Documentation ¶
Index ¶
- Constants
- Variables
- func Resource(resource string) schema.GroupResource
- type IPBlock
- func (in *IPBlock) DeepCopy() *IPBlock
- func (in *IPBlock) DeepCopyInto(out *IPBlock)
- func (*IPBlock) Descriptor() ([]byte, []int)
- func (m *IPBlock) Marshal() (dAtA []byte, err error)
- func (m *IPBlock) MarshalTo(dAtA []byte) (int, error)
- func (m *IPBlock) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*IPBlock) ProtoMessage()
- func (m *IPBlock) Reset()
- func (m *IPBlock) Size() (n int)
- func (this *IPBlock) String() string
- func (IPBlock) SwaggerDoc() map[string]string
- func (m *IPBlock) Unmarshal(dAtA []byte) error
- func (m *IPBlock) XXX_DiscardUnknown()
- func (m *IPBlock) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *IPBlock) XXX_Merge(src proto.Message)
- func (m *IPBlock) XXX_Size() int
- func (m *IPBlock) XXX_Unmarshal(b []byte) error
- type NetworkPolicy
- func (in *NetworkPolicy) DeepCopy() *NetworkPolicy
- func (in *NetworkPolicy) DeepCopyInto(out *NetworkPolicy)
- func (in *NetworkPolicy) DeepCopyObject() runtime.Object
- func (*NetworkPolicy) Descriptor() ([]byte, []int)
- func (m *NetworkPolicy) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicy) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicy) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicy) ProtoMessage()
- func (m *NetworkPolicy) Reset()
- func (m *NetworkPolicy) Size() (n int)
- func (this *NetworkPolicy) String() string
- func (NetworkPolicy) SwaggerDoc() map[string]string
- func (m *NetworkPolicy) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicy) XXX_DiscardUnknown()
- func (m *NetworkPolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicy) XXX_Merge(src proto.Message)
- func (m *NetworkPolicy) XXX_Size() int
- func (m *NetworkPolicy) XXX_Unmarshal(b []byte) error
- type NetworkPolicyEgressRule
- func (in *NetworkPolicyEgressRule) DeepCopy() *NetworkPolicyEgressRule
- func (in *NetworkPolicyEgressRule) DeepCopyInto(out *NetworkPolicyEgressRule)
- func (*NetworkPolicyEgressRule) Descriptor() ([]byte, []int)
- func (m *NetworkPolicyEgressRule) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicyEgressRule) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicyEgressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicyEgressRule) ProtoMessage()
- func (m *NetworkPolicyEgressRule) Reset()
- func (m *NetworkPolicyEgressRule) Size() (n int)
- func (this *NetworkPolicyEgressRule) String() string
- func (NetworkPolicyEgressRule) SwaggerDoc() map[string]string
- func (m *NetworkPolicyEgressRule) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicyEgressRule) XXX_DiscardUnknown()
- func (m *NetworkPolicyEgressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicyEgressRule) XXX_Merge(src proto.Message)
- func (m *NetworkPolicyEgressRule) XXX_Size() int
- func (m *NetworkPolicyEgressRule) XXX_Unmarshal(b []byte) error
- type NetworkPolicyIngressRule
- func (in *NetworkPolicyIngressRule) DeepCopy() *NetworkPolicyIngressRule
- func (in *NetworkPolicyIngressRule) DeepCopyInto(out *NetworkPolicyIngressRule)
- func (*NetworkPolicyIngressRule) Descriptor() ([]byte, []int)
- func (m *NetworkPolicyIngressRule) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicyIngressRule) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicyIngressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicyIngressRule) ProtoMessage()
- func (m *NetworkPolicyIngressRule) Reset()
- func (m *NetworkPolicyIngressRule) Size() (n int)
- func (this *NetworkPolicyIngressRule) String() string
- func (NetworkPolicyIngressRule) SwaggerDoc() map[string]string
- func (m *NetworkPolicyIngressRule) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicyIngressRule) XXX_DiscardUnknown()
- func (m *NetworkPolicyIngressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicyIngressRule) XXX_Merge(src proto.Message)
- func (m *NetworkPolicyIngressRule) XXX_Size() int
- func (m *NetworkPolicyIngressRule) XXX_Unmarshal(b []byte) error
- type NetworkPolicyList
- func (in *NetworkPolicyList) DeepCopy() *NetworkPolicyList
- func (in *NetworkPolicyList) DeepCopyInto(out *NetworkPolicyList)
- func (in *NetworkPolicyList) DeepCopyObject() runtime.Object
- func (*NetworkPolicyList) Descriptor() ([]byte, []int)
- func (m *NetworkPolicyList) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicyList) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicyList) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicyList) ProtoMessage()
- func (m *NetworkPolicyList) Reset()
- func (m *NetworkPolicyList) Size() (n int)
- func (this *NetworkPolicyList) String() string
- func (NetworkPolicyList) SwaggerDoc() map[string]string
- func (m *NetworkPolicyList) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicyList) XXX_DiscardUnknown()
- func (m *NetworkPolicyList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicyList) XXX_Merge(src proto.Message)
- func (m *NetworkPolicyList) XXX_Size() int
- func (m *NetworkPolicyList) XXX_Unmarshal(b []byte) error
- type NetworkPolicyPeer
- func (in *NetworkPolicyPeer) DeepCopy() *NetworkPolicyPeer
- func (in *NetworkPolicyPeer) DeepCopyInto(out *NetworkPolicyPeer)
- func (*NetworkPolicyPeer) Descriptor() ([]byte, []int)
- func (m *NetworkPolicyPeer) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicyPeer) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicyPeer) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicyPeer) ProtoMessage()
- func (m *NetworkPolicyPeer) Reset()
- func (m *NetworkPolicyPeer) Size() (n int)
- func (this *NetworkPolicyPeer) String() string
- func (NetworkPolicyPeer) SwaggerDoc() map[string]string
- func (m *NetworkPolicyPeer) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicyPeer) XXX_DiscardUnknown()
- func (m *NetworkPolicyPeer) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicyPeer) XXX_Merge(src proto.Message)
- func (m *NetworkPolicyPeer) XXX_Size() int
- func (m *NetworkPolicyPeer) XXX_Unmarshal(b []byte) error
- type NetworkPolicyPort
- func (in *NetworkPolicyPort) DeepCopy() *NetworkPolicyPort
- func (in *NetworkPolicyPort) DeepCopyInto(out *NetworkPolicyPort)
- func (*NetworkPolicyPort) Descriptor() ([]byte, []int)
- func (m *NetworkPolicyPort) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicyPort) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicyPort) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicyPort) ProtoMessage()
- func (m *NetworkPolicyPort) Reset()
- func (m *NetworkPolicyPort) Size() (n int)
- func (this *NetworkPolicyPort) String() string
- func (NetworkPolicyPort) SwaggerDoc() map[string]string
- func (m *NetworkPolicyPort) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicyPort) XXX_DiscardUnknown()
- func (m *NetworkPolicyPort) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicyPort) XXX_Merge(src proto.Message)
- func (m *NetworkPolicyPort) XXX_Size() int
- func (m *NetworkPolicyPort) XXX_Unmarshal(b []byte) error
- type NetworkPolicySpec
- func (in *NetworkPolicySpec) DeepCopy() *NetworkPolicySpec
- func (in *NetworkPolicySpec) DeepCopyInto(out *NetworkPolicySpec)
- func (*NetworkPolicySpec) Descriptor() ([]byte, []int)
- func (m *NetworkPolicySpec) Marshal() (dAtA []byte, err error)
- func (m *NetworkPolicySpec) MarshalTo(dAtA []byte) (int, error)
- func (m *NetworkPolicySpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
- func (*NetworkPolicySpec) ProtoMessage()
- func (m *NetworkPolicySpec) Reset()
- func (m *NetworkPolicySpec) Size() (n int)
- func (this *NetworkPolicySpec) String() string
- func (NetworkPolicySpec) SwaggerDoc() map[string]string
- func (m *NetworkPolicySpec) Unmarshal(dAtA []byte) error
- func (m *NetworkPolicySpec) XXX_DiscardUnknown()
- func (m *NetworkPolicySpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
- func (m *NetworkPolicySpec) XXX_Merge(src proto.Message)
- func (m *NetworkPolicySpec) XXX_Size() int
- func (m *NetworkPolicySpec) XXX_Unmarshal(b []byte) error
- type PolicyType
Constants ¶
const GroupName = "networking.k8s.io"
GroupName is the group name use in this package
Variables ¶
var ( ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling") ErrIntOverflowGenerated = fmt.Errorf("proto: integer overflow") )
var ( // TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api. // localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes. SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes) AddToScheme = localSchemeBuilder.AddToScheme )
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1"}
SchemeGroupVersion is group version used to register these objects
Functions ¶
func Resource ¶
func Resource(resource string) schema.GroupResource
Resource takes an unqualified resource and returns a Group qualified GroupResource
Types ¶
type IPBlock ¶
type IPBlock struct { // CIDR is a string representing the IP Block // Valid examples are "192.168.1.1/24" CIDR string `json:"cidr" protobuf:"bytes,1,name=cidr"` // Except is a slice of CIDRs that should not be included within an IP Block // Valid examples are "192.168.1.1/24" // Except values will be rejected if they are outside the CIDR range // +optional Except []string `json:"except,omitempty" protobuf:"bytes,2,rep,name=except"` }
IPBlock describes a particular CIDR (Ex. "192.168.1.1/24") that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The except entry describes CIDRs that should not be included within this rule.
func (*IPBlock) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IPBlock.
func (*IPBlock) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*IPBlock) MarshalToSizedBuffer ¶
func (*IPBlock) XXX_Marshal ¶
type NetworkPolicy ¶
type NetworkPolicy struct { metav1.TypeMeta `json:",inline"` // Standard object's metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata // +optional metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // Specification of the desired behavior for this NetworkPolicy. // +optional Spec NetworkPolicySpec `json:"spec,omitempty" protobuf:"bytes,2,opt,name=spec"` }
NetworkPolicy describes what network traffic is allowed for a set of Pods
func (*NetworkPolicy) DeepCopy ¶
func (in *NetworkPolicy) DeepCopy() *NetworkPolicy
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicy.
func (*NetworkPolicy) DeepCopyInto ¶
func (in *NetworkPolicy) DeepCopyInto(out *NetworkPolicy)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicy) DeepCopyObject ¶
func (in *NetworkPolicy) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*NetworkPolicy) Descriptor ¶
func (*NetworkPolicy) Descriptor() ([]byte, []int)
func (*NetworkPolicy) Marshal ¶
func (m *NetworkPolicy) Marshal() (dAtA []byte, err error)
func (*NetworkPolicy) MarshalTo ¶
func (m *NetworkPolicy) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicy) MarshalToSizedBuffer ¶
func (m *NetworkPolicy) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicy) ProtoMessage ¶
func (*NetworkPolicy) ProtoMessage()
func (*NetworkPolicy) Reset ¶
func (m *NetworkPolicy) Reset()
func (*NetworkPolicy) Size ¶
func (m *NetworkPolicy) Size() (n int)
func (*NetworkPolicy) String ¶
func (this *NetworkPolicy) String() string
func (NetworkPolicy) SwaggerDoc ¶
func (NetworkPolicy) SwaggerDoc() map[string]string
func (*NetworkPolicy) Unmarshal ¶
func (m *NetworkPolicy) Unmarshal(dAtA []byte) error
func (*NetworkPolicy) XXX_DiscardUnknown ¶
func (m *NetworkPolicy) XXX_DiscardUnknown()
func (*NetworkPolicy) XXX_Marshal ¶
func (m *NetworkPolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicy) XXX_Merge ¶
func (m *NetworkPolicy) XXX_Merge(src proto.Message)
func (*NetworkPolicy) XXX_Size ¶
func (m *NetworkPolicy) XXX_Size() int
func (*NetworkPolicy) XXX_Unmarshal ¶
func (m *NetworkPolicy) XXX_Unmarshal(b []byte) error
type NetworkPolicyEgressRule ¶
type NetworkPolicyEgressRule struct { // List of destination ports for outgoing traffic. // Each item in this list is combined using a logical OR. If this field is // empty or missing, this rule matches all ports (traffic not restricted by port). // If this field is present and contains at least one item, then this rule allows // traffic only if the traffic matches at least one port in the list. // +optional Ports []NetworkPolicyPort `json:"ports,omitempty" protobuf:"bytes,1,rep,name=ports"` // List of destinations for outgoing traffic of pods selected for this rule. // Items in this list are combined using a logical OR operation. If this field is // empty or missing, this rule matches all destinations (traffic not restricted by // destination). If this field is present and contains at least one item, this rule // allows traffic only if the traffic matches at least one item in the to list. // +optional To []NetworkPolicyPeer `json:"to,omitempty" protobuf:"bytes,2,rep,name=to"` }
NetworkPolicyEgressRule describes a particular set of traffic that is allowed out of pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and to. This type is beta-level in 1.8
func (*NetworkPolicyEgressRule) DeepCopy ¶
func (in *NetworkPolicyEgressRule) DeepCopy() *NetworkPolicyEgressRule
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyEgressRule.
func (*NetworkPolicyEgressRule) DeepCopyInto ¶
func (in *NetworkPolicyEgressRule) DeepCopyInto(out *NetworkPolicyEgressRule)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicyEgressRule) Descriptor ¶
func (*NetworkPolicyEgressRule) Descriptor() ([]byte, []int)
func (*NetworkPolicyEgressRule) Marshal ¶
func (m *NetworkPolicyEgressRule) Marshal() (dAtA []byte, err error)
func (*NetworkPolicyEgressRule) MarshalTo ¶
func (m *NetworkPolicyEgressRule) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicyEgressRule) MarshalToSizedBuffer ¶
func (m *NetworkPolicyEgressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyEgressRule) ProtoMessage ¶
func (*NetworkPolicyEgressRule) ProtoMessage()
func (*NetworkPolicyEgressRule) Reset ¶
func (m *NetworkPolicyEgressRule) Reset()
func (*NetworkPolicyEgressRule) Size ¶
func (m *NetworkPolicyEgressRule) Size() (n int)
func (*NetworkPolicyEgressRule) String ¶
func (this *NetworkPolicyEgressRule) String() string
func (NetworkPolicyEgressRule) SwaggerDoc ¶
func (NetworkPolicyEgressRule) SwaggerDoc() map[string]string
func (*NetworkPolicyEgressRule) Unmarshal ¶
func (m *NetworkPolicyEgressRule) Unmarshal(dAtA []byte) error
func (*NetworkPolicyEgressRule) XXX_DiscardUnknown ¶
func (m *NetworkPolicyEgressRule) XXX_DiscardUnknown()
func (*NetworkPolicyEgressRule) XXX_Marshal ¶
func (m *NetworkPolicyEgressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicyEgressRule) XXX_Merge ¶
func (m *NetworkPolicyEgressRule) XXX_Merge(src proto.Message)
func (*NetworkPolicyEgressRule) XXX_Size ¶
func (m *NetworkPolicyEgressRule) XXX_Size() int
func (*NetworkPolicyEgressRule) XXX_Unmarshal ¶
func (m *NetworkPolicyEgressRule) XXX_Unmarshal(b []byte) error
type NetworkPolicyIngressRule ¶
type NetworkPolicyIngressRule struct { // List of ports which should be made accessible on the pods selected for this // rule. Each item in this list is combined using a logical OR. If this field is // empty or missing, this rule matches all ports (traffic not restricted by port). // If this field is present and contains at least one item, then this rule allows // traffic only if the traffic matches at least one port in the list. // +optional Ports []NetworkPolicyPort `json:"ports,omitempty" protobuf:"bytes,1,rep,name=ports"` // List of sources which should be able to access the pods selected for this rule. // Items in this list are combined using a logical OR operation. If this field is // empty or missing, this rule matches all sources (traffic not restricted by // source). If this field is present and contains at least one item, this rule // allows traffic only if the traffic matches at least one item in the from list. // +optional From []NetworkPolicyPeer `json:"from,omitempty" protobuf:"bytes,2,rep,name=from"` }
NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.
func (*NetworkPolicyIngressRule) DeepCopy ¶
func (in *NetworkPolicyIngressRule) DeepCopy() *NetworkPolicyIngressRule
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyIngressRule.
func (*NetworkPolicyIngressRule) DeepCopyInto ¶
func (in *NetworkPolicyIngressRule) DeepCopyInto(out *NetworkPolicyIngressRule)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicyIngressRule) Descriptor ¶
func (*NetworkPolicyIngressRule) Descriptor() ([]byte, []int)
func (*NetworkPolicyIngressRule) Marshal ¶
func (m *NetworkPolicyIngressRule) Marshal() (dAtA []byte, err error)
func (*NetworkPolicyIngressRule) MarshalTo ¶
func (m *NetworkPolicyIngressRule) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicyIngressRule) MarshalToSizedBuffer ¶
func (m *NetworkPolicyIngressRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyIngressRule) ProtoMessage ¶
func (*NetworkPolicyIngressRule) ProtoMessage()
func (*NetworkPolicyIngressRule) Reset ¶
func (m *NetworkPolicyIngressRule) Reset()
func (*NetworkPolicyIngressRule) Size ¶
func (m *NetworkPolicyIngressRule) Size() (n int)
func (*NetworkPolicyIngressRule) String ¶
func (this *NetworkPolicyIngressRule) String() string
func (NetworkPolicyIngressRule) SwaggerDoc ¶
func (NetworkPolicyIngressRule) SwaggerDoc() map[string]string
func (*NetworkPolicyIngressRule) Unmarshal ¶
func (m *NetworkPolicyIngressRule) Unmarshal(dAtA []byte) error
func (*NetworkPolicyIngressRule) XXX_DiscardUnknown ¶
func (m *NetworkPolicyIngressRule) XXX_DiscardUnknown()
func (*NetworkPolicyIngressRule) XXX_Marshal ¶
func (m *NetworkPolicyIngressRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicyIngressRule) XXX_Merge ¶
func (m *NetworkPolicyIngressRule) XXX_Merge(src proto.Message)
func (*NetworkPolicyIngressRule) XXX_Size ¶
func (m *NetworkPolicyIngressRule) XXX_Size() int
func (*NetworkPolicyIngressRule) XXX_Unmarshal ¶
func (m *NetworkPolicyIngressRule) XXX_Unmarshal(b []byte) error
type NetworkPolicyList ¶
type NetworkPolicyList struct { metav1.TypeMeta `json:",inline"` // Standard list metadata. // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata // +optional metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // Items is a list of schema objects. Items []NetworkPolicy `json:"items" protobuf:"bytes,2,rep,name=items"` }
NetworkPolicyList is a list of NetworkPolicy objects.
func (*NetworkPolicyList) DeepCopy ¶
func (in *NetworkPolicyList) DeepCopy() *NetworkPolicyList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyList.
func (*NetworkPolicyList) DeepCopyInto ¶
func (in *NetworkPolicyList) DeepCopyInto(out *NetworkPolicyList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicyList) DeepCopyObject ¶
func (in *NetworkPolicyList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*NetworkPolicyList) Descriptor ¶
func (*NetworkPolicyList) Descriptor() ([]byte, []int)
func (*NetworkPolicyList) Marshal ¶
func (m *NetworkPolicyList) Marshal() (dAtA []byte, err error)
func (*NetworkPolicyList) MarshalTo ¶
func (m *NetworkPolicyList) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicyList) MarshalToSizedBuffer ¶
func (m *NetworkPolicyList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyList) ProtoMessage ¶
func (*NetworkPolicyList) ProtoMessage()
func (*NetworkPolicyList) Reset ¶
func (m *NetworkPolicyList) Reset()
func (*NetworkPolicyList) Size ¶
func (m *NetworkPolicyList) Size() (n int)
func (*NetworkPolicyList) String ¶
func (this *NetworkPolicyList) String() string
func (NetworkPolicyList) SwaggerDoc ¶
func (NetworkPolicyList) SwaggerDoc() map[string]string
func (*NetworkPolicyList) Unmarshal ¶
func (m *NetworkPolicyList) Unmarshal(dAtA []byte) error
func (*NetworkPolicyList) XXX_DiscardUnknown ¶
func (m *NetworkPolicyList) XXX_DiscardUnknown()
func (*NetworkPolicyList) XXX_Marshal ¶
func (m *NetworkPolicyList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicyList) XXX_Merge ¶
func (m *NetworkPolicyList) XXX_Merge(src proto.Message)
func (*NetworkPolicyList) XXX_Size ¶
func (m *NetworkPolicyList) XXX_Size() int
func (*NetworkPolicyList) XXX_Unmarshal ¶
func (m *NetworkPolicyList) XXX_Unmarshal(b []byte) error
type NetworkPolicyPeer ¶
type NetworkPolicyPeer struct { // This is a label selector which selects Pods. This field follows standard label // selector semantics; if present but empty, it selects all pods. // // If NamespaceSelector is also set, then the NetworkPolicyPeer as a whole selects // the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. // Otherwise it selects the Pods matching PodSelector in the policy's own Namespace. // +optional PodSelector *metav1.LabelSelector `json:"podSelector,omitempty" protobuf:"bytes,1,opt,name=podSelector"` // Selects Namespaces using cluster-scoped labels. This field follows standard label // selector semantics; if present but empty, it selects all namespaces. // // If PodSelector is also set, then the NetworkPolicyPeer as a whole selects // the Pods matching PodSelector in the Namespaces selected by NamespaceSelector. // Otherwise it selects all Pods in the Namespaces selected by NamespaceSelector. // +optional NamespaceSelector *metav1.LabelSelector `json:"namespaceSelector,omitempty" protobuf:"bytes,2,opt,name=namespaceSelector"` // IPBlock defines policy on a particular IPBlock. If this field is set then // neither of the other fields can be. // +optional IPBlock *IPBlock `json:"ipBlock,omitempty" protobuf:"bytes,3,rep,name=ipBlock"` }
NetworkPolicyPeer describes a peer to allow traffic from. Only certain combinations of fields are allowed
func (*NetworkPolicyPeer) DeepCopy ¶
func (in *NetworkPolicyPeer) DeepCopy() *NetworkPolicyPeer
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyPeer.
func (*NetworkPolicyPeer) DeepCopyInto ¶
func (in *NetworkPolicyPeer) DeepCopyInto(out *NetworkPolicyPeer)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicyPeer) Descriptor ¶
func (*NetworkPolicyPeer) Descriptor() ([]byte, []int)
func (*NetworkPolicyPeer) Marshal ¶
func (m *NetworkPolicyPeer) Marshal() (dAtA []byte, err error)
func (*NetworkPolicyPeer) MarshalTo ¶
func (m *NetworkPolicyPeer) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicyPeer) MarshalToSizedBuffer ¶
func (m *NetworkPolicyPeer) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyPeer) ProtoMessage ¶
func (*NetworkPolicyPeer) ProtoMessage()
func (*NetworkPolicyPeer) Reset ¶
func (m *NetworkPolicyPeer) Reset()
func (*NetworkPolicyPeer) Size ¶
func (m *NetworkPolicyPeer) Size() (n int)
func (*NetworkPolicyPeer) String ¶
func (this *NetworkPolicyPeer) String() string
func (NetworkPolicyPeer) SwaggerDoc ¶
func (NetworkPolicyPeer) SwaggerDoc() map[string]string
func (*NetworkPolicyPeer) Unmarshal ¶
func (m *NetworkPolicyPeer) Unmarshal(dAtA []byte) error
func (*NetworkPolicyPeer) XXX_DiscardUnknown ¶
func (m *NetworkPolicyPeer) XXX_DiscardUnknown()
func (*NetworkPolicyPeer) XXX_Marshal ¶
func (m *NetworkPolicyPeer) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicyPeer) XXX_Merge ¶
func (m *NetworkPolicyPeer) XXX_Merge(src proto.Message)
func (*NetworkPolicyPeer) XXX_Size ¶
func (m *NetworkPolicyPeer) XXX_Size() int
func (*NetworkPolicyPeer) XXX_Unmarshal ¶
func (m *NetworkPolicyPeer) XXX_Unmarshal(b []byte) error
type NetworkPolicyPort ¶
type NetworkPolicyPort struct { // The protocol (TCP, UDP, or SCTP) which traffic must match. If not specified, this // field defaults to TCP. // +optional Protocol *v1.Protocol `json:"protocol,omitempty" protobuf:"bytes,1,opt,name=protocol,casttype=k8s.io/api/core/v1.Protocol"` // The port on the given protocol. This can either be a numerical or named port on // a pod. If this field is not provided, this matches all port names and numbers. // +optional Port *intstr.IntOrString `json:"port,omitempty" protobuf:"bytes,2,opt,name=port"` }
NetworkPolicyPort describes a port to allow traffic on
func (*NetworkPolicyPort) DeepCopy ¶
func (in *NetworkPolicyPort) DeepCopy() *NetworkPolicyPort
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicyPort.
func (*NetworkPolicyPort) DeepCopyInto ¶
func (in *NetworkPolicyPort) DeepCopyInto(out *NetworkPolicyPort)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicyPort) Descriptor ¶
func (*NetworkPolicyPort) Descriptor() ([]byte, []int)
func (*NetworkPolicyPort) Marshal ¶
func (m *NetworkPolicyPort) Marshal() (dAtA []byte, err error)
func (*NetworkPolicyPort) MarshalTo ¶
func (m *NetworkPolicyPort) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicyPort) MarshalToSizedBuffer ¶
func (m *NetworkPolicyPort) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicyPort) ProtoMessage ¶
func (*NetworkPolicyPort) ProtoMessage()
func (*NetworkPolicyPort) Reset ¶
func (m *NetworkPolicyPort) Reset()
func (*NetworkPolicyPort) Size ¶
func (m *NetworkPolicyPort) Size() (n int)
func (*NetworkPolicyPort) String ¶
func (this *NetworkPolicyPort) String() string
func (NetworkPolicyPort) SwaggerDoc ¶
func (NetworkPolicyPort) SwaggerDoc() map[string]string
func (*NetworkPolicyPort) Unmarshal ¶
func (m *NetworkPolicyPort) Unmarshal(dAtA []byte) error
func (*NetworkPolicyPort) XXX_DiscardUnknown ¶
func (m *NetworkPolicyPort) XXX_DiscardUnknown()
func (*NetworkPolicyPort) XXX_Marshal ¶
func (m *NetworkPolicyPort) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicyPort) XXX_Merge ¶
func (m *NetworkPolicyPort) XXX_Merge(src proto.Message)
func (*NetworkPolicyPort) XXX_Size ¶
func (m *NetworkPolicyPort) XXX_Size() int
func (*NetworkPolicyPort) XXX_Unmarshal ¶
func (m *NetworkPolicyPort) XXX_Unmarshal(b []byte) error
type NetworkPolicySpec ¶
type NetworkPolicySpec struct { // Selects the pods to which this NetworkPolicy object applies. The array of // ingress rules is applied to any pods selected by this field. Multiple network // policies can select the same set of pods. In this case, the ingress rules for // each are combined additively. This field is NOT optional and follows standard // label selector semantics. An empty podSelector matches all pods in this // namespace. PodSelector metav1.LabelSelector `json:"podSelector" protobuf:"bytes,1,opt,name=podSelector"` // List of ingress rules to be applied to the selected pods. Traffic is allowed to // a pod if there are no NetworkPolicies selecting the pod // (and cluster policy otherwise allows the traffic), OR if the traffic source is // the pod's local node, OR if the traffic matches at least one ingress rule // across all of the NetworkPolicy objects whose podSelector matches the pod. If // this field is empty then this NetworkPolicy does not allow any traffic (and serves // solely to ensure that the pods it selects are isolated by default) // +optional Ingress []NetworkPolicyIngressRule `json:"ingress,omitempty" protobuf:"bytes,2,rep,name=ingress"` // List of egress rules to be applied to the selected pods. Outgoing traffic is // allowed if there are no NetworkPolicies selecting the pod (and cluster policy // otherwise allows the traffic), OR if the traffic matches at least one egress rule // across all of the NetworkPolicy objects whose podSelector matches the pod. If // this field is empty then this NetworkPolicy limits all outgoing traffic (and serves // solely to ensure that the pods it selects are isolated by default). // This field is beta-level in 1.8 // +optional Egress []NetworkPolicyEgressRule `json:"egress,omitempty" protobuf:"bytes,3,rep,name=egress"` // List of rule types that the NetworkPolicy relates to. // Valid options are "Ingress", "Egress", or "Ingress,Egress". // If this field is not specified, it will default based on the existence of Ingress or Egress rules; // policies that contain an Egress section are assumed to affect Egress, and all policies // (whether or not they contain an Ingress section) are assumed to affect Ingress. // If you want to write an egress-only policy, you must explicitly specify policyTypes [ "Egress" ]. // Likewise, if you want to write a policy that specifies that no egress is allowed, // you must specify a policyTypes value that include "Egress" (since such a policy would not include // an Egress section and would otherwise default to just [ "Ingress" ]). // This field is beta-level in 1.8 // +optional PolicyTypes []PolicyType `json:"policyTypes,omitempty" protobuf:"bytes,4,rep,name=policyTypes,casttype=PolicyType"` }
NetworkPolicySpec provides the specification of a NetworkPolicy
func (*NetworkPolicySpec) DeepCopy ¶
func (in *NetworkPolicySpec) DeepCopy() *NetworkPolicySpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NetworkPolicySpec.
func (*NetworkPolicySpec) DeepCopyInto ¶
func (in *NetworkPolicySpec) DeepCopyInto(out *NetworkPolicySpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NetworkPolicySpec) Descriptor ¶
func (*NetworkPolicySpec) Descriptor() ([]byte, []int)
func (*NetworkPolicySpec) Marshal ¶
func (m *NetworkPolicySpec) Marshal() (dAtA []byte, err error)
func (*NetworkPolicySpec) MarshalTo ¶
func (m *NetworkPolicySpec) MarshalTo(dAtA []byte) (int, error)
func (*NetworkPolicySpec) MarshalToSizedBuffer ¶
func (m *NetworkPolicySpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NetworkPolicySpec) ProtoMessage ¶
func (*NetworkPolicySpec) ProtoMessage()
func (*NetworkPolicySpec) Reset ¶
func (m *NetworkPolicySpec) Reset()
func (*NetworkPolicySpec) Size ¶
func (m *NetworkPolicySpec) Size() (n int)
func (*NetworkPolicySpec) String ¶
func (this *NetworkPolicySpec) String() string
func (NetworkPolicySpec) SwaggerDoc ¶
func (NetworkPolicySpec) SwaggerDoc() map[string]string
func (*NetworkPolicySpec) Unmarshal ¶
func (m *NetworkPolicySpec) Unmarshal(dAtA []byte) error
func (*NetworkPolicySpec) XXX_DiscardUnknown ¶
func (m *NetworkPolicySpec) XXX_DiscardUnknown()
func (*NetworkPolicySpec) XXX_Marshal ¶
func (m *NetworkPolicySpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (*NetworkPolicySpec) XXX_Merge ¶
func (m *NetworkPolicySpec) XXX_Merge(src proto.Message)
func (*NetworkPolicySpec) XXX_Size ¶
func (m *NetworkPolicySpec) XXX_Size() int
func (*NetworkPolicySpec) XXX_Unmarshal ¶
func (m *NetworkPolicySpec) XXX_Unmarshal(b []byte) error
type PolicyType ¶
type PolicyType string
Policy Type string describes the NetworkPolicy type This type is beta-level in 1.8
const ( // PolicyTypeIngress is a NetworkPolicy that affects ingress traffic on selected pods PolicyTypeIngress PolicyType = "Ingress" // PolicyTypeEgress is a NetworkPolicy that affects egress traffic on selected pods PolicyTypeEgress PolicyType = "Egress" )