cilium

Documentation

Index

• type EgressRule
• type Entity
• type FQDNSelector
• type IngressRule
• type K8sServiceNamespace
• type K8sServiceSelectorNamespace
• type L7Rules
• type NetworkPolicy
• type NetworkPolicySpec
• type PortProtocol
• type PortRule
• type Protocol
• type Service

Types

type EgressRule

type EgressRule struct {
	ToCIDR      []string               `json:"toCIDR,omitempty"`
	ToPorts     []PortRule             `json:"toPorts,omitempty"`
	ToEndpoints []metav1.LabelSelector `json:"toEndpoints,omitempty"`
	ToFQDNs     []FQDNSelector         `json:"toFQDNs,omitempty"`
	ToEntities  []Entity               `json:"toEntities,omitempty"`
	ToServices  []Service              `json:"toServices,omitempty"`
}

EgressRule is a Cilium egress rule

type Entity

type Entity string

Entity is a Cilium rule entity

const (
	// EntityHost is a host entity
	EntityHost Entity = "host"
	// EntityRemoteNode is a remote-node entity
	EntityRemoteNode Entity = "remote-node"
	// EntityWorld is a world entity
	EntityWorld Entity = "world"
)

type FQDNSelector

type FQDNSelector struct {
	MatchName    string `json:"matchName,omitempty"`
	MatchPattern string `json:"matchPattern,omitempty"`
}

FQDNSelector is a Cilium FQDN selector

type IngressRule

type IngressRule struct {
	FromEndpoints []metav1.LabelSelector `json:"fromEndpoints,omitempty"`
	FromEntities  []Entity               `json:"fromEntities,omitempty"`
	ToPorts       []PortRule             `json:"toPorts,omitempty"`
}

IngressRule is a Cilium ingress rule

type K8sServiceNamespace

type K8sServiceNamespace struct {
	ServiceName string `json:"serviceName,omitempty"`
	Namespace   string `json:"namespace,omitempty"`
}

K8sServiceNamespace is a Cilium service + namespace

type K8sServiceSelectorNamespace

type K8sServiceSelectorNamespace struct {
	Selector  metav1.LabelSelector `json:"selector"`
	Namespace string               `json:"namespace,omitempty"`
}

K8sServiceSelectorNamespace is a Cilium service selector + namespace

type L7Rules

type L7Rules struct {
	DNS []FQDNSelector `json:"dns,omitempty"`
}

L7Rules is a Cilium L7 port rule

type NetworkPolicy

type NetworkPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Specs []NetworkPolicySpec `json:"specs,omitempty"`
}

NetworkPolicy is a Cilium network policy

type NetworkPolicySpec

type NetworkPolicySpec struct {
	Description      string               `json:"description,omitempty"`
	EndpointSelector metav1.LabelSelector `json:"endpointSelector,omitempty"`
	Ingress          []IngressRule        `json:"ingress,omitempty"`
	Egress           []EgressRule         `json:"egress,omitempty"`
}

NetworkPolicySpec is a Cilium network policy spec

type PortProtocol

type PortProtocol struct {
	Port     string   `json:"port,omitempty"`
	Protocol Protocol `json:"protocol,omitempty"`
}

PortProtocol is a Cilium port protocol

type PortRule

type PortRule struct {
	Ports []PortProtocol `json:"ports,omitempty"`
	Rules *L7Rules       `json:"rules,omitempty"`
}

PortRule is a Cilium port rule

type Protocol

type Protocol string

Protocol is a Cilium network protocol

const (
	// ProtocolTCP refers to the TCP network protocol
	ProtocolTCP Protocol = "TCP"
	// ProtocolUDP refers to the UDP network protocol
	ProtocolUDP Protocol = "UDP"
	// ProtocolAny refers to any network protocol
	ProtocolAny Protocol = "ANY"
)

type Service

type Service struct {
	K8sServiceSelector *K8sServiceSelectorNamespace `json:"k8sServiceSelector,omitempty"`
	K8sService         *K8sServiceNamespace         `json:"k8sService,omitempty"`
}

Service is a Cilium service selector