched against the path of an incoming request. Currently it can
// contain characters disallowed from the conventional "path" part of a URL
// as defined by RFC 3986. Paths must begin with a '/' and must be present
// when using PathType with value "Exact" or "Prefix".
// +optional
Path string `json:"path,omitempty" protobuf:"bytes,1,opt,name=path"`
// pathType determines the interpretation of the path matching. PathType can
// be one of the following values:
// * Exact: Matches the URL path exactly.
// * Prefix: Matches based on a URL path prefix split by '/'. Matching is
// done on a path element by element basis. A path element refers is the
// list of labels in the path split by the '/' separator. A request is a
// match for path p if every p is an element-wise prefix of p of the
// request path. Note that if the last element of the path is a substring
// of the last element in request path, it is not a match (e.g. /foo/bar
// matches /foo/bar/baz, but does not match /foo/barbaz).
// * ImplementationSpecific: Interpretation of the Path matching is up to
// the IngressClass. Implementations can treat this as a separate PathType
// or treat it identically to Prefix or Exact path types.
// Implementations are required to support all path types.
PathType *PathType `json:"pathType" protobuf:"bytes,3,opt,name=pathType"`
// backend defines the referenced service endpoint to which the traffic
// will be forwarded to.
Backend IngressBackend `json:"backend" protobuf:"bytes,2,opt,name=backend"`
}
func (in *HTTPIngressPath) DeepCopy() *HTTPIngressPath
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HTTPIngressPath.
func (in *HTTPIngressPath) DeepCopyInto(out *HTTPIngressPath)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*HTTPIngressPath) Descriptor() ([]byte, []int)
func (m *HTTPIngressPath) Marshal() (dAtA []byte, err error)
func (m *HTTPIngressPath) MarshalTo(dAtA []byte) (int, error)
func (m *HTTPIngressPath) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*HTTPIngressPath) ProtoMessage()
func (m *HTTPIngressPath) Reset()
func (m *HTTPIngressPath) Size() (n int)
func (this *HTTPIngressPath) String() string
func (HTTPIngressPath) SwaggerDoc() map[string]string
func (m *HTTPIngressPath) Unmarshal(dAtA []byte) error
func (m *HTTPIngressPath) XXX_DiscardUnknown()
func (m *HTTPIngressPath) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *HTTPIngressPath) XXX_Merge(src proto.Message)
func (m *HTTPIngressPath) XXX_Size() int
func (m *HTTPIngressPath) XXX_Unmarshal(b []byte) error
HTTPIngressRuleValue is a list of http selectors pointing to backends. In the example: http://<host>/<path>?<searchpart> -> backend where where parts of the url correspond to RFC 3986, this resource will be used to match against everything after the last '/' and before the first '?' or '#'.
type HTTPIngressRuleValue struct {
// paths is a collection of paths that map requests to backends.
// +listType=atomic
Paths []HTTPIngressPath `json:"paths" protobuf:"bytes,1,rep,name=paths"`
}
func (in *HTTPIngressRuleValue) DeepCopy() *HTTPIngressRuleValue
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HTTPIngressRuleValue.
func (in *HTTPIngressRuleValue) DeepCopyInto(out *HTTPIngressRuleValue)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*HTTPIngressRuleValue) Descriptor() ([]byte, []int)
func (m *HTTPIngressRuleValue) Marshal() (dAtA []byte, err error)
func (m *HTTPIngressRuleValue) MarshalTo(dAtA []byte) (int, error)
func (m *HTTPIngressRuleValue) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*HTTPIngressRuleValue) ProtoMessage()
func (m *HTTPIngressRuleValue) Reset()
func (m *HTTPIngressRuleValue) Size() (n int)
func (this *HTTPIngressRuleValue) String() string
func (HTTPIngressRuleValue) SwaggerDoc() map[string]string
func (m *HTTPIngressRuleValue) Unmarshal(dAtA []byte) error
func (m *HTTPIngressRuleValue) XXX_DiscardUnknown()
func (m *HTTPIngressRuleValue) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *HTTPIngressRuleValue) XXX_Merge(src proto.Message)
func (m *HTTPIngressRuleValue) XXX_Size() int
func (m *HTTPIngressRuleValue) XXX_Unmarshal(b []byte) error
IPBlock describes a particular CIDR (Ex. "192.168.1.0/24","2001:db8::/64") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.
type IPBlock struct {
// cidr is a string representing the IPBlock
// Valid examples are "192.168.1.0/24" or "2001:db8::/64"
CIDR string `json:"cidr" protobuf:"bytes,1,name=cidr"`
// except is a slice of CIDRs that should not be included within an IPBlock
// Valid examples are "192.168.1.0/24" or "2001:db8::/64"
// Except values will be rejected if they are outside the cidr range
// +optional
// +listType=atomic
Except []string `json:"except,omitempty" protobuf:"bytes,2,rep,name=except"`
}
func (in *IPBlock) DeepCopy() *IPBlock
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IPBlock.
func (in *IPBlock) DeepCopyInto(out *IPBlock)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IPBlock) Descriptor() ([]byte, []int)
func (m *IPBlock) Marshal() (dAtA []byte, err error)
func (m *IPBlock) MarshalTo(dAtA []byte) (int, error)
func (m *IPBlock) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IPBlock) ProtoMessage()
func (m *IPBlock) Reset()
func (m *IPBlock) Size() (n int)
func (this *IPBlock) String() string
func (IPBlock) SwaggerDoc() map[string]string
func (m *IPBlock) Unmarshal(dAtA []byte) error
func (m *IPBlock) XXX_DiscardUnknown()
func (m *IPBlock) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IPBlock) XXX_Merge(src proto.Message)
func (m *IPBlock) XXX_Size() int
func (m *IPBlock) XXX_Unmarshal(b []byte) error
Ingress is a collection of rules that allow inbound connections to reach the endpoints defined by a backend. An Ingress can be configured to give services externally-reachable urls, load balance traffic, terminate SSL, offer name based virtual hosting etc.
type Ingress struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
// +optional
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// spec is the desired state of the Ingress.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
// +optional
Spec IngressSpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
// status is the current state of the Ingress.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
// +optional
Status IngressStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"`
}
func (in *Ingress) DeepCopy() *Ingress
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Ingress.
func (in *Ingress) DeepCopyInto(out *Ingress)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *Ingress) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*Ingress) Descriptor() ([]byte, []int)
func (m *Ingress) Marshal() (dAtA []byte, err error)
func (m *Ingress) MarshalTo(dAtA []byte) (int, error)
func (m *Ingress) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*Ingress) ProtoMessage()
func (m *Ingress) Reset()
func (m *Ingress) Size() (n int)
func (this *Ingress) String() string
func (Ingress) SwaggerDoc() map[string]string
func (m *Ingress) Unmarshal(dAtA []byte) error
func (m *Ingress) XXX_DiscardUnknown()
func (m *Ingress) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *Ingress) XXX_Merge(src proto.Message)
func (m *Ingress) XXX_Size() int
func (m *Ingress) XXX_Unmarshal(b []byte) error
IngressBackend describes all endpoints for a given service and port.
type IngressBackend struct {
// service references a service as a backend.
// This is a mutually exclusive setting with "Resource".
// +optional
Service *IngressServiceBackend `json:"service,omitempty" protobuf:"bytes,4,opt,name=service"`
// resource is an ObjectRef to another Kubernetes resource in the namespace
// of the Ingress object. If resource is specified, a service.Name and
// service.Port must not be specified.
// This is a mutually exclusive setting with "Service".
// +optional
Resource *v1.TypedLocalObjectReference `json:"resource,omitempty" protobuf:"bytes,3,opt,name=resource"`
}
func (in *IngressBackend) DeepCopy() *IngressBackend
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressBackend.
func (in *IngressBackend) DeepCopyInto(out *IngressBackend)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressBackend) Descriptor() ([]byte, []int)
func (m *IngressBackend) Marshal() (dAtA []byte, err error)
func (m *IngressBackend) MarshalTo(dAtA []byte) (int, error)
func (m *IngressBackend) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressBackend) ProtoMessage()
func (m *IngressBackend) Reset()
func (m *IngressBackend) Size() (n int)
func (this *IngressBackend) String() string
func (IngressBackend) SwaggerDoc() map[string]string
func (m *IngressBackend) Unmarshal(dAtA []byte) error
func (m *IngressBackend) XXX_DiscardUnknown()
func (m *IngressBackend) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressBackend) XXX_Merge(src proto.Message)
func (m *IngressBackend) XXX_Size() int
func (m *IngressBackend) XXX_Unmarshal(b []byte) error
IngressClass represents the class of the Ingress, referenced by the Ingress Spec. The `ingressclass.kubernetes.io/is-default-class` annotation can be used to indicate that an IngressClass should be considered default. When a single IngressClass resource has this annotation set to true, new Ingress resources without a class specified will be assigned this default class.
type IngressClass struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
// +optional
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// spec is the desired state of the IngressClass.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
// +optional
Spec IngressClassSpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
}
func (in *IngressClass) DeepCopy() *IngressClass
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressClass.
func (in *IngressClass) DeepCopyInto(out *IngressClass)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *IngressClass) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*IngressClass) Descriptor() ([]byte, []int)
func (m *IngressClass) Marshal() (dAtA []byte, err error)
func (m *IngressClass) MarshalTo(dAtA []byte) (int, error)
func (m *IngressClass) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressClass) ProtoMessage()
func (m *IngressClass) Reset()
func (m *IngressClass) Size() (n int)
func (this *IngressClass) String() string
func (IngressClass) SwaggerDoc() map[string]string
func (m *IngressClass) Unmarshal(dAtA []byte) error
func (m *IngressClass) XXX_DiscardUnknown()
func (m *IngressClass) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressClass) XXX_Merge(src proto.Message)
func (m *IngressClass) XXX_Size() int
func (m *IngressClass) XXX_Unmarshal(b []byte) error
IngressClassList is a collection of IngressClasses.
type IngressClassList struct {
metav1.TypeMeta `json:",inline"`
// Standard list metadata.
// +optional
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// items is the list of IngressClasses.
Items []IngressClass `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (in *IngressClassList) DeepCopy() *IngressClassList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressClassList.
func (in *IngressClassList) DeepCopyInto(out *IngressClassList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *IngressClassList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*IngressClassList) Descriptor() ([]byte, []int)
func (m *IngressClassList) Marshal() (dAtA []byte, err error)
func (m *IngressClassList) MarshalTo(dAtA []byte) (int, error)
func (m *IngressClassList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressClassList) ProtoMessage()
func (m *IngressClassList) Reset()
func (m *IngressClassList) Size() (n int)
func (this *IngressClassList) String() string
func (IngressClassList) SwaggerDoc() map[string]string
func (m *IngressClassList) Unmarshal(dAtA []byte) error
func (m *IngressClassList) XXX_DiscardUnknown()
func (m *IngressClassList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressClassList) XXX_Merge(src proto.Message)
func (m *IngressClassList) XXX_Size() int
func (m *IngressClassList) XXX_Unmarshal(b []byte) error
IngressClassParametersReference identifies an API object. This can be used to specify a cluster or namespace-scoped resource.
type IngressClassParametersReference struct {
// apiGroup is the group for the resource being referenced. If APIGroup is
// not specified, the specified Kind must be in the core API group. For any
// other third-party types, APIGroup is required.
// +optional
APIGroup *string `json:"apiGroup,omitempty" protobuf:"bytes,1,opt,name=aPIGroup"`
// kind is the type of resource being referenced.
Kind string `json:"kind" protobuf:"bytes,2,opt,name=kind"`
// name is the name of resource being referenced.
Name string `json:"name" protobuf:"bytes,3,opt,name=name"`
// scope represents if this refers to a cluster or namespace scoped resource.
// This may be set to "Cluster" (default) or "Namespace".
// +optional
Scope *string `json:"scope" protobuf:"bytes,4,opt,name=scope"`
// namespace is the namespace of the resource being referenced. This field is
// required when scope is set to "Namespace" and must be unset when scope is set to
// "Cluster".
// +optional
Namespace *string `json:"namespace,omitempty" protobuf:"bytes,5,opt,name=namespace"`
}
func (in *IngressClassParametersReference) DeepCopy() *IngressClassParametersReference
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressClassParametersReference.
func (in *IngressClassParametersReference) DeepCopyInto(out *IngressClassParametersReference)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressClassParametersReference) Descriptor() ([]byte, []int)
func (m *IngressClassParametersReference) Marshal() (dAtA []byte, err error)
func (m *IngressClassParametersReference) MarshalTo(dAtA []byte) (int, error)
func (m *IngressClassParametersReference) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressClassParametersReference) ProtoMessage()
func (m *IngressClassParametersReference) Reset()
func (m *IngressClassParametersReference) Size() (n int)
func (this *IngressClassParametersReference) String() string
func (IngressClassParametersReference) SwaggerDoc() map[string]string
func (m *IngressClassParametersReference) Unmarshal(dAtA []byte) error
func (m *IngressClassParametersReference) XXX_DiscardUnknown()
func (m *IngressClassParametersReference) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressClassParametersReference) XXX_Merge(src proto.Message)
func (m *IngressClassParametersReference) XXX_Size() int
func (m *IngressClassParametersReference) XXX_Unmarshal(b []byte) error
IngressClassSpec provides information about the class of an Ingress.
type IngressClassSpec struct {
// controller refers to the name of the controller that should handle this
// class. This allows for different "flavors" that are controlled by the
// same controller. For example, you may have different parameters for the
// same implementing controller. This should be specified as a
// domain-prefixed path no more than 250 characters in length, e.g.
// "acme.io/ingress-controller". This field is immutable.
Controller string `json:"controller,omitempty" protobuf:"bytes,1,opt,name=controller"`
// parameters is a link to a custom resource containing additional
// configuration for the controller. This is optional if the controller does
// not require extra parameters.
// +optional
Parameters *IngressClassParametersReference `json:"parameters,omitempty" protobuf:"bytes,2,opt,name=parameters"`
}
func (in *IngressClassSpec) DeepCopy() *IngressClassSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressClassSpec.
func (in *IngressClassSpec) DeepCopyInto(out *IngressClassSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressClassSpec) Descriptor() ([]byte, []int)
func (m *IngressClassSpec) Marshal() (dAtA []byte, err error)
func (m *IngressClassSpec) MarshalTo(dAtA []byte) (int, error)
func (m *IngressClassSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressClassSpec) ProtoMessage()
func (m *IngressClassSpec) Reset()
func (m *IngressClassSpec) Size() (n int)
func (this *IngressClassSpec) String() string
func (IngressClassSpec) SwaggerDoc() map[string]string
func (m *IngressClassSpec) Unmarshal(dAtA []byte) error
func (m *IngressClassSpec) XXX_DiscardUnknown()
func (m *IngressClassSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressClassSpec) XXX_Merge(src proto.Message)
func (m *IngressClassSpec) XXX_Size() int
func (m *IngressClassSpec) XXX_Unmarshal(b []byte) error
IngressList is a collection of Ingress.
type IngressList struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
// +optional
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// items is the list of Ingress.
Items []Ingress `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (in *IngressList) DeepCopy() *IngressList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressList.
func (in *IngressList) DeepCopyInto(out *IngressList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *IngressList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*IngressList) Descriptor() ([]byte, []int)
func (m *IngressList) Marshal() (dAtA []byte, err error)
func (m *IngressList) MarshalTo(dAtA []byte) (int, error)
func (m *IngressList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressList) ProtoMessage()
func (m *IngressList) Reset()
func (m *IngressList) Size() (n int)
func (this *IngressList) String() string
func (IngressList) SwaggerDoc() map[string]string
func (m *IngressList) Unmarshal(dAtA []byte) error
func (m *IngressList) XXX_DiscardUnknown()
func (m *IngressList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressList) XXX_Merge(src proto.Message)
func (m *IngressList) XXX_Size() int
func (m *IngressList) XXX_Unmarshal(b []byte) error
IngressLoadBalancerIngress represents the status of a load-balancer ingress point.
type IngressLoadBalancerIngress struct {
// ip is set for load-balancer ingress points that are IP based.
// +optional
IP string `json:"ip,omitempty" protobuf:"bytes,1,opt,name=ip"`
// hostname is set for load-balancer ingress points that are DNS based.
// +optional
Hostname string `json:"hostname,omitempty" protobuf:"bytes,2,opt,name=hostname"`
// ports provides information about the ports exposed by this LoadBalancer.
// +listType=atomic
// +optional
Ports []IngressPortStatus `json:"ports,omitempty" protobuf:"bytes,4,rep,name=ports"`
}
func (in *IngressLoadBalancerIngress) DeepCopy() *IngressLoadBalancerIngress
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressLoadBalancerIngress.
func (in *IngressLoadBalancerIngress) DeepCopyInto(out *IngressLoadBalancerIngress)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressLoadBalancerIngress) Descriptor() ([]byte, []int)
func (m *IngressLoadBalancerIngress) Marshal() (dAtA []byte, err error)
func (m *IngressLoadBalancerIngress) MarshalTo(dAtA []byte) (int, error)
func (m *IngressLoadBalancerIngress) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressLoadBalancerIngress) ProtoMessage()
func (m *IngressLoadBalancerIngress) Reset()
func (m *IngressLoadBalancerIngress) Size() (n int)
func (this *IngressLoadBalancerIngress) String() string
func (IngressLoadBalancerIngress) SwaggerDoc() map[string]string
func (m *IngressLoadBalancerIngress) Unmarshal(dAtA []byte) error
func (m *IngressLoadBalancerIngress) XXX_DiscardUnknown()
func (m *IngressLoadBalancerIngress) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressLoadBalancerIngress) XXX_Merge(src proto.Message)
func (m *IngressLoadBalancerIngress) XXX_Size() int
func (m *IngressLoadBalancerIngress) XXX_Unmarshal(b []byte) error
IngressLoadBalancerStatus represents the status of a load-balancer.
type IngressLoadBalancerStatus struct {
// ingress is a list containing ingress points for the load-balancer.
// +optional
// +listType=atomic
Ingress []IngressLoadBalancerIngress `json:"ingress,omitempty" protobuf:"bytes,1,rep,name=ingress"`
}
func (in *IngressLoadBalancerStatus) DeepCopy() *IngressLoadBalancerStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressLoadBalancerStatus.
func (in *IngressLoadBalancerStatus) DeepCopyInto(out *IngressLoadBalancerStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressLoadBalancerStatus) Descriptor() ([]byte, []int)
func (m *IngressLoadBalancerStatus) Marshal() (dAtA []byte, err error)
func (m *IngressLoadBalancerStatus) MarshalTo(dAtA []byte) (int, error)
func (m *IngressLoadBalancerStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressLoadBalancerStatus) ProtoMessage()
func (m *IngressLoadBalancerStatus) Reset()
func (m *IngressLoadBalancerStatus) Size() (n int)
func (this *IngressLoadBalancerStatus) String() string
func (IngressLoadBalancerStatus) SwaggerDoc() map[string]string
func (m *IngressLoadBalancerStatus) Unmarshal(dAtA []byte) error
func (m *IngressLoadBalancerStatus) XXX_DiscardUnknown()
func (m *IngressLoadBalancerStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressLoadBalancerStatus) XXX_Merge(src proto.Message)
func (m *IngressLoadBalancerStatus) XXX_Size() int
func (m *IngressLoadBalancerStatus) XXX_Unmarshal(b []byte) error
IngressPortStatus represents the error condition of a service port
type IngressPortStatus struct {
// port is the port number of the ingress port.
Port int32 `json:"port" protobuf:"varint,1,opt,name=port"`
// protocol is the protocol of the ingress port.
// The supported values are: "TCP", "UDP", "SCTP"
Protocol v1.Protocol `json:"protocol" protobuf:"bytes,2,opt,name=protocol,casttype=Protocol"`
// error is to record the problem with the service port
// The format of the error shall comply with the following rules:
// - built-in error values shall be specified in this file and those shall use
// CamelCase names
// - cloud provider specific error values must have names that comply with the
// format foo.example.com/CamelCase.
// ---
// The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
// +optional
// +kubebuilder:validation:Required
// +kubebuilder:validation:Pattern=`^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$`
// +kubebuilder:validation:MaxLength=316
Error *string `json:"error,omitempty" protobuf:"bytes,3,opt,name=error"`
}
func (in *IngressPortStatus) DeepCopy() *IngressPortStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressPortStatus.
func (in *IngressPortStatus) DeepCopyInto(out *IngressPortStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressPortStatus) Descriptor() ([]byte, []int)
func (m *IngressPortStatus) Marshal() (dAtA []byte, err error)
func (m *IngressPortStatus) MarshalTo(dAtA []byte) (int, error)
func (m *IngressPortStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressPortStatus) ProtoMessage()
func (m *IngressPortStatus) Reset()
func (m *IngressPortStatus) Size() (n int)
func (this *IngressPortStatus) String() string
func (IngressPortStatus) SwaggerDoc() map[string]string
func (m *IngressPortStatus) Unmarshal(dAtA []byte) error
func (m *IngressPortStatus) XXX_DiscardUnknown()
func (m *IngressPortStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressPortStatus) XXX_Merge(src proto.Message)
func (m *IngressPortStatus) XXX_Size() int
func (m *IngressPortStatus) XXX_Unmarshal(b []byte) error
IngressRule represents the rules mapping the paths under a specified host to the related backend services. Incoming requests are first evaluated for a host match, then routed to the backend associated with the matching IngressRuleValue.
type IngressRule struct {
// host is the fully qualified domain name of a network host, as defined by RFC 3986.
// Note the following deviations from the "host" part of the
// URI as defined in RFC 3986:
// 1. IPs are not allowed. Currently an IngressRuleValue can only apply to
// the IP in the Spec of the parent Ingress.
// 2. The `:` delimiter is not respected because ports are not allowed.
// Currently the port of an Ingress is implicitly :80 for http and
// :443 for https.
// Both these may change in the future.
// Incoming requests are matched against the host before the
// IngressRuleValue. If the host is unspecified, the Ingress routes all
// traffic based on the specified IngressRuleValue.
//
// host can be "precise" which is a domain name without the terminating dot of
// a network host (e.g. "foo.bar.com") or "wildcard", which is a domain name
// prefixed with a single wildcard label (e.g. "*.foo.com").
// The wildcard character '*' must appear by itself as the first DNS label and
// matches only a single label. You cannot have a wildcard label by itself (e.g. Host == "*").
// Requests will be matched against the Host field in the following way:
// 1. If host is precise, the request matches this rule if the http host header is equal to Host.
// 2. If host is a wildcard, then the request matches this rule if the http host header
// is to equal to the suffix (removing the first label) of the wildcard rule.
// +optional
Host string `json:"host,omitempty" protobuf:"bytes,1,opt,name=host"`
// IngressRuleValue represents a rule to route requests for this IngressRule.
// If unspecified, the rule defaults to a http catch-all. Whether that sends
// just traffic matching the host to the default backend or all traffic to the
// default backend, is left to the controller fulfilling the Ingress. Http is
// currently the only supported IngressRuleValue.
// +optional
IngressRuleValue `json:",inline,omitempty" protobuf:"bytes,2,opt,name=ingressRuleValue"`
}
func (in *IngressRule) DeepCopy() *IngressRule
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressRule.
func (in *IngressRule) DeepCopyInto(out *IngressRule)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressRule) Descriptor() ([]byte, []int)
func (m *IngressRule) Marshal() (dAtA []byte, err error)
func (m *IngressRule) MarshalTo(dAtA []byte) (int, error)
func (m *IngressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressRule) ProtoMessage()
func (m *IngressRule) Reset()
func (m *IngressRule) Size() (n int)
func (this *IngressRule) String() string
func (IngressRule) SwaggerDoc() map[string]string
func (m *IngressRule) Unmarshal(dAtA []byte) error
func (m *IngressRule) XXX_DiscardUnknown()
func (m *IngressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressRule) XXX_Merge(src proto.Message)
func (m *IngressRule) XXX_Size() int
func (m *IngressRule) XXX_Unmarshal(b []byte) error
IngressRuleValue represents a rule to apply against incoming requests. If the rule is satisfied, the request is routed to the specified backend. Currently mixing different types of rules in a single Ingress is disallowed, so exactly one of the following must be set.
type IngressRuleValue struct {
// +optional
HTTP *HTTPIngressRuleValue `json:"http,omitempty" protobuf:"bytes,1,opt,name=http"`
}
func (in *IngressRuleValue) DeepCopy() *IngressRuleValue
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressRuleValue.
func (in *IngressRuleValue) DeepCopyInto(out *IngressRuleValue)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressRuleValue) Descriptor() ([]byte, []int)
func (m *IngressRuleValue) Marshal() (dAtA []byte, err error)
func (m *IngressRuleValue) MarshalTo(dAtA []byte) (int, error)
func (m *IngressRuleValue) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressRuleValue) ProtoMessage()
func (m *IngressRuleValue) Reset()
func (m *IngressRuleValue) Size() (n int)
func (this *IngressRuleValue) String() string
func (IngressRuleValue) SwaggerDoc() map[string]string
func (m *IngressRuleValue) Unmarshal(dAtA []byte) error
func (m *IngressRuleValue) XXX_DiscardUnknown()
func (m *IngressRuleValue) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressRuleValue) XXX_Merge(src proto.Message)
func (m *IngressRuleValue) XXX_Size() int
func (m *IngressRuleValue) XXX_Unmarshal(b []byte) error
IngressServiceBackend references a Kubernetes Service as a Backend.
type IngressServiceBackend struct {
// name is the referenced service. The service must exist in
// the same namespace as the Ingress object.
Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
// port of the referenced service. A port name or port number
// is required for a IngressServiceBackend.
Port ServiceBackendPort `json:"port,omitempty" protobuf:"bytes,2,opt,name=port"`
}
func (in *IngressServiceBackend) DeepCopy() *IngressServiceBackend
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressServiceBackend.
func (in *IngressServiceBackend) DeepCopyInto(out *IngressServiceBackend)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressServiceBackend) Descriptor() ([]byte, []int)
func (m *IngressServiceBackend) Marshal() (dAtA []byte, err error)
func (m *IngressServiceBackend) MarshalTo(dAtA []byte) (int, error)
func (m *IngressServiceBackend) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressServiceBackend) ProtoMessage()
func (m *IngressServiceBackend) Reset()
func (m *IngressServiceBackend) Size() (n int)
func (this *IngressServiceBackend) String() string
func (IngressServiceBackend) SwaggerDoc() map[string]string
func (m *IngressServiceBackend) Unmarshal(dAtA []byte) error
func (m *IngressServiceBackend) XXX_DiscardUnknown()
func (m *IngressServiceBackend) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressServiceBackend) XXX_Merge(src proto.Message)
func (m *IngressServiceBackend) XXX_Size() int
func (m *IngressServiceBackend) XXX_Unmarshal(b []byte) error
IngressSpec describes the Ingress the user wishes to exist.
type IngressSpec struct {
// ingressClassName is the name of an IngressClass cluster resource. Ingress
// controller implementations use this field to know whether they should be
// serving this Ingress resource, by a transitive connection
// (controller -> IngressClass -> Ingress resource). Although the
// `kubernetes.io/ingress.class` annotation (simple constant name) was never
// formally defined, it was widely supported by Ingress controllers to create
// a direct binding between Ingress controller and Ingress resources. Newly
// created Ingress resources should prefer using the field. However, even
// though the annotation is officially deprecated, for backwards compatibility
// reasons, ingress controllers should still honor that annotation if present.
// +optional
IngressClassName *string `json:"ingressClassName,omitempty" protobuf:"bytes,4,opt,name=ingressClassName"`
// defaultBackend is the backend that should handle requests that don't
// match any rule. If Rules are not specified, DefaultBackend must be specified.
// If DefaultBackend is not set, the handling of requests that do not match any
// of the rules will be up to the Ingress controller.
// +optional
DefaultBackend *IngressBackend `json:"defaultBackend,omitempty" protobuf:"bytes,1,opt,name=defaultBackend"`
// tls represents the TLS configuration. Currently the Ingress only supports a
// single TLS port, 443. If multiple members of this list specify different hosts,
// they will be multiplexed on the same port according to the hostname specified
// through the SNI TLS extension, if the ingress controller fulfilling the
// ingress supports SNI.
// +listType=atomic
// +optional
TLS []IngressTLS `json:"tls,omitempty" protobuf:"bytes,2,rep,name=tls"`
// rules is a list of host rules used to configure the Ingress. If unspecified,
// or no rule matches, all traffic is sent to the default backend.
// +listType=atomic
// +optional
Rules []IngressRule `json:"rules,omitempty" protobuf:"bytes,3,rep,name=rules"`
}
func (in *IngressSpec) DeepCopy() *IngressSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressSpec.
func (in *IngressSpec) DeepCopyInto(out *IngressSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressSpec) Descriptor() ([]byte, []int)
func (m *IngressSpec) Marshal() (dAtA []byte, err error)
func (m *IngressSpec) MarshalTo(dAtA []byte) (int, error)
func (m *IngressSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressSpec) ProtoMessage()
func (m *IngressSpec) Reset()
func (m *IngressSpec) Size() (n int)
func (this *IngressSpec) String() string
func (IngressSpec) SwaggerDoc() map[string]string
func (m *IngressSpec) Unmarshal(dAtA []byte) error
func (m *IngressSpec) XXX_DiscardUnknown()
func (m *IngressSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressSpec) XXX_Merge(src proto.Message)
func (m *IngressSpec) XXX_Size() int
func (m *IngressSpec) XXX_Unmarshal(b []byte) error
IngressStatus describe the current state of the Ingress.
type IngressStatus struct {
// loadBalancer contains the current status of the load-balancer.
// +optional
LoadBalancer IngressLoadBalancerStatus `json:"loadBalancer,omitempty" protobuf:"bytes,1,opt,name=loadBalancer"`
}
func (in *IngressStatus) DeepCopy() *IngressStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressStatus.
func (in *IngressStatus) DeepCopyInto(out *IngressStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressStatus) Descriptor() ([]byte, []int)
func (m *IngressStatus) Marshal() (dAtA []byte, err error)
func (m *IngressStatus) MarshalTo(dAtA []byte) (int, error)
func (m *IngressStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressStatus) ProtoMessage()
func (m *IngressStatus) Reset()
func (m *IngressStatus) Size() (n int)
func (this *IngressStatus) String() string
func (IngressStatus) SwaggerDoc() map[string]string
func (m *IngressStatus) Unmarshal(dAtA []byte) error
func (m *IngressStatus) XXX_DiscardUnknown()
func (m *IngressStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressStatus) XXX_Merge(src proto.Message)
func (m *IngressStatus) XXX_Size() int
func (m *IngressStatus) XXX_Unmarshal(b []byte) error
IngressTLS describes the transport layer security associated with an ingress.
type IngressTLS struct {
// hosts is a list of hosts included in the TLS certificate. The values in
// this list must match the name/s used in the tlsSecret. Defaults to the
// wildcard host setting for the loadbalancer controller fulfilling this
// Ingress, if left unspecified.
// +listType=atomic
// +optional
Hosts []string `json:"hosts,omitempty" protobuf:"bytes,1,rep,name=hosts"`
// secretName is the name of the secret used to terminate TLS traffic on
// port 443. Field is left optional to allow TLS routing based on SNI
// hostname alone. If the SNI host in a listener conflicts with the "Host"
// header field used by an IngressRule, the SNI host is used for termination
// and value of the "Host" header is used for routing.
// +optional
SecretName string `json:"secretName,omitempty" protobuf:"bytes,2,opt,name=secretName"`
}
func (in *IngressTLS) DeepCopy() *IngressTLS
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IngressTLS.
func (in *IngressTLS) DeepCopyInto(out *IngressTLS)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IngressTLS) Descriptor() ([]byte, []int)
func (m *IngressTLS) Marshal() (dAtA []byte, err error)
func (m *IngressTLS) MarshalTo(dAtA []byte) (int, error)
func (m *IngressTLS) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IngressTLS) ProtoMessage()
func (m *IngressTLS) Reset()
func (m *IngressTLS) Size() (n int)
func (this *IngressTLS) String() string
func (IngressTLS) SwaggerDoc() map[string]string
func (m *IngressTLS) Unmarshal(dAtA []byte) error
func (m *IngressTLS) XXX_DiscardUnknown()
func (m *IngressTLS) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IngressTLS) XXX_Merge(src proto.Message)
func (m *IngressTLS) XXX_Size() int
func (m *IngressTLS) XXX_Unmarshal(b []byte) error
NetworkPolicy describes what network traffic is allowed for a set of Pods
type NetworkPolicy struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
// +optional
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// spec represents the specification of the desired behavior for this NetworkPolicy.
// +optional
Spec NetworkPolicySpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
}
func (in *NetworkPolicy) DeepCopy() *NetworkPolicy
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicy.
func (in *NetworkPolicy) DeepCopyInto(out *NetworkPolicy)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *NetworkPolicy) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*NetworkPolicy) Descriptor() ([]byte, []int)
func (m *NetworkPolicy) Marshal() (dAtA []byte, err error)
func (m *NetworkPolicy) MarshalTo(dAtA []byte) (int, error)
func (m *NetworkPolicy) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicy) ProtoMessage()
func (m *NetworkPolicy) Reset()
func (m *NetworkPolicy) Size() (n int)
func (this *NetworkPolicy) String() string
func (NetworkPolicy) SwaggerDoc() map[string]string
func (m *NetworkPolicy) Unmarshal(dAtA []byte) error
func (m *NetworkPolicy) XXX_DiscardUnknown()
func (m *NetworkPolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *NetworkPolicy) XXX_Merge(src proto.Message)
func (m *NetworkPolicy) XXX_Size() int
func (m *NetworkPolicy) XXX_Unmarshal(b []byte) error
NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8
type NetworkPolicyEgressRule struct {
// ports is a list of destination ports for outgoing traffic.
// Each item in this list is combined using a logical OR. If this field is
// empty or missing, this rule matches all ports (traffic not restricted by port).
// If this field is present and contains at least one item, then this rule allows
// traffic only if the traffic matches at least one port in the list.
// +optional
// +listType=atomic
Ports []NetworkPolicyPort `json:"ports,omitempty" protobuf:"bytes,1,rep,name=ports"`
// to is a list of destinations for outgoing traffic of pods selected for this rule.
// Items in this list are combined using a logical OR operation. If this field is
// empty or missing, this rule matches all destinations (traffic not restricted by
// destination). If this field is present and contains at least one item, this rule
// allows traffic only if the traffic matches at least one item in the to list.
// +optional
// +listType=atomic
To []NetworkPolicyPeer `json:"to,omitempty" protobuf:"bytes,2,rep,name=to"`
}
func (in *NetworkPolicyEgressRule) DeepCopy() *NetworkPolicyEgressRule
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyEgressRule.
func (in *NetworkPolicyEgressRule) DeepCopyInto(out *NetworkPolicyEgressRule)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicyEgressRule) Descriptor() ([]byte, []int)
func (m *NetworkPolicyEgressRule) Marshal() (dAtA []byte, err error)
func (m *NetworkPolicyEgressRule) MarshalTo(dAtA []byte) (int, error)
func (m *NetworkPolicyEgressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyEgressRule) ProtoMessage()
func (m *NetworkPolicyEgressRule) Reset()
func (m *NetworkPolicyEgressRule) Size() (n int)
func (this *NetworkPolicyEgressRule) String() string
func (NetworkPolicyEgressRule) SwaggerDoc() map[string]string
func (m *NetworkPolicyEgressRule) Unmarshal(dAtA []byte) error
func (m *NetworkPolicyEgressRule) XXX_DiscardUnknown()
func (m *NetworkPolicyEgressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *NetworkPolicyEgressRule) XXX_Merge(src proto.Message)
func (m *NetworkPolicyEgressRule) XXX_Size() int
func (m *NetworkPolicyEgressRule) XXX_Unmarshal(b []byte) error
NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.
type NetworkPolicyIngressRule struct {
// ports is a list of ports which should be made accessible on the pods selected for
// this rule. Each item in this list is combined using a logical OR. If this field is
// empty or missing, this rule matches all ports (traffic not restricted by port).
// If this field is present and contains at least one item, then this rule allows
// traffic only if the traffic matches at least one port in the list.
// +optional
// +listType=atomic
Ports []NetworkPolicyPort `json:"ports,omitempty" protobuf:"bytes,1,rep,name=ports"`
// from is a list of sources which should be able to access the pods selected for this rule.
// Items in this list are combined using a logical OR operation. If this field is
// empty or missing, this rule matches all sources (traffic not restricted by
// source). If this field is present and contains at least one item, this rule
// allows traffic only if the traffic matches at least one item in the from list.
// +optional
// +listType=atomic
From []NetworkPolicyPeer `json:"from,omitempty" protobuf:"bytes,2,rep,name=from"`
}
func (in *NetworkPolicyIngressRule) DeepCopy() *NetworkPolicyIngressRule
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyIngressRule.
func (in *NetworkPolicyIngressRule) DeepCopyInto(out *NetworkPolicyIngressRule)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicyIngressRule) Descriptor() ([]byte, []int)
func (m *NetworkPolicyIngressRule) Marshal() (dAtA []byte, err error)
func (m *NetworkPolicyIngressRule) MarshalTo(dAtA []byte) (int, error)
func (m *NetworkPolicyIngressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyIngressRule) ProtoMessage()
func (m *NetworkPolicyIngressRule) Reset()
func (m *NetworkPolicyIngressRule) Size() (n int)
func (this *NetworkPolicyIngressRule) String() string
func (NetworkPolicyIngressRule) SwaggerDoc() map[string]string
func (m *NetworkPolicyIngressRule) Unmarshal(dAtA []byte) error
func (m *NetworkPolicyIngressRule) XXX_DiscardUnknown()
func (m *NetworkPolicyIngressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *NetworkPolicyIngressRule) XXX_Merge(src proto.Message)
func (m *NetworkPolicyIngressRule) XXX_Size() int
func (m *NetworkPolicyIngressRule) XXX_Unmarshal(b []byte) error
NetworkPolicyList is a list of NetworkPolicy objects.
type NetworkPolicyList struct {
metav1.TypeMeta `json:",inline"`
// Standard list metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
// +optional
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// items is a list of schema objects.
Items []NetworkPolicy `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (in *NetworkPolicyList) DeepCopy() *NetworkPolicyList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyList.
func (in *NetworkPolicyList) DeepCopyInto(out *NetworkPolicyList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *NetworkPolicyList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*NetworkPolicyList) Descriptor() ([]byte, []int)
func (m *NetworkPolicyList) Marshal() (dAtA []byte, err error)
func (m *NetworkPolicyList) MarshalTo(dAtA []byte) (int, error)
func (m *NetworkPolicyList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyList) ProtoMessage()
func (m *NetworkPolicyList) Reset()
func (m *NetworkPolicyList) Size() (n int)
func (this *NetworkPolicyList) String() string
func (NetworkPolicyList) SwaggerDoc() map[string]string
func (m *NetworkPolicyList) Unmarshal(dAtA []byte) error
func (m *NetworkPolicyList) XXX_DiscardUnknown()
func (m *NetworkPolicyList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *NetworkPolicyList) XXX_Merge(src proto.Message)
func (m *NetworkPolicyList) XXX_Size() int
func (m *NetworkPolicyList) XXX_Unmarshal(b []byte) error
NetworkPolicyPeer describes a peer to allow traffic to/from. Only certain combinations of fields are allowed
type NetworkPolicyPeer struct {
// podSelector is a label selector which selects pods. This field follows standard label
// selector semantics; if present but empty, it selects all pods.
//
// If namespaceSelector is also set, then the NetworkPolicyPeer as a whole selects
// the pods matching podSelector in the Namespaces selected by NamespaceSelector.
// Otherwise it selects the pods matching podSelector in the policy's own namespace.
// +optional
PodSelector *metav1.LabelSelector `json:"podSelector,omitempty" protobuf:"bytes,1,opt,name=podSelector"`
// namespaceSelector selects namespaces using cluster-scoped labels. This field follows
// standard label selector semantics; if present but empty, it selects all namespaces.
//
// If podSelector is also set, then the NetworkPolicyPeer as a whole selects
// the pods matching podSelector in the namespaces selected by namespaceSelector.
// Otherwise it selects all pods in the namespaces selected by namespaceSelector.
// +optional
NamespaceSelector *metav1.LabelSelector `json:"namespaceSelector,omitempty" protobuf:"bytes,2,opt,name=namespaceSelector"`
// ipBlock defines policy on a particular IPBlock. If this field is set then
// neither of the other fields can be.
// +optional
IPBlock *IPBlock `json:"ipBlock,omitempty" protobuf:"bytes,3,rep,name=ipBlock"`
}
func (in *NetworkPolicyPeer) DeepCopy() *NetworkPolicyPeer
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyPeer.
func (in *NetworkPolicyPeer) DeepCopyInto(out *NetworkPolicyPeer)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicyPeer) Descriptor() ([]byte, []int)
func (m *NetworkPolicyPeer) Marshal() (dAtA []byte, err error)
func (m *NetworkPolicyPeer) MarshalTo(dAtA []byte) (int, error)
func (m *NetworkPolicyPeer) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyPeer) ProtoMessage()
func (m *NetworkPolicyPeer) Reset()
func (m *NetworkPolicyPeer) Size() (n int)
func (this *NetworkPolicyPeer) String() string
func (NetworkPolicyPeer) SwaggerDoc() map[string]string
func (m *NetworkPolicyPeer) Unmarshal(dAtA []byte) error
func (m *NetworkPolicyPeer) XXX_DiscardUnknown()
func (m *NetworkPolicyPeer) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *NetworkPolicyPeer) XXX_Merge(src proto.Message)
func (m *NetworkPolicyPeer) XXX_Size() int
func (m *NetworkPolicyPeer) XXX_Unmarshal(b []byte) error
NetworkPolicyPort describes a port to allow traffic on
type NetworkPolicyPort struct {
// protocol represents the protocol (TCP, UDP, or SCTP) which traffic must match.
// If not specified, this field defaults to TCP.
// +optional
Protocol *v1.Protocol `json:"protocol,omitempty" protobuf:"bytes,1,opt,name=protocol,casttype=k8s.io/api/core/v1.Protocol"`
// port represents the port on the given protocol. This can either be a numerical or named
// port on a pod. If this field is not provided, this matches all port names and
// numbers.
// If present, only traffic on the specified protocol AND port will be matched.
// +optional
Port *intstr.IntOrString `json:"port,omitempty" protobuf:"bytes,2,opt,name=port"`
// endPort indicates that the range of ports from port to endPort if set, inclusive,
// should be allowed by the policy. This field cannot be defined if the port field
// is not defined or if the port field is defined as a named (string) port.
// The endPort must be equal or greater than port.
// +optional
EndPort *int32 `json:"endPort,omitempty" protobuf:"bytes,3,opt,name=endPort"`
}
func (in *NetworkPolicyPort) DeepCopy() *NetworkPolicyPort
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyPort.
func (in *NetworkPolicyPort) DeepCopyInto(out *NetworkPolicyPort)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicyPort) Descriptor() ([]byte, []int)
func (m *NetworkPolicyPort) Marshal() (dAtA []byte, err error)
func (m *NetworkPolicyPort) MarshalTo(dAtA []byte) (int, error)
func (m *NetworkPolicyPort) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyPort) ProtoMessage()
func (m *NetworkPolicyPort) Reset()
func (m *NetworkPolicyPort) Size() (n int)
func (this *NetworkPolicyPort) String() string
func (NetworkPolicyPort) SwaggerDoc() map[string]string
func (m *NetworkPolicyPort) Unmarshal(dAtA []byte) error
func (m *NetworkPolicyPort) XXX_DiscardUnknown()
func (m *NetworkPolicyPort) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *NetworkPolicyPort) XXX_Merge(src proto.Message)
func (m *NetworkPolicyPort) XXX_Size() int
func (m *NetworkPolicyPort) XXX_Unmarshal(b []byte) error
NetworkPolicySpec provides the specification of a NetworkPolicy
type NetworkPolicySpec struct {
// podSelector selects the pods to which this NetworkPolicy object applies.
// The array of ingress rules is applied to any pods selected by this field.
// Multiple network policies can select the same set of pods. In this case,
// the ingress rules for each are combined additively.
// This field is NOT optional and follows standard label selector semantics.
// An empty podSelector matches all pods in this namespace.
PodSelector metav1.LabelSelector `json:"podSelector" protobuf:"bytes,1,opt,name=podSelector"`
// ingress is a list of ingress rules to be applied to the selected pods.
// Traffic is allowed to a pod if there are no NetworkPolicies selecting the pod
// (and cluster policy otherwise allows the traffic), OR if the traffic source is
// the pod's local node, OR if the traffic matches at least one ingress rule
// across all of the NetworkPolicy objects whose podSelector matches the pod. If
// this field is empty then this NetworkPolicy does not allow any traffic (and serves
// solely to ensure that the pods it selects are isolated by default)
// +optional
// +listType=atomic
Ingress []NetworkPolicyIngressRule `json:"ingress,omitempty" protobuf:"bytes,2,rep,name=ingress"`
// egress is a list of egress rules to be applied to the selected pods. Outgoing traffic
// is allowed if there are no NetworkPolicies selecting the pod (and cluster policy
// otherwise allows the traffic), OR if the traffic matches at least one egress rule
// across all of the NetworkPolicy objects whose podSelector matches the pod. If
// this field is empty then this NetworkPolicy limits all outgoing traffic (and serves
// solely to ensure that the pods it selects are isolated by default).
// This field is beta-level in 1.8
// +optional
// +listType=atomic
Egress []NetworkPolicyEgressRule `json:"egress,omitempty" protobuf:"bytes,3,rep,name=egress"`
// policyTypes is a list of rule types that the NetworkPolicy relates to.
// Valid options are ["Ingress"], ["Egress"], or ["Ingress", "Egress"].
// If this field is not specified, it will default based on the existence of ingress or egress rules;
// policies that contain an egress section are assumed to affect egress, and all policies
// (whether or not they contain an ingress section) are assumed to affect ingress.
// If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ].
// Likewise, if you want to write a policy that specifies that no egress is allowed,
// you must specify a policyTypes value that include "Egress" (since such a policy would not include
// an egress section and would otherwise default to just [ "Ingress" ]).
// This field is beta-level in 1.8
// +optional
// +listType=atomic
PolicyTypes []PolicyType `json:"policyTypes,omitempty" protobuf:"bytes,4,rep,name=policyTypes,casttype=PolicyType"`
}
func (in *NetworkPolicySpec) DeepCopy() *NetworkPolicySpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicySpec.
func (in *NetworkPolicySpec) DeepCopyInto(out *NetworkPolicySpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicySpec) Descriptor() ([]byte, []int)
func (m *NetworkPolicySpec) Marshal() (dAtA []byte, err error)
func (m *NetworkPolicySpec) MarshalTo(dAtA []byte) (int, error)
func (m *NetworkPolicySpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicySpec) ProtoMessage()
func (m *NetworkPolicySpec) Reset()
func (m *NetworkPolicySpec) Size() (n int)
func (this *NetworkPolicySpec) String() string
func (NetworkPolicySpec) SwaggerDoc() map[string]string
func (m *NetworkPolicySpec) Unmarshal(dAtA []byte) error
func (m *NetworkPolicySpec) XXX_DiscardUnknown()
func (m *NetworkPolicySpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *NetworkPolicySpec) XXX_Merge(src proto.Message)
func (m *NetworkPolicySpec) XXX_Size() int
func (m *NetworkPolicySpec) XXX_Unmarshal(b []byte) error
PathType represents the type of path referred to by a HTTPIngressPath. +enum
type PathType string
PolicyType string describes the NetworkPolicy type This type is beta-level in 1.8 +enum
type PolicyType string
const (
// PolicyTypeIngress is a NetworkPolicy that affects ingress traffic on selected pods
PolicyTypeIngress PolicyType = "Ingress"
// PolicyTypeEgress is a NetworkPolicy that affects egress traffic on selected pods
PolicyTypeEgress PolicyType = "Egress"
)
ServiceBackendPort is the service port being referenced.
type ServiceBackendPort struct {
// name is the name of the port on the Service.
// This is a mutually exclusive setting with "Number".
// +optional
Name string `json:"name,omitempty" protobuf:"bytes,1,opt,name=name"`
// number is the numerical port number (e.g. 80) on the Service.
// This is a mutually exclusive setting with "Name".
// +optional
Number int32 `json:"number,omitempty" protobuf:"bytes,2,opt,name=number"`
}
func (in *ServiceBackendPort) DeepCopy() *ServiceBackendPort
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceBackendPort.
func (in *ServiceBackendPort) DeepCopyInto(out *ServiceBackendPort)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ServiceBackendPort) Descriptor() ([]byte, []int)
func (m *ServiceBackendPort) Marshal() (dAtA []byte, err error)
func (m *ServiceBackendPort) MarshalTo(dAtA []byte) (int, error)
func (m *ServiceBackendPort) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ServiceBackendPort) ProtoMessage()
func (m *ServiceBackendPort) Reset()
func (m *ServiceBackendPort) Size() (n int)
func (this *ServiceBackendPort) String() string
func (ServiceBackendPort) SwaggerDoc() map[string]string
func (m *ServiceBackendPort) Unmarshal(dAtA []byte) error
func (m *ServiceBackendPort) XXX_DiscardUnknown()
func (m *ServiceBackendPort) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ServiceBackendPort) XXX_Merge(src proto.Message)
func (m *ServiceBackendPort) XXX_Size() int
func (m *ServiceBackendPort) XXX_Unmarshal(b []byte) error