1---
2apiVersion: apiextensions.k8s.io/v1
3kind: CustomResourceDefinition
4metadata:
5 annotations:
6 controller-gen.kubebuilder.io/version: (unknown)
7 name: clusterfirewall.dsds.edge.ncr.com
8spec:
9 group: dsds.edge.ncr.com
10 names:
11 kind: ClusterFirewall
12 listKind: ClusterFirewallList
13 plural: clusterfirewall
14 shortNames:
15 - cfw
16 - clusterfw
17 singular: clusterfirewall
18 scope: Cluster
19 versions:
20 - additionalPrinterColumns:
21 - jsonPath: .status.condition.status
22 name: State
23 type: string
24 - jsonPath: .status.condition.message
25 name: Message
26 type: string
27 name: v1
28 schema:
29 openAPIV3Schema:
30 properties:
31 apiVersion:
32 description: |-
33 APIVersion defines the versioned schema of this representation of an object.
34 Servers should convert recognized schemas to the latest internal value, and
35 may reject unrecognized values.
36 More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
37 type: string
38 kind:
39 description: |-
40 Kind is a string value representing the REST resource this object represents.
41 Servers may infer this from the endpoint the client submits requests to.
42 Cannot be updated.
43 In CamelCase.
44 More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
45 type: string
46 metadata:
47 type: object
48 spec:
49 properties:
50 clusterRules:
51 items:
52 properties:
53 nodeRule:
54 properties:
55 destinationRanges:
56 items:
57 type: string
58 type: array
59 direction:
60 enum:
61 - input
62 - output
63 type: string
64 filters:
65 items:
66 properties:
67 IPProtocol:
68 enum:
69 - tcp
70 - udp
71 type: string
72 action:
73 enum:
74 - allow
75 - deny
76 type: string
77 portRange:
78 type: string
79 required:
80 - IPProtocol
81 - action
82 - portRange
83 type: object
84 type: array
85 id:
86 type: string
87 interfaceMAC:
88 type: string
89 name:
90 type: string
91 sourceRanges:
92 items:
93 type: string
94 type: array
95 required:
96 - destinationRanges
97 - direction
98 - filters
99 - id
100 - name
101 - sourceRanges
102 type: object
103 nodeSelector:
104 additionalProperties:
105 type: string
106 type: object
107 type: object
108 type: array
109 required:
110 - clusterRules
111 type: object
112 status:
113 properties:
114 condition:
115 items:
116 description: "Condition contains details for one aspect of the current
117 state of this API Resource.\n---\nThis struct is intended for
118 direct use as an array at the field path .status.conditions. For
119 example,\n\n\n\ttype FooStatus struct{\n\t // Represents the
120 observations of a foo's current state.\n\t // Known .status.conditions.type
121 are: \"Available\", \"Progressing\", and \"Degraded\"\n\t //
122 +patchMergeKey=type\n\t // +patchStrategy=merge\n\t // +listType=map\n\t
123 \ // +listMapKey=type\n\t Conditions []metav1.Condition `json:\"conditions,omitempty\"
124 patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`\n\n\n\t
125 \ // other fields\n\t}"
126 properties:
127 lastTransitionTime:
128 description: |-
129 lastTransitionTime is the last time the condition transitioned from one status to another.
130 This should be when the underlying condition changed. If that is not known, then using the time when the API field changed is acceptable.
131 format: date-time
132 type: string
133 message:
134 description: |-
135 message is a human readable message indicating details about the transition.
136 This may be an empty string.
137 maxLength: 32768
138 type: string
139 observedGeneration:
140 description: |-
141 observedGeneration represents the .metadata.generation that the condition was set based upon.
142 For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
143 with respect to the current state of the instance.
144 format: int64
145 minimum: 0
146 type: integer
147 reason:
148 description: |-
149 reason contains a programmatic identifier indicating the reason for the condition's last transition.
150 Producers of specific condition types may define expected values and meanings for this field,
151 and whether the values are considered a guaranteed API.
152 The value should be a CamelCase string.
153 This field may not be empty.
154 maxLength: 1024
155 minLength: 1
156 pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
157 type: string
158 status:
159 description: status of the condition, one of True, False, Unknown.
160 enum:
161 - "True"
162 - "False"
163 - Unknown
164 type: string
165 type:
166 description: |-
167 type of condition in CamelCase or in foo.example.com/CamelCase.
168 ---
169 Many .condition.type values are consistent across resources like Available, but because arbitrary conditions can be
170 useful (see .node.status.conditions), the ability to deconflict is important.
171 The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
172 maxLength: 316
173 pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
174 type: string
175 required:
176 - lastTransitionTime
177 - message
178 - reason
179 - status
180 - type
181 type: object
182 type: array
183 inventory:
184 description: |-
185 ResourceInventory contains a list of Kubernetes resource object references
186 that have been applied.
187 properties:
188 entries:
189 description: Entries of Kubernetes resource object references.
190 items:
191 description: ResourceRef contains the information necessary
192 to locate a resource within a cluster.
193 properties:
194 id:
195 description: |-
196 ID is the string representation of the Kubernetes resource object's metadata,
197 in the format '<namespace>_<name>_<group>_<kind>'.
198 type: string
199 v:
200 description: Version is the API version of the Kubernetes
201 resource object's kind.
202 type: string
203 required:
204 - id
205 - v
206 type: object
207 type: array
208 type: object
209 type: object
210 type: object
211 served: true
212 storage: true
213 subresources:
214 status: {}
View as plain text