firewallpatch

Documentation

Overview

Package firewallpatch provides a set of default config patches to enable firewall.

Index

• func ControlPlane(defaultAction nethelpers.DefaultAction, cidrs []netip.Prefix, ...) configpatcher.Patch
• func Worker(defaultAction nethelpers.DefaultAction, cidrs []netip.Prefix, ...) configpatcher.Patch

Functions

func ControlPlane

func ControlPlane(defaultAction nethelpers.DefaultAction, cidrs []netip.Prefix, gateways []netip.Addr, controlplanes []netip.Addr) configpatcher.Patch

ControlPlane generates a default firewall for a controlplane node.

Kubelet and Trustd are only available within the cluster. Apid & Kubernetes API is wide open. Etcd is only available within the controlplanes.

func Worker

func Worker(defaultAction nethelpers.DefaultAction, cidrs []netip.Prefix, gateways []netip.Addr) configpatcher.Patch

Worker generates a default firewall for a worker node.

Kubelet & apid are only available within the cluster.