api

Mar 14, 2023

Changes in this version

+ const IPv4Family

+ const IPv6Family

+ var FQDNMatchNameRegexString = `^([-a-zA-Z0-9_]+[.]?)+$`

+ var FQDNMatchPatternRegexString = `^([-a-zA-Z0-9_*]+[.]?)+$`

+ func ResourceQualifiedName(namespace, name, resource string) string

type AWSGroup

+ func (in *AWSGroup) DeepEqual(other *AWSGroup) bool

+ type Auth struct

+ Type AuthType

+ func (in *Auth) DeepCopy() *Auth

+ func (in *Auth) DeepCopyInto(out *Auth)

+ func (in *Auth) DeepEqual(other *Auth) bool

+ type AuthType string

+ const AuthTypeNull

type CIDRRule

+ func (in *CIDRRule) DeepEqual(other *CIDRRule) bool

type CIDRRuleSlice

+ func (in *CIDRRuleSlice) DeepEqual(other *CIDRRuleSlice) bool

type CIDRSlice

+ func (in *CIDRSlice) DeepEqual(other *CIDRSlice) bool

+ type EgressCommonRule struct

+ ToCIDR CIDRSlice

+ ToCIDRSet CIDRRuleSlice

+ ToEndpoints []EndpointSelector

+ ToEntities EntitySlice

+ ToGroups []ToGroups

+ ToRequires []EndpointSelector

+ ToServices []Service

+ func (e *EgressCommonRule) AllowsWildcarding() bool

+ func (e *EgressCommonRule) RequiresDerivative() bool

+ func (e *EgressCommonRule) SetAggregatedSelectors()

+ func (in *EgressCommonRule) DeepCopy() *EgressCommonRule

+ func (in *EgressCommonRule) DeepCopyInto(out *EgressCommonRule)

+ func (in *EgressCommonRule) DeepEqual(other *EgressCommonRule) bool

+ type EgressDenyRule struct

+ ICMPs ICMPRules

+ ToPorts PortDenyRules

+ func (e *EgressDenyRule) CreateDerivative(ctx context.Context) (*EgressDenyRule, error)

+ func (e *EgressDenyRule) GetDestinationEndpointSelectorsWithRequirements(requirements []slim_metav1.LabelSelectorRequirement) EndpointSelectorSlice

+ func (in *EgressDenyRule) DeepCopy() *EgressDenyRule

+ func (in *EgressDenyRule) DeepCopyInto(out *EgressDenyRule)

+ func (in *EgressDenyRule) DeepEqual(other *EgressDenyRule) bool

type EgressRule

+ Auth *Auth

+ ICMPs ICMPRules

+ func (e *EgressRule) AllowsWildcarding() bool

+ func (in *EgressRule) DeepEqual(other *EgressRule) bool

type EndpointSelector

+ func (in *EndpointSelector) DeepEqual(other *EndpointSelector) bool

+ func (n *EndpointSelector) AddMatchExpression(key string, op slim_metav1.LabelSelectorOperator, values []string)

type EndpointSelectorSlice

+ func (in *EndpointSelectorSlice) DeepEqual(other *EndpointSelectorSlice) bool

type Entity

+ const EntityHealth

+ const EntityIngress

+ const EntityKubeAPIServer

+ const EntityRemoteNode

+ const EntityUnmanaged

type EntitySlice

+ func (in *EntitySlice) DeepEqual(other *EntitySlice) bool

+ type EnvoyConfig struct

+ Kind string

+ Name string

+ func (in *EnvoyConfig) DeepCopy() *EnvoyConfig

+ func (in *EnvoyConfig) DeepCopyInto(out *EnvoyConfig)

+ func (in *EnvoyConfig) DeepEqual(other *EnvoyConfig) bool

type FQDNSelector

+ func (in *FQDNSelector) DeepEqual(other *FQDNSelector) bool

type FQDNSelectorSlice

+ func (in *FQDNSelectorSlice) DeepEqual(other *FQDNSelectorSlice) bool

+ type HeaderMatch struct

+ Mismatch MismatchAction

+ Name string

+ Secret *Secret

+ Value string

+ func (h *HeaderMatch) Equal(o *HeaderMatch) bool

+ func (in *HeaderMatch) DeepCopy() *HeaderMatch

+ func (in *HeaderMatch) DeepCopyInto(out *HeaderMatch)

+ func (in *HeaderMatch) DeepEqual(other *HeaderMatch) bool

+ type ICMPField struct

+ Family string

+ Type uint8

+ func (i ICMPField) PortProtocol() *PortProtocol

+ func (in *ICMPField) DeepCopy() *ICMPField

+ func (in *ICMPField) DeepCopyInto(out *ICMPField)

+ func (in *ICMPField) DeepEqual(other *ICMPField) bool

+ type ICMPRule struct

+ Fields []ICMPField

+ func (in *ICMPRule) DeepCopy() *ICMPRule

+ func (in *ICMPRule) DeepCopyInto(out *ICMPRule)

+ func (in *ICMPRule) DeepEqual(other *ICMPRule) bool

+ func (ir ICMPRule) GetPortProtocols() []PortProtocol

+ func (ir ICMPRule) GetPortRule() *PortRule

+ type ICMPRules []ICMPRule

+ func (in *ICMPRules) DeepEqual(other *ICMPRules) bool

+ func (in ICMPRules) DeepCopy() ICMPRules

+ func (in ICMPRules) DeepCopyInto(out *ICMPRules)

+ func (ir ICMPRules) Iterate(f func(pr Ports) error) error

+ func (ir ICMPRules) Len() int

+ type IngressCommonRule struct

+ FromCIDR CIDRSlice

+ FromCIDRSet CIDRRuleSlice

+ FromEndpoints []EndpointSelector

+ FromEntities EntitySlice

+ FromRequires []EndpointSelector

+ func (i *IngressCommonRule) AllowsWildcarding() bool

+ func (i *IngressCommonRule) GetSourceEndpointSelectorsWithRequirements(requirements []slim_metav1.LabelSelectorRequirement) EndpointSelectorSlice

+ func (i *IngressCommonRule) SetAggregatedSelectors()

+ func (in *IngressCommonRule) DeepCopy() *IngressCommonRule

+ func (in *IngressCommonRule) DeepCopyInto(out *IngressCommonRule)

+ func (in *IngressCommonRule) DeepEqual(other *IngressCommonRule) bool

+ type IngressDenyRule struct

+ ICMPs ICMPRules

+ ToPorts PortDenyRules

+ func (in *IngressDenyRule) DeepCopy() *IngressDenyRule

+ func (in *IngressDenyRule) DeepCopyInto(out *IngressDenyRule)

+ func (in *IngressDenyRule) DeepEqual(other *IngressDenyRule) bool

type IngressRule

+ Auth *Auth

+ ICMPs ICMPRules

+ func (in *IngressRule) DeepEqual(other *IngressRule) bool

type K8sServiceNamespace

+ func (in *K8sServiceNamespace) DeepEqual(other *K8sServiceNamespace) bool

type K8sServiceSelectorNamespace

+ func (in *K8sServiceSelectorNamespace) DeepEqual(other *K8sServiceSelectorNamespace) bool

type L4Proto

+ const ProtoICMP

+ const ProtoICMPv6

+ const ProtoSCTP

type L7Rules

+ func (in *L7Rules) DeepEqual(other *L7Rules) bool

+ type Listener struct

+ EnvoyConfig *EnvoyConfig

+ Name string

+ func (in *Listener) DeepCopy() *Listener

+ func (in *Listener) DeepCopyInto(out *Listener)

+ func (in *Listener) DeepEqual(other *Listener) bool

+ type MismatchAction string

+ const MismatchActionAdd

+ const MismatchActionDelete

+ const MismatchActionLog

+ const MismatchActionReplace

+ type PortDenyRule struct

+ Ports []PortProtocol

+ func (in *PortDenyRule) DeepCopy() *PortDenyRule

+ func (in *PortDenyRule) DeepCopyInto(out *PortDenyRule)

+ func (in *PortDenyRule) DeepEqual(other *PortDenyRule) bool

+ func (pd *PortDenyRule) GetPortRule() *PortRule

+ func (pd PortDenyRule) GetPortProtocols() []PortProtocol

+ type PortDenyRules []PortDenyRule

+ func (in *PortDenyRules) DeepEqual(other *PortDenyRules) bool

+ func (in PortDenyRules) DeepCopy() PortDenyRules

+ func (in PortDenyRules) DeepCopyInto(out *PortDenyRules)

+ func (pr PortDenyRules) Iterate(f func(pr Ports) error) error

+ func (pr PortDenyRules) Len() int

type PortProtocol

+ func (in *PortProtocol) DeepEqual(other *PortProtocol) bool

type PortRule

+ Listener *Listener

+ OriginatingTLS *TLSContext

+ ServerNames []string

+ TerminatingTLS *TLSContext

+ func (in *PortRule) DeepEqual(other *PortRule) bool

+ func (pd *PortRule) GetPortRule() *PortRule

+ func (pd PortRule) GetPortProtocols() []PortProtocol

type PortRuleDNS

+ func (in *PortRuleDNS) DeepEqual(other *PortRuleDNS) bool

type PortRuleHTTP

+ HeaderMatches []*HeaderMatch

+ func (in *PortRuleHTTP) DeepEqual(other *PortRuleHTTP) bool

type PortRuleL7

+ func (in *PortRuleL7) DeepEqual(other *PortRuleL7) bool

+ type PortRules []PortRule

+ func (in *PortRules) DeepEqual(other *PortRules) bool

+ func (in PortRules) DeepCopy() PortRules

+ func (in PortRules) DeepCopyInto(out *PortRules)

+ func (pr PortRules) Iterate(f func(pr Ports) error) error

+ func (pr PortRules) Len() int

+ type Ports interface

+ GetPortProtocols func() []PortProtocol

+ GetPortRule func() *PortRule

+ type PortsIterator interface

+ Iterate func(f func(pr Ports) error) error

+ Len func() int

type Rule

+ EgressDeny []EgressDenyRule

+ IngressDeny []IngressDenyRule

+ NodeSelector EndpointSelector

+ func (r *Rule) DeepEqual(o *Rule) bool

+ func (r *Rule) MarshalJSON() ([]byte, error)

+ func (r *Rule) WithEgressDenyRules(rules []EgressDenyRule) *Rule

+ func (r *Rule) WithIngressDenyRules(rules []IngressDenyRule) *Rule

type Rules

+ func (rs *Rules) DeepEqual(other *Rules) bool

+ type Secret struct

+ Name string

+ Namespace string

+ func (a *Secret) Equal(b *Secret) bool

+ func (in *Secret) DeepCopy() *Secret

+ func (in *Secret) DeepCopyInto(out *Secret)

+ func (in *Secret) DeepEqual(other *Secret) bool

type Service

+ func (in *Service) DeepEqual(other *Service) bool

type ServiceSelector

+ func (in *ServiceSelector) DeepEqual(other *ServiceSelector) bool

+ type TLSContext struct

+ Certificate string

+ PrivateKey string

+ Secret *Secret

+ TrustedCA string

+ func (in *TLSContext) DeepCopy() *TLSContext

+ func (in *TLSContext) DeepCopyInto(out *TLSContext)

+ func (in *TLSContext) DeepEqual(other *TLSContext) bool

type ToGroups

+ func (in *ToGroups) DeepEqual(other *ToGroups) bool

Jun 5, 2020

Changes in this version

type CIDRRule

+ func (r CIDRRule) String() string

type CIDRRuleSlice

+ func (s CIDRRuleSlice) StringSlice() []string

type CIDRSlice

+ func (s CIDRSlice) String() string

Aug 19, 2019

Changes in this version

+ var EndpointSelectorNone = NewESFromLabels(labels.NewLabel(labels.IDNameNone, "", labels.LabelSourceReserved))

type EgressRule

+ func (e *EgressRule) GetDestinationEndpointSelectorsWithRequirements(requirements []metav1.LabelSelectorRequirement) EndpointSelectorSlice

type EndpointSelector

+ func (n EndpointSelector) CachedString() string

type FQDNSelector

+ func (s *FQDNSelector) String() string

+ func (s *FQDNSelector) ToRegex() (*regexp.Regexp, error)

type IngressRule

+ func (i *IngressRule) GetSourceEndpointSelectorsWithRequirements(requirements []metav1.LabelSelectorRequirement) EndpointSelectorSlice

type L4Proto

+ const PortProtocolAny

type PortProtocol

+ func (p PortProtocol) Covers(other PortProtocol) bool

Apr 26, 2019

Changes in this version

+ const APIVersionsKey

+ const AWSProvider

+ const AddPartitionsToTxnKey

+ const AlterReplicaLogDirsKey

+ const ConsumeRole

+ const CreatePartitionsKey

+ const CreateTopicsKey

+ const DeleteRecordsKey

+ const DeleteTopicsKey

+ const DescribeLogDirsKey

+ const FetchKey

+ const FindCoordinatorKey

+ const HeartbeatKey

+ const JoinGroupKey

+ const KafkaMaxTopicLen

+ const LeaderAndIsr

+ const LeaveGroupKey

+ const MaxCIDRPrefixLengths

+ const MetadataKey

+ const OffsetCommitKey

+ const OffsetFetchKey

+ const OffsetForLeaderEpochKey

+ const OffsetsKey

+ const ProduceKey

+ const ProduceRole

+ const StopReplica

+ const SyncgroupKey

+ const TxnOffsetCommitKey

+ const UpdateMetadata

+ const WriteTxnMarkersKey

+ var CIDRMatchAll = []CIDR

+ var EntitySelectorMapping = map[Entity]EndpointSelectorSlice

+ var KafkaAPIKeyMap = map[string]int16

+ var KafkaReverseAPIKeyMap = map[int16]string

+ var KafkaTopicValidChar = regexp.MustCompile(`^[a-zA-Z0-9\\._\\-]+$`)

+ var ReservedEndpointSelectors = map[string]EndpointSelector

+ var WildcardEndpointSelector = NewESFromLabels()

+ func InitEntities(clusterName string)

+ func RegisterToGroupsProvider(providerName string, callback GroupProviderFunc)

+ type AWSGroup struct

+ Labels map[string]string

+ Region string

+ SecurityGroupsIds []string

+ SecurityGroupsNames []string

+ func (in *AWSGroup) DeepCopy() *AWSGroup

+ func (in *AWSGroup) DeepCopyInto(out *AWSGroup)

type CIDR

+ func (c *CIDR) MatchesAll() bool

+ type CIDRRule struct

+ Cidr CIDR

+ ExceptCIDRs []CIDR

+ Generated bool

+ func IPsToCIDRRules(ips []net.IP) (cidrRules []CIDRRule)

+ func (in *CIDRRule) DeepCopy() *CIDRRule

+ func (in *CIDRRule) DeepCopyInto(out *CIDRRule)

+ type CIDRRuleSlice []CIDRRule

+ func (in CIDRRuleSlice) DeepCopy() CIDRRuleSlice

+ func (in CIDRRuleSlice) DeepCopyInto(out *CIDRRuleSlice)

+ func (s CIDRRuleSlice) GetAsEndpointSelectors() EndpointSelectorSlice

+ type CIDRSlice []CIDR

+ func ComputeResultantCIDRSet(cidrs CIDRRuleSlice) CIDRSlice

+ func (in CIDRSlice) DeepCopy() CIDRSlice

+ func (in CIDRSlice) DeepCopyInto(out *CIDRSlice)

+ func (s CIDRSlice) GetAsEndpointSelectors() EndpointSelectorSlice

+ func (s CIDRSlice) StringSlice() []string

type EgressRule

+ ToCIDRSet CIDRRuleSlice

+ ToEndpoints []EndpointSelector

+ ToEntities EntitySlice

+ ToFQDNs FQDNSelectorSlice

+ ToGroups []ToGroups

+ ToRequires []EndpointSelector

+ ToServices []Service

+ func (e *EgressRule) CreateDerivative() (*EgressRule, error)

+ func (e *EgressRule) GetDestinationEndpointSelectors() EndpointSelectorSlice

+ func (e *EgressRule) IsLabelBased() bool

+ func (e *EgressRule) RequiresDerivative() bool

+ func (e *EgressRule) SetAggregatedSelectors()

+ func (in *EgressRule) DeepCopy() *EgressRule

+ func (in *EgressRule) DeepCopyInto(out *EgressRule)

type EndpointSelector

+ func NewESFromMatchRequirements(matchLabels map[string]string, reqs []metav1.LabelSelectorRequirement) EndpointSelector

+ func (in *EndpointSelector) DeepCopy() *EndpointSelector

+ func (in *EndpointSelector) DeepCopyInto(out *EndpointSelector)

+ func (n *EndpointSelector) AddMatch(key, value string)

+ func (n *EndpointSelector) ConvertToLabelSelectorRequirementSlice() []metav1.LabelSelectorRequirement

+ func (n *EndpointSelector) IsWildcard() bool

+ func (n *EndpointSelector) LabelSelectorString() string

+ func (n *EndpointSelector) SyncRequirementsWithLabelSelector()

+ func (n EndpointSelector) GetMatch(key string) ([]string, bool)

+ func (n EndpointSelector) HasKey(key string) bool

+ type EndpointSelectorSlice []EndpointSelector

+ func (in EndpointSelectorSlice) DeepCopy() EndpointSelectorSlice

+ func (in EndpointSelectorSlice) DeepCopyInto(out *EndpointSelectorSlice)

+ func (s EndpointSelectorSlice) Len() int

+ func (s EndpointSelectorSlice) Less(i, j int) bool

+ func (s EndpointSelectorSlice) Matches(ctx labels.LabelArray) bool

+ func (s EndpointSelectorSlice) SelectsAllEndpoints() bool

+ func (s EndpointSelectorSlice) Swap(i, j int)

+ type Entity string

+ const EntityAll

+ const EntityCluster

+ const EntityHost

+ const EntityInit

+ const EntityNone

+ const EntityWorld

+ func (e Entity) Matches(ctx labels.LabelArray) bool

+ type EntitySlice []Entity

+ func (in EntitySlice) DeepCopy() EntitySlice

+ func (in EntitySlice) DeepCopyInto(out *EntitySlice)

+ func (s EntitySlice) GetAsEndpointSelectors() EndpointSelectorSlice

+ func (s EntitySlice) Matches(ctx labels.LabelArray) bool

+ type FQDNSelector struct

+ MatchName string

+ MatchPattern string

+ func (in *FQDNSelector) DeepCopy() *FQDNSelector

+ func (in *FQDNSelector) DeepCopyInto(out *FQDNSelector)

+ func (s *FQDNSelector) GetAsEndpointSelectors() EndpointSelectorSlice

+ type FQDNSelectorSlice []FQDNSelector

+ func (in FQDNSelectorSlice) DeepCopy() FQDNSelectorSlice

+ func (in FQDNSelectorSlice) DeepCopyInto(out *FQDNSelectorSlice)

+ func (s FQDNSelectorSlice) GetAsEndpointSelectors() EndpointSelectorSlice

+ type GroupProviderFunc func(*ToGroups) ([]net.IP, error)

type IngressRule

+ FromCIDRSet CIDRRuleSlice

+ FromEntities EntitySlice

+ func (i *IngressRule) GetSourceEndpointSelectors() EndpointSelectorSlice

+ func (i *IngressRule) IsLabelBased() bool

+ func (i *IngressRule) SetAggregatedSelectors()

+ func (in *IngressRule) DeepCopy() *IngressRule

+ func (in *IngressRule) DeepCopyInto(out *IngressRule)

+ type K8sServiceNamespace struct

+ Namespace string

+ ServiceName string

+ func (in *K8sServiceNamespace) DeepCopy() *K8sServiceNamespace

+ func (in *K8sServiceNamespace) DeepCopyInto(out *K8sServiceNamespace)

+ type K8sServiceSelectorNamespace struct

+ Namespace string

+ Selector ServiceSelector

+ func (in *K8sServiceSelectorNamespace) DeepCopy() *K8sServiceSelectorNamespace

+ func (in *K8sServiceSelectorNamespace) DeepCopyInto(out *K8sServiceSelectorNamespace)

+ type KafkaRole []int16

+ func (in KafkaRole) DeepCopy() KafkaRole

+ func (in KafkaRole) DeepCopyInto(out *KafkaRole)

+ type L4Proto string

+ const ProtoAny

+ const ProtoTCP

+ const ProtoUDP

+ func ParseL4Proto(proto string) (L4Proto, error)

+ func (l4 L4Proto) Validate() error

type L7Rules

+ DNS []PortRuleDNS

+ Kafka []PortRuleKafka

+ L7 []PortRuleL7

+ L7Proto string

+ func (in *L7Rules) DeepCopy() *L7Rules

+ func (in *L7Rules) DeepCopyInto(out *L7Rules)

+ func (rules *L7Rules) IsEmpty() bool

+ func (rules *L7Rules) Len() int

type PortProtocol

+ func (in *PortProtocol) DeepCopy() *PortProtocol

+ func (in *PortProtocol) DeepCopyInto(out *PortProtocol)

type PortRule

+ func (in *PortRule) DeepCopy() *PortRule

+ func (in *PortRule) DeepCopyInto(out *PortRule)

+ type PortRuleDNS FQDNSelector

+ func (d *PortRuleDNS) Equal(o PortRuleDNS) bool

+ func (d *PortRuleDNS) Exists(rules L7Rules) bool

+ func (in *PortRuleDNS) DeepCopy() *PortRuleDNS

+ func (in *PortRuleDNS) DeepCopyInto(out *PortRuleDNS)

+ func (r *PortRuleDNS) Sanitize() error

type PortRuleHTTP

+ func (h *PortRuleHTTP) Equal(o PortRuleHTTP) bool

+ func (h *PortRuleHTTP) Exists(rules L7Rules) bool

+ func (h *PortRuleHTTP) Sanitize() error

+ func (in *PortRuleHTTP) DeepCopy() *PortRuleHTTP

+ func (in *PortRuleHTTP) DeepCopyInto(out *PortRuleHTTP)

+ type PortRuleKafka struct

+ APIKey string

+ APIVersion string

+ ClientID string

+ Role string

+ Topic string

+ func (in *PortRuleKafka) DeepCopy() *PortRuleKafka

+ func (in *PortRuleKafka) DeepCopyInto(out *PortRuleKafka)

+ func (k *PortRuleKafka) Equal(o PortRuleKafka) bool

+ func (k *PortRuleKafka) Exists(rules L7Rules) bool

+ func (kr *PortRuleKafka) CheckAPIKeyRole(kind int16) bool

+ func (kr *PortRuleKafka) GetAPIVersion() (int16, bool)

+ func (kr *PortRuleKafka) MapRoleToAPIKey() error

+ func (kr *PortRuleKafka) Sanitize() error

+ type PortRuleL7 map[string]string

+ func (h *PortRuleL7) Equal(o PortRuleL7) bool

+ func (h *PortRuleL7) Exists(rules L7Rules) bool

+ func (in PortRuleL7) DeepCopy() PortRuleL7

+ func (in PortRuleL7) DeepCopyInto(out *PortRuleL7)

+ func (rule *PortRuleL7) Sanitize() error

type Rule

+ func NewRule() *Rule

+ func (in *Rule) DeepCopy() *Rule

+ func (in *Rule) DeepCopyInto(out *Rule)

+ func (r *Rule) CreateDerivative() (*Rule, error)

+ func (r *Rule) RequiresDerivative() bool

+ func (r *Rule) WithDescription(desc string) *Rule

+ func (r *Rule) WithEgressRules(rules []EgressRule) *Rule

+ func (r *Rule) WithEndpointSelector(es EndpointSelector) *Rule

+ func (r *Rule) WithIngressRules(rules []IngressRule) *Rule

+ func (r *Rule) WithLabels(labels labels.LabelArray) *Rule

+ func (r Rule) Sanitize() error

type Rules

+ func (in Rules) DeepCopy() Rules

+ func (in Rules) DeepCopyInto(out *Rules)

+ func (rs Rules) String() string

+ type Service struct

+ K8sService *K8sServiceNamespace

+ K8sServiceSelector *K8sServiceSelectorNamespace

+ func (in *Service) DeepCopy() *Service

+ func (in *Service) DeepCopyInto(out *Service)

+ type ServiceSelector EndpointSelector

+ func (in *ServiceSelector) DeepCopy() *ServiceSelector

+ func (in *ServiceSelector) DeepCopyInto(out *ServiceSelector)

+ type ToGroups struct

+ AWS *AWSGroup

+ func (group *ToGroups) GetCidrSet() ([]CIDRRule, error)

+ func (in *ToGroups) DeepCopy() *ToGroups

+ func (in *ToGroups) DeepCopyInto(out *ToGroups)

Jul 21, 2017

Changes in this version

type CIDR

+ func (cidr CIDR) Validate() error

May 30, 2017

Changes in this version

+ type CIDR struct

+ IP string

+ type Decision byte

+ const Allowed

+ const Denied

+ const Undecided

+ func (d *Decision) UnmarshalJSON(b []byte) error

+ func (d Decision) MarshalJSON() ([]byte, error)

+ func (d Decision) String() string

+ type EgressRule struct

+ ToCIDR []CIDR

+ ToPorts []PortRule

+ func (e EgressRule) Validate() error

+ type EndpointSelector struct

+ func NewESFromK8sLabelSelector(srcPrefix string, ls *metav1.LabelSelector) EndpointSelector

+ func NewESFromLabels(lbls ...*labels.Label) EndpointSelector

+ func (n *EndpointSelector) Matches(lblsToMatch k8sLbls.Labels) bool

+ func (n *EndpointSelector) UnmarshalJSON(b []byte) error

+ func (n EndpointSelector) HasKeyPrefix(prefix string) bool

+ func (n EndpointSelector) MarshalJSON() ([]byte, error)

+ func (n EndpointSelector) String() string

+ type IngressRule struct

+ FromCIDR []CIDR

+ FromEndpoints []EndpointSelector

+ FromRequires []EndpointSelector

+ ToPorts []PortRule

+ func (i IngressRule) Validate() error

+ type L7Rules struct

+ HTTP []PortRuleHTTP

+ type PortProtocol struct

+ Port string

+ Protocol string

+ func (pp PortProtocol) Validate() error

+ type PortRule struct

+ Ports []PortProtocol

+ RedirectPort int

+ Rules *L7Rules

+ func (pr PortRule) Validate() error

+ type PortRuleHTTP struct

+ Headers []string

+ Host string

+ Method string

+ Path string

+ type Rule struct

+ Description string

+ Egress []EgressRule

+ EndpointSelector EndpointSelector

+ Ingress []IngressRule

+ Labels labels.LabelArray

+ func (r Rule) Validate() error

+ type Rules []*Rule