Documentation
¶
Index ¶
- Variables
- type IPBlock
- func (*IPBlock) Descriptor() ([]byte, []int)
- func (this *IPBlock) Equal(that interface{}) bool
- func (m *IPBlock) GetCidr() string
- func (m *IPBlock) GetExcept() []string
- func (this *IPBlock) GoString() string
- func (m *IPBlock) Marshal() (dAtA []byte, err error)
- func (m *IPBlock) MarshalTo(dAtA []byte) (int, error)
- func (m *IPBlock) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*IPBlock) ProtoMessage()
- func (m *IPBlock) Reset()
- func (m *IPBlock) Size() (n int)
- func (this *IPBlock) String() string
- func (m *IPBlock) Unmarshal(dAtA []byte) error
- func (m *IPBlock) XXX_DiscardUnknown()
- func (m *IPBlock) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *IPBlock) XXX_Merge(src proto.Message)
- func (m *IPBlock) XXX_Size() int
- func (m *IPBlock) XXX_Unmarshal(b []byte) error
- type NetworkPolicy
- func (*NetworkPolicy) Descriptor() ([]byte, []int)
- func (this *NetworkPolicy) Equal(that interface{}) bool
- func (m *NetworkPolicy) GetMetadata() *v1.ObjectMeta
- func (m *NetworkPolicy) GetSpec() *NetworkPolicySpec
- func (this *NetworkPolicy) GoString() string
- func (m *NetworkPolicy) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicy) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicy) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicy) ProtoMessage()
- func (m *NetworkPolicy) Reset()
- func (m *NetworkPolicy) Size() (n int)
- func (this *NetworkPolicy) String() string
- func (m *NetworkPolicy) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicy) XXX_DiscardUnknown()
- func (m *NetworkPolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicy) XXX_Merge(src proto.Message)
- func (m *NetworkPolicy) XXX_Size() int
- func (m *NetworkPolicy) XXX_Unmarshal(b []byte) error
- type NetworkPolicyEgressRule
- func (*NetworkPolicyEgressRule) Descriptor() ([]byte, []int)
- func (this *NetworkPolicyEgressRule) Equal(that interface{}) bool
- func (m *NetworkPolicyEgressRule) GetPorts() []*NetworkPolicyPort
- func (m *NetworkPolicyEgressRule) GetTo() []*NetworkPolicyPeer
- func (this *NetworkPolicyEgressRule) GoString() string
- func (m *NetworkPolicyEgressRule) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicyEgressRule) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicyEgressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicyEgressRule) ProtoMessage()
- func (m *NetworkPolicyEgressRule) Reset()
- func (m *NetworkPolicyEgressRule) Size() (n int)
- func (this *NetworkPolicyEgressRule) String() string
- func (m *NetworkPolicyEgressRule) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicyEgressRule) XXX_DiscardUnknown()
- func (m *NetworkPolicyEgressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicyEgressRule) XXX_Merge(src proto.Message)
- func (m *NetworkPolicyEgressRule) XXX_Size() int
- func (m *NetworkPolicyEgressRule) XXX_Unmarshal(b []byte) error
- type NetworkPolicyIngressRule
- func (*NetworkPolicyIngressRule) Descriptor() ([]byte, []int)
- func (this *NetworkPolicyIngressRule) Equal(that interface{}) bool
- func (m *NetworkPolicyIngressRule) GetFrom() []*NetworkPolicyPeer
- func (m *NetworkPolicyIngressRule) GetPorts() []*NetworkPolicyPort
- func (this *NetworkPolicyIngressRule) GoString() string
- func (m *NetworkPolicyIngressRule) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicyIngressRule) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicyIngressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicyIngressRule) ProtoMessage()
- func (m *NetworkPolicyIngressRule) Reset()
- func (m *NetworkPolicyIngressRule) Size() (n int)
- func (this *NetworkPolicyIngressRule) String() string
- func (m *NetworkPolicyIngressRule) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicyIngressRule) XXX_DiscardUnknown()
- func (m *NetworkPolicyIngressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicyIngressRule) XXX_Merge(src proto.Message)
- func (m *NetworkPolicyIngressRule) XXX_Size() int
- func (m *NetworkPolicyIngressRule) XXX_Unmarshal(b []byte) error
- type NetworkPolicyList
- func (*NetworkPolicyList) Descriptor() ([]byte, []int)
- func (this *NetworkPolicyList) Equal(that interface{}) bool
- func (m *NetworkPolicyList) GetItems() []*NetworkPolicy
- func (m *NetworkPolicyList) GetMetadata() *v1.ListMeta
- func (this *NetworkPolicyList) GoString() string
- func (m *NetworkPolicyList) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicyList) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicyList) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicyList) ProtoMessage()
- func (m *NetworkPolicyList) Reset()
- func (m *NetworkPolicyList) Size() (n int)
- func (this *NetworkPolicyList) String() string
- func (m *NetworkPolicyList) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicyList) XXX_DiscardUnknown()
- func (m *NetworkPolicyList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicyList) XXX_Merge(src proto.Message)
- func (m *NetworkPolicyList) XXX_Size() int
- func (m *NetworkPolicyList) XXX_Unmarshal(b []byte) error
- type NetworkPolicyPeer
- func (*NetworkPolicyPeer) Descriptor() ([]byte, []int)
- func (this *NetworkPolicyPeer) Equal(that interface{}) bool
- func (m *NetworkPolicyPeer) GetIpBlock() *IPBlock
- func (m *NetworkPolicyPeer) GetNamespaceSelector() *v1.LabelSelector
- func (m *NetworkPolicyPeer) GetPodSelector() *v1.LabelSelector
- func (this *NetworkPolicyPeer) GoString() string
- func (m *NetworkPolicyPeer) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicyPeer) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicyPeer) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicyPeer) ProtoMessage()
- func (m *NetworkPolicyPeer) Reset()
- func (m *NetworkPolicyPeer) Size() (n int)
- func (this *NetworkPolicyPeer) String() string
- func (m *NetworkPolicyPeer) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicyPeer) XXX_DiscardUnknown()
- func (m *NetworkPolicyPeer) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicyPeer) XXX_Merge(src proto.Message)
- func (m *NetworkPolicyPeer) XXX_Size() int
- func (m *NetworkPolicyPeer) XXX_Unmarshal(b []byte) error
- type NetworkPolicyPort
- func (*NetworkPolicyPort) Descriptor() ([]byte, []int)
- func (this *NetworkPolicyPort) Equal(that interface{}) bool
- func (m *NetworkPolicyPort) GetPort() *intstr.IntOrString
- func (m *NetworkPolicyPort) GetProtocol() string
- func (this *NetworkPolicyPort) GoString() string
- func (m *NetworkPolicyPort) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicyPort) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicyPort) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicyPort) ProtoMessage()
- func (m *NetworkPolicyPort) Reset()
- func (m *NetworkPolicyPort) Size() (n int)
- func (this *NetworkPolicyPort) String() string
- func (m *NetworkPolicyPort) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicyPort) XXX_DiscardUnknown()
- func (m *NetworkPolicyPort) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicyPort) XXX_Merge(src proto.Message)
- func (m *NetworkPolicyPort) XXX_Size() int
- func (m *NetworkPolicyPort) XXX_Unmarshal(b []byte) error
- type NetworkPolicySpec
- func (*NetworkPolicySpec) Descriptor() ([]byte, []int)
- func (this *NetworkPolicySpec) Equal(that interface{}) bool
- func (m *NetworkPolicySpec) GetEgress() []*NetworkPolicyEgressRule
- func (m *NetworkPolicySpec) GetIngress() []*NetworkPolicyIngressRule
- func (m *NetworkPolicySpec) GetPodSelector() *v1.LabelSelector
- func (m *NetworkPolicySpec) GetPolicyTypes() []string
- func (this *NetworkPolicySpec) GoString() string
- func (m *NetworkPolicySpec) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicySpec) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicySpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicySpec) ProtoMessage()
- func (m *NetworkPolicySpec) Reset()
- func (m *NetworkPolicySpec) Size() (n int)
- func (this *NetworkPolicySpec) String() string
- func (m *NetworkPolicySpec) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicySpec) XXX_DiscardUnknown()
- func (m *NetworkPolicySpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicySpec) XXX_Merge(src proto.Message)
- func (m *NetworkPolicySpec) XXX_Size() int
- func (m *NetworkPolicySpec) XXX_Unmarshal(b []byte) error
Constants ¶
This section is empty.
Variables ¶
var ( ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling") ErrIntOverflowGenerated = fmt.Errorf("proto: integer overflow") )
Functions ¶
This section is empty.
Types ¶
type IPBlock ¶
type IPBlock struct { // CIDR is a string representing the IP Block // Valid examples are "192.168.1.1/24" Cidr string `protobuf:"bytes,1,opt,name=cidr" json:"cidr"` // Except is a slice of CIDRs that should not be included within an IP Block // Valid examples are "192.168.1.1/24" // Except values will be rejected if they are outside the CIDR range // +optional Except []string `protobuf:"bytes,2,rep,name=except" json:"except,omitempty"` }
IPBlock describes a particular CIDR (Ex. "192.168.1.1/24") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.
func (*IPBlock) Descriptor ¶
func (*IPBlock) MarshalToSizedBuffer ¶
func (*IPBlock) ProtoMessage ¶
func (*IPBlock) ProtoMessage()
func (*IPBlock) XXX_DiscardUnknown ¶
func (m *IPBlock) XXX_DiscardUnknown()
func (*IPBlock) XXX_Marshal ¶
func (*IPBlock) XXX_Unmarshal ¶
type NetworkPolicy ¶
type NetworkPolicy struct { // Standard object's metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata // +optional Metadata *v1.ObjectMeta `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"` // Specification of the desired behavior for this NetworkPolicy. // +optional Spec *NetworkPolicySpec `protobuf:"bytes,2,opt,name=spec" json:"spec,omitempty"` }
NetworkPolicy describes what network traffic is allowed for a set of Pods
func (*NetworkPolicy) Descriptor ¶
func (*NetworkPolicy) Descriptor() ([]byte, []int)
func (*NetworkPolicy) Equal ¶
func (this *NetworkPolicy) Equal(that interface{}) bool
func (*NetworkPolicy) GetMetadata ¶
func (m *NetworkPolicy) GetMetadata() *v1.ObjectMeta
func (*NetworkPolicy) GetSpec ¶
func (m *NetworkPolicy) GetSpec() *NetworkPolicySpec
func (*NetworkPolicy) GoString ¶
func (this *NetworkPolicy) GoString() string
func (*NetworkPolicy) Marshal ¶
func (m *NetworkPolicy) Marshal() (dAtA []byte, err error)
func (*NetworkPolicy) MarshalToSizedBuffer ¶
func (m *NetworkPolicy) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicy) ProtoMessage ¶
func (*NetworkPolicy) ProtoMessage()
func (*NetworkPolicy) Reset ¶
func (m *NetworkPolicy) Reset()
func (*NetworkPolicy) Size ¶
func (m *NetworkPolicy) Size() (n int)
func (*NetworkPolicy) String ¶
func (this *NetworkPolicy) String() string
func (*NetworkPolicy) Unmarshal ¶
func (m *NetworkPolicy) Unmarshal(dAtA []byte) error
func (*NetworkPolicy) XXX_DiscardUnknown ¶
func (m *NetworkPolicy) XXX_DiscardUnknown()
func (*NetworkPolicy) XXX_Marshal ¶
func (m *NetworkPolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicy) XXX_Merge ¶
func (m *NetworkPolicy) XXX_Merge(src proto.Message)
func (*NetworkPolicy) XXX_Size ¶
func (m *NetworkPolicy) XXX_Size() int
func (*NetworkPolicy) XXX_Unmarshal ¶
func (m *NetworkPolicy) XXX_Unmarshal(b []byte) error
type NetworkPolicyEgressRule ¶
type NetworkPolicyEgressRule struct { // List of destination ports for outgoing traffic. // Each item in this list is combined using a logical OR. If this field is // empty or missing, this rule matches all ports (traffic not restricted by port). // If this field is present and contains at least one item, then this rule allows // traffic only if the traffic matches at least one port in the list. // +optional Ports []*NetworkPolicyPort `protobuf:"bytes,1,rep,name=ports" json:"ports,omitempty"` // List of destinations for outgoing traffic of pods selected for this rule. // Items in this list are combined using a logical OR operation. If this field is // empty or missing, this rule matches all destinations (traffic not restricted by // destination). If this field is present and contains at least one item, this rule // allows traffic only if the traffic matches at least one item in the to list. // +optional To []*NetworkPolicyPeer `protobuf:"bytes,2,rep,name=to" json:"to,omitempty"` }
NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8
func (*NetworkPolicyEgressRule) Descriptor ¶
func (*NetworkPolicyEgressRule) Descriptor() ([]byte, []int)
func (*NetworkPolicyEgressRule) Equal ¶
func (this *NetworkPolicyEgressRule) Equal(that interface{}) bool
func (*NetworkPolicyEgressRule) GetPorts ¶
func (m *NetworkPolicyEgressRule) GetPorts() []*NetworkPolicyPort
func (*NetworkPolicyEgressRule) GetTo ¶
func (m *NetworkPolicyEgressRule) GetTo() []*NetworkPolicyPeer
func (*NetworkPolicyEgressRule) GoString ¶
func (this *NetworkPolicyEgressRule) GoString() string
func (*NetworkPolicyEgressRule) Marshal ¶
func (m *NetworkPolicyEgressRule) Marshal() (dAtA []byte, err error)
func (*NetworkPolicyEgressRule) MarshalTo ¶
func (m *NetworkPolicyEgressRule) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicyEgressRule) MarshalToSizedBuffer ¶
func (m *NetworkPolicyEgressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyEgressRule) ProtoMessage ¶
func (*NetworkPolicyEgressRule) ProtoMessage()
func (*NetworkPolicyEgressRule) Reset ¶
func (m *NetworkPolicyEgressRule) Reset()
func (*NetworkPolicyEgressRule) Size ¶
func (m *NetworkPolicyEgressRule) Size() (n int)
func (*NetworkPolicyEgressRule) String ¶
func (this *NetworkPolicyEgressRule) String() string
func (*NetworkPolicyEgressRule) Unmarshal ¶
func (m *NetworkPolicyEgressRule) Unmarshal(dAtA []byte) error
func (*NetworkPolicyEgressRule) XXX_DiscardUnknown ¶
func (m *NetworkPolicyEgressRule) XXX_DiscardUnknown()
func (*NetworkPolicyEgressRule) XXX_Marshal ¶
func (m *NetworkPolicyEgressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicyEgressRule) XXX_Merge ¶
func (m *NetworkPolicyEgressRule) XXX_Merge(src proto.Message)
func (*NetworkPolicyEgressRule) XXX_Size ¶
func (m *NetworkPolicyEgressRule) XXX_Size() int
func (*NetworkPolicyEgressRule) XXX_Unmarshal ¶
func (m *NetworkPolicyEgressRule) XXX_Unmarshal(b []byte) error
type NetworkPolicyIngressRule ¶
type NetworkPolicyIngressRule struct { // List of ports which should be made accessible on the pods selected for this // rule. Each item in this list is combined using a logical OR. If this field is // empty or missing, this rule matches all ports (traffic not restricted by port). // If this field is present and contains at least one item, then this rule allows // traffic only if the traffic matches at least one port in the list. // +optional Ports []*NetworkPolicyPort `protobuf:"bytes,1,rep,name=ports" json:"ports,omitempty"` // List of sources which should be able to access the pods selected for this rule. // Items in this list are combined using a logical OR operation. If this field is // empty or missing, this rule matches all sources (traffic not restricted by // source). If this field is present and contains at least one item, this rule // allows traffic only if the traffic matches at least one item in the from list. // +optional From []*NetworkPolicyPeer `protobuf:"bytes,2,rep,name=from" json:"from,omitempty"` }
NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.
func (*NetworkPolicyIngressRule) Descriptor ¶
func (*NetworkPolicyIngressRule) Descriptor() ([]byte, []int)
func (*NetworkPolicyIngressRule) Equal ¶
func (this *NetworkPolicyIngressRule) Equal(that interface{}) bool
func (*NetworkPolicyIngressRule) GetFrom ¶
func (m *NetworkPolicyIngressRule) GetFrom() []*NetworkPolicyPeer
func (*NetworkPolicyIngressRule) GetPorts ¶
func (m *NetworkPolicyIngressRule) GetPorts() []*NetworkPolicyPort
func (*NetworkPolicyIngressRule) GoString ¶
func (this *NetworkPolicyIngressRule) GoString() string
func (*NetworkPolicyIngressRule) Marshal ¶
func (m *NetworkPolicyIngressRule) Marshal() (dAtA []byte, err error)
func (*NetworkPolicyIngressRule) MarshalTo ¶
func (m *NetworkPolicyIngressRule) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicyIngressRule) MarshalToSizedBuffer ¶
func (m *NetworkPolicyIngressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyIngressRule) ProtoMessage ¶
func (*NetworkPolicyIngressRule) ProtoMessage()
func (*NetworkPolicyIngressRule) Reset ¶
func (m *NetworkPolicyIngressRule) Reset()
func (*NetworkPolicyIngressRule) Size ¶
func (m *NetworkPolicyIngressRule) Size() (n int)
func (*NetworkPolicyIngressRule) String ¶
func (this *NetworkPolicyIngressRule) String() string
func (*NetworkPolicyIngressRule) Unmarshal ¶
func (m *NetworkPolicyIngressRule) Unmarshal(dAtA []byte) error
func (*NetworkPolicyIngressRule) XXX_DiscardUnknown ¶
func (m *NetworkPolicyIngressRule) XXX_DiscardUnknown()
func (*NetworkPolicyIngressRule) XXX_Marshal ¶
func (m *NetworkPolicyIngressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicyIngressRule) XXX_Merge ¶
func (m *NetworkPolicyIngressRule) XXX_Merge(src proto.Message)
func (*NetworkPolicyIngressRule) XXX_Size ¶
func (m *NetworkPolicyIngressRule) XXX_Size() int
func (*NetworkPolicyIngressRule) XXX_Unmarshal ¶
func (m *NetworkPolicyIngressRule) XXX_Unmarshal(b []byte) error
type NetworkPolicyList ¶
type NetworkPolicyList struct { // Standard list metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata // +optional Metadata *v1.ListMeta `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"` // Items is a list of schema objects. Items []*NetworkPolicy `protobuf:"bytes,2,rep,name=items" json:"items,omitempty"` }
NetworkPolicyList is a list of NetworkPolicy objects.
func (*NetworkPolicyList) Descriptor ¶
func (*NetworkPolicyList) Descriptor() ([]byte, []int)
func (*NetworkPolicyList) Equal ¶
func (this *NetworkPolicyList) Equal(that interface{}) bool
func (*NetworkPolicyList) GetItems ¶
func (m *NetworkPolicyList) GetItems() []*NetworkPolicy
func (*NetworkPolicyList) GetMetadata ¶
func (m *NetworkPolicyList) GetMetadata() *v1.ListMeta
func (*NetworkPolicyList) GoString ¶
func (this *NetworkPolicyList) GoString() string
func (*NetworkPolicyList) Marshal ¶
func (m *NetworkPolicyList) Marshal() (dAtA []byte, err error)
func (*NetworkPolicyList) MarshalTo ¶
func (m *NetworkPolicyList) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicyList) MarshalToSizedBuffer ¶
func (m *NetworkPolicyList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyList) ProtoMessage ¶
func (*NetworkPolicyList) ProtoMessage()
func (*NetworkPolicyList) Reset ¶
func (m *NetworkPolicyList) Reset()
func (*NetworkPolicyList) Size ¶
func (m *NetworkPolicyList) Size() (n int)
func (*NetworkPolicyList) String ¶
func (this *NetworkPolicyList) String() string
func (*NetworkPolicyList) Unmarshal ¶
func (m *NetworkPolicyList) Unmarshal(dAtA []byte) error
func (*NetworkPolicyList) XXX_DiscardUnknown ¶
func (m *NetworkPolicyList) XXX_DiscardUnknown()
func (*NetworkPolicyList) XXX_Marshal ¶
func (m *NetworkPolicyList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicyList) XXX_Merge ¶
func (m *NetworkPolicyList) XXX_Merge(src proto.Message)
func (*NetworkPolicyList) XXX_Size ¶
func (m *NetworkPolicyList) XXX_Size() int
func (*NetworkPolicyList) XXX_Unmarshal ¶
func (m *NetworkPolicyList) XXX_Unmarshal(b []byte) error
type NetworkPolicyPeer ¶
type NetworkPolicyPeer struct { // This is a label selector which selects Pods. This field follows standard label // selector semantics; if present but empty, it selects all pods. // // If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects // the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. // Otherwise it selects the Pods matching PodSelector in the policy's own Namespace. // +optional PodSelector *v1.LabelSelector `protobuf:"bytes,1,opt,name=podSelector" json:"podSelector,omitempty"` // Selects Namespaces using cluster-scoped labels. This field follows standard label // selector semantics; if present but empty, it selects all namespaces. // // If PodSelector is also set, then the NetworkPolicyPeer as a whole selects // the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. // Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector. // +optional NamespaceSelector *v1.LabelSelector `protobuf:"bytes,2,opt,name=namespaceSelector" json:"namespaceSelector,omitempty"` // IPBlock defines policy on a particular IPBlock. If this field is set then // neither of the other fields can be. // +optional IpBlock *IPBlock `protobuf:"bytes,3,opt,name=ipBlock" json:"ipBlock,omitempty"` }
NetworkPolicyPeer describes a peer to allow traffic from. Only certain combinations of fields are allowed
func (*NetworkPolicyPeer) Descriptor ¶
func (*NetworkPolicyPeer) Descriptor() ([]byte, []int)
func (*NetworkPolicyPeer) Equal ¶
func (this *NetworkPolicyPeer) Equal(that interface{}) bool
func (*NetworkPolicyPeer) GetIpBlock ¶
func (m *NetworkPolicyPeer) GetIpBlock() *IPBlock
func (*NetworkPolicyPeer) GetNamespaceSelector ¶
func (m *NetworkPolicyPeer) GetNamespaceSelector() *v1.LabelSelector
func (*NetworkPolicyPeer) GetPodSelector ¶
func (m *NetworkPolicyPeer) GetPodSelector() *v1.LabelSelector
func (*NetworkPolicyPeer) GoString ¶
func (this *NetworkPolicyPeer) GoString() string
func (*NetworkPolicyPeer) Marshal ¶
func (m *NetworkPolicyPeer) Marshal() (dAtA []byte, err error)
func (*NetworkPolicyPeer) MarshalTo ¶
func (m *NetworkPolicyPeer) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicyPeer) MarshalToSizedBuffer ¶
func (m *NetworkPolicyPeer) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyPeer) ProtoMessage ¶
func (*NetworkPolicyPeer) ProtoMessage()
func (*NetworkPolicyPeer) Reset ¶
func (m *NetworkPolicyPeer) Reset()
func (*NetworkPolicyPeer) Size ¶
func (m *NetworkPolicyPeer) Size() (n int)
func (*NetworkPolicyPeer) String ¶
func (this *NetworkPolicyPeer) String() string
func (*NetworkPolicyPeer) Unmarshal ¶
func (m *NetworkPolicyPeer) Unmarshal(dAtA []byte) error
func (*NetworkPolicyPeer) XXX_DiscardUnknown ¶
func (m *NetworkPolicyPeer) XXX_DiscardUnknown()
func (*NetworkPolicyPeer) XXX_Marshal ¶
func (m *NetworkPolicyPeer) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicyPeer) XXX_Merge ¶
func (m *NetworkPolicyPeer) XXX_Merge(src proto.Message)
func (*NetworkPolicyPeer) XXX_Size ¶
func (m *NetworkPolicyPeer) XXX_Size() int
func (*NetworkPolicyPeer) XXX_Unmarshal ¶
func (m *NetworkPolicyPeer) XXX_Unmarshal(b []byte) error
type NetworkPolicyPort ¶
type NetworkPolicyPort struct { // The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this // field defaults to TCP. // +optional Protocol string `protobuf:"bytes,1,opt,name=protocol" json:"protocol"` // The port on the given protocol. This can either be a numerical or named port on // a pod. If this field is not provided, this matches all port names and numbers. // +optional Port *intstr.IntOrString `protobuf:"bytes,2,opt,name=port" json:"port,omitempty"` }
NetworkPolicyPort describes a port to allow traffic on
func (*NetworkPolicyPort) Descriptor ¶
func (*NetworkPolicyPort) Descriptor() ([]byte, []int)
func (*NetworkPolicyPort) Equal ¶
func (this *NetworkPolicyPort) Equal(that interface{}) bool
func (*NetworkPolicyPort) GetPort ¶
func (m *NetworkPolicyPort) GetPort() *intstr.IntOrString
func (*NetworkPolicyPort) GetProtocol ¶
func (m *NetworkPolicyPort) GetProtocol() string
func (*NetworkPolicyPort) GoString ¶
func (this *NetworkPolicyPort) GoString() string
func (*NetworkPolicyPort) Marshal ¶
func (m *NetworkPolicyPort) Marshal() (dAtA []byte, err error)
func (*NetworkPolicyPort) MarshalTo ¶
func (m *NetworkPolicyPort) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicyPort) MarshalToSizedBuffer ¶
func (m *NetworkPolicyPort) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyPort) ProtoMessage ¶
func (*NetworkPolicyPort) ProtoMessage()
func (*NetworkPolicyPort) Reset ¶
func (m *NetworkPolicyPort) Reset()
func (*NetworkPolicyPort) Size ¶
func (m *NetworkPolicyPort) Size() (n int)
func (*NetworkPolicyPort) String ¶
func (this *NetworkPolicyPort) String() string
func (*NetworkPolicyPort) Unmarshal ¶
func (m *NetworkPolicyPort) Unmarshal(dAtA []byte) error
func (*NetworkPolicyPort) XXX_DiscardUnknown ¶
func (m *NetworkPolicyPort) XXX_DiscardUnknown()
func (*NetworkPolicyPort) XXX_Marshal ¶
func (m *NetworkPolicyPort) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicyPort) XXX_Merge ¶
func (m *NetworkPolicyPort) XXX_Merge(src proto.Message)
func (*NetworkPolicyPort) XXX_Size ¶
func (m *NetworkPolicyPort) XXX_Size() int
func (*NetworkPolicyPort) XXX_Unmarshal ¶
func (m *NetworkPolicyPort) XXX_Unmarshal(b []byte) error
type NetworkPolicySpec ¶
type NetworkPolicySpec struct { // Selects the pods to which this NetworkPolicy object applies. The array of // ingress rules is applied to any pods selected by this field. Multiple network // policies can select the same set of pods. In this case, the ingress rules for // each are combined additively. This field is NOT optional and follows standard // label selector semantics. An empty podSelector matches all pods in this // namespace. PodSelector *v1.LabelSelector `protobuf:"bytes,1,opt,name=podSelector" json:"podSelector,omitempty"` // List of ingress rules to be applied to the selected pods. Traffic is allowed to // a pod if there are no NetworkPolicies selecting the pod // (and cluster policy otherwise allows the traffic), OR if the traffic source is // the pod's local node, OR if the traffic matches at least one ingress rule // across all of the NetworkPolicy objects whose podSelector matches the pod. If // this field is empty then this NetworkPolicy does not allow any traffic (and serves // solely to ensure that the pods it selects are isolated by default) // +optional Ingress []*NetworkPolicyIngressRule `protobuf:"bytes,2,rep,name=ingress" json:"ingress,omitempty"` // List of egress rules to be applied to the selected pods. Outgoing traffic is // allowed if there are no NetworkPolicies selecting the pod (and cluster policy // otherwise allows the traffic), OR if the traffic matches at least one egress rule // across all of the NetworkPolicy objects whose podSelector matches the pod. If // this field is empty then this NetworkPolicy limits all outgoing traffic (and serves // solely to ensure that the pods it selects are isolated by default). // This field is beta-level in 1.8 // +optional Egress []*NetworkPolicyEgressRule `protobuf:"bytes,3,rep,name=egress" json:"egress,omitempty"` // List of rule types that the NetworkPolicy relates to. // Valid options are "Ingress", "Egress", or "Ingress,Egress". // If this field is not specified, it will default based on the existence of Ingress or Egress rules; // policies that contain an Egress section are assumed to affect Egress, and all policies // (whether or not they contain an Ingress section) are assumed to affect Ingress. // If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. // Likewise, if you want to write a policy that specifies that no egress is allowed, // you must specify a policyTypes value that include "Egress" (since such a policy would not include // an Egress section and would otherwise default to just [ "Ingress" ]). // This field is beta-level in 1.8 // +optional PolicyTypes []string `protobuf:"bytes,4,rep,name=policyTypes" json:"policyTypes,omitempty"` }
NetworkPolicySpec provides the specification of a NetworkPolicy
func (*NetworkPolicySpec) Descriptor ¶
func (*NetworkPolicySpec) Descriptor() ([]byte, []int)
func (*NetworkPolicySpec) Equal ¶
func (this *NetworkPolicySpec) Equal(that interface{}) bool
func (*NetworkPolicySpec) GetEgress ¶
func (m *NetworkPolicySpec) GetEgress() []*NetworkPolicyEgressRule
func (*NetworkPolicySpec) GetIngress ¶
func (m *NetworkPolicySpec) GetIngress() []*NetworkPolicyIngressRule
func (*NetworkPolicySpec) GetPodSelector ¶
func (m *NetworkPolicySpec) GetPodSelector() *v1.LabelSelector
func (*NetworkPolicySpec) GetPolicyTypes ¶
func (m *NetworkPolicySpec) GetPolicyTypes() []string
func (*NetworkPolicySpec) GoString ¶
func (this *NetworkPolicySpec) GoString() string
func (*NetworkPolicySpec) Marshal ¶
func (m *NetworkPolicySpec) Marshal() (dAtA []byte, err error)
func (*NetworkPolicySpec) MarshalTo ¶
func (m *NetworkPolicySpec) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicySpec) MarshalToSizedBuffer ¶
func (m *NetworkPolicySpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicySpec) ProtoMessage ¶
func (*NetworkPolicySpec) ProtoMessage()
func (*NetworkPolicySpec) Reset ¶
func (m *NetworkPolicySpec) Reset()
func (*NetworkPolicySpec) Size ¶
func (m *NetworkPolicySpec) Size() (n int)
func (*NetworkPolicySpec) String ¶
func (this *NetworkPolicySpec) String() string
func (*NetworkPolicySpec) Unmarshal ¶
func (m *NetworkPolicySpec) Unmarshal(dAtA []byte) error
func (*NetworkPolicySpec) XXX_DiscardUnknown ¶
func (m *NetworkPolicySpec) XXX_DiscardUnknown()
func (*NetworkPolicySpec) XXX_Marshal ¶
func (m *NetworkPolicySpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicySpec) XXX_Merge ¶
func (m *NetworkPolicySpec) XXX_Merge(src proto.Message)
func (*NetworkPolicySpec) XXX_Size ¶
func (m *NetworkPolicySpec) XXX_Size() int
func (*NetworkPolicySpec) XXX_Unmarshal ¶
func (m *NetworkPolicySpec) XXX_Unmarshal(b []byte) error