v1

package
v0.16.5 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Jan 16, 2020 License: Apache-2.0 Imports: 12 Imported by: 3,851

Documentation

Index

Constants

View Source 
const GroupName = "networking.k8s.io"

GroupName is the group name use in this package

Variables

View Source 
var (
	ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling")
	ErrIntOverflowGenerated   = fmt.Errorf("proto: integer overflow")
)
View Source 
var (
	// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
	// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)

	AddToScheme = localSchemeBuilder.AddToScheme
)
View Source 
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1"}

SchemeGroupVersion is group version used to register these objects

Functions

func Resource 

func Resource(resource string) schema.GroupResource

Resource takes an unqualified resource and returns a Group qualified GroupResource

Types

type IPBlock 

type IPBlock struct {
	// CIDR is a string representing the IP Block
	// Valid examples are "192.168.1.1/24"
	CIDR string `json:"cidr" protobuf:"bytes,1,name=cidr"`
	// Except is a slice of CIDRs that should not be included within an IP Block
	// Valid examples are "192.168.1.1/24"
	// Except values will be rejected if they are outside the CIDR range
	// +optional
	Except []string `json:"except,omitempty" protobuf:"bytes,2,rep,name=except"`
}

IPBlock describes a particular CIDR (Ex. "192.168.1.1/24") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.

func (*IPBlock) DeepCopy 

func (in *IPBlock) DeepCopy() *IPBlock

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IPBlock.

func (*IPBlock) DeepCopyInto 

func (in *IPBlock) DeepCopyInto(out *IPBlock)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*IPBlock) Descriptor 

func (*IPBlock) Descriptor() ([]byte, []int)

func (*IPBlock) Marshal 

func (m *IPBlock) Marshal() (dAtA []byte, err error)

func (*IPBlock) MarshalTo 

func (m *IPBlock) MarshalTo(dAtA []byte) (int, error)

func (*IPBlock) MarshalToSizedBuffer added in v0.16.4 

func (m *IPBlock) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*IPBlock) ProtoMessage 

func (*IPBlock) ProtoMessage()

func (*IPBlock) Reset 

func (m *IPBlock) Reset()

func (*IPBlock) Size 

func (m *IPBlock) Size() (n int)

func (*IPBlock) String 

func (this *IPBlock) String() string

func (IPBlock) SwaggerDoc 

func (IPBlock) SwaggerDoc() map[string]string

func (*IPBlock) Unmarshal 

func (m *IPBlock) Unmarshal(dAtA []byte) error

func (*IPBlock) XXX_DiscardUnknown added in v0.16.4 

func (m *IPBlock) XXX_DiscardUnknown()

func (*IPBlock) XXX_Marshal added in v0.16.4 

func (m *IPBlock) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*IPBlock) XXX_Merge added in v0.16.4 

func (m *IPBlock) XXX_Merge(src proto.Message)

func (*IPBlock) XXX_Size added in v0.16.4 

func (m *IPBlock) XXX_Size() int

func (*IPBlock) XXX_Unmarshal added in v0.16.4 

func (m *IPBlock) XXX_Unmarshal(b []byte) error

type NetworkPolicy 

type NetworkPolicy struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Specification of the desired behavior for this NetworkPolicy.
	// +optional
	Spec NetworkPolicySpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"`
}

NetworkPolicy describes what network traffic is allowed for a set of Pods

func (*NetworkPolicy) DeepCopy 

func (in *NetworkPolicy) DeepCopy() *NetworkPolicy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicy.

func (*NetworkPolicy) DeepCopyInto 

func (in *NetworkPolicy) DeepCopyInto(out *NetworkPolicy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*NetworkPolicy) DeepCopyObject 

func (in *NetworkPolicy) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*NetworkPolicy) Descriptor 

func (*NetworkPolicy) Descriptor() ([]byte, []int)

func (*NetworkPolicy) Marshal 

func (m *NetworkPolicy) Marshal() (dAtA []byte, err error)

func (*NetworkPolicy) MarshalTo 

func (m *NetworkPolicy) MarshalTo(dAtA []byte) (int, error)

func (*NetworkPolicy) MarshalToSizedBuffer added in v0.16.4 

func (m *NetworkPolicy) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*NetworkPolicy) ProtoMessage 

func (*NetworkPolicy) ProtoMessage()

func (*NetworkPolicy) Reset 

func (m *NetworkPolicy) Reset()

func (*NetworkPolicy) Size 

func (m *NetworkPolicy) Size() (n int)

func (*NetworkPolicy) String 

func (this *NetworkPolicy) String() string

func (NetworkPolicy) SwaggerDoc 

func (NetworkPolicy) SwaggerDoc() map[string]string

func (*NetworkPolicy) Unmarshal 

func (m *NetworkPolicy) Unmarshal(dAtA []byte) error

func (*NetworkPolicy) XXX_DiscardUnknown added in v0.16.4 

func (m *NetworkPolicy) XXX_DiscardUnknown()

func (*NetworkPolicy) XXX_Marshal added in v0.16.4 

func (m *NetworkPolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*NetworkPolicy) XXX_Merge added in v0.16.4 

func (m *NetworkPolicy) XXX_Merge(src proto.Message)

func (*NetworkPolicy) XXX_Size added in v0.16.4 

func (m *NetworkPolicy) XXX_Size() int

func (*NetworkPolicy) XXX_Unmarshal added in v0.16.4 

func (m *NetworkPolicy) XXX_Unmarshal(b []byte) error

type NetworkPolicyEgressRule 

type NetworkPolicyEgressRule struct {
	// List of destination ports for outgoing traffic.
	// Each item in this list is combined using a logical OR. If this field is
	// empty or missing, this rule matches all ports (traffic not restricted by port).
	// If this field is present and contains at least one item, then this rule allows
	// traffic only if the traffic matches at least one port in the list.
	// +optional
	Ports []NetworkPolicyPort `json:"ports,omitempty" protobuf:"bytes,1,rep,name=ports"`

	// List of destinations for outgoing traffic of pods selected for this rule.
	// Items in this list are combined using a logical OR operation. If this field is
	// empty or missing, this rule matches all destinations (traffic not restricted by
	// destination). If this field is present and contains at least one item, this rule
	// allows traffic only if the traffic matches at least one item in the to list.
	// +optional
	To []NetworkPolicyPeer `json:"to,omitempty" protobuf:"bytes,2,rep,name=to"`
}

NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8

func (*NetworkPolicyEgressRule) DeepCopy 

func (in *NetworkPolicyEgressRule) DeepCopy() *NetworkPolicyEgressRule

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyEgressRule.

func (*NetworkPolicyEgressRule) DeepCopyInto 

func (in *NetworkPolicyEgressRule) DeepCopyInto(out *NetworkPolicyEgressRule)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*NetworkPolicyEgressRule) Descriptor 

func (*NetworkPolicyEgressRule) Descriptor() ([]byte, []int)

func (*NetworkPolicyEgressRule) Marshal 

func (m *NetworkPolicyEgressRule) Marshal() (dAtA []byte, err error)

func (*NetworkPolicyEgressRule) MarshalTo 

func (m *NetworkPolicyEgressRule) MarshalTo(dAtA []byte) (int, error)

func (*NetworkPolicyEgressRule) MarshalToSizedBuffer added in v0.16.4 

func (m *NetworkPolicyEgressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*NetworkPolicyEgressRule) ProtoMessage 

func (*NetworkPolicyEgressRule) ProtoMessage()

func (*NetworkPolicyEgressRule) Reset 

func (m *NetworkPolicyEgressRule) Reset()

func (*NetworkPolicyEgressRule) Size 

func (m *NetworkPolicyEgressRule) Size() (n int)

func (*NetworkPolicyEgressRule) String 

func (this *NetworkPolicyEgressRule) String() string

func (NetworkPolicyEgressRule) SwaggerDoc 

func (NetworkPolicyEgressRule) SwaggerDoc() map[string]string

func (*NetworkPolicyEgressRule) Unmarshal 

func (m *NetworkPolicyEgressRule) Unmarshal(dAtA []byte) error

func (*NetworkPolicyEgressRule) XXX_DiscardUnknown added in v0.16.4 

func (m *NetworkPolicyEgressRule) XXX_DiscardUnknown()

func (*NetworkPolicyEgressRule) XXX_Marshal added in v0.16.4 

func (m *NetworkPolicyEgressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*NetworkPolicyEgressRule) XXX_Merge added in v0.16.4 

func (m *NetworkPolicyEgressRule) XXX_Merge(src proto.Message)

func (*NetworkPolicyEgressRule) XXX_Size added in v0.16.4 

func (m *NetworkPolicyEgressRule) XXX_Size() int

func (*NetworkPolicyEgressRule) XXX_Unmarshal added in v0.16.4 

func (m *NetworkPolicyEgressRule) XXX_Unmarshal(b []byte) error

type NetworkPolicyIngressRule 

type NetworkPolicyIngressRule struct {
	// List of ports which should be made accessible on the pods selected for this
	// rule. Each item in this list is combined using a logical OR. If this field is
	// empty or missing, this rule matches all ports (traffic not restricted by port).
	// If this field is present and contains at least one item, then this rule allows
	// traffic only if the traffic matches at least one port in the list.
	// +optional
	Ports []NetworkPolicyPort `json:"ports,omitempty" protobuf:"bytes,1,rep,name=ports"`

	// List of sources which should be able to access the pods selected for this rule.
	// Items in this list are combined using a logical OR operation. If this field is
	// empty or missing, this rule matches all sources (traffic not restricted by
	// source). If this field is present and contains at least one item, this rule
	// allows traffic only if the traffic matches at least one item in the from list.
	// +optional
	From []NetworkPolicyPeer `json:"from,omitempty" protobuf:"bytes,2,rep,name=from"`
}

NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.

func (*NetworkPolicyIngressRule) DeepCopy 

func (in *NetworkPolicyIngressRule) DeepCopy() *NetworkPolicyIngressRule

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyIngressRule.

func (*NetworkPolicyIngressRule) DeepCopyInto 

func (in *NetworkPolicyIngressRule) DeepCopyInto(out *NetworkPolicyIngressRule)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*NetworkPolicyIngressRule) Descriptor 

func (*NetworkPolicyIngressRule) Descriptor() ([]byte, []int)

func (*NetworkPolicyIngressRule) Marshal 

func (m *NetworkPolicyIngressRule) Marshal() (dAtA []byte, err error)

func (*NetworkPolicyIngressRule) MarshalTo 

func (m *NetworkPolicyIngressRule) MarshalTo(dAtA []byte) (int, error)

func (*NetworkPolicyIngressRule) MarshalToSizedBuffer added in v0.16.4 

func (m *NetworkPolicyIngressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*NetworkPolicyIngressRule) ProtoMessage 

func (*NetworkPolicyIngressRule) ProtoMessage()

func (*NetworkPolicyIngressRule) Reset 

func (m *NetworkPolicyIngressRule) Reset()

func (*NetworkPolicyIngressRule) Size 

func (m *NetworkPolicyIngressRule) Size() (n int)

func (*NetworkPolicyIngressRule) String 

func (this *NetworkPolicyIngressRule) String() string

func (NetworkPolicyIngressRule) SwaggerDoc 

func (NetworkPolicyIngressRule) SwaggerDoc() map[string]string

func (*NetworkPolicyIngressRule) Unmarshal 

func (m *NetworkPolicyIngressRule) Unmarshal(dAtA []byte) error

func (*NetworkPolicyIngressRule) XXX_DiscardUnknown added in v0.16.4 

func (m *NetworkPolicyIngressRule) XXX_DiscardUnknown()

func (*NetworkPolicyIngressRule) XXX_Marshal added in v0.16.4 

func (m *NetworkPolicyIngressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*NetworkPolicyIngressRule) XXX_Merge added in v0.16.4 

func (m *NetworkPolicyIngressRule) XXX_Merge(src proto.Message)

func (*NetworkPolicyIngressRule) XXX_Size added in v0.16.4 

func (m *NetworkPolicyIngressRule) XXX_Size() int

func (*NetworkPolicyIngressRule) XXX_Unmarshal added in v0.16.4 

func (m *NetworkPolicyIngressRule) XXX_Unmarshal(b []byte) error

type NetworkPolicyList 

type NetworkPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard list metadata.
	// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of schema objects.
	Items []NetworkPolicy `json:"items" protobuf:"bytes,2,rep,name=items"`
}

NetworkPolicyList is a list of NetworkPolicy objects.

func (*NetworkPolicyList) DeepCopy 

func (in *NetworkPolicyList) DeepCopy() *NetworkPolicyList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyList.

func (*NetworkPolicyList) DeepCopyInto 

func (in *NetworkPolicyList) DeepCopyInto(out *NetworkPolicyList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*NetworkPolicyList) DeepCopyObject 

func (in *NetworkPolicyList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*NetworkPolicyList) Descriptor 

func (*NetworkPolicyList) Descriptor() ([]byte, []int)

func (*NetworkPolicyList) Marshal 

func (m *NetworkPolicyList) Marshal() (dAtA []byte, err error)

func (*NetworkPolicyList) MarshalTo 

func (m *NetworkPolicyList) MarshalTo(dAtA []byte) (int, error)

func (*NetworkPolicyList) MarshalToSizedBuffer added in v0.16.4 

func (m *NetworkPolicyList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*NetworkPolicyList) ProtoMessage 

func (*NetworkPolicyList) ProtoMessage()

func (*NetworkPolicyList) Reset 

func (m *NetworkPolicyList) Reset()

func (*NetworkPolicyList) Size 

func (m *NetworkPolicyList) Size() (n int)

func (*NetworkPolicyList) String 

func (this *NetworkPolicyList) String() string

func (NetworkPolicyList) SwaggerDoc 

func (NetworkPolicyList) SwaggerDoc() map[string]string

func (*NetworkPolicyList) Unmarshal 

func (m *NetworkPolicyList) Unmarshal(dAtA []byte) error

func (*NetworkPolicyList) XXX_DiscardUnknown added in v0.16.4 

func (m *NetworkPolicyList) XXX_DiscardUnknown()

func (*NetworkPolicyList) XXX_Marshal added in v0.16.4 

func (m *NetworkPolicyList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*NetworkPolicyList) XXX_Merge added in v0.16.4 

func (m *NetworkPolicyList) XXX_Merge(src proto.Message)

func (*NetworkPolicyList) XXX_Size added in v0.16.4 

func (m *NetworkPolicyList) XXX_Size() int

func (*NetworkPolicyList) XXX_Unmarshal added in v0.16.4 

func (m *NetworkPolicyList) XXX_Unmarshal(b []byte) error

type NetworkPolicyPeer 

type NetworkPolicyPeer struct {
	// This is a label selector which selects Pods. This field follows standard label
	// selector semantics; if present but empty, it selects all pods.
	//
	// If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects
	// the Pods matching PodSelector in the Namespaces selected by NamespaceSelector.
	// Otherwise it selects the Pods matching PodSelector in the policy's own Namespace.
	// +optional
	PodSelector *metav1.LabelSelector `json:"podSelector,omitempty" protobuf:"bytes,1,opt,name=podSelector"`

	// Selects Namespaces using cluster-scoped labels. This field follows standard label
	// selector semantics; if present but empty, it selects all namespaces.
	//
	// If PodSelector is also set, then the NetworkPolicyPeer as a whole selects
	// the Pods matching PodSelector in the Namespaces selected by NamespaceSelector.
	// Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector.
	// +optional
	NamespaceSelector *metav1.LabelSelector `json:"namespaceSelector,omitempty" protobuf:"bytes,2,opt,name=namespaceSelector"`

	// IPBlock defines policy on a particular IPBlock. If this field is set then
	// neither of the other fields can be.
	// +optional
	IPBlock *IPBlock `json:"ipBlock,omitempty" protobuf:"bytes,3,rep,name=ipBlock"`
}

NetworkPolicyPeer describes a peer to allow traffic from. Only certain combinations of fields are allowed

func (*NetworkPolicyPeer) DeepCopy 

func (in *NetworkPolicyPeer) DeepCopy() *NetworkPolicyPeer

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyPeer.

func (*NetworkPolicyPeer) DeepCopyInto 

func (in *NetworkPolicyPeer) DeepCopyInto(out *NetworkPolicyPeer)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*NetworkPolicyPeer) Descriptor 

func (*NetworkPolicyPeer) Descriptor() ([]byte, []int)

func (*NetworkPolicyPeer) Marshal 

func (m *NetworkPolicyPeer) Marshal() (dAtA []byte, err error)

func (*NetworkPolicyPeer) MarshalTo 

func (m *NetworkPolicyPeer) MarshalTo(dAtA []byte) (int, error)

func (*NetworkPolicyPeer) MarshalToSizedBuffer added in v0.16.4 

func (m *NetworkPolicyPeer) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*NetworkPolicyPeer) ProtoMessage 

func (*NetworkPolicyPeer) ProtoMessage()

func (*NetworkPolicyPeer) Reset 

func (m *NetworkPolicyPeer) Reset()

func (*NetworkPolicyPeer) Size 

func (m *NetworkPolicyPeer) Size() (n int)

func (*NetworkPolicyPeer) String 

func (this *NetworkPolicyPeer) String() string

func (NetworkPolicyPeer) SwaggerDoc 

func (NetworkPolicyPeer) SwaggerDoc() map[string]string

func (*NetworkPolicyPeer) Unmarshal 

func (m *NetworkPolicyPeer) Unmarshal(dAtA []byte) error

func (*NetworkPolicyPeer) XXX_DiscardUnknown added in v0.16.4 

func (m *NetworkPolicyPeer) XXX_DiscardUnknown()

func (*NetworkPolicyPeer) XXX_Marshal added in v0.16.4 

func (m *NetworkPolicyPeer) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*NetworkPolicyPeer) XXX_Merge added in v0.16.4 

func (m *NetworkPolicyPeer) XXX_Merge(src proto.Message)

func (*NetworkPolicyPeer) XXX_Size added in v0.16.4 

func (m *NetworkPolicyPeer) XXX_Size() int

func (*NetworkPolicyPeer) XXX_Unmarshal added in v0.16.4 

func (m *NetworkPolicyPeer) XXX_Unmarshal(b []byte) error

type NetworkPolicyPort 

type NetworkPolicyPort struct {
	// The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this
	// field defaults to TCP.
	// +optional
	Protocol *v1.Protocol `json:"protocol,omitempty" protobuf:"bytes,1,opt,name=protocol,casttype=k8s.io/api/core/v1.Protocol"`

	// The port on the given protocol. This can either be a numerical or named port on
	// a pod. If this field is not provided, this matches all port names and numbers.
	// +optional
	Port *intstr.IntOrString `json:"port,omitempty" protobuf:"bytes,2,opt,name=port"`
}

NetworkPolicyPort describes a port to allow traffic on

func (*NetworkPolicyPort) DeepCopy 

func (in *NetworkPolicyPort) DeepCopy() *NetworkPolicyPort

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyPort.

func (*NetworkPolicyPort) DeepCopyInto 

func (in *NetworkPolicyPort) DeepCopyInto(out *NetworkPolicyPort)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*NetworkPolicyPort) Descriptor 

func (*NetworkPolicyPort) Descriptor() ([]byte, []int)

func (*NetworkPolicyPort) Marshal 

func (m *NetworkPolicyPort) Marshal() (dAtA []byte, err error)

func (*NetworkPolicyPort) MarshalTo 

func (m *NetworkPolicyPort) MarshalTo(dAtA []byte) (int, error)

func (*NetworkPolicyPort) MarshalToSizedBuffer added in v0.16.4 

func (m *NetworkPolicyPort) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*NetworkPolicyPort) ProtoMessage 

func (*NetworkPolicyPort) ProtoMessage()

func (*NetworkPolicyPort) Reset 

func (m *NetworkPolicyPort) Reset()

func (*NetworkPolicyPort) Size 

func (m *NetworkPolicyPort) Size() (n int)

func (*NetworkPolicyPort) String 

func (this *NetworkPolicyPort) String() string

func (NetworkPolicyPort) SwaggerDoc 

func (NetworkPolicyPort) SwaggerDoc() map[string]string

func (*NetworkPolicyPort) Unmarshal 

func (m *NetworkPolicyPort) Unmarshal(dAtA []byte) error

func (*NetworkPolicyPort) XXX_DiscardUnknown added in v0.16.4 

func (m *NetworkPolicyPort) XXX_DiscardUnknown()

func (*NetworkPolicyPort) XXX_Marshal added in v0.16.4 

func (m *NetworkPolicyPort) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*NetworkPolicyPort) XXX_Merge added in v0.16.4 

func (m *NetworkPolicyPort) XXX_Merge(src proto.Message)

func (*NetworkPolicyPort) XXX_Size added in v0.16.4 

func (m *NetworkPolicyPort) XXX_Size() int

func (*NetworkPolicyPort) XXX_Unmarshal added in v0.16.4 

func (m *NetworkPolicyPort) XXX_Unmarshal(b []byte) error

type NetworkPolicySpec 

type NetworkPolicySpec struct {
	// Selects the pods to which this NetworkPolicy object applies. The array of
	// ingress rules is applied to any pods selected by this field. Multiple network
	// policies can select the same set of pods. In this case, the ingress rules for
	// each are combined additively. This field is NOT optional and follows standard
	// label selector semantics. An empty podSelector matches all pods in this
	// namespace.
	PodSelector metav1.LabelSelector `json:"podSelector" protobuf:"bytes,1,opt,name=podSelector"`

	// List of ingress rules to be applied to the selected pods. Traffic is allowed to
	// a pod if there are no NetworkPolicies selecting the pod
	// (and cluster policy otherwise allows the traffic), OR if the traffic source is
	// the pod's local node, OR if the traffic matches at least one ingress rule
	// across all of the NetworkPolicy objects whose podSelector matches the pod. If
	// this field is empty then this NetworkPolicy does not allow any traffic (and serves
	// solely to ensure that the pods it selects are isolated by default)
	// +optional
	Ingress []NetworkPolicyIngressRule `json:"ingress,omitempty" protobuf:"bytes,2,rep,name=ingress"`

	// List of egress rules to be applied to the selected pods. Outgoing traffic is
	// allowed if there are no NetworkPolicies selecting the pod (and cluster policy
	// otherwise allows the traffic), OR if the traffic matches at least one egress rule
	// across all of the NetworkPolicy objects whose podSelector matches the pod. If
	// this field is empty then this NetworkPolicy limits all outgoing traffic (and serves
	// solely to ensure that the pods it selects are isolated by default).
	// This field is beta-level in 1.8
	// +optional
	Egress []NetworkPolicyEgressRule `json:"egress,omitempty" protobuf:"bytes,3,rep,name=egress"`

	// List of rule types that the NetworkPolicy relates to.
	// Valid options are "Ingress", "Egress", or "Ingress,Egress".
	// If this field is not specified, it will default based on the existence of Ingress or Egress rules;
	// policies that contain an Egress section are assumed to affect Egress, and all policies
	// (whether or not they contain an Ingress section) are assumed to affect Ingress.
	// If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ].
	// Likewise, if you want to write a policy that specifies that no egress is allowed,
	// you must specify a policyTypes value that include "Egress" (since such a policy would not include
	// an Egress section and would otherwise default to just [ "Ingress" ]).
	// This field is beta-level in 1.8
	// +optional
	PolicyTypes []PolicyType `json:"policyTypes,omitempty" protobuf:"bytes,4,rep,name=policyTypes,casttype=PolicyType"`
}

NetworkPolicySpec provides the specification of a NetworkPolicy

func (*NetworkPolicySpec) DeepCopy 

func (in *NetworkPolicySpec) DeepCopy() *NetworkPolicySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicySpec.

func (*NetworkPolicySpec) DeepCopyInto 

func (in *NetworkPolicySpec) DeepCopyInto(out *NetworkPolicySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*NetworkPolicySpec) Descriptor 

func (*NetworkPolicySpec) Descriptor() ([]byte, []int)

func (*NetworkPolicySpec) Marshal 

func (m *NetworkPolicySpec) Marshal() (dAtA []byte, err error)

func (*NetworkPolicySpec) MarshalTo 

func (m *NetworkPolicySpec) MarshalTo(dAtA []byte) (int, error)

func (*NetworkPolicySpec) MarshalToSizedBuffer added in v0.16.4 

func (m *NetworkPolicySpec) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*NetworkPolicySpec) ProtoMessage 

func (*NetworkPolicySpec) ProtoMessage()

func (*NetworkPolicySpec) Reset 

func (m *NetworkPolicySpec) Reset()

func (*NetworkPolicySpec) Size 

func (m *NetworkPolicySpec) Size() (n int)

func (*NetworkPolicySpec) String 

func (this *NetworkPolicySpec) String() string

func (NetworkPolicySpec) SwaggerDoc 

func (NetworkPolicySpec) SwaggerDoc() map[string]string

func (*NetworkPolicySpec) Unmarshal 

func (m *NetworkPolicySpec) Unmarshal(dAtA []byte) error

func (*NetworkPolicySpec) XXX_DiscardUnknown added in v0.16.4 

func (m *NetworkPolicySpec) XXX_DiscardUnknown()

func (*NetworkPolicySpec) XXX_Marshal added in v0.16.4 

func (m *NetworkPolicySpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*NetworkPolicySpec) XXX_Merge added in v0.16.4 

func (m *NetworkPolicySpec) XXX_Merge(src proto.Message)

func (*NetworkPolicySpec) XXX_Size added in v0.16.4 

func (m *NetworkPolicySpec) XXX_Size() int

func (*NetworkPolicySpec) XXX_Unmarshal added in v0.16.4 

func (m *NetworkPolicySpec) XXX_Unmarshal(b []byte) error

type PolicyType 

type PolicyType string

Policy Type string describes the NetworkPolicy type This type is beta-level in 1.8 

const (
	// PolicyTypeIngress is a NetworkPolicy that affects ingress traffic on selected pods
	PolicyTypeIngress PolicyType = "Ingress"
	// PolicyTypeEgress is a NetworkPolicy that affects egress traffic on selected pods
	PolicyTypeEgress PolicyType = "Egress"
)

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.