Documentation

Overview

    +groupName=networking.k8s.io

    Index

    Constants

    View Source
    const GroupName = "networking.k8s.io"

      GroupName is the group name use in this package

      Variables

      View Source
      var (
      	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)
      	AddToScheme   = SchemeBuilder.AddToScheme
      )
      View Source
      var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: runtime.APIVersionInternal}

        SchemeGroupVersion is group version used to register these objects

        Functions

        func DeepCopy_networking_NetworkPolicy

        func DeepCopy_networking_NetworkPolicy(in interface{}, out interface{}, c *conversion.Cloner) error

          DeepCopy_networking_NetworkPolicy is an autogenerated deepcopy function.

          func DeepCopy_networking_NetworkPolicyIngressRule

          func DeepCopy_networking_NetworkPolicyIngressRule(in interface{}, out interface{}, c *conversion.Cloner) error

            DeepCopy_networking_NetworkPolicyIngressRule is an autogenerated deepcopy function.

            func DeepCopy_networking_NetworkPolicyList

            func DeepCopy_networking_NetworkPolicyList(in interface{}, out interface{}, c *conversion.Cloner) error

              DeepCopy_networking_NetworkPolicyList is an autogenerated deepcopy function.

              func DeepCopy_networking_NetworkPolicyPeer

              func DeepCopy_networking_NetworkPolicyPeer(in interface{}, out interface{}, c *conversion.Cloner) error

                DeepCopy_networking_NetworkPolicyPeer is an autogenerated deepcopy function.

                func DeepCopy_networking_NetworkPolicyPort

                func DeepCopy_networking_NetworkPolicyPort(in interface{}, out interface{}, c *conversion.Cloner) error

                  DeepCopy_networking_NetworkPolicyPort is an autogenerated deepcopy function.

                  func DeepCopy_networking_NetworkPolicySpec

                  func DeepCopy_networking_NetworkPolicySpec(in interface{}, out interface{}, c *conversion.Cloner) error

                    DeepCopy_networking_NetworkPolicySpec is an autogenerated deepcopy function.

                    func Kind

                    func Kind(kind string) schema.GroupKind

                      Kind takes an unqualified kind and returns a Group qualified GroupKind

                      func RegisterDeepCopies

                      func RegisterDeepCopies(scheme *runtime.Scheme) error

                        RegisterDeepCopies adds deep-copy functions to the given scheme. Public to allow building arbitrary schemes.

                        func Resource

                        func Resource(resource string) schema.GroupResource

                          Resource takes an unqualified resource and returns a Group qualified GroupResource

                          Types

                          type NetworkPolicy

                          type NetworkPolicy struct {
                          	metav1.TypeMeta
                          	// +optional
                          	metav1.ObjectMeta
                          
                          	// Specification of the desired behavior for this NetworkPolicy.
                          	// +optional
                          	Spec NetworkPolicySpec
                          }

                            NetworkPolicy describes what network traffic is allowed for a set of Pods

                            type NetworkPolicyIngressRule

                            type NetworkPolicyIngressRule struct {
                            	// List of ports which should be made accessible on the pods selected for this
                            	// rule. Each item in this list is combined using a logical OR. If this field is
                            	// empty or missing, this rule matches all ports (traffic not restricted by port).
                            	// If this field is present and contains at least one item, then this rule allows
                            	// traffic only if the traffic matches at least one port in the list.
                            	// +optional
                            	Ports []NetworkPolicyPort
                            
                            	// List of sources which should be able to access the pods selected for this rule.
                            	// Items in this list are combined using a logical OR operation. If this field is
                            	// empty or missing, this rule matches all sources (traffic not restricted by
                            	// source). If this field is present and contains at least on item, this rule
                            	// allows traffic only if the traffic matches at least one item in the from list.
                            	// +optional
                            	From []NetworkPolicyPeer
                            }

                              NetworkPolicyIngressRule describes a particular set of traffic that is allowed to the pods matched by a NetworkPolicySpec's podSelector. The traffic must match both ports and from.

                              type NetworkPolicyList

                              type NetworkPolicyList struct {
                              	metav1.TypeMeta
                              	// +optional
                              	metav1.ListMeta
                              
                              	Items []NetworkPolicy
                              }

                                NetworkPolicyList is a list of NetworkPolicy objects.

                                type NetworkPolicyPeer

                                type NetworkPolicyPeer struct {
                                	// This is a label selector which selects Pods in this namespace. This field
                                	// follows standard label selector semantics. If present but empty, this selector
                                	// selects all pods in this namespace.
                                	// +optional
                                	PodSelector *metav1.LabelSelector
                                
                                	// Selects Namespaces using cluster scoped-labels. This matches all pods in all
                                	// namespaces selected by this label selector. This field follows standard label
                                	// selector semantics. If present but empty, this selector selects all namespaces.
                                	// +optional
                                	NamespaceSelector *metav1.LabelSelector
                                }

                                  NetworkPolicyPeer describes a peer to allow traffic from. Exactly one of its fields must be specified.

                                  type NetworkPolicyPort

                                  type NetworkPolicyPort struct {
                                  	// The protocol (TCP or UDP) which traffic must match. If not specified, this
                                  	// field defaults to TCP.
                                  	// +optional
                                  	Protocol *api.Protocol
                                  
                                  	// The port on the given protocol. This can either be a numerical or named port on
                                  	// a pod. If this field is not provided, this matches all port names and numbers.
                                  	// +optional
                                  	Port *intstr.IntOrString
                                  }

                                    NetworkPolicyPort describes a port to allow traffic on

                                    type NetworkPolicySpec

                                    type NetworkPolicySpec struct {
                                    	// Selects the pods to which this NetworkPolicy object applies. The array of
                                    	// ingress rules is applied to any pods selected by this field. Multiple network
                                    	// policies can select the same set of pods. In this case, the ingress rules for
                                    	// each are combined additively. This field is NOT optional and follows standard
                                    	// label selector semantics. An empty podSelector matches all pods in this
                                    	// namespace.
                                    	PodSelector metav1.LabelSelector
                                    
                                    	// List of ingress rules to be applied to the selected pods. Traffic is allowed to
                                    	// a pod if there are no NetworkPolicies selecting the pod
                                    	// (and cluster policy otherwise allows the traffic), OR if the traffic source is
                                    	// the pod's local node, OR if the traffic matches at least one ingress rule
                                    	// across all of the NetworkPolicy objects whose podSelector matches the pod. If
                                    	// this field is empty then this NetworkPolicy does not allow any traffic (and serves
                                    	// solely to ensure that the pods it selects are isolated by default)
                                    	// +optional
                                    	Ingress []NetworkPolicyIngressRule
                                    }

                                      NetworkPolicySpec provides the specification of a NetworkPolicy

                                      Directories

                                      Path Synopsis
                                      +groupName=networking.k8s.io Package v1 is a generated protocol buffer package.
                                      +groupName=networking.k8s.io Package v1 is a generated protocol buffer package.