v1

package
v0.0.0-...-10136cd Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Sep 25, 2025 License: Apache-2.0 Imports: 10 Imported by: 3

Documentation

Overview

API Schema definitions for configuring the installation of Calico and Calico Enterprise +k8s:deepcopy-gen=package,register +groupName=operator.tigera.io

Package v1 contains API Schema definitions for the operator v1 API group +kubebuilder:object:generate=true +groupName=operator.tigera.io

Index

Constants

View Source
const (
	WAFDisabled                    WAFStatusType                    = "Disabled"
	WAFEnabled                     WAFStatusType                    = "Enabled"
	L7LogCollectionDisabled        LogCollectionStatusType          = "Disabled"
	L7LogCollectionEnabled         LogCollectionStatusType          = "Enabled"
	ApplicationLayerPolicyEnabled  ApplicationLayerPolicyStatusType = "Enabled"
	ApplicationLayerPolicyDisabled ApplicationLayerPolicyStatusType = "Disabled"
	SidecarEnabled                 SidecarStatusType                = "Enabled"
	SidecarDisabled                SidecarStatusType                = "Disabled"
	SidecarWebhookStateEnabled     SidecarWebhookStateType          = "Enabled"
	SidecarWebhookStateDisabled    SidecarWebhookStateType          = "Disabled"
)
View Source
const (
	TigeraStatusReady    = "Ready"
	TigeraStatusDegraded = "Degraded"
)
View Source
const NodeSelectorDefault string = "all()"

Variables

View Source
var (
	// GroupVersion is group version used to register these objects
	GroupVersion = schema.GroupVersion{Group: "operator.tigera.io", Version: "v1"}

	// SchemeBuilder is used to add go types to the GroupVersionKind scheme
	SchemeBuilder = &scheme.Builder{GroupVersion: GroupVersion}

	// AddToScheme adds the types in this group-version to the given scheme.
	AddToScheme = SchemeBuilder.AddToScheme
)
View Source
var CNIPluginTypesString []string = []string{
	PluginCalico.String(),
	PluginGKE.String(),
	PluginAmazonVPC.String(),
	PluginAzureVNET.String(),
}
View Source
var DataTypes = map[DataType]string{
	DataTypeAlerts:               "ELASTIC_ALERTS_BASE_INDEX_NAME",
	DataTypeAuditLogs:            "ELASTIC_AUDIT_LOGS_BASE_INDEX_NAME",
	DataTypeBGPLogs:              "ELASTIC_BGP_LOGS_BASE_INDEX_NAME",
	DataTypeComplianceBenchmarks: "ELASTIC_COMPLIANCE_BENCHMARKS_BASE_INDEX_NAME",
	DataTypeComplianceReports:    "ELASTIC_COMPLIANCE_REPORTS_BASE_INDEX_NAME",
	DataTypeComplianceSnapshots:  "ELASTIC_COMPLIANCE_SNAPSHOTS_BASE_INDEX_NAME",
	DataTypeDNSLogs:              "ELASTIC_DNS_LOGS_BASE_INDEX_NAME",
	DataTypeFlowLogs:             "ELASTIC_FLOW_LOGS_BASE_INDEX_NAME",
	DataTypeL7Logs:               "ELASTIC_L7_LOGS_BASE_INDEX_NAME",
	DataTypeRuntimeReports:       "ELASTIC_RUNTIME_REPORTS_BASE_INDEX_NAME",
	DataTypeThreatFeedsDomainSet: "ELASTIC_THREAT_FEEDS_DOMAIN_SET_BASE_INDEX_NAME",
	DataTypeThreatFeedsIPSet:     "ELASTIC_THREAT_FEEDS_IP_SET_BASE_INDEX_NAME",
	DataTypeWAFLogs:              "ELASTIC_WAF_LOGS_BASE_INDEX_NAME",
}

DataTypes is a set of all data types stored mapped to their corresponding environment variables

View Source
var EncapsulationTypesString []string = []string{
	EncapsulationIPIPCrossSubnet.String(),
	EncapsulationIPIP.String(),
	EncapsulationVXLAN.String(),
	EncapsulationVXLANCrossSubnet.String(),
	EncapsulationNone.String(),
}
View Source
var HostPortsTypesString []string = []string{
	HostPortsEnabled.String(),
	HostPortsDisabled.String(),
}
View Source
var IPAMPluginTypesString []string = []string{
	IPAMPluginCalico.String(),
	IPAMPluginHostLocal.String(),
	IPAMPluginAmazonVPC.String(),
	IPAMPluginAzureVNET.String(),
}
View Source
var NATOutgoingTypesString []string = []string{
	NATOutgoingEnabled.String(),
	NATOutgoingDisabled.String(),
}
View Source
var SyslogLogTypesString []string = []string{
	SyslogLogAudit.String(),
	SyslogLogDNS.String(),
	SyslogLogFlows.String(),
	SyslogLogL7.String(),
	SyslogLogIDSEvents.String(),
}

Functions

func IsFIPSModeEnabled

func IsFIPSModeEnabled(mode *FIPSMode) bool

IsFIPSModeEnabled is a convenience function for turning a FIPSMode reference into a bool.

func IsFIPSModeEnabledString

func IsFIPSModeEnabledString(mode *FIPSMode) string

IsFIPSModeEnabledString is a convenience function for turning a FIPSMode reference into a string formatted bool.

Types

type APIServer

type APIServer struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state for the Tigera API server.
	Spec APIServerSpec `json:"spec,omitempty"`

	// Most recently observed status for the Tigera API server.
	Status APIServerStatus `json:"status,omitempty"`
}

APIServer installs the Tigera API server and related resources. At most one instance of this resource is supported. It must be named "default" or "tigera-secure". +kubebuilder:subresource:status +kubebuilder:resource:scope=Cluster

func (*APIServer) DeepCopy

func (in *APIServer) DeepCopy() *APIServer

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServer.

func (*APIServer) DeepCopyInto

func (in *APIServer) DeepCopyInto(out *APIServer)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*APIServer) DeepCopyObject

func (in *APIServer) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type APIServerDeployment

type APIServerDeployment struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to the Deployment.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the specification of the API server Deployment.
	// +optional
	Spec *APIServerDeploymentSpec `json:"spec,omitempty"`
}

APIServerDeployment is the configuration for the API server Deployment.

func (*APIServerDeployment) DeepCopy

func (in *APIServerDeployment) DeepCopy() *APIServerDeployment

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerDeployment.

func (*APIServerDeployment) DeepCopyInto

func (in *APIServerDeployment) DeepCopyInto(out *APIServerDeployment)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type APIServerDeploymentContainer

type APIServerDeploymentContainer struct {
	// Name is an enum which identifies the API server Deployment container by name.
	// Supported values are: calico-apiserver, tigera-queryserver, calico-l7-admission-controller
	// +kubebuilder:validation:Enum=calico-apiserver;tigera-queryserver;calico-l7-admission-controller
	Name string `json:"name"`

	// Ports allows customization of container's ports.
	// If specified, this overrides the named APIServer Deployment container's ports.
	// If omitted, the API server Deployment will use its default value for this container's port.
	// +optional
	Ports []APIServerDeploymentContainerPort `json:"ports,omitempty"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named API server Deployment container's resources.
	// If omitted, the API server Deployment will use its default value for this container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

APIServerDeploymentContainer is an API server Deployment container.

func (*APIServerDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerDeploymentContainer.

func (*APIServerDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type APIServerDeploymentContainerPort

type APIServerDeploymentContainerPort struct {
	// Name is an enum which identifies the API server Deployment Container port by name.
	// Supported values are: apiserver, queryserver, l7admctrl
	// +kubebuilder:validation:Enum=apiserver;queryserver;l7admctrl
	Name string `json:"name"`

	// Number of port to expose on the pod's IP address.
	// This must be a valid port number, 0 < x < 65536.
	ContainerPort int32 `json:"containerPort" protobuf:"varint,3,opt,name=containerPort"`
}

func (*APIServerDeploymentContainerPort) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerDeploymentContainerPort.

func (*APIServerDeploymentContainerPort) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type APIServerDeploymentInitContainer

type APIServerDeploymentInitContainer struct {
	// Name is an enum which identifies the API server Deployment init container by name.
	// Supported values are: calico-apiserver-certs-key-cert-provisioner
	// +kubebuilder:validation:Enum=calico-apiserver-certs-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named API server Deployment init container's resources.
	// If omitted, the API server Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

APIServerDeploymentInitContainer is an API server Deployment init container.

func (*APIServerDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerDeploymentInitContainer.

func (*APIServerDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type APIServerDeploymentPodSpec

type APIServerDeploymentPodSpec struct {
	// InitContainers is a list of API server init containers.
	// If specified, this overrides the specified API server Deployment init containers.
	// If omitted, the API server Deployment will use its default values for its init containers.
	// +optional
	InitContainers []APIServerDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of API server containers.
	// If specified, this overrides the specified API server Deployment containers.
	// If omitted, the API server Deployment will use its default values for its containers.
	// +optional
	Containers []APIServerDeploymentContainer `json:"containers,omitempty"`

	// Affinity is a group of affinity scheduling rules for the API server pods.
	// If specified, this overrides any affinity that may be set on the API server Deployment.
	// If omitted, the API server Deployment will use its default value for affinity.
	// WARNING: Please note that this field will override the default API server Deployment affinity.
	// +optional
	Affinity *v1.Affinity `json:"affinity,omitempty"`

	// NodeSelector is the API server pod's scheduling constraints.
	// If specified, each of the key/value pairs are added to the API server Deployment nodeSelector provided
	// the key does not already exist in the object's nodeSelector.
	// If used in conjunction with ControlPlaneNodeSelector, that nodeSelector is set on the API server Deployment
	// and each of this field's key/value pairs are added to the API server Deployment nodeSelector provided
	// the key does not already exist in the object's nodeSelector.
	// If omitted, the API server Deployment will use its default value for nodeSelector.
	// WARNING: Please note that this field will modify the default API server Deployment nodeSelector.
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// TopologySpreadConstraints describes how a group of pods ought to spread across topology
	// domains. Scheduler will schedule pods in a way which abides by the constraints.
	// All topologySpreadConstraints are ANDed.
	// +optional
	TopologySpreadConstraints []v1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`

	// Tolerations is the API server pod's tolerations.
	// If specified, this overrides any tolerations that may be set on the API server Deployment.
	// If omitted, the API server Deployment will use its default value for tolerations.
	// WARNING: Please note that this field will override the default API server Deployment tolerations.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations,omitempty"`

	// PriorityClassName allows to specify a PriorityClass resource to be used.
	// +optional
	PriorityClassName string `json:"priorityClassName,omitempty"`
}

APIServerDeploymentDeploymentPodSpec is the API server Deployment's PodSpec.

func (*APIServerDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerDeploymentPodSpec.

func (*APIServerDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type APIServerDeploymentPodTemplateSpec

type APIServerDeploymentPodTemplateSpec struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to
	// the pod's metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the API server Deployment's PodSpec.
	// +optional
	Spec *APIServerDeploymentPodSpec `json:"spec,omitempty"`
}

APIServerDeploymentPodTemplateSpec is the API server Deployment's PodTemplateSpec

func (*APIServerDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerDeploymentPodTemplateSpec.

func (*APIServerDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type APIServerDeploymentSpec

type APIServerDeploymentSpec struct {
	// MinReadySeconds is the minimum number of seconds for which a newly created Deployment pod should
	// be ready without any of its container crashing, for it to be considered available.
	// If specified, this overrides any minReadySeconds value that may be set on the API server Deployment.
	// If omitted, the API server Deployment will use its default value for minReadySeconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	MinReadySeconds *int32 `json:"minReadySeconds,omitempty"`

	// Template describes the API server Deployment pod that will be created.
	// +optional
	Template *APIServerDeploymentPodTemplateSpec `json:"template,omitempty"`
}

APIServerDeploymentSpec defines configuration for the API server Deployment.

func (*APIServerDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerDeploymentSpec.

func (*APIServerDeploymentSpec) DeepCopyInto

func (in *APIServerDeploymentSpec) DeepCopyInto(out *APIServerDeploymentSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type APIServerList

type APIServerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []APIServer `json:"items"`
}

APIServerList contains a list of APIServer

func (*APIServerList) DeepCopy

func (in *APIServerList) DeepCopy() *APIServerList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerList.

func (*APIServerList) DeepCopyInto

func (in *APIServerList) DeepCopyInto(out *APIServerList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*APIServerList) DeepCopyObject

func (in *APIServerList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type APIServerLogging

type APIServerLogging struct {
	// LogSeverity defines log level for APIServer container.
	// +optional
	// +kubebuilder:default=Info
	LogSeverity *LogSeverity `json:"logSeverity,omitempty"`
}

func (*APIServerLogging) DeepCopy

func (in *APIServerLogging) DeepCopy() *APIServerLogging

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerLogging.

func (*APIServerLogging) DeepCopyInto

func (in *APIServerLogging) DeepCopyInto(out *APIServerLogging)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type APIServerPodLogging

type APIServerPodLogging struct {
	// +optional
	APIServerLogging *APIServerLogging `json:"apiServer,omitempty"`

	// +optional
	QueryServerLogging *QueryServerLogging `json:"queryServer,omitempty"`
}

func (*APIServerPodLogging) DeepCopy

func (in *APIServerPodLogging) DeepCopy() *APIServerPodLogging

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerPodLogging.

func (*APIServerPodLogging) DeepCopyInto

func (in *APIServerPodLogging) DeepCopyInto(out *APIServerPodLogging)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type APIServerSpec

type APIServerSpec struct {
	// +optional
	Logging *APIServerPodLogging `json:"logging,omitempty"`

	// APIServerDeployment configures the calico-apiserver Deployment. If
	// used in conjunction with ControlPlaneNodeSelector or ControlPlaneTolerations, then these overrides
	// take precedence.
	APIServerDeployment *APIServerDeployment `json:"apiServerDeployment,omitempty"`
}

APIServerSpec defines the desired state of Tigera API server.

func (*APIServerSpec) DeepCopy

func (in *APIServerSpec) DeepCopy() *APIServerSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerSpec.

func (*APIServerSpec) DeepCopyInto

func (in *APIServerSpec) DeepCopyInto(out *APIServerSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type APIServerStatus

type APIServerStatus struct {
	// State provides user-readable status.
	State string `json:"state,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

APIServerStatus defines the observed state of Tigera API server.

func (*APIServerStatus) DeepCopy

func (in *APIServerStatus) DeepCopy() *APIServerStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new APIServerStatus.

func (*APIServerStatus) DeepCopyInto

func (in *APIServerStatus) DeepCopyInto(out *APIServerStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AWSEgressGateway

type AWSEgressGateway struct {

	// NativeIP defines if EgressGateway is to use an AWS backed IPPool.
	// Default: Disabled
	// +kubebuilder:validation:Enum=Enabled;Disabled
	// +optional
	NativeIP *NativeIP `json:"nativeIP,omitempty"`

	// ElasticIPs defines the set of elastic IPs that can be used for Egress Gateway pods.
	// NativeIP must be Enabled if elastic IPs are set.
	// +optional
	ElasticIPs []string `json:"elasticIPs,omitempty"`
}

AWSEgressGateway defines the configurations for deploying EgressGateway in AWS

func (*AWSEgressGateway) DeepCopy

func (in *AWSEgressGateway) DeepCopy() *AWSEgressGateway

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AWSEgressGateway.

func (*AWSEgressGateway) DeepCopyInto

func (in *AWSEgressGateway) DeepCopyInto(out *AWSEgressGateway)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AdditionalLogSourceSpec

type AdditionalLogSourceSpec struct {
	// If specified with EKS Provider in Installation, enables fetching EKS
	// audit logs.
	// +optional
	EksCloudwatchLog *EksCloudwatchLogsSpec `json:"eksCloudwatchLog,omitempty"`
}

func (*AdditionalLogSourceSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AdditionalLogSourceSpec.

func (*AdditionalLogSourceSpec) DeepCopyInto

func (in *AdditionalLogSourceSpec) DeepCopyInto(out *AdditionalLogSourceSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AdditionalLogStoreSpec

type AdditionalLogStoreSpec struct {
	// If specified, enables exporting of flow, audit, and DNS logs to Amazon S3 storage.
	// +optional
	S3 *S3StoreSpec `json:"s3,omitempty"`
	// If specified, enables exporting of flow, audit, and DNS logs to syslog.
	// +optional
	Syslog *SyslogStoreSpec `json:"syslog,omitempty"`
	// If specified, enables exporting of flow, audit, and DNS logs to splunk.
	// +optional
	Splunk *SplunkStoreSpec `json:"splunk,omitempty"`
}

func (*AdditionalLogStoreSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AdditionalLogStoreSpec.

func (*AdditionalLogStoreSpec) DeepCopyInto

func (in *AdditionalLogStoreSpec) DeepCopyInto(out *AdditionalLogStoreSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AlertManager

type AlertManager struct {
	// Spec is the specification of the Alertmanager.
	// +optional
	AlertManagerSpec *AlertManagerSpec `json:"spec,omitempty"`
}

func (*AlertManager) DeepCopy

func (in *AlertManager) DeepCopy() *AlertManager

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AlertManager.

func (*AlertManager) DeepCopyInto

func (in *AlertManager) DeepCopyInto(out *AlertManager)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AlertManagerSpec

type AlertManagerSpec struct {
	// Define resources requests and limits for single Pods.
	Resources corev1.ResourceRequirements `json:"resources,omitempty"`
}

func (*AlertManagerSpec) DeepCopy

func (in *AlertManagerSpec) DeepCopy() *AlertManagerSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AlertManagerSpec.

func (*AlertManagerSpec) DeepCopyInto

func (in *AlertManagerSpec) DeepCopyInto(out *AlertManagerSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AnomalyDetectionSpec

type AnomalyDetectionSpec struct {

	// StorageClassName is now deprecated, and configuring it has no effect.
	// +optional
	StorageClassName string `json:"storageClassName,omitempty"`
}

func (*AnomalyDetectionSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AnomalyDetectionSpec.

func (*AnomalyDetectionSpec) DeepCopyInto

func (in *AnomalyDetectionSpec) DeepCopyInto(out *AnomalyDetectionSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ApplicationLayer

type ApplicationLayer struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ApplicationLayerSpec   `json:"spec,omitempty"`
	Status ApplicationLayerStatus `json:"status,omitempty"`
}

ApplicationLayer is the Schema for the applicationlayers API

func (*ApplicationLayer) DeepCopy

func (in *ApplicationLayer) DeepCopy() *ApplicationLayer

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ApplicationLayer.

func (*ApplicationLayer) DeepCopyInto

func (in *ApplicationLayer) DeepCopyInto(out *ApplicationLayer)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ApplicationLayer) DeepCopyObject

func (in *ApplicationLayer) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ApplicationLayerList

type ApplicationLayerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ApplicationLayer `json:"items"`
}

ApplicationLayerList contains a list of ApplicationLayer

func (*ApplicationLayerList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ApplicationLayerList.

func (*ApplicationLayerList) DeepCopyInto

func (in *ApplicationLayerList) DeepCopyInto(out *ApplicationLayerList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ApplicationLayerList) DeepCopyObject

func (in *ApplicationLayerList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ApplicationLayerPolicyStatusType

type ApplicationLayerPolicyStatusType string

+kubebuilder:validation:Enum=Enabled;Disabled

type ApplicationLayerSpec

type ApplicationLayerSpec struct {
	// WebApplicationFirewall controls whether or not ModSecurity enforcement is enabled for the cluster.
	// When enabled, Services may opt-in to having ingress traffic examed by ModSecurity.
	WebApplicationFirewall *WAFStatusType `json:"webApplicationFirewall,omitempty"`
	// Specification for application layer (L7) log collection.
	LogCollection *LogCollectionSpec `json:"logCollection,omitempty"`
	// Application Layer Policy controls whether or not ALP enforcement is enabled for the cluster.
	// When enabled, NetworkPolicies with HTTP Match rules may be defined to opt-in workloads for traffic enforcement on the application layer.
	ApplicationLayerPolicy *ApplicationLayerPolicyStatusType `json:"applicationLayerPolicy,omitempty"`
	// User-configurable settings for the Envoy proxy.
	EnvoySettings *EnvoySettings `json:"envoy,omitempty"`

	// L7LogCollectorDaemonSet configures the L7LogCollector DaemonSet.
	// +optional
	L7LogCollectorDaemonSet *L7LogCollectorDaemonSet `json:"l7LogCollectorDaemonSet,omitempty"`

	// SidecarInjection controls whether or not sidecar injection is enabled for the cluster.
	// When enabled, pods with the label
	// "applicationlayer.projectcalico.org/sidecar"="true" will have their L7 functionality
	// such as WAF and ALP implemented using an injected sidecar instead of a per-host proxy.
	// The per-host proxy will continue to be used for pods without this label.
	// +optional
	SidecarInjection *SidecarStatusType `json:"sidecarInjection,omitempty"`
}

ApplicationLayerSpec defines the desired state of ApplicationLayer

func (*ApplicationLayerSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ApplicationLayerSpec.

func (*ApplicationLayerSpec) DeepCopyInto

func (in *ApplicationLayerSpec) DeepCopyInto(out *ApplicationLayerSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ApplicationLayerStatus

type ApplicationLayerStatus struct {
	// State provides user-readable status.
	State string `json:"state,omitempty"`

	// SidecarWebhook provides the state of sidecar injection mutatinwebhookconfiguration
	SidecarWebhook *SidecarWebhookStateType `json:"sidecarWebhook,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ApplicationLayerStatus defines the observed state of ApplicationLayer

func (*ApplicationLayerStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ApplicationLayerStatus.

func (*ApplicationLayerStatus) DeepCopyInto

func (in *ApplicationLayerStatus) DeepCopyInto(out *ApplicationLayerStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AssignmentMode

type AssignmentMode string
const (
	AssignmentModeAutomatic AssignmentMode = "Automatic"
	AssignmentModeManual    AssignmentMode = "Manual"
)

type AuthMethod

type AuthMethod string

type Authentication

type Authentication struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   AuthenticationSpec   `json:"spec,omitempty"`
	Status AuthenticationStatus `json:"status,omitempty"`
}

Authentication is the Schema for the authentications API

func (*Authentication) DeepCopy

func (in *Authentication) DeepCopy() *Authentication

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Authentication.

func (*Authentication) DeepCopyInto

func (in *Authentication) DeepCopyInto(out *Authentication)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Authentication) DeepCopyObject

func (in *Authentication) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type AuthenticationLDAP

type AuthenticationLDAP struct {
	// The host and port of the LDAP server. Example: ad.example.com:636
	// +required
	Host string `json:"host"`

	// StartTLS whether to enable the startTLS feature for establishing TLS on an existing LDAP session.
	// If true, the ldap:// protocol is used and then issues a StartTLS command, otherwise, connections will use
	// the ldaps:// protocol.
	// +optional
	StartTLS *bool `json:"startTLS,omitempty"`

	// User entry search configuration to match the credentials with a user.
	// +required
	UserSearch *UserSearch `json:"userSearch"`

	// Group search configuration to find the groups that a user is in.
	// +optional
	GroupSearch *GroupSearch `json:"groupSearch,omitempty"`
}

AuthenticationLDAP is the configuration needed to setup LDAP.

func (*AuthenticationLDAP) DeepCopy

func (in *AuthenticationLDAP) DeepCopy() *AuthenticationLDAP

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AuthenticationLDAP.

func (*AuthenticationLDAP) DeepCopyInto

func (in *AuthenticationLDAP) DeepCopyInto(out *AuthenticationLDAP)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AuthenticationList

type AuthenticationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Authentication `json:"items"`
}

AuthenticationList contains a list of Authentication

func (*AuthenticationList) DeepCopy

func (in *AuthenticationList) DeepCopy() *AuthenticationList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AuthenticationList.

func (*AuthenticationList) DeepCopyInto

func (in *AuthenticationList) DeepCopyInto(out *AuthenticationList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AuthenticationList) DeepCopyObject

func (in *AuthenticationList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type AuthenticationOIDC

type AuthenticationOIDC struct {
	// IssuerURL is the URL to the OIDC provider.
	// +required
	IssuerURL string `json:"issuerURL"`

	// UsernameClaim specifies which claim to use from the OIDC provider as the username.
	// +required
	UsernameClaim string `json:"usernameClaim"`

	// RequestedScopes is a list of scopes to request from the OIDC provider. If not provided, the following scopes are
	// requested: ["openid", "email", "profile", "groups", "offline_access"].
	// +optional
	RequestedScopes []string `json:"requestedScopes,omitempty"`

	// Deprecated. Please use Authentication.Spec.UsernamePrefix instead.
	// +optional
	UsernamePrefix string `json:"usernamePrefix,omitempty"`

	// GroupsClaim specifies which claim to use from the OIDC provider as the group.
	// +optional
	GroupsClaim string `json:"groupsClaim,omitempty"`

	// Deprecated. Please use Authentication.Spec.GroupsPrefix instead.
	// +optional
	GroupsPrefix string `json:"groupsPrefix,omitempty"`

	// Some providers do not include the claim "email_verified" when there is no verification in the user enrollment
	// process or if they are acting as a proxy for another identity provider. By default those tokens are deemed invalid.
	// To skip this check, set the value to "InsecureSkip".
	// Default: Verify
	// +optional
	// +kubebuilder:validation:Enum=Verify;InsecureSkip
	EmailVerification *EmailVerificationType `json:"emailVerification,omitempty"`

	// PromptTypes is an optional list of string values that specifies whether the identity provider prompts the end user
	// for re-authentication and consent. See the RFC for more information on prompt types:
	// https://openid.net/specs/openid-connect-core-1_0.html.
	// Default: "Consent"
	// +optional
	PromptTypes []PromptType `json:"promptTypes,omitempty"`

	// Default: "Dex"
	// +optional
	Type OIDCType `json:"type,omitempty"`
}

AuthenticationOIDC is the configuration needed to setup OIDC.

func (*AuthenticationOIDC) DeepCopy

func (in *AuthenticationOIDC) DeepCopy() *AuthenticationOIDC

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AuthenticationOIDC.

func (*AuthenticationOIDC) DeepCopyInto

func (in *AuthenticationOIDC) DeepCopyInto(out *AuthenticationOIDC)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AuthenticationOpenshift

type AuthenticationOpenshift struct {
	// IssuerURL is the URL to the Openshift OAuth provider. Ex.: https://api.my-ocp-domain.com:6443
	// +required
	IssuerURL string `json:"issuerURL"`
}

AuthenticationOpenshift is the configuration needed to setup Openshift.

func (*AuthenticationOpenshift) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AuthenticationOpenshift.

func (*AuthenticationOpenshift) DeepCopyInto

func (in *AuthenticationOpenshift) DeepCopyInto(out *AuthenticationOpenshift)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AuthenticationSpec

type AuthenticationSpec struct {
	// ManagerDomain is the domain name of the Manager
	// +required
	ManagerDomain string `json:"managerDomain,omitempty"`

	// If specified, UsernamePrefix is prepended to each user obtained from the identity provider. Note that
	// Kibana does not support a user prefix, so this prefix is removed from Kubernetes User when translating log access
	// ClusterRoleBindings into Elastic.
	// +optional
	UsernamePrefix string `json:"usernamePrefix,omitempty"`

	// If specified, GroupsPrefix is prepended to each group obtained from the identity provider. Note that
	// Kibana does not support a groups prefix, so this prefix is removed from Kubernetes Groups when translating log access
	// ClusterRoleBindings into Elastic.
	// +optional
	GroupsPrefix string `json:"groupsPrefix,omitempty"`

	// OIDC contains the configuration needed to setup OIDC authentication.
	// +optional
	OIDC *AuthenticationOIDC `json:"oidc,omitempty"`

	// Openshift contains the configuration needed to setup Openshift OAuth authentication.
	// +optional
	Openshift *AuthenticationOpenshift `json:"openshift,omitempty"`

	// LDAP contains the configuration needed to setup LDAP authentication.
	// +optional
	LDAP *AuthenticationLDAP `json:"ldap,omitempty"`

	// DexDeployment configures the Dex Deployment.
	// +optional
	DexDeployment *DexDeployment `json:"dexDeployment,omitempty"`
}

AuthenticationSpec defines the desired state of Authentication

func (*AuthenticationSpec) DeepCopy

func (in *AuthenticationSpec) DeepCopy() *AuthenticationSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AuthenticationSpec.

func (*AuthenticationSpec) DeepCopyInto

func (in *AuthenticationSpec) DeepCopyInto(out *AuthenticationSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type AuthenticationStatus

type AuthenticationStatus struct {
	// State provides user-readable status.
	State string `json:"state,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

AuthenticationStatus defines the observed state of Authentication

func (*AuthenticationStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AuthenticationStatus.

func (*AuthenticationStatus) DeepCopyInto

func (in *AuthenticationStatus) DeepCopyInto(out *AuthenticationStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Azure

type Azure struct {
	// PolicyMode determines whether the "control-plane" label is applied to namespaces. It offers two options: Default and Manual.
	// The Default option adds the "control-plane" label to the required namespaces.
	// The Manual option does not apply the "control-plane" label to any namespace.
	// Default: Default
	// +optional
	// +kubebuilder:validation:Enum=Default;Manual
	// +kubebuilder:default:=Default
	PolicyMode *PolicyMode `json:"policyMode,omitempty"`
}

func (*Azure) DeepCopy

func (in *Azure) DeepCopy() *Azure

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Azure.

func (*Azure) DeepCopyInto

func (in *Azure) DeepCopyInto(out *Azure)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type BGPOption

type BGPOption string

BGPOption describes the mode of BGP to use.

One of: Enabled, Disabled

const (
	BGPEnabled  BGPOption = "Enabled"
	BGPDisabled BGPOption = "Disabled"
)

func BGPOptionPtr

func BGPOptionPtr(b BGPOption) *BGPOption

type BPFNetworkBootstrapType

type BPFNetworkBootstrapType string

BPFNetworkBootstrapType defines how the initial networking configuration is executed.

const (
	BPFNetworkBootstrapEnabled  BPFNetworkBootstrapType = "Enabled"
	BPFNetworkBootstrapDisabled BPFNetworkBootstrapType = "Disabled"
)

type CAType

type CAType string

CAType specifies which verification method the tunnel client should use to verify the tunnel server's identity.

One of: Tigera, Public

const (
	CATypeTigera CAType = "Tigera"
	CATypePublic CAType = "Public"
)

type CNILogging

type CNILogging struct {
	// Default: Info
	// +optional
	LogSeverity *LogLevel `json:"logSeverity,omitempty"`

	// Default: 100Mi
	// +optional
	LogFileMaxSize *resource.Quantity `json:"logFileMaxSize,omitempty"`

	// Default: 30 (days)
	// +optional
	LogFileMaxAgeDays *uint32 `json:"logFileMaxAgeDays,omitempty"`

	// Default: 10
	// +optional
	LogFileMaxCount *uint32 `json:"logFileMaxCount,omitempty"`
}

func (*CNILogging) DeepCopy

func (in *CNILogging) DeepCopy() *CNILogging

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CNILogging.

func (*CNILogging) DeepCopyInto

func (in *CNILogging) DeepCopyInto(out *CNILogging)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CNIPluginType

type CNIPluginType string

CNIPluginType describes the type of CNI plugin used.

One of: Calico, GKE, AmazonVPC, AzureVNET

const (
	PluginCalico    CNIPluginType = "Calico"
	PluginGKE       CNIPluginType = "GKE"
	PluginAmazonVPC CNIPluginType = "AmazonVPC"
	PluginAzureVNET CNIPluginType = "AzureVNET"
)

func (CNIPluginType) String

func (cp CNIPluginType) String() string

type CNISpec

type CNISpec struct {
	// Specifies the CNI plugin that will be used in the Calico or Calico Enterprise installation.
	// * For KubernetesProvider GKE, this field defaults to GKE.
	// * For KubernetesProvider AKS, this field defaults to AzureVNET.
	// * For KubernetesProvider EKS, this field defaults to AmazonVPC.
	// * If aws-node daemonset exists in kube-system when the Installation resource is created, this field defaults to AmazonVPC.
	// * For all other cases this field defaults to Calico.
	//
	// For the value Calico, the CNI plugin binaries and CNI config will be installed as part of deployment,
	// for all other values the CNI plugin binaries and CNI config is a dependency that is expected
	// to be installed separately.
	//
	// Default: Calico
	// +kubebuilder:validation:Enum=Calico;GKE;AmazonVPC;AzureVNET
	Type CNIPluginType `json:"type"`

	// IPAM specifies the pod IP address management that will be used in the Calico or
	// Calico Enterprise installation.
	// +optional
	IPAM *IPAMSpec `json:"ipam"`

	// BinDir is the path to the CNI binaries directory.
	// If you have changed the installation directory for CNI binaries in the container runtime configuration,
	// please ensure that this field points to the same directory as specified in the container runtime settings.
	// Default directory depends on the KubernetesProvider.
	// * For KubernetesProvider GKE, this field defaults to "/home/kubernetes/bin".
	// * For KubernetesProvider OpenShift, this field defaults to "/var/lib/cni/bin".
	// * Otherwise, this field defaults to "/opt/cni/bin".
	// +optional
	// +kubebuilder:validation:Type=string
	BinDir *string `json:"binDir,omitempty"`

	// ConfDir is the path to the CNI config directory.
	// If you have changed the installation directory for CNI configuration in the container runtime configuration,
	// please ensure that this field points to the same directory as specified in the container runtime settings.
	// Default directory depends on the KubernetesProvider.
	// * For KubernetesProvider GKE, this field defaults to "/etc/cni/net.d".
	// * For KubernetesProvider OpenShift, this field defaults to "/var/run/multus/cni/net.d".
	// * Otherwise, this field defaults to "/etc/cni/net.d".
	// +optional
	// +kubebuilder:validation:Type=string
	ConfDir *string `json:"confDir,omitempty"`
}

CNISpec contains configuration for the CNI plugin.

func (*CNISpec) DeepCopy

func (in *CNISpec) DeepCopy() *CNISpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CNISpec.

func (*CNISpec) DeepCopyInto

func (in *CNISpec) DeepCopyInto(out *CNISpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CRDManagement

type CRDManagement string

+kubebuilder:validation:Enum=Reconcile;PreferExisting

const (
	CRDManagementReconcile      CRDManagement = "Reconcile"
	CRDManagementPreferExisting CRDManagement = "PreferExisting"
)

type CSINodeDriverDaemonSet

type CSINodeDriverDaemonSet struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to the DaemonSet.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the specification of the csi-node-driver DaemonSet.
	// +optional
	Spec *CSINodeDriverDaemonSetSpec `json:"spec,omitempty"`
}

CSINodeDriverDaemonSet is the configuration for the csi-node-driver DaemonSet.

func (*CSINodeDriverDaemonSet) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CSINodeDriverDaemonSet.

func (*CSINodeDriverDaemonSet) DeepCopyInto

func (in *CSINodeDriverDaemonSet) DeepCopyInto(out *CSINodeDriverDaemonSet)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CSINodeDriverDaemonSetContainer

type CSINodeDriverDaemonSetContainer struct {
	// Name is an enum which identifies the csi-node-driver DaemonSet container by name.
	// Supported values are: calico-csi, csi-node-driver-registrar.
	// +kubebuilder:validation:Enum=calico-csi;csi-node-driver-registrar;csi-node-driver
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named csi-node-driver DaemonSet container's resources.
	// If omitted, the csi-node-driver DaemonSet will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

CSINodeDriverDaemonSetContainer is a csi-node-driver DaemonSet container.

func (*CSINodeDriverDaemonSetContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CSINodeDriverDaemonSetContainer.

func (*CSINodeDriverDaemonSetContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CSINodeDriverDaemonSetPodSpec

type CSINodeDriverDaemonSetPodSpec struct {
	// Containers is a list of csi-node-driver containers.
	// If specified, this overrides the specified csi-node-driver DaemonSet containers.
	// If omitted, the csi-node-driver DaemonSet will use its default values for its containers.
	// +optional
	Containers []CSINodeDriverDaemonSetContainer `json:"containers,omitempty"`
	// Affinity is a group of affinity scheduling rules for the csi-node-driver pods.
	// If specified, this overrides any affinity that may be set on the csi-node-driver DaemonSet.
	// If omitted, the csi-node-driver DaemonSet will use its default value for affinity.
	// WARNING: Please note that this field will override the default csi-node-driver DaemonSet affinity.
	// +optional
	Affinity *v1.Affinity `json:"affinity"`

	// NodeSelector is the csi-node-driver pod's scheduling constraints.
	// If specified, each of the key/value pairs are added to the csi-node-driver DaemonSet nodeSelector provided
	// the key does not already exist in the object's nodeSelector.
	// If omitted, the csi-node-driver DaemonSet will use its default value for nodeSelector.
	// WARNING: Please note that this field will modify the default csi-node-driver DaemonSet nodeSelector.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// Tolerations is the csi-node-driver pod's tolerations.
	// If specified, this overrides any tolerations that may be set on the csi-node-driver DaemonSet.
	// If omitted, the csi-node-driver DaemonSet will use its default value for tolerations.
	// WARNING: Please note that this field will override the default csi-node-driver DaemonSet tolerations.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations"`
}

CSINodeDriverDaemonSetPodSpec is the csi-node-driver DaemonSet's PodSpec.

func (*CSINodeDriverDaemonSetPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CSINodeDriverDaemonSetPodSpec.

func (*CSINodeDriverDaemonSetPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CSINodeDriverDaemonSetPodTemplateSpec

type CSINodeDriverDaemonSetPodTemplateSpec struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to
	// the pod's metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the csi-node-driver DaemonSet's PodSpec.
	// +optional
	Spec *CSINodeDriverDaemonSetPodSpec `json:"spec,omitempty"`
}

CSINodeDriverDaemonSetPodTemplateSpec is the csi-node-driver DaemonSet's PodTemplateSpec

func (*CSINodeDriverDaemonSetPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CSINodeDriverDaemonSetPodTemplateSpec.

func (*CSINodeDriverDaemonSetPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CSINodeDriverDaemonSetSpec

type CSINodeDriverDaemonSetSpec struct {
	// MinReadySeconds is the minimum number of seconds for which a newly created DaemonSet pod should
	// be ready without any of its container crashing, for it to be considered available.
	// If specified, this overrides any minReadySeconds value that may be set on the csi-node-driver DaemonSet.
	// If omitted, the csi-node-driver DaemonSet will use its default value for minReadySeconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	MinReadySeconds *int32 `json:"minReadySeconds,omitempty"`
	// Template describes the csi-node-driver DaemonSet pod that will be created.
	// +optional
	Template *CSINodeDriverDaemonSetPodTemplateSpec `json:"template,omitempty"`
}

CSINodeDriverDaemonSetSpec defines configuration for the csi-node-driver DaemonSet.

func (*CSINodeDriverDaemonSetSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CSINodeDriverDaemonSetSpec.

func (*CSINodeDriverDaemonSetSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoKubeControllersDeployment

type CalicoKubeControllersDeployment struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to the Deployment.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the specification of the calico-kube-controllers Deployment.
	// +optional
	Spec *CalicoKubeControllersDeploymentSpec `json:"spec,omitempty"`
}

CalicoKubeControllersDeployment is the configuration for the calico-kube-controllers Deployment.

func (*CalicoKubeControllersDeployment) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoKubeControllersDeployment.

func (*CalicoKubeControllersDeployment) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoKubeControllersDeploymentContainer

type CalicoKubeControllersDeploymentContainer struct {
	// Name is an enum which identifies the calico-kube-controllers Deployment container by name.
	// Supported values are: calico-kube-controllers, es-calico-kube-controllers
	// +kubebuilder:validation:Enum=calico-kube-controllers;es-calico-kube-controllers
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named calico-kube-controllers Deployment container's resources.
	// If omitted, the calico-kube-controllers Deployment will use its default value for this container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

CalicoKubeControllersDeploymentContainer is a calico-kube-controllers Deployment container.

func (*CalicoKubeControllersDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoKubeControllersDeploymentContainer.

func (*CalicoKubeControllersDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoKubeControllersDeploymentPodSpec

type CalicoKubeControllersDeploymentPodSpec struct {
	// Containers is a list of calico-kube-controllers containers.
	// If specified, this overrides the specified calico-kube-controllers Deployment containers.
	// If omitted, the calico-kube-controllers Deployment will use its default values for its containers.
	// +optional
	Containers []CalicoKubeControllersDeploymentContainer `json:"containers,omitempty"`

	// Affinity is a group of affinity scheduling rules for the calico-kube-controllers pods.
	// If specified, this overrides any affinity that may be set on the calico-kube-controllers Deployment.
	// If omitted, the calico-kube-controllers Deployment will use its default value for affinity.
	// WARNING: Please note that this field will override the default calico-kube-controllers Deployment affinity.
	// +optional
	Affinity *v1.Affinity `json:"affinity"`

	// NodeSelector is the calico-kube-controllers pod's scheduling constraints.
	// If specified, each of the key/value pairs are added to the calico-kube-controllers Deployment nodeSelector provided
	// the key does not already exist in the object's nodeSelector.
	// If used in conjunction with ControlPlaneNodeSelector, that nodeSelector is set on the calico-kube-controllers Deployment
	// and each of this field's key/value pairs are added to the calico-kube-controllers Deployment nodeSelector provided
	// the key does not already exist in the object's nodeSelector.
	// If omitted, the calico-kube-controllers Deployment will use its default value for nodeSelector.
	// WARNING: Please note that this field will modify the default calico-kube-controllers Deployment nodeSelector.
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// Tolerations is the calico-kube-controllers pod's tolerations.
	// If specified, this overrides any tolerations that may be set on the calico-kube-controllers Deployment.
	// If omitted, the calico-kube-controllers Deployment will use its default value for tolerations.
	// WARNING: Please note that this field will override the default calico-kube-controllers Deployment tolerations.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations"`
}

CalicoKubeControllersDeploymentPodSpec is the calico-kube-controller Deployment's PodSpec.

func (*CalicoKubeControllersDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoKubeControllersDeploymentPodSpec.

func (*CalicoKubeControllersDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoKubeControllersDeploymentPodTemplateSpec

type CalicoKubeControllersDeploymentPodTemplateSpec struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to
	// the pod's metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the calico-kube-controllers Deployment's PodSpec.
	// +optional
	Spec *CalicoKubeControllersDeploymentPodSpec `json:"spec,omitempty"`
}

CalicoKubeControllersDeploymentPodTemplateSpec is the calico-kube-controllers Deployment's PodTemplateSpec

func (*CalicoKubeControllersDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoKubeControllersDeploymentPodTemplateSpec.

func (*CalicoKubeControllersDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoKubeControllersDeploymentSpec

type CalicoKubeControllersDeploymentSpec struct {
	// MinReadySeconds is the minimum number of seconds for which a newly created Deployment pod should
	// be ready without any of its container crashing, for it to be considered available.
	// If specified, this overrides any minReadySeconds value that may be set on the calico-kube-controllers Deployment.
	// If omitted, the calico-kube-controllers Deployment will use its default value for minReadySeconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	MinReadySeconds *int32 `json:"minReadySeconds,omitempty"`

	// Template describes the calico-kube-controllers Deployment pod that will be created.
	// +optional
	Template *CalicoKubeControllersDeploymentPodTemplateSpec `json:"template,omitempty"`
}

CalicoKubeControllersDeploymentSpec defines configuration for the calico-kube-controllers Deployment.

func (*CalicoKubeControllersDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoKubeControllersDeploymentSpec.

func (*CalicoKubeControllersDeploymentSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNetworkSpec

type CalicoNetworkSpec struct {
	// LinuxDataplane is used to select the dataplane used for Linux nodes. In particular, it
	// causes the operator to add required mounts and environment variables for the particular dataplane.
	// If not specified, iptables mode is used.
	// Default: Iptables
	// +optional
	LinuxDataplane *LinuxDataplaneOption `json:"linuxDataplane,omitempty"`

	// WindowsDataplane is used to select the dataplane used for Windows nodes. In particular, it
	// causes the operator to add required mounts and environment variables for the particular dataplane.
	// If not specified, it is disabled and the operator will not render the Calico Windows nodes daemonset.
	// Default: Disabled
	// +optional
	WindowsDataplane *WindowsDataplaneOption `json:"windowsDataplane,omitempty"`

	// BPFNetworkBootstrap manages the initial networking setup required to configure the BPF dataplane.
	//
	// When enabled, the operator tries to bootstraps access to the Kubernetes API Server
	// by using the Kubernetes service and its associated endpoints.
	//
	// This field should be enabled only if linuxDataplane is set to "BPF".
	// If another dataplane is selected, this field must be omitted or explicitly set to Disabled.
	//
	// When disabled and linuxDataplane is BPF, you must manually provide the Kubernetes API Server
	// information via the "kubernetes-service-endpoint" ConfigMap. It is invalid to use both the ConfigMap
	// and have this field set to true at the same time.
	// Default: Disabled
	// +optional
	// +kubebuilder:validation:Enum=Disabled;Enabled
	BPFNetworkBootstrap *BPFNetworkBootstrapType `json:"bpfNetworkBootstrap,omitempty"`

	// KubeProxyManagement controls whether the operator manages the kube-proxy DaemonSet.
	// When enabled, the operator will manage the DaemonSet by patching it:
	// it disables kube-proxy if the dataplane is BPF, or enables it otherwise.
	// Default: Disabled
	// +optional
	// +kubebuilder:validation:Enum=Disabled;Enabled
	KubeProxyManagement *KubeProxyManagementType `json:"kubeProxyManagement,omitempty"`

	// BGP configures whether or not to enable Calico's BGP capabilities.
	// +optional
	// +kubebuilder:validation:Enum=Enabled;Disabled
	BGP *BGPOption `json:"bgp,omitempty"`

	// IPPools contains a list of IP pools to manage. If nil, a single IPv4 IP pool
	// will be created by the operator. If an empty list is provided, the operator will not create any IP pools and will instead
	// wait for IP pools to be created out-of-band.
	// IP pools in this list will be reconciled by the operator and should not be modified out-of-band.
	// +optional
	// +kubebuilder:validation:MaxItems=25
	IPPools []IPPool `json:"ipPools,omitempty"`

	// MTU specifies the maximum transmission unit to use on the pod network.
	// If not specified, Calico will perform MTU auto-detection based on the cluster network.
	// +optional
	MTU *int32 `json:"mtu,omitempty"`

	// NodeAddressAutodetectionV4 specifies an approach to automatically detect node IPv4 addresses. If not specified,
	// will use default auto-detection settings to acquire an IPv4 address for each node.
	// +optional
	NodeAddressAutodetectionV4 *NodeAddressAutodetection `json:"nodeAddressAutodetectionV4,omitempty"`

	// NodeAddressAutodetectionV6 specifies an approach to automatically detect node IPv6 addresses. If not specified,
	// IPv6 addresses will not be auto-detected.
	// +optional
	NodeAddressAutodetectionV6 *NodeAddressAutodetection `json:"nodeAddressAutodetectionV6,omitempty"`

	// HostPorts configures whether or not Calico will support Kubernetes HostPorts. Valid only when using the Calico CNI plugin.
	// Default: Enabled
	// +optional
	// +kubebuilder:validation:Enum=Enabled;Disabled
	HostPorts *HostPortsType `json:"hostPorts,omitempty"`

	// MultiInterfaceMode configures what will configure multiple interface per pod. Only valid for Calico Enterprise installations
	// using the Calico CNI plugin.
	// Default: None
	// +optional
	// +kubebuilder:validation:Enum=None;Multus
	MultiInterfaceMode *MultiInterfaceMode `json:"multiInterfaceMode,omitempty"`

	// ContainerIPForwarding configures whether ip forwarding will be enabled for containers in the CNI configuration.
	// Default: Disabled
	// +optional
	// +kubebuilder:validation:Enum=Enabled;Disabled
	ContainerIPForwarding *ContainerIPForwardingType `json:"containerIPForwarding,omitempty"`

	// Sysctl configures sysctl parameters for tuning plugin
	// +optional
	Sysctl []Sysctl `json:"sysctl,omitempty"`

	// LinuxPolicySetupTimeoutSeconds delays new pods from running containers
	// until their policy has been programmed in the dataplane.
	// The specified delay defines the maximum amount of time
	// that the Calico CNI plugin will wait for policy to be programmed.
	//
	// Only applies to pods created on Linux nodes.
	//
	// * A value of 0 disables pod startup delays.
	//
	// Default: 0
	// +optional
	LinuxPolicySetupTimeoutSeconds *int32 `json:"linuxPolicySetupTimeoutSeconds,omitempty"`
}

CalicoNetworkSpec specifies configuration options for Calico provided pod networking.

func (*CalicoNetworkSpec) DeepCopy

func (in *CalicoNetworkSpec) DeepCopy() *CalicoNetworkSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNetworkSpec.

func (*CalicoNetworkSpec) DeepCopyInto

func (in *CalicoNetworkSpec) DeepCopyInto(out *CalicoNetworkSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeDaemonSet

type CalicoNodeDaemonSet struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to the DaemonSet.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the specification of the calico-node DaemonSet.
	// +optional
	Spec *CalicoNodeDaemonSetSpec `json:"spec,omitempty"`
}

CalicoNodeDaemonSet is the configuration for the calico-node DaemonSet.

func (*CalicoNodeDaemonSet) DeepCopy

func (in *CalicoNodeDaemonSet) DeepCopy() *CalicoNodeDaemonSet

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeDaemonSet.

func (*CalicoNodeDaemonSet) DeepCopyInto

func (in *CalicoNodeDaemonSet) DeepCopyInto(out *CalicoNodeDaemonSet)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeDaemonSetContainer

type CalicoNodeDaemonSetContainer struct {
	// Name is an enum which identifies the calico-node DaemonSet container by name.
	// Supported values are: calico-node
	// +kubebuilder:validation:Enum=calico-node
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named calico-node DaemonSet container's resources.
	// If omitted, the calico-node DaemonSet will use its default value for this container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

CalicoNodeDaemonSetContainer is a calico-node DaemonSet container.

func (*CalicoNodeDaemonSetContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeDaemonSetContainer.

func (*CalicoNodeDaemonSetContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeDaemonSetInitContainer

type CalicoNodeDaemonSetInitContainer struct {
	// Name is an enum which identifies the calico-node DaemonSet init container by name.
	// Supported values are: install-cni, hostpath-init, flexvol-driver, ebpf-bootstrap, node-certs-key-cert-provisioner, calico-node-prometheus-server-tls-key-cert-provisioner, mount-bpffs (deprecated, replaced by ebpf-bootstrap)
	// +kubebuilder:validation:Enum=install-cni;hostpath-init;flexvol-driver;ebpf-bootstrap;node-certs-key-cert-provisioner;calico-node-prometheus-server-tls-key-cert-provisioner;mount-bpffs
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named calico-node DaemonSet init container's resources.
	// If omitted, the calico-node DaemonSet will use its default value for this container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

CalicoNodeDaemonSetInitContainer is a calico-node DaemonSet init container.

func (*CalicoNodeDaemonSetInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeDaemonSetInitContainer.

func (*CalicoNodeDaemonSetInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeDaemonSetPodSpec

type CalicoNodeDaemonSetPodSpec struct {
	// InitContainers is a list of calico-node init containers.
	// If specified, this overrides the specified calico-node DaemonSet init containers.
	// If omitted, the calico-node DaemonSet will use its default values for its init containers.
	// +optional
	InitContainers []CalicoNodeDaemonSetInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of calico-node containers.
	// If specified, this overrides the specified calico-node DaemonSet containers.
	// If omitted, the calico-node DaemonSet will use its default values for its containers.
	// +optional
	Containers []CalicoNodeDaemonSetContainer `json:"containers,omitempty"`

	// Affinity is a group of affinity scheduling rules for the calico-node pods.
	// If specified, this overrides any affinity that may be set on the calico-node DaemonSet.
	// If omitted, the calico-node DaemonSet will use its default value for affinity.
	// WARNING: Please note that this field will override the default calico-node DaemonSet affinity.
	// +optional
	Affinity *v1.Affinity `json:"affinity"`

	// NodeSelector is the calico-node pod's scheduling constraints.
	// If specified, each of the key/value pairs are added to the calico-node DaemonSet nodeSelector provided
	// the key does not already exist in the object's nodeSelector.
	// If omitted, the calico-node DaemonSet will use its default value for nodeSelector.
	// WARNING: Please note that this field will modify the default calico-node DaemonSet nodeSelector.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// Tolerations is the calico-node pod's tolerations.
	// If specified, this overrides any tolerations that may be set on the calico-node DaemonSet.
	// If omitted, the calico-node DaemonSet will use its default value for tolerations.
	// WARNING: Please note that this field will override the default calico-node DaemonSet tolerations.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations"`

	// DNSPolicy is the DNS policy for the calico-node pods.
	// +kubebuilder:validation:Enum="";Default;ClusterFirst;ClusterFirstWithHostNet;None
	// +optional
	DNSPolicy *v1.DNSPolicy `json:"dnsPolicy,omitempty"`

	// DNSConfig allows customization of the DNS configuration for the calico-node pods.
	// +optional
	DNSConfig *v1.PodDNSConfig `json:"dnsConfig,omitempty"`
}

CalicoNodeDaemonSetPodSpec is the calico-node DaemonSet's PodSpec.

func (*CalicoNodeDaemonSetPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeDaemonSetPodSpec.

func (*CalicoNodeDaemonSetPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeDaemonSetPodTemplateSpec

type CalicoNodeDaemonSetPodTemplateSpec struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to
	// the pod's metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the calico-node DaemonSet's PodSpec.
	// +optional
	Spec *CalicoNodeDaemonSetPodSpec `json:"spec,omitempty"`
}

CalicoNodeDaemonSetPodTemplateSpec is the calico-node DaemonSet's PodTemplateSpec

func (*CalicoNodeDaemonSetPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeDaemonSetPodTemplateSpec.

func (*CalicoNodeDaemonSetPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeDaemonSetSpec

type CalicoNodeDaemonSetSpec struct {
	// MinReadySeconds is the minimum number of seconds for which a newly created DaemonSet pod should
	// be ready without any of its container crashing, for it to be considered available.
	// If specified, this overrides any minReadySeconds value that may be set on the calico-node DaemonSet.
	// If omitted, the calico-node DaemonSet will use its default value for minReadySeconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	MinReadySeconds *int32 `json:"minReadySeconds,omitempty"`

	// Template describes the calico-node DaemonSet pod that will be created.
	// +optional
	Template *CalicoNodeDaemonSetPodTemplateSpec `json:"template,omitempty"`
}

CalicoNodeDaemonSetSpec defines configuration for the calico-node DaemonSet.

func (*CalicoNodeDaemonSetSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeDaemonSetSpec.

func (*CalicoNodeDaemonSetSpec) DeepCopyInto

func (in *CalicoNodeDaemonSetSpec) DeepCopyInto(out *CalicoNodeDaemonSetSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeWindowsDaemonSet

type CalicoNodeWindowsDaemonSet struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to the DaemonSet.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the specification of the calico-node-windows DaemonSet.
	// +optional
	Spec *CalicoNodeWindowsDaemonSetSpec `json:"spec,omitempty"`
}

CalicoNodeWindowsDaemonSet is the configuration for the calico-node-windows DaemonSet.

func (*CalicoNodeWindowsDaemonSet) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeWindowsDaemonSet.

func (*CalicoNodeWindowsDaemonSet) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeWindowsDaemonSetContainer

type CalicoNodeWindowsDaemonSetContainer struct {
	// Name is an enum which identifies the calico-node-windows DaemonSet container by name.
	// Supported values are: calico-node-windows
	// +kubebuilder:validation:Enum=calico-node-windows
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named calico-node-windows DaemonSet container's resources.
	// If omitted, the calico-node-windows DaemonSet will use its default value for this container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

CalicoNodeWindowsDaemonSetContainer is a calico-node-windows DaemonSet container.

func (*CalicoNodeWindowsDaemonSetContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeWindowsDaemonSetContainer.

func (*CalicoNodeWindowsDaemonSetContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeWindowsDaemonSetInitContainer

type CalicoNodeWindowsDaemonSetInitContainer struct {
	// Name is an enum which identifies the calico-node-windows DaemonSet init container by name.
	// Supported values are: install-cni;hostpath-init, flexvol-driver, node-certs-key-cert-provisioner, calico-node-windows-prometheus-server-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=install-cni;hostpath-init;flexvol-driver;node-certs-key-cert-provisioner;calico-node-windows-prometheus-server-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named calico-node-windows DaemonSet init container's resources.
	// If omitted, the calico-node-windows DaemonSet will use its default value for this container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

CalicoNodeWindowsDaemonSetInitContainer is a calico-node-windows DaemonSet init container.

func (*CalicoNodeWindowsDaemonSetInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeWindowsDaemonSetInitContainer.

func (*CalicoNodeWindowsDaemonSetInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeWindowsDaemonSetPodSpec

type CalicoNodeWindowsDaemonSetPodSpec struct {
	// InitContainers is a list of calico-node-windows init containers.
	// If specified, this overrides the specified calico-node-windows DaemonSet init containers.
	// If omitted, the calico-node-windows DaemonSet will use its default values for its init containers.
	// +optional
	InitContainers []CalicoNodeWindowsDaemonSetInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of calico-node-windows containers.
	// If specified, this overrides the specified calico-node-windows DaemonSet containers.
	// If omitted, the calico-node-windows DaemonSet will use its default values for its containers.
	// +optional
	Containers []CalicoNodeWindowsDaemonSetContainer `json:"containers,omitempty"`

	// Affinity is a group of affinity scheduling rules for the calico-node-windows pods.
	// If specified, this overrides any affinity that may be set on the calico-node-windows DaemonSet.
	// If omitted, the calico-node-windows DaemonSet will use its default value for affinity.
	// WARNING: Please note that this field will override the default calico-node-windows DaemonSet affinity.
	// +optional
	Affinity *v1.Affinity `json:"affinity"`

	// NodeSelector is the calico-node-windows pod's scheduling constraints.
	// If specified, each of the key/value pairs are added to the calico-node-windows DaemonSet nodeSelector provided
	// the key does not already exist in the object's nodeSelector.
	// If omitted, the calico-node-windows DaemonSet will use its default value for nodeSelector.
	// WARNING: Please note that this field will modify the default calico-node-windows DaemonSet nodeSelector.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// Tolerations is the calico-node-windows pod's tolerations.
	// If specified, this overrides any tolerations that may be set on the calico-node-windows DaemonSet.
	// If omitted, the calico-node-windows DaemonSet will use its default value for tolerations.
	// WARNING: Please note that this field will override the default calico-node-windows DaemonSet tolerations.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations"`
}

CalicoNodeWindowsDaemonSetPodSpec is the calico-node-windows DaemonSet's PodSpec.

func (*CalicoNodeWindowsDaemonSetPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeWindowsDaemonSetPodSpec.

func (*CalicoNodeWindowsDaemonSetPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeWindowsDaemonSetPodTemplateSpec

type CalicoNodeWindowsDaemonSetPodTemplateSpec struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to
	// the pod's metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the calico-node-windows DaemonSet's PodSpec.
	// +optional
	Spec *CalicoNodeWindowsDaemonSetPodSpec `json:"spec,omitempty"`
}

CalicoNodeWindowsDaemonSetPodTemplateSpec is the calico-node-windows DaemonSet's PodTemplateSpec

func (*CalicoNodeWindowsDaemonSetPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeWindowsDaemonSetPodTemplateSpec.

func (*CalicoNodeWindowsDaemonSetPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoNodeWindowsDaemonSetSpec

type CalicoNodeWindowsDaemonSetSpec struct {
	// MinReadySeconds is the minimum number of seconds for which a newly created DaemonSet pod should
	// be ready without any of its container crashing, for it to be considered available.
	// If specified, this overrides any minReadySeconds value that may be set on the calico-node-windows DaemonSet.
	// If omitted, the calico-node-windows DaemonSet will use its default value for minReadySeconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	MinReadySeconds *int32 `json:"minReadySeconds,omitempty"`

	// Template describes the calico-node-windows DaemonSet pod that will be created.
	// +optional
	Template *CalicoNodeWindowsDaemonSetPodTemplateSpec `json:"template,omitempty"`
}

CalicoNodeWindowsDaemonSetSpec defines configuration for the calico-node-windows DaemonSet.

func (*CalicoNodeWindowsDaemonSetSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoNodeWindowsDaemonSetSpec.

func (*CalicoNodeWindowsDaemonSetSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoWindowsUpgradeDaemonSet

type CalicoWindowsUpgradeDaemonSet struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to the Deployment.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the specification of the calico-windows-upgrade DaemonSet.
	// +optional
	Spec *CalicoWindowsUpgradeDaemonSetSpec `json:"spec,omitempty"`
}

Deprecated. The CalicoWindowsUpgradeDaemonSet is deprecated and will be removed from the API in the future. CalicoWindowsUpgradeDaemonSet is the configuration for the calico-windows-upgrade DaemonSet.

func (*CalicoWindowsUpgradeDaemonSet) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoWindowsUpgradeDaemonSet.

func (*CalicoWindowsUpgradeDaemonSet) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoWindowsUpgradeDaemonSetContainer

type CalicoWindowsUpgradeDaemonSetContainer struct {
	// Name is an enum which identifies the calico-windows-upgrade DaemonSet container by name.
	// +kubebuilder:validation:Enum=calico-windows-upgrade
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named calico-windows-upgrade DaemonSet container's resources.
	// If omitted, the calico-windows-upgrade DaemonSet will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

CalicoWindowsUpgradeDaemonSetContainer is a calico-windows-upgrade DaemonSet container.

func (*CalicoWindowsUpgradeDaemonSetContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoWindowsUpgradeDaemonSetContainer.

func (*CalicoWindowsUpgradeDaemonSetContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoWindowsUpgradeDaemonSetPodSpec

type CalicoWindowsUpgradeDaemonSetPodSpec struct {
	// Containers is a list of calico-windows-upgrade containers.
	// If specified, this overrides the specified calico-windows-upgrade DaemonSet containers.
	// If omitted, the calico-windows-upgrade DaemonSet will use its default values for its containers.
	// +optional
	Containers []CalicoWindowsUpgradeDaemonSetContainer `json:"containers,omitempty"`

	// Affinity is a group of affinity scheduling rules for the calico-windows-upgrade pods.
	// If specified, this overrides any affinity that may be set on the calico-windows-upgrade DaemonSet.
	// If omitted, the calico-windows-upgrade DaemonSet will use its default value for affinity.
	// WARNING: Please note that this field will override the default calico-windows-upgrade DaemonSet affinity.
	// +optional
	Affinity *v1.Affinity `json:"affinity,omitempty"`

	// NodeSelector is the calico-windows-upgrade pod's scheduling constraints.
	// If specified, each of the key/value pairs are added to the calico-windows-upgrade DaemonSet nodeSelector provided
	// the key does not already exist in the object's nodeSelector.
	// If omitted, the calico-windows-upgrade DaemonSet will use its default value for nodeSelector.
	// WARNING: Please note that this field will modify the default calico-windows-upgrade DaemonSet nodeSelector.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// Tolerations is the calico-windows-upgrade pod's tolerations.
	// If specified, this overrides any tolerations that may be set on the calico-windows-upgrade DaemonSet.
	// If omitted, the calico-windows-upgrade DaemonSet will use its default value for tolerations.
	// WARNING: Please note that this field will override the default calico-windows-upgrade DaemonSet tolerations.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations,omitempty"`
}

CalicoWindowsUpgradeDaemonSetPodSpec is the calico-windows-upgrade DaemonSet's PodSpec.

func (*CalicoWindowsUpgradeDaemonSetPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoWindowsUpgradeDaemonSetPodSpec.

func (*CalicoWindowsUpgradeDaemonSetPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoWindowsUpgradeDaemonSetPodTemplateSpec

type CalicoWindowsUpgradeDaemonSetPodTemplateSpec struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to
	// the pod's metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the calico-windows-upgrade DaemonSet's PodSpec.
	// +optional
	Spec *CalicoWindowsUpgradeDaemonSetPodSpec `json:"spec,omitempty"`
}

CalicoWindowsUpgradeDaemonSetPodTemplateSpec is the calico-windows-upgrade DaemonSet's PodTemplateSpec

func (*CalicoWindowsUpgradeDaemonSetPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoWindowsUpgradeDaemonSetPodTemplateSpec.

func (*CalicoWindowsUpgradeDaemonSetPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CalicoWindowsUpgradeDaemonSetSpec

type CalicoWindowsUpgradeDaemonSetSpec struct {
	// MinReadySeconds is the minimum number of seconds for which a newly created Deployment pod should
	// be ready without any of its container crashing, for it to be considered available.
	// If specified, this overrides any minReadySeconds value that may be set on the calico-windows-upgrade DaemonSet.
	// If omitted, the calico-windows-upgrade DaemonSet will use its default value for minReadySeconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	MinReadySeconds *int32 `json:"minReadySeconds,omitempty"`

	// Template describes the calico-windows-upgrade DaemonSet pod that will be created.
	// +optional
	Template *CalicoWindowsUpgradeDaemonSetPodTemplateSpec `json:"template,omitempty"`
}

CalicoWindowsUpgradeDaemonSetSpec defines configuration for the calico-windows-upgrade DaemonSet.

func (*CalicoWindowsUpgradeDaemonSetSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CalicoWindowsUpgradeDaemonSetSpec.

func (*CalicoWindowsUpgradeDaemonSetSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CertificateManagement

type CertificateManagement struct {
	// Certificate of the authority that signs the CertificateSigningRequests in PEM format.
	CACert []byte `json:"caCert"`

	// When a CSR is issued to the certificates.k8s.io API, the signerName is added to the request in order to accommodate for clusters
	// with multiple signers.
	// Must be formatted as: `<my-domain>/<my-signername>`.
	SignerName string `json:"signerName"`

	// Specify the algorithm used by pods to generate a key pair that is associated with the X.509 certificate request.
	// Default: RSAWithSize2048
	// +kubebuilder:validation:Enum="";RSAWithSize2048;RSAWithSize4096;RSAWithSize8192;ECDSAWithCurve256;ECDSAWithCurve384;ECDSAWithCurve521;
	// +optional
	KeyAlgorithm string `json:"keyAlgorithm,omitempty"`

	// Specify the algorithm used for the signature of the X.509 certificate request.
	// Default: SHA256WithRSA
	// +kubebuilder:validation:Enum="";SHA256WithRSA;SHA384WithRSA;SHA512WithRSA;ECDSAWithSHA256;ECDSAWithSHA384;ECDSAWithSHA512;
	// +optional
	SignatureAlgorithm string `json:"signatureAlgorithm,omitempty"`
}

CertificateManagement configures pods to submit a CertificateSigningRequest to the certificates.k8s.io/v1beta1 API in order to obtain TLS certificates. This feature requires that you bring your own CSR signing and approval process, otherwise pods will be stuck during initialization.

func (*CertificateManagement) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CertificateManagement.

func (*CertificateManagement) DeepCopyInto

func (in *CertificateManagement) DeepCopyInto(out *CertificateManagement)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type CollectProcessPathOption

type CollectProcessPathOption string
const (
	CollectProcessPathEnable  CollectProcessPathOption = "Enabled"
	CollectProcessPathDisable CollectProcessPathOption = "Disabled"
)

type CommonPrometheusFields

type CommonPrometheusFields struct {

	// Containers is a list of Prometheus containers.
	// If specified, this overrides the specified Prometheus Deployment containers.
	// If omitted, the Prometheus Deployment will use its default values for its containers.
	// +optional
	Containers []PrometheusContainer `json:"containers,omitempty"`

	// Define resources requests and limits for single Pods.
	Resources corev1.ResourceRequirements `json:"resources,omitempty"`
}

func (*CommonPrometheusFields) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CommonPrometheusFields.

func (*CommonPrometheusFields) DeepCopyInto

func (in *CommonPrometheusFields) DeepCopyInto(out *CommonPrometheusFields)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Compliance

type Compliance struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state for Tigera compliance reporting.
	Spec ComplianceSpec `json:"spec,omitempty"`
	// Most recently observed state for Tigera compliance reporting.
	Status ComplianceStatus `json:"status,omitempty"`
}

Compliance installs the components required for Tigera compliance reporting. At most one instance of this resource is supported. It must be named "tigera-secure".

func (*Compliance) DeepCopy

func (in *Compliance) DeepCopy() *Compliance

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Compliance.

func (*Compliance) DeepCopyInto

func (in *Compliance) DeepCopyInto(out *Compliance)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Compliance) DeepCopyObject

func (in *Compliance) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ComplianceBenchmarkerDaemonSet

type ComplianceBenchmarkerDaemonSet struct {

	// Spec is the specification of the Compliance Benchmarker DaemonSet.
	// +optional
	Spec *ComplianceBenchmarkerDaemonSetSpec `json:"spec,omitempty"`
}

ComplianceBenchmarkerDaemonSet is the configuration for the Compliance Benchmarker DaemonSet.

func (*ComplianceBenchmarkerDaemonSet) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceBenchmarkerDaemonSet.

func (*ComplianceBenchmarkerDaemonSet) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceBenchmarkerDaemonSetContainer

type ComplianceBenchmarkerDaemonSetContainer struct {
	// Name is an enum which identifies the Compliance Benchmarker DaemonSet container by name.
	// Supported values are: compliance-benchmarker
	// +kubebuilder:validation:Enum=compliance-benchmarker
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Compliance Benchmarker DaemonSet container's resources.
	// If omitted, the Compliance Benchmarker DaemonSet will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ComplianceBenchmarkerDaemonSetContainer is a Compliance Benchmarker DaemonSet container.

func (*ComplianceBenchmarkerDaemonSetContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceBenchmarkerDaemonSetContainer.

func (*ComplianceBenchmarkerDaemonSetContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceBenchmarkerDaemonSetInitContainer

type ComplianceBenchmarkerDaemonSetInitContainer struct {
	// Name is an enum which identifies the Compliance Benchmarker DaemonSet init container by name.
	// Supported values are: tigera-compliance-benchmarker-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=tigera-compliance-benchmarker-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Compliance Benchmarker DaemonSet init container's resources.
	// If omitted, the Compliance Benchmarker DaemonSet will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ComplianceBenchmarkerDaemonSetInitContainer is a Compliance Benchmarker DaemonSet init container.

func (*ComplianceBenchmarkerDaemonSetInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceBenchmarkerDaemonSetInitContainer.

func (*ComplianceBenchmarkerDaemonSetInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceBenchmarkerDaemonSetPodSpec

type ComplianceBenchmarkerDaemonSetPodSpec struct {
	// InitContainers is a list of Compliance benchmark init containers.
	// If specified, this overrides the specified Compliance Benchmarker DaemonSet init containers.
	// If omitted, the Compliance Benchmarker DaemonSet will use its default values for its init containers.
	// +optional
	InitContainers []ComplianceBenchmarkerDaemonSetInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of Compliance benchmark containers.
	// If specified, this overrides the specified Compliance Benchmarker DaemonSet containers.
	// If omitted, the Compliance Benchmarker DaemonSet will use its default values for its containers.
	// +optional
	Containers []ComplianceBenchmarkerDaemonSetContainer `json:"containers,omitempty"`
}

ComplianceBenchmarkerDaemonSetPodSpec is the Compliance Benchmarker DaemonSet's PodSpec.

func (*ComplianceBenchmarkerDaemonSetPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceBenchmarkerDaemonSetPodSpec.

func (*ComplianceBenchmarkerDaemonSetPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceBenchmarkerDaemonSetPodTemplateSpec

type ComplianceBenchmarkerDaemonSetPodTemplateSpec struct {

	// Spec is the Compliance Benchmarker DaemonSet's PodSpec.
	// +optional
	Spec *ComplianceBenchmarkerDaemonSetPodSpec `json:"spec,omitempty"`
}

ComplianceBenchmarkerDaemonSetPodTemplateSpec is the Compliance Benchmarker DaemonSet's PodTemplateSpec

func (*ComplianceBenchmarkerDaemonSetPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceBenchmarkerDaemonSetPodTemplateSpec.

func (*ComplianceBenchmarkerDaemonSetPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceBenchmarkerDaemonSetSpec

type ComplianceBenchmarkerDaemonSetSpec struct {

	// Template describes the Compliance Benchmarker DaemonSet pod that will be created.
	// +optional
	Template *ComplianceBenchmarkerDaemonSetPodTemplateSpec `json:"template,omitempty"`
}

ComplianceBenchmarkerDaemonSetSpec defines configuration for the Compliance Benchmarker DaemonSet.

func (*ComplianceBenchmarkerDaemonSetSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceBenchmarkerDaemonSetSpec.

func (*ComplianceBenchmarkerDaemonSetSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceControllerDeployment

type ComplianceControllerDeployment struct {

	// Spec is the specification of the compliance controller Deployment.
	// +optional
	Spec *ComplianceControllerDeploymentSpec `json:"spec,omitempty"`
}

ComplianceControllerDeployment is the configuration for the compliance controller Deployment.

func (*ComplianceControllerDeployment) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceControllerDeployment.

func (*ComplianceControllerDeployment) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceControllerDeploymentContainer

type ComplianceControllerDeploymentContainer struct {
	// Name is an enum which identifies the compliance controller Deployment container by name.
	// Supported values are: compliance-controller
	// +kubebuilder:validation:Enum=compliance-controller
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named compliance controller Deployment container's resources.
	// If omitted, the compliance controller Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ComplianceControllerDeploymentContainer is a compliance controller Deployment container.

func (*ComplianceControllerDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceControllerDeploymentContainer.

func (*ComplianceControllerDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceControllerDeploymentInitContainer

type ComplianceControllerDeploymentInitContainer struct {
	// Name is an enum which identifies the compliance controller Deployment init container by name.
	// Supported values are: tigera-compliance-controller-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=tigera-compliance-controller-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named compliance controller Deployment init container's resources.
	// If omitted, the compliance controller Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ComplianceControllerDeploymentInitContainer is a compliance controller Deployment init container.

func (*ComplianceControllerDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceControllerDeploymentInitContainer.

func (*ComplianceControllerDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceControllerDeploymentPodSpec

type ComplianceControllerDeploymentPodSpec struct {
	// InitContainers is a list of compliance controller init containers.
	// If specified, this overrides the specified compliance controller Deployment init containers.
	// If omitted, the compliance controller Deployment will use its default values for its init containers.
	// +optional
	InitContainers []ComplianceControllerDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of compliance controller containers.
	// If specified, this overrides the specified compliance controller Deployment containers.
	// If omitted, the compliance controller Deployment will use its default values for its containers.
	// +optional
	Containers []ComplianceControllerDeploymentContainer `json:"containers,omitempty"`
}

ComplianceControllerDeploymentPodSpec is the compliance controller Deployment's PodSpec.

func (*ComplianceControllerDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceControllerDeploymentPodSpec.

func (*ComplianceControllerDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceControllerDeploymentPodTemplateSpec

type ComplianceControllerDeploymentPodTemplateSpec struct {

	// Spec is the compliance controller Deployment's PodSpec.
	// +optional
	Spec *ComplianceControllerDeploymentPodSpec `json:"spec,omitempty"`
}

ComplianceControllerDeploymentPodTemplateSpec is the compliance controller Deployment's PodTemplateSpec

func (*ComplianceControllerDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceControllerDeploymentPodTemplateSpec.

func (*ComplianceControllerDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceControllerDeploymentSpec

type ComplianceControllerDeploymentSpec struct {

	// Template describes the compliance controller Deployment pod that will be created.
	// +optional
	Template *ComplianceControllerDeploymentPodTemplateSpec `json:"template,omitempty"`
}

ComplianceControllerDeploymentSpec defines configuration for the compliance controller Deployment.

func (*ComplianceControllerDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceControllerDeploymentSpec.

func (*ComplianceControllerDeploymentSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceList

type ComplianceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Compliance `json:"items"`
}

ComplianceList contains a list of Compliance

func (*ComplianceList) DeepCopy

func (in *ComplianceList) DeepCopy() *ComplianceList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceList.

func (*ComplianceList) DeepCopyInto

func (in *ComplianceList) DeepCopyInto(out *ComplianceList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ComplianceList) DeepCopyObject

func (in *ComplianceList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ComplianceReporterPodSpec

type ComplianceReporterPodSpec struct {
	// InitContainers is a list of ComplianceReporter PodSpec init containers.
	// If specified, this overrides the specified ComplianceReporter PodSpec init containers.
	// If omitted, the ComplianceServer Deployment will use its default values for its init containers.
	// +optional
	InitContainers []ComplianceReporterPodTemplateInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of ComplianceServer containers.
	// If specified, this overrides the specified ComplianceReporter PodSpec containers.
	// If omitted, the ComplianceServer Deployment will use its default values for its containers.
	// +optional
	Containers []ComplianceReporterPodTemplateContainer `json:"containers,omitempty"`
}

ComplianceReporterPodSpec is the ComplianceReporter PodSpec.

func (*ComplianceReporterPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceReporterPodSpec.

func (*ComplianceReporterPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceReporterPodTemplate

type ComplianceReporterPodTemplate struct {

	// Spec is the specification of the ComplianceReporter PodTemplateSpec.
	// +optional
	Template *ComplianceReporterPodTemplateSpec `json:"template,omitempty"`
}

ComplianceReporterPodTemplate is the configuration for the ComplianceReporter PodTemplate.

func (*ComplianceReporterPodTemplate) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceReporterPodTemplate.

func (*ComplianceReporterPodTemplate) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceReporterPodTemplateContainer

type ComplianceReporterPodTemplateContainer struct {
	// Name is an enum which identifies the ComplianceServer Deployment container by name.
	// Supported values are: reporter
	// +kubebuilder:validation:Enum=reporter
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named ComplianceServer Deployment container's resources.
	// If omitted, the ComplianceServer Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ComplianceReporterPodTemplateContainer is a ComplianceServer Deployment container.

func (*ComplianceReporterPodTemplateContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceReporterPodTemplateContainer.

func (*ComplianceReporterPodTemplateContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceReporterPodTemplateInitContainer

type ComplianceReporterPodTemplateInitContainer struct {
	// Name is an enum which identifies the ComplianceReporter PodSpec init container by name.
	// Supported values are: tigera-compliance-reporter-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=tigera-compliance-reporter-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named ComplianceReporter PodSpec init container's resources.
	// If omitted, the ComplianceServer Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ComplianceReporterPodTemplateInitContainer is a ComplianceServer Deployment init container.

func (*ComplianceReporterPodTemplateInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceReporterPodTemplateInitContainer.

func (*ComplianceReporterPodTemplateInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceReporterPodTemplateSpec

type ComplianceReporterPodTemplateSpec struct {

	// Spec is the ComplianceReporter PodTemplate's PodSpec.
	// +optional
	Spec *ComplianceReporterPodSpec `json:"spec,omitempty"`
}

ComplianceReporterPodTemplateSpec is the ComplianceReporter PodTemplateSpec.

func (*ComplianceReporterPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceReporterPodTemplateSpec.

func (*ComplianceReporterPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceServerDeployment

type ComplianceServerDeployment struct {

	// Spec is the specification of the ComplianceServer Deployment.
	// +optional
	Spec *ComplianceServerDeploymentSpec `json:"spec,omitempty"`
}

ComplianceServerDeployment is the configuration for the ComplianceServer Deployment.

func (*ComplianceServerDeployment) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceServerDeployment.

func (*ComplianceServerDeployment) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceServerDeploymentContainer

type ComplianceServerDeploymentContainer struct {
	// Name is an enum which identifies the ComplianceServer Deployment container by name.
	// Supported values are: compliance-server
	// +kubebuilder:validation:Enum=compliance-server
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named ComplianceServer Deployment container's resources.
	// If omitted, the ComplianceServer Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ComplianceServerDeploymentContainer is a ComplianceServer Deployment container.

func (*ComplianceServerDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceServerDeploymentContainer.

func (*ComplianceServerDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceServerDeploymentInitContainer

type ComplianceServerDeploymentInitContainer struct {
	// Name is an enum which identifies the ComplianceServer Deployment init container by name.
	// Supported values are: tigera-compliance-server-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=tigera-compliance-server-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named ComplianceServer Deployment init container's resources.
	// If omitted, the ComplianceServer Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ComplianceServerDeploymentInitContainer is a ComplianceServer Deployment init container.

func (*ComplianceServerDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceServerDeploymentInitContainer.

func (*ComplianceServerDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceServerDeploymentPodSpec

type ComplianceServerDeploymentPodSpec struct {
	// InitContainers is a list of ComplianceServer init containers.
	// If specified, this overrides the specified ComplianceServer Deployment init containers.
	// If omitted, the ComplianceServer Deployment will use its default values for its init containers.
	// +optional
	InitContainers []ComplianceServerDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of ComplianceServer containers.
	// If specified, this overrides the specified ComplianceServer Deployment containers.
	// If omitted, the ComplianceServer Deployment will use its default values for its containers.
	// +optional
	Containers []ComplianceServerDeploymentContainer `json:"containers,omitempty"`
}

ComplianceServerDeploymentPodSpec is the ComplianceServer Deployment's PodSpec.

func (*ComplianceServerDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceServerDeploymentPodSpec.

func (*ComplianceServerDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceServerDeploymentPodTemplateSpec

type ComplianceServerDeploymentPodTemplateSpec struct {

	// Spec is the ComplianceServer Deployment's PodSpec.
	// +optional
	Spec *ComplianceServerDeploymentPodSpec `json:"spec,omitempty"`
}

ComplianceServerDeploymentPodTemplateSpec is the ComplianceServer Deployment's PodTemplateSpec

func (*ComplianceServerDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceServerDeploymentPodTemplateSpec.

func (*ComplianceServerDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceServerDeploymentSpec

type ComplianceServerDeploymentSpec struct {

	// Template describes the ComplianceServer Deployment pod that will be created.
	// +optional
	Template *ComplianceServerDeploymentPodTemplateSpec `json:"template,omitempty"`
}

ComplianceServerDeploymentSpec defines configuration for the ComplianceServer Deployment.

func (*ComplianceServerDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceServerDeploymentSpec.

func (*ComplianceServerDeploymentSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceSnapshotterDeployment

type ComplianceSnapshotterDeployment struct {

	// Spec is the specification of the compliance snapshotter Deployment.
	// +optional
	Spec *ComplianceSnapshotterDeploymentSpec `json:"spec,omitempty"`
}

ComplianceSnapshotterDeployment is the configuration for the compliance snapshotter Deployment.

func (*ComplianceSnapshotterDeployment) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceSnapshotterDeployment.

func (*ComplianceSnapshotterDeployment) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceSnapshotterDeploymentContainer

type ComplianceSnapshotterDeploymentContainer struct {
	// Name is an enum which identifies the compliance snapshotter Deployment container by name.
	// Supported values are: compliance-snapshotter
	// +kubebuilder:validation:Enum=compliance-snapshotter
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named compliance snapshotter Deployment container's resources.
	// If omitted, the compliance snapshotter Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ComplianceSnapshotterDeploymentContainer is a compliance snapshotter Deployment container.

func (*ComplianceSnapshotterDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceSnapshotterDeploymentContainer.

func (*ComplianceSnapshotterDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceSnapshotterDeploymentInitContainer

type ComplianceSnapshotterDeploymentInitContainer struct {
	// Name is an enum which identifies the compliance snapshotter Deployment init container by name.
	// Supported values are: tigera-compliance-snapshotter-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=tigera-compliance-snapshotter-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named compliance snapshotter Deployment init container's resources.
	// If omitted, the compliance snapshotter Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ComplianceSnapshotterDeploymentInitContainer is a compliance snapshotter Deployment init container.

func (*ComplianceSnapshotterDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceSnapshotterDeploymentInitContainer.

func (*ComplianceSnapshotterDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceSnapshotterDeploymentPodSpec

type ComplianceSnapshotterDeploymentPodSpec struct {
	// InitContainers is a list of compliance snapshotter init containers.
	// If specified, this overrides the specified compliance snapshotter Deployment init containers.
	// If omitted, the compliance snapshotter Deployment will use its default values for its init containers.
	// +optional
	InitContainers []ComplianceSnapshotterDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of compliance snapshotter containers.
	// If specified, this overrides the specified compliance snapshotter Deployment containers.
	// If omitted, the compliance snapshotter Deployment will use its default values for its containers.
	// +optional
	Containers []ComplianceSnapshotterDeploymentContainer `json:"containers,omitempty"`
}

ComplianceSnapshotterDeploymentPodSpec is the compliance snapshotter Deployment's PodSpec.

func (*ComplianceSnapshotterDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceSnapshotterDeploymentPodSpec.

func (*ComplianceSnapshotterDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceSnapshotterDeploymentPodTemplateSpec

type ComplianceSnapshotterDeploymentPodTemplateSpec struct {

	// Spec is the compliance snapshotter Deployment's PodSpec.
	// +optional
	Spec *ComplianceSnapshotterDeploymentPodSpec `json:"spec,omitempty"`
}

ComplianceSnapshotterDeploymentPodTemplateSpec is the compliance snapshotter Deployment's PodTemplateSpec

func (*ComplianceSnapshotterDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceSnapshotterDeploymentPodTemplateSpec.

func (*ComplianceSnapshotterDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceSnapshotterDeploymentSpec

type ComplianceSnapshotterDeploymentSpec struct {

	// Template describes the compliance snapshotter Deployment pod that will be created.
	// +optional
	Template *ComplianceSnapshotterDeploymentPodTemplateSpec `json:"template,omitempty"`
}

ComplianceSnapshotterDeploymentSpec defines configuration for the compliance snapshotter Deployment.

func (*ComplianceSnapshotterDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceSnapshotterDeploymentSpec.

func (*ComplianceSnapshotterDeploymentSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceSpec

type ComplianceSpec struct {

	// ComplianceControllerDeployment configures the Compliance Controller Deployment.
	// +optional
	ComplianceControllerDeployment *ComplianceControllerDeployment `json:"complianceControllerDeployment,omitempty"`

	// ComplianceSnapshotterDeployment configures the Compliance Snapshotter Deployment.
	// +optional
	ComplianceSnapshotterDeployment *ComplianceSnapshotterDeployment `json:"complianceSnapshotterDeployment,omitempty"`

	// ComplianceBenchmarkerDaemonSet configures the Compliance Benchmarker DaemonSet.
	// +optional
	ComplianceBenchmarkerDaemonSet *ComplianceBenchmarkerDaemonSet `json:"complianceBenchmarkerDaemonSet,omitempty"`

	// ComplianceServerDeployment configures the Compliance Server Deployment.
	// +optional
	ComplianceServerDeployment *ComplianceServerDeployment `json:"complianceServerDeployment,omitempty"`

	// ComplianceReporterPodTemplate configures the Compliance Reporter PodTemplate.
	// +optional
	ComplianceReporterPodTemplate *ComplianceReporterPodTemplate `json:"complianceReporterPodTemplate,omitempty"`
}

ComplianceSpec defines the desired state of Tigera compliance reporting capabilities.

func (*ComplianceSpec) DeepCopy

func (in *ComplianceSpec) DeepCopy() *ComplianceSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceSpec.

func (*ComplianceSpec) DeepCopyInto

func (in *ComplianceSpec) DeepCopyInto(out *ComplianceSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComplianceStatus

type ComplianceStatus struct {

	// State provides user-readable status.
	State string `json:"state,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ComplianceStatus defines the observed state of Tigera compliance reporting capabilities.

func (*ComplianceStatus) DeepCopy

func (in *ComplianceStatus) DeepCopy() *ComplianceStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComplianceStatus.

func (*ComplianceStatus) DeepCopyInto

func (in *ComplianceStatus) DeepCopyInto(out *ComplianceStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ComponentName

type ComponentName string

ComponentName represents a single component.

One of: Node, Typha, KubeControllers

const (
	ComponentNameNode            ComponentName = "Node"
	ComponentNameNodeWindows     ComponentName = "NodeWindows"
	ComponentNameFelixWindows    ComponentName = "FelixWindows"
	ComponentNameConfdWindows    ComponentName = "ConfdWindows"
	ComponentNameTypha           ComponentName = "Typha"
	ComponentNameKubeControllers ComponentName = "KubeControllers"
)

type ComponentResource

type ComponentResource struct {
	// ComponentName is an enum which identifies the component
	// +kubebuilder:validation:Enum=Node;Typha;KubeControllers
	ComponentName ComponentName `json:"componentName"`

	// ResourceRequirements allows customization of limits and requests for compute resources such as cpu and memory.
	ResourceRequirements *v1.ResourceRequirements `json:"resourceRequirements"`
}

Deprecated. Please use component resource config fields in Installation.Spec instead. The ComponentResource struct associates a ResourceRequirements with a component by name

func (*ComponentResource) DeepCopy

func (in *ComponentResource) DeepCopy() *ComponentResource

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ComponentResource.

func (*ComponentResource) DeepCopyInto

func (in *ComponentResource) DeepCopyInto(out *ComponentResource)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ConditionStatus

type ConditionStatus string

ConditionStatus represents the status of a particular condition. A condition may be one of: True, False, Unknown.

const (
	ConditionTrue    ConditionStatus = "True"
	ConditionFalse   ConditionStatus = "False"
	ConditionUnknown ConditionStatus = "Unknown"
)

type ContainerIPForwardingType

type ContainerIPForwardingType string

ContainerIPForwardingType specifies whether the CNI config for container ip forwarding is enabled.

const (
	ContainerIPForwardingEnabled  ContainerIPForwardingType = "Enabled"
	ContainerIPForwardingDisabled ContainerIPForwardingType = "Disabled"
)

type DPIDaemonsetInitContainer

type DPIDaemonsetInitContainer struct {
	// Name is an enum that identifies the init container by its name.
	// +kubebuilder:validation:Enum=snort-rules
	Name string `json:"name"`

	// Image name for the init container
	Image string `json:"image"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the init container's resources.
	// If omitted, the default values will be used for the init container's resources.
	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
}

func (*DPIDaemonsetInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DPIDaemonsetInitContainer.

func (*DPIDaemonsetInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DPIDaemonsetSpec

type DPIDaemonsetSpec struct {
	// Template specifies DPI Daemonset Template
	// +optional
	Template *DPIDaemonsetTemplate `json:"template,omitempty"`
}

func (*DPIDaemonsetSpec) DeepCopy

func (in *DPIDaemonsetSpec) DeepCopy() *DPIDaemonsetSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DPIDaemonsetSpec.

func (*DPIDaemonsetSpec) DeepCopyInto

func (in *DPIDaemonsetSpec) DeepCopyInto(out *DPIDaemonsetSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DPIDaemonsetTemplate

type DPIDaemonsetTemplate struct {
	// Spec specifies DPI Daemonset Template Spec
	// +optional
	Spec *DPIDaemonsetTemplateSpec `json:"spec,omitempty"`
}

func (*DPIDaemonsetTemplate) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DPIDaemonsetTemplate.

func (*DPIDaemonsetTemplate) DeepCopyInto

func (in *DPIDaemonsetTemplate) DeepCopyInto(out *DPIDaemonsetTemplate)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DPIDaemonsetTemplateSpec

type DPIDaemonsetTemplateSpec struct {
	// List of DPI Daemonset Init containers definitions
	// +kubebuilder:validation:MaxItems=1
	InitContainers []DPIDaemonsetInitContainer `json:"initContainers,omitempty"`
}

func (*DPIDaemonsetTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DPIDaemonsetTemplateSpec.

func (*DPIDaemonsetTemplateSpec) DeepCopyInto

func (in *DPIDaemonsetTemplateSpec) DeepCopyInto(out *DPIDaemonsetTemplateSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DashboardsJob

type DashboardsJob struct {

	// Spec is the specification of the dashboards job.
	// +optional
	Spec *DashboardsJobSpec `json:"spec,omitempty"`
}

DashboardsJob is the configuration for the Dashboards job.

func (*DashboardsJob) DeepCopy

func (in *DashboardsJob) DeepCopy() *DashboardsJob

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DashboardsJob.

func (*DashboardsJob) DeepCopyInto

func (in *DashboardsJob) DeepCopyInto(out *DashboardsJob)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DashboardsJobContainer

type DashboardsJobContainer struct {
	// Name is an enum which identifies the Dashboard Job container by name.
	// Supported values are: dashboards-installer
	// +kubebuilder:validation:Enum=dashboards-installer
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Dashboard Job container's resources.
	// If omitted, the Dashboard Job will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

DashboardsJobContainer is the Dashboards job container.

func (*DashboardsJobContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DashboardsJobContainer.

func (*DashboardsJobContainer) DeepCopyInto

func (in *DashboardsJobContainer) DeepCopyInto(out *DashboardsJobContainer)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DashboardsJobPodSpec

type DashboardsJobPodSpec struct {

	// Containers is a list of dashboards job containers.
	// If specified, this overrides the specified Dashboard job containers.
	// If omitted, the Dashboard job will use its default values for its containers.
	// +optional
	Containers []DashboardsJobContainer `json:"containers,omitempty"`
}

DashboardsJobPodSpec is the Dashboards job's PodSpec.

func (*DashboardsJobPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DashboardsJobPodSpec.

func (*DashboardsJobPodSpec) DeepCopyInto

func (in *DashboardsJobPodSpec) DeepCopyInto(out *DashboardsJobPodSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DashboardsJobPodTemplateSpec

type DashboardsJobPodTemplateSpec struct {

	// Spec is the Dashboard job's PodSpec.
	// +optional
	Spec *DashboardsJobPodSpec `json:"spec,omitempty"`
}

DashboardsJobPodTemplateSpec is the Dashboards job's PodTemplateSpec

func (*DashboardsJobPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DashboardsJobPodTemplateSpec.

func (*DashboardsJobPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DashboardsJobSpec

type DashboardsJobSpec struct {

	// Template describes the Dashboards job pod that will be created.
	// +optional
	Template *DashboardsJobPodTemplateSpec `json:"template,omitempty"`
}

DashboardsJobSpec defines configuration for the Dashboards job.

func (*DashboardsJobSpec) DeepCopy

func (in *DashboardsJobSpec) DeepCopy() *DashboardsJobSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DashboardsJobSpec.

func (*DashboardsJobSpec) DeepCopyInto

func (in *DashboardsJobSpec) DeepCopyInto(out *DashboardsJobSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DataType

type DataType string

DataType represent the type of data stored +kubebuilder:validation:Enum=Alerts;AuditLogs;BGPLogs;ComplianceBenchmarks;ComplianceReports;ComplianceSnapshots;DNSLogs;FlowLogs;L7Logs;RuntimeReports;ThreatFeedsDomainSet;ThreatFeedsIPSet;WAFLogs

const (
	DataTypeAlerts               DataType = "Alerts"
	DataTypeAuditLogs            DataType = "AuditLogs"
	DataTypeBGPLogs              DataType = "BGPLogs"
	DataTypeComplianceBenchmarks DataType = "ComplianceBenchmarks"
	DataTypeComplianceReports    DataType = "ComplianceReports"
	DataTypeComplianceSnapshots  DataType = "ComplianceSnapshots"
	DataTypeDNSLogs              DataType = "DNSLogs"
	DataTypeFlowLogs             DataType = "FlowLogs"
	DataTypeL7Logs               DataType = "L7Logs"
	DataTypeRuntimeReports       DataType = "RuntimeReports"
	DataTypeThreatFeedsDomainSet DataType = "ThreatFeedsDomainSet"
	DataTypeThreatFeedsIPSet     DataType = "ThreatFeedsIPSet"
	DataTypeWAFLogs              DataType = "WAFLogs"
)

func (DataType) IndexEnvName

func (t DataType) IndexEnvName() string

type DeepPacketInspectionDaemonset

type DeepPacketInspectionDaemonset struct {
	// DPIDaemonsetSpec configures the DPI Daemonset
	// +optional
	Spec *DPIDaemonsetSpec `json:"spec,omitempty"`
}

func (*DeepPacketInspectionDaemonset) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DeepPacketInspectionDaemonset.

func (*DeepPacketInspectionDaemonset) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DexDeployment

type DexDeployment struct {

	// Spec is the specification of the Dex Deployment.
	// +optional
	Spec *DexDeploymentSpec `json:"spec,omitempty"`
}

DexDeployment is the configuration for the Dex Deployment.

func (*DexDeployment) DeepCopy

func (in *DexDeployment) DeepCopy() *DexDeployment

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DexDeployment.

func (*DexDeployment) DeepCopyInto

func (in *DexDeployment) DeepCopyInto(out *DexDeployment)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DexDeploymentContainer

type DexDeploymentContainer struct {
	// Name is an enum which identifies the Dex Deployment container by name.
	// Supported values are: tigera-dex
	// +kubebuilder:validation:Enum=tigera-dex
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Dex Deployment container's resources.
	// If omitted, the Dex Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

DexDeploymentContainer is a Dex Deployment container.

func (*DexDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DexDeploymentContainer.

func (*DexDeploymentContainer) DeepCopyInto

func (in *DexDeploymentContainer) DeepCopyInto(out *DexDeploymentContainer)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DexDeploymentInitContainer

type DexDeploymentInitContainer struct {
	// Name is an enum which identifies the Dex Deployment init container by name.
	// Supported values are: tigera-dex-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=tigera-dex-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Dex Deployment init container's resources.
	// If omitted, the Dex Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

DexDeploymentInitContainer is a Dex Deployment init container.

func (*DexDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DexDeploymentInitContainer.

func (*DexDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DexDeploymentPodSpec

type DexDeploymentPodSpec struct {
	// InitContainers is a list of Dex init containers.
	// If specified, this overrides the specified Dex Deployment init containers.
	// If omitted, the Dex Deployment will use its default values for its init containers.
	// +optional
	InitContainers []DexDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of Dex containers.
	// If specified, this overrides the specified Dex Deployment containers.
	// If omitted, the Dex Deployment will use its default values for its containers.
	// +optional
	Containers []DexDeploymentContainer `json:"containers,omitempty"`
}

DexDeploymentPodSpec is the Dex Deployment's PodSpec.

func (*DexDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DexDeploymentPodSpec.

func (*DexDeploymentPodSpec) DeepCopyInto

func (in *DexDeploymentPodSpec) DeepCopyInto(out *DexDeploymentPodSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DexDeploymentPodTemplateSpec

type DexDeploymentPodTemplateSpec struct {

	// Spec is the Dex Deployment's PodSpec.
	// +optional
	Spec *DexDeploymentPodSpec `json:"spec,omitempty"`
}

DexDeploymentPodTemplateSpec is the Dex Deployment's PodTemplateSpec

func (*DexDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DexDeploymentPodTemplateSpec.

func (*DexDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type DexDeploymentSpec

type DexDeploymentSpec struct {

	// Template describes the Dex Deployment pod that will be created.
	// +optional
	Template *DexDeploymentPodTemplateSpec `json:"template,omitempty"`
}

DexDeploymentSpec defines configuration for the Dex Deployment.

func (*DexDeploymentSpec) DeepCopy

func (in *DexDeploymentSpec) DeepCopy() *DexDeploymentSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new DexDeploymentSpec.

func (*DexDeploymentSpec) DeepCopyInto

func (in *DexDeploymentSpec) DeepCopyInto(out *DexDeploymentSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ECKOperatorStatefulSet

type ECKOperatorStatefulSet struct {

	// Spec is the specification of the ECKOperator StatefulSet.
	// +optional
	Spec *ECKOperatorStatefulSetSpec `json:"spec,omitempty"`
}

ECKOperatorStatefulSet is the configuration for the ECKOperator StatefulSet.

func (*ECKOperatorStatefulSet) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ECKOperatorStatefulSet.

func (*ECKOperatorStatefulSet) DeepCopyInto

func (in *ECKOperatorStatefulSet) DeepCopyInto(out *ECKOperatorStatefulSet)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ECKOperatorStatefulSetContainer

type ECKOperatorStatefulSetContainer struct {
	// Name is an enum which identifies the ECKOperator StatefulSet container by name.
	// Supported values are: manager
	// +kubebuilder:validation:Enum=manager
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named ECKOperator StatefulSet container's resources.
	// If omitted, the ECKOperator StatefulSet will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ECKOperatorStatefulSetContainer is a ECKOperator StatefulSet container.

func (*ECKOperatorStatefulSetContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ECKOperatorStatefulSetContainer.

func (*ECKOperatorStatefulSetContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ECKOperatorStatefulSetInitContainer

type ECKOperatorStatefulSetInitContainer struct {
	// Name is an enum which identifies the ECKOperator StatefulSet init container by name.
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named ECKOperator StatefulSet init container's resources.
	// If omitted, the ECKOperator StatefulSet will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ECKOperatorStatefulSetInitContainer is a ECKOperator StatefulSet init container.

func (*ECKOperatorStatefulSetInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ECKOperatorStatefulSetInitContainer.

func (*ECKOperatorStatefulSetInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ECKOperatorStatefulSetPodSpec

type ECKOperatorStatefulSetPodSpec struct {
	// InitContainers is a list of ECKOperator StatefulSet init containers.
	// If specified, this overrides the specified ECKOperator StatefulSet init containers.
	// If omitted, the ECKOperator StatefulSet will use its default values for its init containers.
	// +optional
	InitContainers []ECKOperatorStatefulSetInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of ECKOperator StatefulSet containers.
	// If specified, this overrides the specified ECKOperator StatefulSet containers.
	// If omitted, the ECKOperator StatefulSet will use its default values for its containers.
	// +optional
	Containers []ECKOperatorStatefulSetContainer `json:"containers,omitempty"`
}

ECKOperatorStatefulSetPodSpec is the ECKOperator StatefulSet's PodSpec.

func (*ECKOperatorStatefulSetPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ECKOperatorStatefulSetPodSpec.

func (*ECKOperatorStatefulSetPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ECKOperatorStatefulSetPodTemplateSpec

type ECKOperatorStatefulSetPodTemplateSpec struct {

	// Spec is the ECKOperator StatefulSet's PodSpec.
	// +optional
	Spec *ECKOperatorStatefulSetPodSpec `json:"spec,omitempty"`
}

ECKOperatorStatefulSetPodTemplateSpec is the ECKOperator StatefulSet's PodTemplateSpec

func (*ECKOperatorStatefulSetPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ECKOperatorStatefulSetPodTemplateSpec.

func (*ECKOperatorStatefulSetPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ECKOperatorStatefulSetSpec

type ECKOperatorStatefulSetSpec struct {

	// Template describes the ECKOperator StatefulSet pod that will be created.
	// +optional
	Template *ECKOperatorStatefulSetPodTemplateSpec `json:"template,omitempty"`
}

ECKOperatorStatefulSetSpec defines configuration for the ECKOperator StatefulSet.

func (*ECKOperatorStatefulSetSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ECKOperatorStatefulSetSpec.

func (*ECKOperatorStatefulSetSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EGWDeploymentContainer

type EGWDeploymentContainer struct {
	// Name is an enum which identifies the EGW Deployment container by name.
	// Supported values are: calico-egw
	// +kubebuilder:validation:Enum=calico-egw
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named EGW Deployment container's resources.
	// If omitted, the EGW Deployment will use its default value for this container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

EGWDeploymentContainer is a Egress Gateway Deployment container.

func (*EGWDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EGWDeploymentContainer.

func (*EGWDeploymentContainer) DeepCopyInto

func (in *EGWDeploymentContainer) DeepCopyInto(out *EGWDeploymentContainer)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EGWDeploymentInitContainer

type EGWDeploymentInitContainer struct {
	// Name is an enum which identifies the EGW Deployment init container by name.
	// Supported values are: egress-gateway-init
	// +kubebuilder:validation:Enum=egress-gateway-init
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named EGW Deployment init container's resources.
	// If omitted, the EGW Deployment will use its default value for this init container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

EGWDeploymentInitContainer is a Egress Gateway Deployment init container.

func (*EGWDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EGWDeploymentInitContainer.

func (*EGWDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EKSLogForwarderDeployment

type EKSLogForwarderDeployment struct {

	// Spec is the specification of the EKSLogForwarder Deployment.
	// +optional
	Spec *EKSLogForwarderDeploymentSpec `json:"spec,omitempty"`
}

EKSLogForwarderDeployment is the configuration for the EKSLogForwarder Deployment.

func (*EKSLogForwarderDeployment) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EKSLogForwarderDeployment.

func (*EKSLogForwarderDeployment) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EKSLogForwarderDeploymentContainer

type EKSLogForwarderDeploymentContainer struct {
	// Name is an enum which identifies the EKSLogForwarder Deployment container by name.
	// Supported values are: eks-log-forwarder
	// +kubebuilder:validation:Enum=eks-log-forwarder
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named EKSLogForwarder Deployment container's resources.
	// If omitted, the EKSLogForwarder Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

EKSLogForwarderDeploymentContainer is a EKSLogForwarder Deployment container.

func (*EKSLogForwarderDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EKSLogForwarderDeploymentContainer.

func (*EKSLogForwarderDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EKSLogForwarderDeploymentInitContainer

type EKSLogForwarderDeploymentInitContainer struct {
	// Name is an enum which identifies the EKSLogForwarder Deployment init container by name.
	// Supported values are: eks-log-forwarder-startup
	// +kubebuilder:validation:Enum=eks-log-forwarder-startup
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named EKSLogForwarder Deployment init container's resources.
	// If omitted, the EKSLogForwarder Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

EKSLogForwarderDeploymentInitContainer is a EKSLogForwarder Deployment init container.

func (*EKSLogForwarderDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EKSLogForwarderDeploymentInitContainer.

func (*EKSLogForwarderDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EKSLogForwarderDeploymentPodSpec

type EKSLogForwarderDeploymentPodSpec struct {
	// InitContainers is a list of EKSLogForwarder init containers.
	// If specified, this overrides the specified EKSLogForwarder Deployment init containers.
	// If omitted, the EKSLogForwarder Deployment will use its default values for its init containers.
	// +optional
	InitContainers []EKSLogForwarderDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of EKSLogForwarder containers.
	// If specified, this overrides the specified EKSLogForwarder Deployment containers.
	// If omitted, the EKSLogForwarder Deployment will use its default values for its containers.
	// +optional
	Containers []EKSLogForwarderDeploymentContainer `json:"containers,omitempty"`
}

EKSLogForwarderDeploymentPodSpec is the EKSLogForwarder Deployment's PodSpec.

func (*EKSLogForwarderDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EKSLogForwarderDeploymentPodSpec.

func (*EKSLogForwarderDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EKSLogForwarderDeploymentPodTemplateSpec

type EKSLogForwarderDeploymentPodTemplateSpec struct {

	// Spec is the EKSLogForwarder Deployment's PodSpec.
	// +optional
	Spec *EKSLogForwarderDeploymentPodSpec `json:"spec,omitempty"`
}

EKSLogForwarderDeploymentPodTemplateSpec is the EKSLogForwarder Deployment's PodTemplateSpec

func (*EKSLogForwarderDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EKSLogForwarderDeploymentPodTemplateSpec.

func (*EKSLogForwarderDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EKSLogForwarderDeploymentSpec

type EKSLogForwarderDeploymentSpec struct {

	// Template describes the EKSLogForwarder Deployment pod that will be created.
	// +optional
	Template *EKSLogForwarderDeploymentPodTemplateSpec `json:"template,omitempty"`
}

EKSLogForwarderDeploymentSpec defines configuration for the EKSLogForwarder Deployment.

func (*EKSLogForwarderDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EKSLogForwarderDeploymentSpec.

func (*EKSLogForwarderDeploymentSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ESGatewayDeployment

type ESGatewayDeployment struct {

	// Spec is the specification of the es-gateway Deployment.
	// +optional
	Spec *ESGatewayDeploymentSpec `json:"spec,omitempty"`
}

ESGatewayDeployment is the configuration for the es-gateway Deployment.

func (*ESGatewayDeployment) DeepCopy

func (in *ESGatewayDeployment) DeepCopy() *ESGatewayDeployment

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ESGatewayDeployment.

func (*ESGatewayDeployment) DeepCopyInto

func (in *ESGatewayDeployment) DeepCopyInto(out *ESGatewayDeployment)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ESGatewayDeploymentContainer

type ESGatewayDeploymentContainer struct {
	// Name is an enum which identifies the es-gateway Deployment container by name.
	// Supported values are: tigera-secure-es-gateway
	// +kubebuilder:validation:Enum=tigera-secure-es-gateway
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named es-gateway Deployment container's resources.
	// If omitted, the es-gateway Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ESGatewayDeploymentContainer is a es-gateway Deployment container.

func (*ESGatewayDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ESGatewayDeploymentContainer.

func (*ESGatewayDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ESGatewayDeploymentInitContainer

type ESGatewayDeploymentInitContainer struct {
	// Name is an enum which identifies the es-gateway Deployment init container by name.
	// Supported values are: tigera-secure-elasticsearch-cert-key-cert-provisioner
	// +kubebuilder:validation:Enum=tigera-secure-elasticsearch-cert-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named es-gateway Deployment init container's resources.
	// If omitted, the es-gateway Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ESGatewayDeploymentInitContainer is a es-gateway Deployment init container.

func (*ESGatewayDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ESGatewayDeploymentInitContainer.

func (*ESGatewayDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ESGatewayDeploymentPodSpec

type ESGatewayDeploymentPodSpec struct {
	// InitContainers is a list of es-gateway init containers.
	// If specified, this overrides the specified es-gateway Deployment init containers.
	// If omitted, the es-gateway Deployment will use its default values for its init containers.
	// +optional
	InitContainers []ESGatewayDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of es-gateway containers.
	// If specified, this overrides the specified es-gateway Deployment containers.
	// If omitted, the es-gateway Deployment will use its default values for its containers.
	// +optional
	Containers []ESGatewayDeploymentContainer `json:"containers,omitempty"`
}

ESGatewayDeploymentPodSpec is the es-gateway Deployment's PodSpec.

func (*ESGatewayDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ESGatewayDeploymentPodSpec.

func (*ESGatewayDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ESGatewayDeploymentPodTemplateSpec

type ESGatewayDeploymentPodTemplateSpec struct {

	// Spec is the es-gateway Deployment's PodSpec.
	// +optional
	Spec *ESGatewayDeploymentPodSpec `json:"spec,omitempty"`
}

ESGatewayDeploymentPodTemplateSpec is the es-gateway Deployment's PodTemplateSpec

func (*ESGatewayDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ESGatewayDeploymentPodTemplateSpec.

func (*ESGatewayDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ESGatewayDeploymentSpec

type ESGatewayDeploymentSpec struct {

	// Template describes the es-gateway Deployment pod that will be created.
	// +optional
	Template *ESGatewayDeploymentPodTemplateSpec `json:"template,omitempty"`
}

ESGatewayDeploymentSpec defines configuration for the es-gateway Deployment.

func (*ESGatewayDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ESGatewayDeploymentSpec.

func (*ESGatewayDeploymentSpec) DeepCopyInto

func (in *ESGatewayDeploymentSpec) DeepCopyInto(out *ESGatewayDeploymentSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EgressGateway

type EgressGateway struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   EgressGatewaySpec   `json:"spec,omitempty"`
	Status EgressGatewayStatus `json:"status,omitempty"`
}

EgressGateway is the Schema for the egressgateways API

func (*EgressGateway) DeepCopy

func (in *EgressGateway) DeepCopy() *EgressGateway

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EgressGateway.

func (*EgressGateway) DeepCopyInto

func (in *EgressGateway) DeepCopyInto(out *EgressGateway)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*EgressGateway) DeepCopyObject

func (in *EgressGateway) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*EgressGateway) GetLogSeverity

func (c *EgressGateway) GetLogSeverity() string

type EgressGatewayDeploymentPodSpec

type EgressGatewayDeploymentPodSpec struct {
	// InitContainers is a list of EGW init containers.
	// If specified, this overrides the specified EGW Deployment init containers.
	// If omitted, the EGW Deployment will use its default values for its init containers.
	// +optional
	InitContainers []EGWDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of EGW containers.
	// If specified, this overrides the specified EGW Deployment containers.
	// If omitted, the EGW Deployment will use its default values for its containers.
	// +optional
	Containers []EGWDeploymentContainer `json:"containers,omitempty"`

	// Affinity is a group of affinity scheduling rules for the EGW pods.
	// +optional
	Affinity *v1.Affinity `json:"affinity,omitempty"`

	// NodeSelector gives more control over the nodes where the Egress Gateway pods will run on.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// TerminationGracePeriodSeconds defines the termination grace period of the Egress Gateway pods in seconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	TerminationGracePeriodSeconds *int64 `json:"terminationGracePeriodSeconds,omitempty"`

	// TopologySpreadConstraints defines how the Egress Gateway pods should be spread across different AZs.
	// +optional
	TopologySpreadConstraints []v1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`

	// Tolerations is the egress gateway pod's tolerations.
	// If specified, this overrides any tolerations that may be set on the EGW Deployment.
	// If omitted, the EGW Deployment will use its default value for tolerations.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations,omitempty"`

	// PriorityClassName allows to specify a PriorityClass resource to be used.
	// +optional
	PriorityClassName string `json:"priorityClassName,omitempty"`
}

EgressGatewayDeploymentPodSpec is the Egress Gateway Deployment's PodSpec.

func (*EgressGatewayDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EgressGatewayDeploymentPodSpec.

func (*EgressGatewayDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EgressGatewayDeploymentPodTemplateSpec

type EgressGatewayDeploymentPodTemplateSpec struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to
	// the pod's metadata.
	// +optional
	Metadata *EgressGatewayMetadata `json:"metadata,omitempty"`

	// Spec is the EGW Deployment's PodSpec.
	// +optional
	Spec *EgressGatewayDeploymentPodSpec `json:"spec,omitempty"`
}

EgressGatewayDeploymentPodTemplateSpec is the EGW Deployment's PodTemplateSpec

func (*EgressGatewayDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EgressGatewayDeploymentPodTemplateSpec.

func (*EgressGatewayDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EgressGatewayFailureDetection

type EgressGatewayFailureDetection struct {

	// HealthTimeoutDataStoreSeconds defines how long Egress Gateway can fail to connect
	// to the datastore before reporting not ready.
	// This value must be greater than 0.
	// Default: 90
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:validation:Maximum=2147483647
	// +kubebuilder:default:=90
	// +optional
	HealthTimeoutDataStoreSeconds *int32 `json:"healthTimeoutDataStoreSeconds,omitempty"`

	// ICMPProbe define outgoing ICMP probes that Egress Gateway will use to
	// verify its upstream connection. Egress Gateway will report not ready if all
	// fail. Timeout must be greater than interval.
	// +optional
	ICMPProbe *ICMPProbe `json:"icmpProbe,omitempty"`

	// HTTPProbe define outgoing HTTP probes that Egress Gateway will use to
	// verify its upsteam connection. Egress Gateway will report not ready if all
	// fail. Timeout must be greater than interval.
	// +optional
	HTTPProbe *HTTPProbe `json:"httpProbe,omitempty"`
}

EgressGatewayFailureDetection defines the fields the needed for determining Egress Gateway readiness.

func (*EgressGatewayFailureDetection) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EgressGatewayFailureDetection.

func (*EgressGatewayFailureDetection) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EgressGatewayIPPool

type EgressGatewayIPPool struct {
	// Name is the name of the IPPool that the Egress Gateways can use.
	// +optional
	Name string `json:"name,omitempty"`

	// CIDR is the IPPool CIDR that the Egress Gateways can use.
	// +optional
	CIDR string `json:"cidr,omitempty"`
}

func (*EgressGatewayIPPool) DeepCopy

func (in *EgressGatewayIPPool) DeepCopy() *EgressGatewayIPPool

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EgressGatewayIPPool.

func (*EgressGatewayIPPool) DeepCopyInto

func (in *EgressGatewayIPPool) DeepCopyInto(out *EgressGatewayIPPool)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EgressGatewayList

type EgressGatewayList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []EgressGateway `json:"items"`
}

EgressGatewayList contains a list of EgressGateway

func (*EgressGatewayList) DeepCopy

func (in *EgressGatewayList) DeepCopy() *EgressGatewayList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EgressGatewayList.

func (*EgressGatewayList) DeepCopyInto

func (in *EgressGatewayList) DeepCopyInto(out *EgressGatewayList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*EgressGatewayList) DeepCopyObject

func (in *EgressGatewayList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type EgressGatewayMetadata

type EgressGatewayMetadata struct {
	// Labels is a map of string keys and values that may match replica set and
	// service selectors. Each of these key/value pairs are added to the
	// object's labels provided the key does not already exist in the object's labels.
	// If not specified will default to projectcalico.org/egw:[name], where [name] is
	// the name of the Egress Gateway resource.
	// +optional
	Labels map[string]string `json:"labels,omitempty"`

	// Annotations is a map of arbitrary non-identifying metadata. Each of these
	// key/value pairs are added to the object's annotations provided the key does not
	// already exist in the object's annotations.
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`
}

EgressGatewayMetadata contains the standard Kubernetes labels and annotations fields.

func (*EgressGatewayMetadata) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EgressGatewayMetadata.

func (*EgressGatewayMetadata) DeepCopyInto

func (in *EgressGatewayMetadata) DeepCopyInto(out *EgressGatewayMetadata)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EgressGatewaySpec

type EgressGatewaySpec struct {
	// Replicas defines how many instances of the Egress Gateway pod will run.
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	// +optional
	// +kubebuilder:default:=1
	Replicas *int32 `json:"replicas,omitempty"`

	// IPPools defines the IP Pools that the Egress Gateway pods should be using.
	// Either name or CIDR must be specified.
	// IPPools must match existing IPPools.
	// +required
	IPPools []EgressGatewayIPPool `json:"ipPools"`

	// ExternalNetworks defines the external network names this Egress Gateway is
	// associated with.
	// ExternalNetworks must match existing external networks.
	// +optional
	ExternalNetworks []string `json:"externalNetworks,omitempty"`

	// LogSeverity defines the logging level of the Egress Gateway.
	// +optional
	// +kubebuilder:default:=Info
	LogSeverity *LogSeverity `json:"logSeverity,omitempty"`

	// Template describes the EGW Deployment pod that will be created.
	// +optional
	Template *EgressGatewayDeploymentPodTemplateSpec `json:"template,omitempty"`

	// EgressGatewayFailureDetection is used to configure how Egress Gateway
	// determines readiness. If both ICMP, HTTP probes are defined, one ICMP probe and one
	// HTTP probe should succeed for Egress Gateways to become ready.
	// Otherwise one of ICMP or HTTP probe should succeed for Egress gateways to become
	// ready if configured.
	// +optional
	EgressGatewayFailureDetection *EgressGatewayFailureDetection `json:"egressGatewayFailureDetection,omitempty"`

	// AWS defines the additional configuration options for Egress Gateways on AWS.
	// +optional
	AWS *AWSEgressGateway `json:"aws,omitempty"`
}

EgressGatewaySpec defines the desired state of EgressGateway

func (*EgressGatewaySpec) DeepCopy

func (in *EgressGatewaySpec) DeepCopy() *EgressGatewaySpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EgressGatewaySpec.

func (*EgressGatewaySpec) DeepCopyInto

func (in *EgressGatewaySpec) DeepCopyInto(out *EgressGatewaySpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EgressGatewayStatus

type EgressGatewayStatus struct {
	// State provides user-readable status.
	State string `json:"state,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

EgressGatewayStatus defines the observed state of EgressGateway

func (*EgressGatewayStatus) DeepCopy

func (in *EgressGatewayStatus) DeepCopy() *EgressGatewayStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EgressGatewayStatus.

func (*EgressGatewayStatus) DeepCopyInto

func (in *EgressGatewayStatus) DeepCopyInto(out *EgressGatewayStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EksCloudwatchLogsSpec

type EksCloudwatchLogsSpec struct {
	// AWS Region EKS cluster is hosted in.
	Region string `json:"region"`

	// Cloudwatch log-group name containing EKS audit logs.
	GroupName string `json:"groupName"`

	// Prefix of Cloudwatch log stream containing EKS audit logs in the log-group.
	// Default: kube-apiserver-audit-
	// +optional
	StreamPrefix string `json:"streamPrefix,omitempty"`

	// Cloudwatch audit logs fetching interval in seconds.
	// Default: 60
	// +optional
	FetchInterval int32 `json:"fetchInterval,omitempty"`
}

EksConfigSpec defines configuration for fetching EKS audit logs.

func (*EksCloudwatchLogsSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EksCloudwatchLogsSpec.

func (*EksCloudwatchLogsSpec) DeepCopyInto

func (in *EksCloudwatchLogsSpec) DeepCopyInto(out *EksCloudwatchLogsSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ElasticsearchMetricsDeployment

type ElasticsearchMetricsDeployment struct {

	// Spec is the specification of the ElasticsearchMetrics Deployment.
	// +optional
	Spec *ElasticsearchMetricsDeploymentSpec `json:"spec,omitempty"`
}

ElasticsearchMetricsDeployment is the configuration for the tigera-elasticsearch-metric Deployment.

func (*ElasticsearchMetricsDeployment) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ElasticsearchMetricsDeployment.

func (*ElasticsearchMetricsDeployment) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ElasticsearchMetricsDeploymentContainer

type ElasticsearchMetricsDeploymentContainer struct {
	// Name is an enum which identifies the ElasticsearchMetricsDeployment container by name.
	// Supported values are: tigera-elasticsearch-metrics
	// +kubebuilder:validation:Enum=tigera-elasticsearch-metrics
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named ElasticsearchMetricsDeployment container's resources.
	// If omitted, the ElasticsearchMetrics Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ElasticsearchMetricsDeploymentContainer is a ElasticsearchMetricsDeployment container.

func (*ElasticsearchMetricsDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ElasticsearchMetricsDeploymentContainer.

func (*ElasticsearchMetricsDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ElasticsearchMetricsDeploymentInitContainer

type ElasticsearchMetricsDeploymentInitContainer struct {
	// Name is an enum which identifies the ElasticsearchMetricsDeployment init container by name.
	// Supported values are: tigera-ee-elasticsearch-metrics-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=tigera-ee-elasticsearch-metrics-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named ElasticsearchMetricsDeployment init container's resources.
	// If omitted, the ElasticsearchMetrics Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ElasticsearchMetricsDeploymentInitContainer is a ElasticsearchMetricsDeployment init container.

func (*ElasticsearchMetricsDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ElasticsearchMetricsDeploymentInitContainer.

func (*ElasticsearchMetricsDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ElasticsearchMetricsDeploymentPodSpec

type ElasticsearchMetricsDeploymentPodSpec struct {
	// InitContainers is a list of ElasticsearchMetricsDeployment init containers.
	// If specified, this overrides the specified ElasticsearchMetricsDeployment init containers.
	// If omitted, the ElasticsearchMetrics Deployment will use its default values for its init containers.
	// +optional
	InitContainers []ElasticsearchMetricsDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of ElasticsearchMetricsDeployment containers.
	// If specified, this overrides the specified ElasticsearchMetricsDeployment containers.
	// If omitted, the ElasticsearchMetrics Deployment will use its default values for its containers.
	// +optional
	Containers []ElasticsearchMetricsDeploymentContainer `json:"containers,omitempty"`
}

ElasticsearchMetricsDeploymentPodSpec is the tElasticsearchMetricsDeployment's PodSpec.

func (*ElasticsearchMetricsDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ElasticsearchMetricsDeploymentPodSpec.

func (*ElasticsearchMetricsDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ElasticsearchMetricsDeploymentPodTemplateSpec

type ElasticsearchMetricsDeploymentPodTemplateSpec struct {

	// Spec is the ElasticsearchMetrics Deployment's PodSpec.
	// +optional
	Spec *ElasticsearchMetricsDeploymentPodSpec `json:"spec,omitempty"`
}

ElasticsearchMetricsDeploymentPodTemplateSpec is the ElasticsearchMetricsDeployment's PodTemplateSpec

func (*ElasticsearchMetricsDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ElasticsearchMetricsDeploymentPodTemplateSpec.

func (*ElasticsearchMetricsDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ElasticsearchMetricsDeploymentSpec

type ElasticsearchMetricsDeploymentSpec struct {

	// Template describes the ElasticsearchMetrics Deployment pod that will be created.
	// +optional
	Template *ElasticsearchMetricsDeploymentPodTemplateSpec `json:"template,omitempty"`
}

ElasticsearchMetricsDeploymentSpec defines configuration for the ElasticsearchMetricsDeployment Deployment.

func (*ElasticsearchMetricsDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ElasticsearchMetricsDeploymentSpec.

func (*ElasticsearchMetricsDeploymentSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EmailVerificationType

type EmailVerificationType string
const (
	EmailVerificationTypeVerify EmailVerificationType = "Verify"
	EmailVerificationTypeSkip   EmailVerificationType = "InsecureSkip"
)

type EncapsulationType

type EncapsulationType string

EncapsulationType is the type of encapsulation to use on an IP pool.

One of: IPIP, VXLAN, IPIPCrossSubnet, VXLANCrossSubnet, None

const (
	EncapsulationIPIPCrossSubnet  EncapsulationType = "IPIPCrossSubnet"
	EncapsulationIPIP             EncapsulationType = "IPIP"
	EncapsulationVXLAN            EncapsulationType = "VXLAN"
	EncapsulationVXLANCrossSubnet EncapsulationType = "VXLANCrossSubnet"
	EncapsulationNone             EncapsulationType = "None"
)

func (EncapsulationType) String

func (et EncapsulationType) String() string

type EncryptionOption

type EncryptionOption string

EncryptionOption specifies the traffic encryption mode when connecting to a Syslog server.

One of: None, TLS

const (
	EncryptionNone EncryptionOption = "None"
	EncryptionTLS  EncryptionOption = "TLS"
)

type Endpoint

type Endpoint struct {
	// Optional HTTP URL parameters
	// Default: scrape all metrics.
	Params map[string][]string `json:"params,omitempty"`

	// Secret to mount to read bearer token for scraping targets.
	// Recommended: when unset, the operator will create a Secret, a ClusterRole and a ClusterRoleBinding.
	BearerTokenSecret corev1.SecretKeySelector `json:"bearerTokenSecret,omitempty"`

	// Interval at which metrics should be scraped.
	// If not specified Prometheus' global scrape interval is used.
	Interval v1.Duration `json:"interval,omitempty"`

	// Timeout after which the scrape is ended.
	// If not specified, the Prometheus global scrape timeout is used unless it is less than `Interval` in which the latter is used.
	ScrapeTimeout v1.Duration `json:"scrapeTimeout,omitempty"`

	// HonorLabels chooses the metric's labels on collisions with target labels.
	HonorLabels bool `json:"honorLabels,omitempty"`

	// HonorTimestamps controls whether Prometheus respects the timestamps present in scraped data.
	HonorTimestamps *bool `json:"honorTimestamps,omitempty"`

	// MetricRelabelConfigs to apply to samples before ingestion.
	MetricRelabelConfigs []v1.RelabelConfig `json:"metricRelabelings,omitempty"`

	// RelabelConfigs to apply to samples before scraping.
	// Prometheus Operator automatically adds relabelings for a few standard Kubernetes fields.
	// The original scrape job's name is available via the `__tmp_prometheus_job_name` label.
	// More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config
	RelabelConfigs []v1.RelabelConfig `json:"relabelings,omitempty"`
}

Endpoint contains a subset of relevant fields from the Prometheus Endpoint struct.

func (*Endpoint) DeepCopy

func (in *Endpoint) DeepCopy() *Endpoint

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Endpoint.

func (*Endpoint) DeepCopyInto

func (in *Endpoint) DeepCopyInto(out *Endpoint)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type EnvoySettings

type EnvoySettings struct {
	// The number of additional ingress proxy hops from the right side of the
	// x-forwarded-for HTTP header to trust when determining the origin client’s
	// IP address. 0 is permitted, but >=1 is the typical setting.
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	// +kubebuilder:default:=0
	// +optional
	XFFNumTrustedHops int32 `json:"xffNumTrustedHops,omitempty"`
	// If set to true, the Envoy connection manager will use the real remote address
	// of the client connection when determining internal versus external origin and
	// manipulating various headers.
	// +kubebuilder:default:=false
	// +optional
	UseRemoteAddress bool `json:"useRemoteAddress,omitempty"`
}

func (*EnvoySettings) DeepCopy

func (in *EnvoySettings) DeepCopy() *EnvoySettings

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EnvoySettings.

func (*EnvoySettings) DeepCopyInto

func (in *EnvoySettings) DeepCopyInto(out *EnvoySettings)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ExternalPrometheus

type ExternalPrometheus struct {
	// ServiceMonitor when specified, the operator will create a ServiceMonitor object in the namespace. It is recommended
	// that you configure labels if you want your prometheus instance to pick up the configuration automatically.
	// The operator will configure 1 endpoint by default:
	// - Params to scrape all metrics available in Calico Enterprise.
	// - BearerTokenSecret (If not overridden, the operator will also create corresponding RBAC that allows authz to the metrics.)
	// - TLSConfig, containing the caFile and serverName.
	// +optional
	ServiceMonitor *ServiceMonitor `json:"serviceMonitor,omitempty"`

	// Namespace is the namespace where the operator will create resources for your Prometheus instance. The namespace
	// must be created before the operator will create Prometheus resources.
	// +required
	Namespace string `json:"namespace"`
}

func (*ExternalPrometheus) DeepCopy

func (in *ExternalPrometheus) DeepCopy() *ExternalPrometheus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ExternalPrometheus.

func (*ExternalPrometheus) DeepCopyInto

func (in *ExternalPrometheus) DeepCopyInto(out *ExternalPrometheus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type FIPSMode

type FIPSMode string
const (
	FIPSModeEnabled  FIPSMode = "Enabled"
	FIPSModeDisabled FIPSMode = "Disabled"
)

type FluentdDaemonSet

type FluentdDaemonSet struct {

	// Spec is the specification of the Fluentd DaemonSet.
	// +optional
	Spec *FluentdDaemonSetSpec `json:"spec,omitempty"`
}

FluentdDaemonSet is the configuration for the Fluentd DaemonSet.

func (*FluentdDaemonSet) DeepCopy

func (in *FluentdDaemonSet) DeepCopy() *FluentdDaemonSet

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FluentdDaemonSet.

func (*FluentdDaemonSet) DeepCopyInto

func (in *FluentdDaemonSet) DeepCopyInto(out *FluentdDaemonSet)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type FluentdDaemonSetContainer

type FluentdDaemonSetContainer struct {
	// Name is an enum which identifies the Fluentd DaemonSet container by name.
	// Supported values are: fluentd
	// +kubebuilder:validation:Enum=fluentd
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Fluentd DaemonSet container's resources.
	// If omitted, the Fluentd DaemonSet will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

FluentdDaemonSetContainer is a Fluentd DaemonSet container.

func (*FluentdDaemonSetContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FluentdDaemonSetContainer.

func (*FluentdDaemonSetContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type FluentdDaemonSetInitContainer

type FluentdDaemonSetInitContainer struct {
	// Name is an enum which identifies the Fluentd DaemonSet init container by name.
	// Supported values are: tigera-fluentd-prometheus-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=tigera-fluentd-prometheus-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Fluentd DaemonSet init container's resources.
	// If omitted, the Fluentd DaemonSet will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

FluentdDaemonSetInitContainer is a Fluentd DaemonSet init container.

func (*FluentdDaemonSetInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FluentdDaemonSetInitContainer.

func (*FluentdDaemonSetInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type FluentdDaemonSetPodSpec

type FluentdDaemonSetPodSpec struct {
	// InitContainers is a list of Fluentd DaemonSet init containers.
	// If specified, this overrides the specified Fluentd DaemonSet init containers.
	// If omitted, the Fluentd DaemonSet will use its default values for its init containers.
	// +optional
	InitContainers []FluentdDaemonSetInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of Fluentd DaemonSet containers.
	// If specified, this overrides the specified Fluentd DaemonSet containers.
	// If omitted, the Fluentd DaemonSet will use its default values for its containers.
	// +optional
	Containers []FluentdDaemonSetContainer `json:"containers,omitempty"`
}

FluentdDaemonSetPodSpec is the Fluentd DaemonSet's PodSpec.

func (*FluentdDaemonSetPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FluentdDaemonSetPodSpec.

func (*FluentdDaemonSetPodSpec) DeepCopyInto

func (in *FluentdDaemonSetPodSpec) DeepCopyInto(out *FluentdDaemonSetPodSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type FluentdDaemonSetPodTemplateSpec

type FluentdDaemonSetPodTemplateSpec struct {

	// Spec is the Fluentd DaemonSet's PodSpec.
	// +optional
	Spec *FluentdDaemonSetPodSpec `json:"spec,omitempty"`
}

FluentdDaemonSetPodTemplateSpec is the Fluentd DaemonSet's PodTemplateSpec

func (*FluentdDaemonSetPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FluentdDaemonSetPodTemplateSpec.

func (*FluentdDaemonSetPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type FluentdDaemonSetSpec

type FluentdDaemonSetSpec struct {

	// Template describes the Fluentd DaemonSet pod that will be created.
	// +optional
	Template *FluentdDaemonSetPodTemplateSpec `json:"template,omitempty"`
}

FluentdDaemonSetSpec defines configuration for the Fluentd DaemonSet.

func (*FluentdDaemonSetSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new FluentdDaemonSetSpec.

func (*FluentdDaemonSetSpec) DeepCopyInto

func (in *FluentdDaemonSetSpec) DeepCopyInto(out *FluentdDaemonSetSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayAPI

type GatewayAPI struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec GatewayAPISpec `json:"spec,omitempty"`
}

func (*GatewayAPI) DeepCopy

func (in *GatewayAPI) DeepCopy() *GatewayAPI

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayAPI.

func (*GatewayAPI) DeepCopyInto

func (in *GatewayAPI) DeepCopyInto(out *GatewayAPI)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*GatewayAPI) DeepCopyObject

func (in *GatewayAPI) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type GatewayAPIList

type GatewayAPIList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []GatewayAPI `json:"items"`
}

func (*GatewayAPIList) DeepCopy

func (in *GatewayAPIList) DeepCopy() *GatewayAPIList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayAPIList.

func (*GatewayAPIList) DeepCopyInto

func (in *GatewayAPIList) DeepCopyInto(out *GatewayAPIList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*GatewayAPIList) DeepCopyObject

func (in *GatewayAPIList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type GatewayAPISpec

type GatewayAPISpec struct {
	// Reference to a custom EnvoyGateway YAML to use as the base EnvoyGateway configuration for
	// the gateway controller.  When specified, must identify a ConfigMap resource with an
	// "envoy-gateway.yaml" key whose value is the desired EnvoyGateway YAML (i.e. following the
	// same pattern as the default `envoy-gateway-config` ConfigMap).
	//
	// When not specified, the Tigera operator uses the `envoy-gateway-config` from the Envoy
	// Gateway helm chart as its base.
	//
	// Starting from that base, the Tigera operator copies and modifies the EnvoyGateway
	// resource as follows:
	//
	// 1. If not already specified, it sets the ControllerName to
	// "gateway.envoyproxy.io/gatewayclass-controller".
	//
	// 2. It configures the `tigera/envoy-gateway` and `tigera/envoy-ratelimit` images that will
	// be used (according to the current Calico version, private registry and image set
	// settings) and any pull secrets that are needed to pull those images.
	//
	// 3. It enables use of the Backend API.
	//
	// The resulting EnvoyGateway is provisioned as the `envoy-gateway-config` ConfigMap (which
	// the gateway controller then uses as its config).
	// +optional
	EnvoyGatewayConfigRef *NamespacedName `json:"envoyGatewayConfigRef,omitempty"`

	// Configures the GatewayClasses that will be available; please see GatewayClassSpec for
	// more detail.  If GatewayClasses is nil, the Tigera operator defaults to provisioning a
	// single GatewayClass named "tigera-gateway-class", without any of the detailed
	// customizations that are allowed within GatewayClassSpec.
	// +optional
	GatewayClasses []GatewayClassSpec `json:"gatewayClasses,omitempty"`

	// Allows customization of the gateway controller deployment.
	// +optional
	GatewayControllerDeployment *GatewayControllerDeployment `json:"gatewayControllerDeployment,omitempty"`

	// Allows customization of the gateway certgen job.
	// +optional
	GatewayCertgenJob *GatewayCertgenJob `json:"gatewayCertgenJob,omitempty"`

	// Configures how to manage and update Gateway API CRDs.  The default behaviour - which is
	// used when this field is not set, or is set to "PreferExisting" - is that the Tigera
	// operator will create the Gateway API CRDs if they do not already exist, but will not
	// overwrite any existing Gateway API CRDs.  This setting may be preferable if the customer
	// is using other implementations of the Gateway API concurrently with the Gateway API
	// support in Calico Enterprise.  It is then the customer's responsibility to ensure that
	// CRDs are installed that meet the needs of all the Gateway API implementations in their
	// cluster.
	//
	// Alternatively, if this field is set to "Reconcile", the Tigera operator will keep the
	// cluster's Gateway API CRDs aligned with those that it would install on a cluster that
	// does not yet have any version of those CRDs.
	// +optional
	CRDManagement *CRDManagement `json:"crdManagement,omitempty"`
}

GatewayAPISpec has fields that can be used to customize our GatewayAPI support.

func (*GatewayAPISpec) DeepCopy

func (in *GatewayAPISpec) DeepCopy() *GatewayAPISpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayAPISpec.

func (*GatewayAPISpec) DeepCopyInto

func (in *GatewayAPISpec) DeepCopyInto(out *GatewayAPISpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayCertgenJob

type GatewayCertgenJob struct {
	// If non-nil, non-clashing labels and annotations from this metadata are added into the
	// job's top-level metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// +optional
	Spec *GatewayCertgenJobSpec `json:"spec,omitempty"`
}

GatewayCertgenJob allows customization of the gateway certgen job.

func (*GatewayCertgenJob) DeepCopy

func (in *GatewayCertgenJob) DeepCopy() *GatewayCertgenJob

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayCertgenJob.

func (*GatewayCertgenJob) DeepCopyInto

func (in *GatewayCertgenJob) DeepCopyInto(out *GatewayCertgenJob)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayCertgenJobContainer

type GatewayCertgenJobContainer struct {
	// +kubebuilder:validation:Enum=envoy-gateway-certgen
	Name string `json:"name"`

	// If non-nil, Resources sets the ResourceRequirements of the job's "envoy-gateway-certgen"
	// container.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

GatewayCertgenJobContainer allows customization of the gateway certgen job's resource requirements.

func (*GatewayCertgenJobContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayCertgenJobContainer.

func (*GatewayCertgenJobContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayCertgenJobPodSpec

type GatewayCertgenJobPodSpec struct {
	// If non-nil, Affinity sets the affinity field of the job's pod template.
	// +optional
	Affinity *v1.Affinity `json:"affinity"`

	// +optional
	Containers []GatewayCertgenJobContainer `json:"containers,omitempty"`

	// If non-nil, NodeSelector sets the node selector for where job pods may be scheduled.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// If non-nil, Tolerations sets the tolerations field of the job's pod template.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations"`
}

GatewayCertgenJobPodSpec allows customization of the gateway certgen job's pod spec.

func (*GatewayCertgenJobPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayCertgenJobPodSpec.

func (*GatewayCertgenJobPodSpec) DeepCopyInto

func (in *GatewayCertgenJobPodSpec) DeepCopyInto(out *GatewayCertgenJobPodSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayCertgenJobPodTemplate

type GatewayCertgenJobPodTemplate struct {
	// If non-nil, non-clashing labels and annotations from this metadata are added into the
	// job's pod template.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// +optional
	Spec *GatewayCertgenJobPodSpec `json:"spec,omitempty"`
}

GatewayCertgenJobPodTemplate allows customization of the gateway certgen job's pod template.

func (*GatewayCertgenJobPodTemplate) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayCertgenJobPodTemplate.

func (*GatewayCertgenJobPodTemplate) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayCertgenJobSpec

type GatewayCertgenJobSpec struct {
	// +optional
	Template *GatewayCertgenJobPodTemplate `json:"template,omitempty"`
}

GatewayCertgenJobSpec allows customization of the gateway certgen job spec.

func (*GatewayCertgenJobSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayCertgenJobSpec.

func (*GatewayCertgenJobSpec) DeepCopyInto

func (in *GatewayCertgenJobSpec) DeepCopyInto(out *GatewayCertgenJobSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayClassSpec

type GatewayClassSpec struct {
	// The name of this GatewayClass.
	Name string `json:"name"`

	// Reference to a custom EnvoyProxy resource to use as the base EnvoyProxy configuration for
	// this GatewayClass.  When specified, must identify an EnvoyProxy resource.
	//
	// When not specified, the Tigera operator uses an empty EnvoyProxy resource as its base.
	//
	// Starting from that base, the Tigera operator copies and modifies the EnvoyProxy resource
	// as follows, in the order described:
	//
	// 1. It configures the `tigera/envoy-proxy` image that will be used (according to the
	// current Calico version, private registry and image set settings) and any pull secrets
	// that are needed to pull that image.
	//
	// 2. It applies customizations as specified by the following `GatewayKind`,
	// `GatewayDeployment`, `GatewayDaemonSet` and `GatewayService` fields.
	//
	// The resulting EnvoyProxy is provisioned in the `tigera-gateway` namespace, together with
	// a GatewayClass that references it.
	//
	// If a custom EnvoyProxy resource is specified and uses `EnvoyDaemonSet` instead of the
	// default `EnvoyDeployment`, deployment-related customizations will be applied within
	// `EnvoyDaemonSet` instead of within `EnvoyDeployment`.
	// +optional
	EnvoyProxyRef *NamespacedName `json:"envoyProxyRef,omitempty"`

	// Specifies whether Gateways in this class are deployed as Deployments (default) or as
	// DaemonSets.  It is an error for GatewayKind to specify a choice that is incompatible with
	// the custom EnvoyProxy, when EnvoyProxyRef is also specified.
	// +optional
	GatewayKind *GatewayKind `json:"gatewayKind,omitempty"`

	// Allows customization of Gateways when deployed as Kubernetes Deployments, for Gateways in
	// this GatewayClass.
	// +optional
	GatewayDeployment *GatewayDeployment `json:"gatewayDeployment,omitempty"`

	// Allows customization of Gateways when deployed as Kubernetes DaemonSets, for Gateways in
	// this GatewayClass.
	// +optional
	GatewayDaemonSet *GatewayDaemonSet `json:"gatewayDaemonSet,omitempty"`

	// Allows customization of gateway services, for Gateways in this GatewayClass.
	// +optional
	GatewayService *GatewayService `json:"gatewayService,omitempty"`
}

func (*GatewayClassSpec) DeepCopy

func (in *GatewayClassSpec) DeepCopy() *GatewayClassSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayClassSpec.

func (*GatewayClassSpec) DeepCopyInto

func (in *GatewayClassSpec) DeepCopyInto(out *GatewayClassSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayControllerDeployment

type GatewayControllerDeployment struct {
	// If non-nil, non-clashing labels and annotations from this metadata are added into the
	// deployment's top-level metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// +optional
	Spec *GatewayControllerDeploymentSpec `json:"spec,omitempty"`
}

GatewayControllerDeployment allows customization of the gateway controller deployment.

func (*GatewayControllerDeployment) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayControllerDeployment.

func (*GatewayControllerDeployment) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayControllerDeploymentContainer

type GatewayControllerDeploymentContainer struct {
	// +kubebuilder:validation:Enum=envoy-gateway
	Name string `json:"name"`

	// If non-nil, Resources sets the ResourceRequirements of the controller's "envoy-gateway"
	// container.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

GatewayControllerDeploymentContainer allows customization of the gateway controller's resource requirements.

func (*GatewayControllerDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayControllerDeploymentContainer.

func (*GatewayControllerDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayControllerDeploymentPodSpec

type GatewayControllerDeploymentPodSpec struct {
	// If non-nil, Affinity sets the affinity field of the deployment's pod template.
	// +optional
	Affinity *v1.Affinity `json:"affinity"`

	// +optional
	Containers []GatewayControllerDeploymentContainer `json:"containers,omitempty"`

	// If non-nil, NodeSelector sets the node selector for where deployment pods may be
	// scheduled.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// If non-nil, TopologySpreadConstraints sets the topology spread constraints of the
	// deployment's pod template.  TopologySpreadConstraints describes how a group of pods ought
	// to spread across topology domains. Scheduler will schedule pods in a way which abides by
	// the constraints.  All topologySpreadConstraints are ANDed.
	// +optional
	TopologySpreadConstraints []v1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`

	// If non-nil, Tolerations sets the tolerations field of the deployment's pod template.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations"`
}

GatewayControllerDeploymentPodSpec allows customization of the gateway controller deployment pod spec.

func (*GatewayControllerDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayControllerDeploymentPodSpec.

func (*GatewayControllerDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayControllerDeploymentPodTemplate

type GatewayControllerDeploymentPodTemplate struct {
	// If non-nil, non-clashing labels and annotations from this metadata are added into the
	// deployment's pod template.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// +optional
	Spec *GatewayControllerDeploymentPodSpec `json:"spec,omitempty"`
}

GatewayControllerDeploymentPodTemplate allows customization of the gateway controller deployment pod template.

func (*GatewayControllerDeploymentPodTemplate) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayControllerDeploymentPodTemplate.

func (*GatewayControllerDeploymentPodTemplate) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayControllerDeploymentSpec

type GatewayControllerDeploymentSpec struct {
	// If non-nil, Replicas sets the number of replicas for the deployment.
	// +optional
	Replicas *int32 `json:"replicas,omitempty"`

	// If non-nil, MinReadySeconds sets the minReadySeconds field for the deployment.
	// +optional
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	MinReadySeconds *int32 `json:"minReadySeconds,omitempty"`

	// +optional
	Template *GatewayControllerDeploymentPodTemplate `json:"template,omitempty"`
}

GatewayControllerDeploymentSpec allows customization of the gateway controller deployment spec.

func (*GatewayControllerDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayControllerDeploymentSpec.

func (*GatewayControllerDeploymentSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayDaemonSet

type GatewayDaemonSet struct {
	// +optional
	Spec *GatewayDaemonSetSpec `json:"spec,omitempty"`
}

GatewayDeployment allows customization of Gateways when deployed as Kubernetes DaemonSets.

func (*GatewayDaemonSet) DeepCopy

func (in *GatewayDaemonSet) DeepCopy() *GatewayDaemonSet

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayDaemonSet.

func (*GatewayDaemonSet) DeepCopyInto

func (in *GatewayDaemonSet) DeepCopyInto(out *GatewayDaemonSet)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayDaemonSetContainer

type GatewayDaemonSetContainer struct {
	// +kubebuilder:validation:Enum=envoy
	Name string `json:"name"`

	// If non-nil, Resources sets the ResourceRequirements of the daemonset's "envoy"
	// container.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

GatewayDaemonSetContainer allows customization of the resource requirements of gateway daemonsets.

func (*GatewayDaemonSetContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayDaemonSetContainer.

func (*GatewayDaemonSetContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayDaemonSetPodSpec

type GatewayDaemonSetPodSpec struct {
	// If non-nil, Affinity sets the affinity field of the daemonset's pod template.
	// +optional
	Affinity *v1.Affinity `json:"affinity"`

	// +optional
	Containers []GatewayDaemonSetContainer `json:"containers,omitempty"`

	// If non-nil, NodeSelector sets the node selector for where daemonset pods may be
	// scheduled.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// If non-nil, TopologySpreadConstraints sets the topology spread constraints of the
	// daemonset's pod template.  TopologySpreadConstraints describes how a group of pods ought
	// to spread across topology domains. Scheduler will schedule pods in a way which abides by
	// the constraints.  All topologySpreadConstraints are ANDed.
	// +optional
	TopologySpreadConstraints []v1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`

	// If non-nil, Tolerations sets the tolerations field of the daemonset's pod template.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations"`
}

GatewayDaemonSetPodSpec allows customization of the pod spec of gateway daemonsets.

func (*GatewayDaemonSetPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayDaemonSetPodSpec.

func (*GatewayDaemonSetPodSpec) DeepCopyInto

func (in *GatewayDaemonSetPodSpec) DeepCopyInto(out *GatewayDaemonSetPodSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayDaemonSetPodTemplate

type GatewayDaemonSetPodTemplate struct {
	// If non-nil, non-clashing labels and annotations from this metadata are added into each
	// daemonset's pod template.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// +optional
	Spec *GatewayDaemonSetPodSpec `json:"spec,omitempty"`
}

GatewayDeploymentPodTemplate allows customization of the pod template of gateway daemonsets.

func (*GatewayDaemonSetPodTemplate) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayDaemonSetPodTemplate.

func (*GatewayDaemonSetPodTemplate) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayDaemonSetSpec

type GatewayDaemonSetSpec struct {
	// +optional
	Template *GatewayDaemonSetPodTemplate `json:"template,omitempty"`
}

GatewayDeploymentSpec allows customization of the spec of gateway daemonsets.

func (*GatewayDaemonSetSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayDaemonSetSpec.

func (*GatewayDaemonSetSpec) DeepCopyInto

func (in *GatewayDaemonSetSpec) DeepCopyInto(out *GatewayDaemonSetSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayDeployment

type GatewayDeployment struct {
	// +optional
	Spec *GatewayDeploymentSpec `json:"spec,omitempty"`
}

GatewayDeployment allows customization of Gateways when deployed as Kubernetes Deployments.

func (*GatewayDeployment) DeepCopy

func (in *GatewayDeployment) DeepCopy() *GatewayDeployment

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayDeployment.

func (*GatewayDeployment) DeepCopyInto

func (in *GatewayDeployment) DeepCopyInto(out *GatewayDeployment)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayDeploymentContainer

type GatewayDeploymentContainer struct {
	// +kubebuilder:validation:Enum=envoy
	Name string `json:"name"`

	// If non-nil, Resources sets the ResourceRequirements of the deployment's "envoy"
	// container.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

GatewayDeploymentContainer allows customization of the resource requirements of gateway deployments.

func (*GatewayDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayDeploymentContainer.

func (*GatewayDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayDeploymentPodSpec

type GatewayDeploymentPodSpec struct {
	// If non-nil, Affinity sets the affinity field of the deployment's pod template.
	// +optional
	Affinity *v1.Affinity `json:"affinity"`

	// +optional
	Containers []GatewayDeploymentContainer `json:"containers,omitempty"`

	// If non-nil, NodeSelector sets the node selector for where deployment pods may be
	// scheduled.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// If non-nil, TopologySpreadConstraints sets the topology spread constraints of the
	// deployment's pod template.  TopologySpreadConstraints describes how a group of pods ought
	// to spread across topology domains. Scheduler will schedule pods in a way which abides by
	// the constraints.  All topologySpreadConstraints are ANDed.
	// +optional
	TopologySpreadConstraints []v1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`

	// If non-nil, Tolerations sets the tolerations field of the deployment's pod template.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations"`
}

GatewayDeploymentPodSpec allows customization of the pod spec of gateway deployments.

func (*GatewayDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayDeploymentPodSpec.

func (*GatewayDeploymentPodSpec) DeepCopyInto

func (in *GatewayDeploymentPodSpec) DeepCopyInto(out *GatewayDeploymentPodSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayDeploymentPodTemplate

type GatewayDeploymentPodTemplate struct {
	// If non-nil, non-clashing labels and annotations from this metadata are added into each
	// deployment's pod template.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// +optional
	Spec *GatewayDeploymentPodSpec `json:"spec,omitempty"`
}

GatewayDeploymentPodTemplate allows customization of the pod template of gateway deployments.

func (*GatewayDeploymentPodTemplate) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayDeploymentPodTemplate.

func (*GatewayDeploymentPodTemplate) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayDeploymentSpec

type GatewayDeploymentSpec struct {
	// If non-nil, Replicas sets the number of replicas for the deployment.
	// +optional
	Replicas *int32 `json:"replicas,omitempty"`

	// +optional
	Template *GatewayDeploymentPodTemplate `json:"template,omitempty"`

	// The deployment strategy to use to replace existing pods with new ones.
	// +optional
	// +patchStrategy=retainKeys
	Strategy *GatewayDeploymentStrategy `json:"strategy,omitempty" patchStrategy:"retainKeys" protobuf:"bytes,4,opt,name=strategy"`
}

GatewayDeploymentSpec allows customization of the spec of gateway deployments.

func (*GatewayDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayDeploymentSpec.

func (*GatewayDeploymentSpec) DeepCopyInto

func (in *GatewayDeploymentSpec) DeepCopyInto(out *GatewayDeploymentSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayDeploymentStrategy

type GatewayDeploymentStrategy struct {
	// +optional
	RollingUpdate *appsv1.RollingUpdateDeployment `json:"rollingUpdate,omitempty" protobuf:"bytes,2,opt,name=rollingUpdate"`
}

GatewayDeploymentStrategy allows customization of the deployment strategy for gateway deployments.

If GatewayDeployment.Spec.Strategy is non-nil, gateway deployments are set to use a rolling update strategy, with the parameters specified in GatewayDeployment.Spec.Strategy.

Only RollingUpdate is supported at this time so the Type field is not exposed.

func (*GatewayDeploymentStrategy) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayDeploymentStrategy.

func (*GatewayDeploymentStrategy) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayKind

type GatewayKind string

+kubebuilder:validation:Enum=Deployment;DaemonSet

const (
	GatewayKindDeployment GatewayKind = "Deployment"
	GatewayKindDaemonSet  GatewayKind = "DaemonSet"
)

type GatewayService

type GatewayService struct {
	// If non-nil, non-clashing labels and annotations from this metadata are added into the
	// each Gateway Service's metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// +optional
	Spec *GatewayServiceSpec `json:"spec,omitempty"`
}

GatewayService allows customization of the Services that front Gateways.

func (*GatewayService) DeepCopy

func (in *GatewayService) DeepCopy() *GatewayService

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayService.

func (*GatewayService) DeepCopyInto

func (in *GatewayService) DeepCopyInto(out *GatewayService)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GatewayServiceSpec

type GatewayServiceSpec struct {
	// +optional
	LoadBalancerClass *string `json:"loadBalancerClass,omitempty"`

	// +optional
	AllocateLoadBalancerNodePorts *bool `json:"allocateLoadBalancerNodePorts,omitempty"`

	// +optional
	LoadBalancerSourceRanges []string `json:"loadBalancerSourceRanges,omitempty"`

	// +optional
	LoadBalancerIP *string `json:"loadBalancerIP,omitempty"`
}

GatewayServiceSpec allows customization of the services that front gateway deployments.

The LoadBalancer fields allow customization of the corresponding fields in the Kubernetes ServiceSpec. These can be used for some cloud-independent control of the external load balancer that is provisioned for each Gateway. For finer-grained cloud-specific control please use the Metadata.Annotations field in GatewayService.

func (*GatewayServiceSpec) DeepCopy

func (in *GatewayServiceSpec) DeepCopy() *GatewayServiceSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GatewayServiceSpec.

func (*GatewayServiceSpec) DeepCopyInto

func (in *GatewayServiceSpec) DeepCopyInto(out *GatewayServiceSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Goldmane

type Goldmane struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec GoldmaneSpec `json:"spec,omitempty"`

	Status GoldmaneStatus `json:"status,omitempty"`
}

func (*Goldmane) DeepCopy

func (in *Goldmane) DeepCopy() *Goldmane

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Goldmane.

func (*Goldmane) DeepCopyInto

func (in *Goldmane) DeepCopyInto(out *Goldmane)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Goldmane) DeepCopyObject

func (in *Goldmane) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type GoldmaneDeployment

type GoldmaneDeployment struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to the Deployment.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`
	// Spec is the specification of the goldmane Deployment.
	// +optional
	Spec *GoldmaneDeploymentSpec `json:"spec,omitempty"`
}

GoldmaneDeployment is the configuration for the goldmane Deployment.

func (*GoldmaneDeployment) DeepCopy

func (in *GoldmaneDeployment) DeepCopy() *GoldmaneDeployment

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoldmaneDeployment.

func (*GoldmaneDeployment) DeepCopyInto

func (in *GoldmaneDeployment) DeepCopyInto(out *GoldmaneDeployment)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GoldmaneDeploymentContainer

type GoldmaneDeploymentContainer struct {
	// +kubebuilder:validation:Enum=goldmane
	Name string `json:"name"`

	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
}

func (*GoldmaneDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoldmaneDeploymentContainer.

func (*GoldmaneDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GoldmaneDeploymentPodSpec

type GoldmaneDeploymentPodSpec struct {
	// Affinity is a group of affinity scheduling rules for the goldmane pods.
	// +optional
	Affinity *corev1.Affinity `json:"affinity"`
	// Containers is a list of goldmane containers.
	// If specified, this overrides the specified EGW Deployment containers.
	// If omitted, the goldmane Deployment will use its default values for its containers.
	// +optional
	Containers []GoldmaneDeploymentContainer `json:"containers,omitempty"`
	// NodeSelector gives more control over the nodes where the goldmane pods will run on.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`
	// TerminationGracePeriodSeconds defines the termination grace period of the goldmane pods in seconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	TerminationGracePeriodSeconds *int64 `json:"terminationGracePeriodSeconds,omitempty"`
	// TopologySpreadConstraints describes how a group of pods ought to spread across topology
	// domains. Scheduler will schedule pods in a way which abides by the constraints.
	// All topologySpreadConstraints are ANDed.
	// +optional
	TopologySpreadConstraints []corev1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`
	// Tolerations is the goldmane pod's tolerations.
	// If specified, this overrides any tolerations that may be set on the goldmane Deployment.
	// If omitted, the goldmane Deployment will use its default value for tolerations.
	// +optional
	Tolerations []corev1.Toleration `json:"tolerations"`
	// PriorityClassName allows to specify a PriorityClass resource to be used.
	// +optional
	PriorityClassName string `json:"priorityClassName,omitempty"`
}

GoldmaneDeploymentPodSpec is the goldmane Deployment's PodSpec.

func (*GoldmaneDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoldmaneDeploymentPodSpec.

func (*GoldmaneDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GoldmaneDeploymentPodTemplateSpec

type GoldmaneDeploymentPodTemplateSpec struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to the pod's metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`
	// Spec is the goldmane Deployment's PodSpec.
	// +optional
	Spec *GoldmaneDeploymentPodSpec `json:"spec,omitempty"`
}

GoldmaneDeploymentPodTemplateSpec is the goldmane Deployment's PodTemplateSpec

func (*GoldmaneDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoldmaneDeploymentPodTemplateSpec.

func (*GoldmaneDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GoldmaneDeploymentSpec

type GoldmaneDeploymentSpec struct {
	// MinReadySeconds is the minimum number of seconds for which a newly created Deployment pod should
	// be ready without any of its container crashing, for it to be considered available.
	// If specified, this overrides any minReadySeconds value that may be set on the goldmane Deployment.
	// If omitted, the goldmane Deployment will use its default value for minReadySeconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	MinReadySeconds *int32 `json:"minReadySeconds,omitempty"`

	// Template describes the goldmane Deployment pod that will be created.
	// +optional
	Template *GoldmaneDeploymentPodTemplateSpec `json:"template,omitempty"`
	// The deployment strategy to use to replace existing pods with new ones.
	// +optional
	// +patchStrategy=retainKeys
	Strategy *GoldmaneDeploymentStrategy `json:"strategy,omitempty" patchStrategy:"retainKeys" protobuf:"bytes,4,opt,name=strategy"`
}

GoldmaneDeploymentSpec defines configuration for the goldmane Deployment.

func (*GoldmaneDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoldmaneDeploymentSpec.

func (*GoldmaneDeploymentSpec) DeepCopyInto

func (in *GoldmaneDeploymentSpec) DeepCopyInto(out *GoldmaneDeploymentSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GoldmaneDeploymentStrategy

type GoldmaneDeploymentStrategy struct {
	// Rolling update config params. Present only if DeploymentStrategyType =
	// RollingUpdate.
	// to be.
	// +optional
	RollingUpdate *appsv1.RollingUpdateDeployment `json:"rollingUpdate,omitempty" protobuf:"bytes,2,opt,name=rollingUpdate"`
}

func (*GoldmaneDeploymentStrategy) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoldmaneDeploymentStrategy.

func (*GoldmaneDeploymentStrategy) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GoldmaneList

type GoldmaneList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Goldmane `json:"items"`
}

GoldmaneList contains a list of Whisker.

func (*GoldmaneList) DeepCopy

func (in *GoldmaneList) DeepCopy() *GoldmaneList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoldmaneList.

func (*GoldmaneList) DeepCopyInto

func (in *GoldmaneList) DeepCopyInto(out *GoldmaneList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*GoldmaneList) DeepCopyObject

func (in *GoldmaneList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type GoldmaneSpec

type GoldmaneSpec struct {
	GoldmaneDeployment *GoldmaneDeployment `json:"goldmaneDeployment,omitempty"`
}

func (*GoldmaneSpec) DeepCopy

func (in *GoldmaneSpec) DeepCopy() *GoldmaneSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoldmaneSpec.

func (*GoldmaneSpec) DeepCopyInto

func (in *GoldmaneSpec) DeepCopyInto(out *GoldmaneSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GoldmaneStatus

type GoldmaneStatus struct {
	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

GoldmaneStatus defines the observed state of Goldmane

func (*GoldmaneStatus) DeepCopy

func (in *GoldmaneStatus) DeepCopy() *GoldmaneStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GoldmaneStatus.

func (*GoldmaneStatus) DeepCopyInto

func (in *GoldmaneStatus) DeepCopyInto(out *GoldmaneStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GroupSearch

type GroupSearch struct {
	// BaseDN to start the search from. For example "cn=groups,dc=example,dc=com"
	// +required
	BaseDN string `json:"baseDN"`

	// Optional filter to apply when searching the directory.
	// For example "(objectClass=posixGroup)"
	// +optional
	Filter string `json:"filter,omitempty"`

	// The attribute of the group that represents its name. This attribute can be used to apply RBAC to a user group.
	// +required
	NameAttribute string `json:"nameAttribute"`

	// Following list contains field pairs that are used to match a user to a group. It adds an additional
	// requirement to the filter that an attribute in the group must match the user's
	// attribute value.
	// +required
	UserMatchers []UserMatch `json:"userMatchers"`
}

Group search configuration to find the groups that a user is in.

func (*GroupSearch) DeepCopy

func (in *GroupSearch) DeepCopy() *GroupSearch

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GroupSearch.

func (*GroupSearch) DeepCopyInto

func (in *GroupSearch) DeepCopyInto(out *GroupSearch)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GuardianDeployment

type GuardianDeployment struct {

	// Spec is the specification of the guardian Deployment.
	// +optional
	Spec *GuardianDeploymentSpec `json:"spec,omitempty"`
}

GuardianDeployment is the configuration for the guardian Deployment.

func (*GuardianDeployment) DeepCopy

func (in *GuardianDeployment) DeepCopy() *GuardianDeployment

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GuardianDeployment.

func (*GuardianDeployment) DeepCopyInto

func (in *GuardianDeployment) DeepCopyInto(out *GuardianDeployment)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GuardianDeploymentContainer

type GuardianDeploymentContainer struct {
	// Name is an enum which identifies the guardian Deployment container by name.
	// Supported values are: tigera-guardian
	// +kubebuilder:validation:Enum=tigera-guardian
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named guardian Deployment container's resources.
	// If omitted, the guardian Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

GuardianDeploymentContainer is a guardian Deployment container.

func (*GuardianDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GuardianDeploymentContainer.

func (*GuardianDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GuardianDeploymentInitContainer

type GuardianDeploymentInitContainer struct {
	// Name is an enum which identifies the guardian Deployment init container by name.
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named guardian Deployment init container's resources.
	// If omitted, the guardian Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

GuardianDeploymentInitContainer is a guardian Deployment init container.

func (*GuardianDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GuardianDeploymentInitContainer.

func (*GuardianDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GuardianDeploymentPodSpec

type GuardianDeploymentPodSpec struct {
	// InitContainers is a list of guardian init containers.
	// If specified, this overrides the specified guardian Deployment init containers.
	// If omitted, the guardian Deployment will use its default values for its init containers.
	// +optional
	InitContainers []GuardianDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of guardian containers.
	// If specified, this overrides the specified guardian Deployment containers.
	// If omitted, the guardian Deployment will use its default values for its containers.
	// +optional
	Containers []GuardianDeploymentContainer `json:"containers,omitempty"`
}

GuardianDeploymentPodSpec is the guardian Deployment's PodSpec.

func (*GuardianDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GuardianDeploymentPodSpec.

func (*GuardianDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GuardianDeploymentPodTemplateSpec

type GuardianDeploymentPodTemplateSpec struct {

	// Spec is the guardian Deployment's PodSpec.
	// +optional
	Spec *GuardianDeploymentPodSpec `json:"spec,omitempty"`
}

GuardianDeploymentPodTemplateSpec is the guardian Deployment's PodTemplateSpec

func (*GuardianDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GuardianDeploymentPodTemplateSpec.

func (*GuardianDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type GuardianDeploymentSpec

type GuardianDeploymentSpec struct {

	// Template describes the guardian Deployment pod that will be created.
	// +optional
	Template *GuardianDeploymentPodTemplateSpec `json:"template,omitempty"`
}

GuardianDeploymentSpec defines configuration for the guardian Deployment.

func (*GuardianDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GuardianDeploymentSpec.

func (*GuardianDeploymentSpec) DeepCopyInto

func (in *GuardianDeploymentSpec) DeepCopyInto(out *GuardianDeploymentSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type HTTPProbe

type HTTPProbe struct {
	// URLs define the list of HTTP probe URLs. Egress Gateway will probe each URL
	// periodically.If all probes fail, Egress Gateway will report non-ready.
	// +required
	URLs []string `json:"urls"`

	// IntervalSeconds defines the interval of HTTP probes. Used when URLs is non-empty.
	// Default: 10
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	// +kubebuilder:default:=10
	// +optional
	IntervalSeconds *int32 `json:"intervalSeconds,omitempty"`

	// TimeoutSeconds defines the timeout value of HTTP probes. Used when URLs is non-empty.
	// Default: 30
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	// +kubebuilder:default:=30
	// +optional
	TimeoutSeconds *int32 `json:"timeoutSeconds,omitempty"`
}

HTTPProbe defines the HTTP probe configuration for Egress Gateway.

func (*HTTPProbe) DeepCopy

func (in *HTTPProbe) DeepCopy() *HTTPProbe

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HTTPProbe.

func (*HTTPProbe) DeepCopyInto

func (in *HTTPProbe) DeepCopyInto(out *HTTPProbe)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type HostPortsType

type HostPortsType string

HostPortsType specifies host port support.

One of: Enabled, Disabled

const (
	HostPortsEnabled  HostPortsType = "Enabled"
	HostPortsDisabled HostPortsType = "Disabled"
)

func HostPortsTypePtr

func HostPortsTypePtr(h HostPortsType) *HostPortsType

func (HostPortsType) String

func (nt HostPortsType) String() string

type HostScope

type HostScope string

HostScope determines the set of hosts that forward logs to a given store. +kubebuilder:default=All +kubebuilder:validation:Enum=All;NonClusterOnly +optional

const (
	HostScopeAll            HostScope = "All"
	HostScopeNonClusterOnly HostScope = "NonClusterOnly"
)

type ICMPProbe

type ICMPProbe struct {
	// IPs define the list of ICMP probe IPs. Egress Gateway will probe each IP
	// periodically. If all probes fail, Egress Gateway will report non-ready.
	// +required
	IPs []string `json:"ips"`

	// IntervalSeconds defines the interval of ICMP probes. Used when IPs is non-empty.
	// Default: 5
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	// +kubebuilder:default:=5
	// +optional
	IntervalSeconds *int32 `json:"intervalSeconds,omitempty"`

	// TimeoutSeconds defines the timeout value of ICMP probes. Used when IPs is non-empty.
	// Default: 15
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	// +kubebuilder:default:=15
	// +optional
	TimeoutSeconds *int32 `json:"timeoutSeconds,omitempty"`
}

ICMPProbe defines the ICMP probe configuration for Egress Gateway.

func (*ICMPProbe) DeepCopy

func (in *ICMPProbe) DeepCopy() *ICMPProbe

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ICMPProbe.

func (*ICMPProbe) DeepCopyInto

func (in *ICMPProbe) DeepCopyInto(out *ICMPProbe)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IPAMPluginType

type IPAMPluginType string
const (
	IPAMPluginCalico    IPAMPluginType = "Calico"
	IPAMPluginHostLocal IPAMPluginType = "HostLocal"
	IPAMPluginAmazonVPC IPAMPluginType = "AmazonVPC"
	IPAMPluginAzureVNET IPAMPluginType = "AzureVNET"
)

func (IPAMPluginType) String

func (cp IPAMPluginType) String() string

type IPAMSpec

type IPAMSpec struct {
	// Specifies the IPAM plugin that will be used in the Calico or Calico Enterprise installation.
	// * For CNI Plugin Calico, this field defaults to Calico.
	// * For CNI Plugin GKE, this field defaults to HostLocal.
	// * For CNI Plugin AzureVNET, this field defaults to AzureVNET.
	// * For CNI Plugin AmazonVPC, this field defaults to AmazonVPC.
	//
	// The IPAM plugin is installed and configured only if the CNI plugin is set to Calico,
	// for all other values of the CNI plugin the plugin binaries and CNI config is a dependency
	// that is expected to be installed separately.
	//
	// Default: Calico
	// +kubebuilder:validation:Enum=Calico;HostLocal;AmazonVPC;AzureVNET
	Type IPAMPluginType `json:"type"`
}

IPAMSpec contains configuration for pod IP address management.

func (*IPAMSpec) DeepCopy

func (in *IPAMSpec) DeepCopy() *IPAMSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IPAMSpec.

func (*IPAMSpec) DeepCopyInto

func (in *IPAMSpec) DeepCopyInto(out *IPAMSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IPPool

type IPPool struct {
	// Name is the name of the IP pool. If omitted, this will be generated.
	Name string `json:"name,omitempty"`

	// CIDR contains the address range for the IP Pool in classless inter-domain routing format.
	CIDR string `json:"cidr"`

	// Encapsulation specifies the encapsulation type that will be used with
	// the IP Pool.
	// Default: IPIP
	// +optional
	// +kubebuilder:validation:Enum=IPIPCrossSubnet;IPIP;VXLAN;VXLANCrossSubnet;None
	Encapsulation EncapsulationType `json:"encapsulation,omitempty"`

	// NATOutgoing specifies if NAT will be enabled or disabled for outgoing traffic.
	// Default: Enabled
	// +optional
	// +kubebuilder:validation:Enum=Enabled;Disabled
	NATOutgoing NATOutgoingType `json:"natOutgoing,omitempty"`

	// NodeSelector specifies the node selector that will be set for the IP Pool.
	// Default: 'all()'
	// +optional
	NodeSelector string `json:"nodeSelector,omitempty"`

	// BlockSize specifies the CIDR prefex length to use when allocating per-node IP blocks from
	// the main IP pool CIDR.
	// Default: 26 (IPv4), 122 (IPv6)
	// +optional
	BlockSize *int32 `json:"blockSize,omitempty"`

	// DisableBGPExport specifies whether routes from this IP pool's CIDR are exported over BGP.
	// Default: false
	// +optional
	// +kubebuilder:default:=false
	DisableBGPExport *bool `json:"disableBGPExport,omitempty"`

	// DisableNewAllocations specifies whether or not new IP allocations are allowed from this pool.
	// This is useful when you want to prevent new pods from receiving IP addresses from this pool, without
	// impacting any existing pods that have already been assigned addresses from this pool.
	DisableNewAllocations *bool `json:"disableNewAllocations,omitempty"`

	// AllowedUse controls what the IP pool will be used for.  If not specified or empty, defaults to
	// ["Tunnel", "Workload"] for back-compatibility
	AllowedUses []IPPoolAllowedUse `json:"allowedUses,omitempty" validate:"omitempty"`

	// AssignmentMode determines if IP addresses from this pool should be  assigned automatically or on request only
	AssignmentMode AssignmentMode `json:"assignmentMode,omitempty" validate:"omitempty,assignmentMode"`
}

func (*IPPool) DeepCopy

func (in *IPPool) DeepCopy() *IPPool

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IPPool.

func (*IPPool) DeepCopyInto

func (in *IPPool) DeepCopyInto(out *IPPool)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IPPoolAllowedUse

type IPPoolAllowedUse string
const (
	IPPoolAllowedUseWorkload     IPPoolAllowedUse = "Workload"
	IPPoolAllowedUseTunnel       IPPoolAllowedUse = "Tunnel"
	IPPoolAllowedUseLoadBalancer IPPoolAllowedUse = "LoadBalancer"
)

type Image

type Image struct {
	// Image is an image that the operator deploys and instead of using the built in tag
	// the operator will use the Digest for the image identifier.
	// The value should be the *original* image name without registry or tag or digest.
	// For the image `docker.io/calico/node:v3.17.1` it should be represented as `calico/node`
	// The "Installation" spec allows defining custom image registries, paths or prefixes.
	// Even for custom images such as example.com/custompath/customprefix-calico-node:v3.17.1,
	// this value should still be `calico/node`.
	Image string `json:"image"`

	// Digest is the image identifier that will be used for the Image.
	// The field should not include a leading `@` and must be prefixed with `sha256:`.
	Digest string `json:"digest"`
}

func (*Image) DeepCopy

func (in *Image) DeepCopy() *Image

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Image.

func (*Image) DeepCopyInto

func (in *Image) DeepCopyInto(out *Image)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ImageSet

type ImageSet struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec ImageSetSpec `json:"spec,omitempty"`
}

ImageSet is used to specify image digests for the images that the operator deploys. The name of the ImageSet is expected to be in the format `<variant>-<release>`. The `variant` used is `enterprise` if the InstallationSpec Variant is `TigeraSecureEnterprise` otherwise it is `calico`. The `release` must match the version of the variant that the operator is built to deploy, this version can be obtained by passing the `--version` flag to the operator binary.

func (*ImageSet) DeepCopy

func (in *ImageSet) DeepCopy() *ImageSet

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageSet.

func (*ImageSet) DeepCopyInto

func (in *ImageSet) DeepCopyInto(out *ImageSet)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ImageSet) DeepCopyObject

func (in *ImageSet) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ImageSetList

type ImageSetList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ImageSet `json:"items"`
}

ImageSetList contains a list of ImageSet

func (*ImageSetList) DeepCopy

func (in *ImageSetList) DeepCopy() *ImageSetList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageSetList.

func (*ImageSetList) DeepCopyInto

func (in *ImageSetList) DeepCopyInto(out *ImageSetList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ImageSetList) DeepCopyObject

func (in *ImageSetList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ImageSetSpec

type ImageSetSpec struct {
	// Images is the list of images to use digests. All images that the operator will deploy
	// must be specified.
	Images []Image `json:"images,omitempty"`
}

ImageSetSpec defines the desired state of ImageSet.

func (*ImageSetSpec) DeepCopy

func (in *ImageSetSpec) DeepCopy() *ImageSetSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ImageSetSpec.

func (*ImageSetSpec) DeepCopyInto

func (in *ImageSetSpec) DeepCopyInto(out *ImageSetSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Impersonation

type Impersonation struct {
	// Users is a list of users that can be impersonated. An empty list infers all users can be impersonated, a null
	// value means none.
	// +optional
	Users []string `json:"users"`

	// Groups is a list of group names that can be impersonated. An empty list infers all groups can be impersonated,
	// a null values means none.
	// +optional
	Groups []string `json:"groups"`

	// ServiceAccounts is a list of service account names that can be impersonated. An empty list infers all service accounts can
	// be impersonated, a null values means none.
	// +optional
	ServiceAccounts []string `json:"serviceAccounts"`
}

Impersonation defines the rules for allowing impersonation.

func (*Impersonation) DeepCopy

func (in *Impersonation) DeepCopy() *Impersonation

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Impersonation.

func (*Impersonation) DeepCopyInto

func (in *Impersonation) DeepCopyInto(out *Impersonation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Index

type Index struct {
	// BaseIndexName defines the name of the index
	// that will be used to store data (this name
	// excludes the numerical identifier suffix)
	BaseIndexName string `json:"baseIndexName"`

	// DataType represents the type of data stored in the defined index
	DataType DataType `json:"dataType"`
}

Index defines how to store a tenant's data

func (*Index) DeepCopy

func (in *Index) DeepCopy() *Index

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Index.

func (*Index) DeepCopyInto

func (in *Index) DeepCopyInto(out *Index)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Index) EnvVar

func (i *Index) EnvVar() corev1.EnvVar

type Indices

type Indices struct {
	// Replicas defines how many replicas each index will have. See https://www.elastic.co/guide/en/elasticsearch/reference/current/scalability.html
	// +optional
	Replicas *int32 `json:"replicas,omitempty"`
}

Indices defines the configuration for the indices in an Elasticsearch cluster.

func (*Indices) DeepCopy

func (in *Indices) DeepCopy() *Indices

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Indices.

func (*Indices) DeepCopyInto

func (in *Indices) DeepCopyInto(out *Indices)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Installation

type Installation struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state for the Calico or Calico Enterprise installation.
	Spec InstallationSpec `json:"spec,omitempty"`
	// Most recently observed state for the Calico or Calico Enterprise installation.
	Status InstallationStatus `json:"status,omitempty"`
}

Installation configures an installation of Calico or Calico Enterprise. At most one instance of this resource is supported. It must be named "default". The Installation API installs core networking and network policy components, and provides general install-time configuration.

func (*Installation) DeepCopy

func (in *Installation) DeepCopy() *Installation

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Installation.

func (*Installation) DeepCopyInto

func (in *Installation) DeepCopyInto(out *Installation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Installation) DeepCopyObject

func (in *Installation) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type InstallationList

type InstallationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Installation `json:"items"`
}

InstallationList contains a list of Installation

func (*InstallationList) DeepCopy

func (in *InstallationList) DeepCopy() *InstallationList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InstallationList.

func (*InstallationList) DeepCopyInto

func (in *InstallationList) DeepCopyInto(out *InstallationList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*InstallationList) DeepCopyObject

func (in *InstallationList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type InstallationSpec

type InstallationSpec struct {
	// Variant is the product to install - one of Calico or TigeraSecureEnterprise
	// Default: Calico
	// +optional
	// +kubebuilder:validation:Enum=Calico;TigeraSecureEnterprise
	Variant ProductVariant `json:"variant,omitempty"`

	// Registry is the default Docker registry used for component Docker images.
	// If specified then the given value must end with a slash character (`/`) and all images will be pulled from this registry.
	// If not specified then the default registries will be used. A special case value, UseDefault, is
	// supported to explicitly specify the default registries will be used.
	//
	// Image format:
	//    `<registry><imagePath>/<imagePrefix><imageName>:<image-tag>`
	//
	// This option allows configuring the `<registry>` portion of the above format.
	// +optional
	Registry string `json:"registry,omitempty"`

	// ImagePath allows for the path part of an image to be specified. If specified
	// then the specified value will be used as the image path for each image. If not specified
	// or empty, the default for each image will be used.
	// A special case value, UseDefault, is supported to explicitly specify the default
	// image path will be used for each image.
	//
	// Image format:
	//    `<registry><imagePath>/<imagePrefix><imageName>:<image-tag>`
	//
	// This option allows configuring the `<imagePath>` portion of the above format.
	// +optional
	ImagePath string `json:"imagePath,omitempty"`

	// ImagePrefix allows for the prefix part of an image to be specified. If specified
	// then the given value will be used as a prefix on each image. If not specified
	// or empty, no prefix will be used.
	// A special case value, UseDefault, is supported to explicitly specify the default
	// image prefix will be used for each image.
	//
	// Image format:
	//    `<registry><imagePath>/<imagePrefix><imageName>:<image-tag>`
	//
	// This option allows configuring the `<imagePrefix>` portion of the above format.
	// +optional
	ImagePrefix string `json:"imagePrefix,omitempty"`

	// ImagePullSecrets is an array of references to container registry pull secrets to use. These are
	// applied to all images to be pulled.
	// +optional
	ImagePullSecrets []v1.LocalObjectReference `json:"imagePullSecrets,omitempty"`

	// KubernetesProvider specifies a particular provider of the Kubernetes platform and enables provider-specific configuration.
	// If the specified value is empty, the Operator will attempt to automatically determine the current provider.
	// If the specified value is not empty, the Operator will still attempt auto-detection, but
	// will additionally compare the auto-detected value to the specified value to confirm they match.
	// +optional
	// +kubebuilder:validation:Enum="";EKS;GKE;AKS;OpenShift;DockerEnterprise;RKE2;TKG;Kind;
	KubernetesProvider Provider `json:"kubernetesProvider,omitempty"`

	// CNI specifies the CNI that will be used by this installation.
	// +optional
	CNI *CNISpec `json:"cni,omitempty"`

	// CalicoNetwork specifies networking configuration options for Calico.
	// +optional
	CalicoNetwork *CalicoNetworkSpec `json:"calicoNetwork,omitempty"`

	// Deprecated. Please use Installation.Spec.TyphaDeployment instead.
	// TyphaAffinity allows configuration of node affinity characteristics for Typha pods.
	// +optional
	TyphaAffinity *TyphaAffinity `json:"typhaAffinity,omitempty"`

	// ControlPlaneNodeSelector is used to select control plane nodes on which to run Calico
	// components. This is globally applied to all resources created by the operator excluding daemonsets.
	// +optional
	ControlPlaneNodeSelector map[string]string `json:"controlPlaneNodeSelector,omitempty"`

	// ControlPlaneTolerations specify tolerations which are then globally applied to all resources
	// created by the operator.
	// +optional
	ControlPlaneTolerations []v1.Toleration `json:"controlPlaneTolerations,omitempty"`

	// ControlPlaneReplicas defines how many replicas of the control plane core components will be deployed.
	// This field applies to all control plane components that support High Availability. Defaults to 2.
	// +optional
	ControlPlaneReplicas *int32 `json:"controlPlaneReplicas,omitempty"`

	// NodeMetricsPort specifies which port calico/node serves prometheus metrics on. By default, metrics are not enabled.
	// If specified, this overrides any FelixConfiguration resources which may exist. If omitted, then
	// prometheus metrics may still be configured through FelixConfiguration.
	// +optional
	NodeMetricsPort *int32 `json:"nodeMetricsPort,omitempty"`

	// TyphaMetricsPort specifies which port calico/typha serves prometheus metrics on. By default, metrics are not enabled.
	// +optional
	TyphaMetricsPort *int32 `json:"typhaMetricsPort,omitempty"`

	// FlexVolumePath optionally specifies a custom path for FlexVolume. If not specified, FlexVolume will be
	// enabled by default. If set to 'None', FlexVolume will be disabled. The default is based on the
	// kubernetesProvider.
	// +optional
	FlexVolumePath string `json:"flexVolumePath,omitempty"`

	// KubeletVolumePluginPath optionally specifies enablement of Calico CSI plugin. If not specified,
	// CSI will be enabled by default. If set to 'None', CSI will be disabled.
	// Default: /var/lib/kubelet
	// +optional
	KubeletVolumePluginPath string `json:"kubeletVolumePluginPath,omitempty"`

	// NodeUpdateStrategy can be used to customize the desired update strategy, such as the MaxUnavailable
	// field.
	// +optional
	NodeUpdateStrategy appsv1.DaemonSetUpdateStrategy `json:"nodeUpdateStrategy,omitempty"`

	// Deprecated. Please use CalicoNodeDaemonSet, TyphaDeployment, and KubeControllersDeployment.
	// ComponentResources can be used to customize the resource requirements for each component.
	// Node, Typha, and KubeControllers are supported for installations.
	// +optional
	ComponentResources []ComponentResource `json:"componentResources,omitempty"`

	// CertificateManagement configures pods to submit a CertificateSigningRequest to the certificates.k8s.io/v1 API in order
	// to obtain TLS certificates. This feature requires that you bring your own CSR signing and approval process, otherwise
	// pods will be stuck during initialization.
	// +optional
	CertificateManagement *CertificateManagement `json:"certificateManagement,omitempty"`

	// TLSCipherSuites defines the cipher suite list that the TLS protocol should use during secure communication.
	// +optional
	TLSCipherSuites TLSCipherSuites `json:"tlsCipherSuites,omitempty"`

	// NonPrivileged configures Calico to be run in non-privileged containers as non-root users where possible.
	// +optional
	NonPrivileged *NonPrivilegedType `json:"nonPrivileged,omitempty"`

	// CalicoNodeDaemonSet configures the calico-node DaemonSet. If used in
	// conjunction with the deprecated ComponentResources, then these overrides take precedence.
	// +optional
	CalicoNodeDaemonSet *CalicoNodeDaemonSet `json:"calicoNodeDaemonSet,omitempty"`

	// CSINodeDriverDaemonSet configures the csi-node-driver DaemonSet.
	// +optional
	CSINodeDriverDaemonSet *CSINodeDriverDaemonSet `json:"csiNodeDriverDaemonSet,omitempty"`

	// CalicoKubeControllersDeployment configures the calico-kube-controllers Deployment. If used in
	// conjunction with the deprecated ComponentResources, then these overrides take precedence.
	// +optional
	CalicoKubeControllersDeployment *CalicoKubeControllersDeployment `json:"calicoKubeControllersDeployment,omitempty"`

	// TyphaDeployment configures the typha Deployment. If used in conjunction with the deprecated
	// ComponentResources or TyphaAffinity, then these overrides take precedence.
	// +optional
	TyphaDeployment *TyphaDeployment `json:"typhaDeployment,omitempty"`

	// Deprecated. The CalicoWindowsUpgradeDaemonSet is deprecated and will be removed from the API in the future.
	// CalicoWindowsUpgradeDaemonSet configures the calico-windows-upgrade DaemonSet.
	CalicoWindowsUpgradeDaemonSet *CalicoWindowsUpgradeDaemonSet `json:"calicoWindowsUpgradeDaemonSet,omitempty"`

	// CalicoNodeWindowsDaemonSet configures the calico-node-windows DaemonSet.
	CalicoNodeWindowsDaemonSet *CalicoNodeWindowsDaemonSet `json:"calicoNodeWindowsDaemonSet,omitempty"`

	// FIPSMode uses images and features only that are using FIPS 140-2 validated cryptographic modules and standards.
	// Only supported for Variant=Calico.
	// Default: Disabled
	// +kubebuilder:validation:Enum=Enabled;Disabled
	// +optional
	FIPSMode *FIPSMode `json:"fipsMode,omitempty"`

	// Logging Configuration for Components
	// +optional
	Logging *Logging `json:"logging,omitempty"`

	// Windows Configuration
	// +optional
	WindowsNodes *WindowsNodeSpec `json:"windowsNodes,omitempty"`

	// Kubernetes Service CIDRs. Specifying this is required when using Calico for Windows.
	// +optional
	ServiceCIDRs []string `json:"serviceCIDRs,omitempty"`

	// Azure is used to configure azure provider specific options.
	// +optional
	Azure *Azure `json:"azure,omitempty"`

	// Proxy is used to configure the HTTP(S) proxy settings that will be applied to Tigera containers that connect
	// to destinations outside the cluster. It is expected that NO_PROXY is configured such that destinations within
	// the cluster (including the API server) are exempt from proxying.
	// +optional
	Proxy *Proxy `json:"proxy,omitempty"`
}

InstallationSpec defines configuration for a Calico or Calico Enterprise installation.

func (*InstallationSpec) BPFEnabled

func (s *InstallationSpec) BPFEnabled() bool

BPFEnabled is an extension method that returns true if the Installation resource has Calico Network Linux Dataplane set and equal to value "BPF" otherwise false.

func (*InstallationSpec) BPFNetworkBootstrapEnabled

func (installation *InstallationSpec) BPFNetworkBootstrapEnabled() bool

func (*InstallationSpec) DeepCopy

func (in *InstallationSpec) DeepCopy() *InstallationSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InstallationSpec.

func (*InstallationSpec) DeepCopyInto

func (in *InstallationSpec) DeepCopyInto(out *InstallationSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*InstallationSpec) IsNftables

func (s *InstallationSpec) IsNftables() bool

IsNftables is an extension method that returns true if the Installation resource has Calico Network Linux Dataplane set and equal to value "Nftables" or "BPF", otherwise false.

BPF is included here as it uses nftables to program some rules, except when on DockerEE, since docker-ee programs some rules in iptables. These rules does not interact well with the nftable rules that calico programs, so we exclude BPF when on DockerEE.

func (*InstallationSpec) KubeProxyManagementEnabled

func (installation *InstallationSpec) KubeProxyManagementEnabled() bool

type InstallationStatus

type InstallationStatus struct {
	// Variant is the most recently observed installed variant - one of Calico or TigeraSecureEnterprise
	// +kubebuilder:validation:Enum=Calico;TigeraSecureEnterprise
	Variant ProductVariant `json:"variant,omitempty"`

	// MTU is the most recently observed value for pod network MTU. This may be an explicitly
	// configured value, or based on Calico's native auto-detetion.
	MTU int32 `json:"mtu,omitempty"`

	// ImageSet is the name of the ImageSet being used, if there is an ImageSet
	// that is being used. If an ImageSet is not being used then this will not be set.
	// +optional
	ImageSet string `json:"imageSet,omitempty"`

	// Computed is the final installation including overlaid resources.
	// +optional
	Computed *InstallationSpec `json:"computed,omitempty"`

	// CalicoVersion shows the current running version of calico.
	// CalicoVersion along with Variant is needed to know the exact
	// version deployed.
	CalicoVersion string `json:"calicoVersion,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

InstallationStatus defines the observed state of the Calico or Calico Enterprise installation.

func (*InstallationStatus) DeepCopy

func (in *InstallationStatus) DeepCopy() *InstallationStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new InstallationStatus.

func (*InstallationStatus) DeepCopyInto

func (in *InstallationStatus) DeepCopyInto(out *InstallationStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IntrusionDetection

type IntrusionDetection struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state for Tigera intrusion detection.
	Spec IntrusionDetectionSpec `json:"spec,omitempty"`
	// Most recently observed state for Tigera intrusion detection.
	Status IntrusionDetectionStatus `json:"status,omitempty"`
}

IntrusionDetection installs the components required for Tigera intrusion detection. At most one instance of this resource is supported. It must be named "tigera-secure".

func (*IntrusionDetection) DeepCopy

func (in *IntrusionDetection) DeepCopy() *IntrusionDetection

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IntrusionDetection.

func (*IntrusionDetection) DeepCopyInto

func (in *IntrusionDetection) DeepCopyInto(out *IntrusionDetection)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*IntrusionDetection) DeepCopyObject

func (in *IntrusionDetection) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type IntrusionDetectionComponentName

type IntrusionDetectionComponentName string
const (
	ComponentNameDeepPacketInspection IntrusionDetectionComponentName = "DeepPacketInspection"
)

type IntrusionDetectionComponentResource

type IntrusionDetectionComponentResource struct {
	// ComponentName is an enum which identifies the component
	// +kubebuilder:validation:Enum=DeepPacketInspection
	ComponentName IntrusionDetectionComponentName `json:"componentName"`
	// ResourceRequirements allows customization of limits and requests for compute resources such as cpu and memory.
	ResourceRequirements *corev1.ResourceRequirements `json:"resourceRequirements"`
}

The ComponentResource struct associates a ResourceRequirements with a component by name

func (*IntrusionDetectionComponentResource) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IntrusionDetectionComponentResource.

func (*IntrusionDetectionComponentResource) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IntrusionDetectionControllerDeployment

type IntrusionDetectionControllerDeployment struct {

	// Spec is the specification of the IntrusionDetectionController Deployment.
	// +optional
	Spec *IntrusionDetectionControllerDeploymentSpec `json:"spec,omitempty"`
}

IntrusionDetectionControllerDeployment is the configuration for the IntrusionDetectionController Deployment.

func (*IntrusionDetectionControllerDeployment) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IntrusionDetectionControllerDeployment.

func (*IntrusionDetectionControllerDeployment) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IntrusionDetectionControllerDeploymentContainer

type IntrusionDetectionControllerDeploymentContainer struct {
	// Name is an enum which identifies the IntrusionDetectionController Deployment container by name.
	// Supported values are: controller, webhooks-processor
	// +kubebuilder:validation:Enum=controller;webhooks-processor
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named IntrusionDetectionController Deployment container's resources.
	// If omitted, the IntrusionDetection Deployment will use its default value for this container's resources.
	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
}

IntrusionDetectionControllerDeploymentContainer is a IntrusionDetectionController Deployment container.

func (*IntrusionDetectionControllerDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IntrusionDetectionControllerDeploymentContainer.

func (*IntrusionDetectionControllerDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IntrusionDetectionControllerDeploymentInitContainer

type IntrusionDetectionControllerDeploymentInitContainer struct {
	// Name is an enum which identifies the IntrusionDetectionController Deployment init container by name.
	// Supported values are: intrusion-detection-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=intrusion-detection-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named IntrusionDetectionController Deployment init container's resources.
	// If omitted, the IntrusionDetectionController Deployment will use its default value for this init container's resources.
	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
}

IntrusionDetectionControllerDeploymentInitContainer is a IntrusionDetectionController Deployment init container.

func (*IntrusionDetectionControllerDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IntrusionDetectionControllerDeploymentInitContainer.

func (*IntrusionDetectionControllerDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IntrusionDetectionControllerDeploymentPodSpec

type IntrusionDetectionControllerDeploymentPodSpec struct {
	// InitContainers is a list of IntrusionDetectionController init containers.
	// If specified, this overrides the specified IntrusionDetectionController Deployment init containers.
	// If omitted, the IntrusionDetectionController Deployment will use its default values for its init containers.
	// +optional
	InitContainers []IntrusionDetectionControllerDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of IntrusionDetectionController containers.
	// If specified, this overrides the specified IntrusionDetectionController Deployment containers.
	// If omitted, the IntrusionDetectionController Deployment will use its default values for its containers.
	// +optional
	Containers []IntrusionDetectionControllerDeploymentContainer `json:"containers,omitempty"`
}

IntrusionDetectionControllerDeploymentPodSpec is the IntrusionDetectionController Deployment's PodSpec.

func (*IntrusionDetectionControllerDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IntrusionDetectionControllerDeploymentPodSpec.

func (*IntrusionDetectionControllerDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IntrusionDetectionControllerDeploymentPodTemplateSpec

type IntrusionDetectionControllerDeploymentPodTemplateSpec struct {

	// Spec is the IntrusionDetectionController Deployment's PodSpec.
	// +optional
	Spec *IntrusionDetectionControllerDeploymentPodSpec `json:"spec,omitempty"`
}

IntrusionDetectionControllerDeploymentPodTemplateSpec is the IntrusionDetectionController Deployment's PodTemplateSpec

func (*IntrusionDetectionControllerDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IntrusionDetectionControllerDeploymentPodTemplateSpec.

func (*IntrusionDetectionControllerDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IntrusionDetectionControllerDeploymentSpec

type IntrusionDetectionControllerDeploymentSpec struct {

	// Template describes the IntrusionDetectionController Deployment pod that will be created.
	// +optional
	Template *IntrusionDetectionControllerDeploymentPodTemplateSpec `json:"template,omitempty"`
}

IntrusionDetectionControllerDeploymentSpec defines configuration for the IntrusionDetectionController Deployment.

func (*IntrusionDetectionControllerDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IntrusionDetectionControllerDeploymentSpec.

func (*IntrusionDetectionControllerDeploymentSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IntrusionDetectionList

type IntrusionDetectionList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []IntrusionDetection `json:"items"`
}

IntrusionDetectionList contains a list of IntrusionDetection

func (*IntrusionDetectionList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IntrusionDetectionList.

func (*IntrusionDetectionList) DeepCopyInto

func (in *IntrusionDetectionList) DeepCopyInto(out *IntrusionDetectionList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*IntrusionDetectionList) DeepCopyObject

func (in *IntrusionDetectionList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type IntrusionDetectionSpec

type IntrusionDetectionSpec struct {
	// ComponentResources can be used to customize the resource requirements for each component.
	// Only DeepPacketInspection is supported for this spec.
	// +optional
	ComponentResources []IntrusionDetectionComponentResource `json:"componentResources,omitempty"`

	// AnomalyDetection is now deprecated, and configuring it has no effect.
	// +optional
	AnomalyDetection AnomalyDetectionSpec `json:"anomalyDetection,omitempty"`

	// IntrusionDetectionControllerDeployment configures the IntrusionDetection Controller Deployment.
	// +optional
	IntrusionDetectionControllerDeployment *IntrusionDetectionControllerDeployment `json:"intrusionDetectionControllerDeployment,omitempty"`

	// DeepPacketInspectionDaemonset configures the DPI Daemonset
	// +optional
	DeepPacketInspectionDaemonset *DeepPacketInspectionDaemonset `json:"deepPacketInspectionDaemonset,omitempty"`
}

IntrusionDetectionSpec defines the desired state of Tigera intrusion detection capabilities.

func (*IntrusionDetectionSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IntrusionDetectionSpec.

func (*IntrusionDetectionSpec) DeepCopyInto

func (in *IntrusionDetectionSpec) DeepCopyInto(out *IntrusionDetectionSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type IntrusionDetectionStatus

type IntrusionDetectionStatus struct {
	// State provides user-readable status.
	State string `json:"state,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

IntrusionDetectionStatus defines the observed state of Tigera intrusion detection capabilities.

func (*IntrusionDetectionStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IntrusionDetectionStatus.

func (*IntrusionDetectionStatus) DeepCopyInto

func (in *IntrusionDetectionStatus) DeepCopyInto(out *IntrusionDetectionStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Kibana

type Kibana struct {
	// Spec is the specification of the Kibana.
	// +optional
	Spec *KibanaSpec `json:"spec,omitempty"`
}

Kibana is the configuration for the Kibana.

func (*Kibana) DeepCopy

func (in *Kibana) DeepCopy() *Kibana

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Kibana.

func (*Kibana) DeepCopyInto

func (in *Kibana) DeepCopyInto(out *Kibana)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KibanaContainer

type KibanaContainer struct {
	// Name is an enum which identifies the Kibana Deployment container by name.
	// Supported values are: kibana
	// +kubebuilder:validation:Enum=kibana
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Kibana container's resources.
	// If omitted, the Kibana will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

KibanaContainer is a Kibana container.

func (*KibanaContainer) DeepCopy

func (in *KibanaContainer) DeepCopy() *KibanaContainer

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KibanaContainer.

func (*KibanaContainer) DeepCopyInto

func (in *KibanaContainer) DeepCopyInto(out *KibanaContainer)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KibanaInitContainer

type KibanaInitContainer struct {
	// Name is an enum which identifies the Kibana init container by name.
	// Supported values are: key-cert-provisioner
	// +kubebuilder:validation:Enum=key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Kibana Deployment init container's resources.
	// If omitted, the Kibana Deployment will use its default value for this init container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

KibanaInitContainer is a Kibana init container.

func (*KibanaInitContainer) DeepCopy

func (in *KibanaInitContainer) DeepCopy() *KibanaInitContainer

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KibanaInitContainer.

func (*KibanaInitContainer) DeepCopyInto

func (in *KibanaInitContainer) DeepCopyInto(out *KibanaInitContainer)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KibanaPodSpec

type KibanaPodSpec struct {
	// InitContainers is a list of Kibana init containers.
	// If specified, this overrides the specified Kibana Deployment init containers.
	// If omitted, the Kibana Deployment will use its default values for its init containers.
	// +optional
	InitContainers []KibanaInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of Kibana containers.
	// If specified, this overrides the specified Kibana Deployment containers.
	// If omitted, the Kibana Deployment will use its default values for its containers.
	// +optional
	Containers []KibanaContainer `json:"containers,omitempty"`
}

KibanaPodSpec is the Kibana Deployment's PodSpec.

func (*KibanaPodSpec) DeepCopy

func (in *KibanaPodSpec) DeepCopy() *KibanaPodSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KibanaPodSpec.

func (*KibanaPodSpec) DeepCopyInto

func (in *KibanaPodSpec) DeepCopyInto(out *KibanaPodSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KibanaPodTemplateSpec

type KibanaPodTemplateSpec struct {
	// Spec is the Kibana's PodSpec.
	// +optional
	Spec *KibanaPodSpec `json:"spec,omitempty"`
}

KibanaPodTemplateSpec is the Kibana's PodTemplateSpec

func (*KibanaPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KibanaPodTemplateSpec.

func (*KibanaPodTemplateSpec) DeepCopyInto

func (in *KibanaPodTemplateSpec) DeepCopyInto(out *KibanaPodTemplateSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KibanaSpec

type KibanaSpec struct {
	// Template describes the Kibana pod that will be created.
	// +optional
	Template *KibanaPodTemplateSpec `json:"template,omitempty"`
}

func (*KibanaSpec) DeepCopy

func (in *KibanaSpec) DeepCopy() *KibanaSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KibanaSpec.

func (*KibanaSpec) DeepCopyInto

func (in *KibanaSpec) DeepCopyInto(out *KibanaSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type KubeProxyManagementType

type KubeProxyManagementType string

KubeProxyManagementType specifies whether kube-proxy management is enabled.

const (
	KubeProxyManagementEnabled  KubeProxyManagementType = "Enabled"
	KubeProxyManagementDisabled KubeProxyManagementType = "Disabled"
)

type KubernetesAutodetectionMethod

type KubernetesAutodetectionMethod string

KubernetesAutodetectionMethod is a method of detecting an IP address based on the Kubernetes API.

One of: NodeInternalIP

const (
	// NodeInternalIP detects a node IP using the first status.Addresses entry of the relevant IP family
	// with type NodeInternalIP on the Kubernetes nodes API.
	NodeInternalIP KubernetesAutodetectionMethod = "NodeInternalIP"
)

type L7LogCollectorDaemonSet

type L7LogCollectorDaemonSet struct {

	// Spec is the specification of the L7LogCollector DaemonSet.
	// +optional
	Spec *L7LogCollectorDaemonSetSpec `json:"spec,omitempty"`
}

L7LogCollectorDaemonSet is the configuration for the L7LogCollector DaemonSet.

func (*L7LogCollectorDaemonSet) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new L7LogCollectorDaemonSet.

func (*L7LogCollectorDaemonSet) DeepCopyInto

func (in *L7LogCollectorDaemonSet) DeepCopyInto(out *L7LogCollectorDaemonSet)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type L7LogCollectorDaemonSetContainer

type L7LogCollectorDaemonSetContainer struct {
	// Name is an enum which identifies the L7LogCollector DaemonSet container by name.
	// Supported values are: l7-collector, envoy-proxy, dikastes
	// +kubebuilder:validation:Enum=l7-collector;envoy-proxy;dikastes
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named L7LogCollector DaemonSet container's resources.
	// If omitted, the L7LogCollector DaemonSet will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

L7LogCollectorDaemonSetContainer is a L7LogCollector DaemonSet container.

func (*L7LogCollectorDaemonSetContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new L7LogCollectorDaemonSetContainer.

func (*L7LogCollectorDaemonSetContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type L7LogCollectorDaemonSetInitContainer

type L7LogCollectorDaemonSetInitContainer struct {
	// Name is an enum which identifies the L7LogCollector DaemonSet init container by name.
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named L7LogCollector DaemonSet init container's resources.
	// If omitted, the L7LogCollector DaemonSet will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

L7LogCollectorDaemonSetInitContainer is a L7LogCollector DaemonSet init container.

func (*L7LogCollectorDaemonSetInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new L7LogCollectorDaemonSetInitContainer.

func (*L7LogCollectorDaemonSetInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type L7LogCollectorDaemonSetPodSpec

type L7LogCollectorDaemonSetPodSpec struct {
	// InitContainers is a list of L7LogCollector DaemonSet init containers.
	// If specified, this overrides the specified L7LogCollector DaemonSet init containers.
	// If omitted, the L7LogCollector DaemonSet will use its default values for its init containers.
	// +optional
	InitContainers []L7LogCollectorDaemonSetInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of L7LogCollector DaemonSet containers.
	// If specified, this overrides the specified L7LogCollector DaemonSet containers.
	// If omitted, the L7LogCollector DaemonSet will use its default values for its containers.
	// +optional
	Containers []L7LogCollectorDaemonSetContainer `json:"containers,omitempty"`
}

L7LogCollectorDaemonSetPodSpec is the L7LogCollector DaemonSet's PodSpec.

func (*L7LogCollectorDaemonSetPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new L7LogCollectorDaemonSetPodSpec.

func (*L7LogCollectorDaemonSetPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type L7LogCollectorDaemonSetPodTemplateSpec

type L7LogCollectorDaemonSetPodTemplateSpec struct {

	// Spec is the L7LogCollector DaemonSet's PodSpec.
	// +optional
	Spec *L7LogCollectorDaemonSetPodSpec `json:"spec,omitempty"`
}

L7LogCollectorDaemonSetPodTemplateSpec is the L7LogCollector DaemonSet's PodTemplateSpec

func (*L7LogCollectorDaemonSetPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new L7LogCollectorDaemonSetPodTemplateSpec.

func (*L7LogCollectorDaemonSetPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type L7LogCollectorDaemonSetSpec

type L7LogCollectorDaemonSetSpec struct {

	// Template describes the L7LogCollector DaemonSet pod that will be created.
	// +optional
	Template *L7LogCollectorDaemonSetPodTemplateSpec `json:"template,omitempty"`
}

L7LogCollectorDaemonSetSpec defines configuration for the L7LogCollector DaemonSet.

func (*L7LogCollectorDaemonSetSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new L7LogCollectorDaemonSetSpec.

func (*L7LogCollectorDaemonSetSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LinseedDeployment

type LinseedDeployment struct {

	// Spec is the specification of the linseed Deployment.
	// +optional
	Spec *LinseedDeploymentSpec `json:"spec,omitempty"`
}

LinseedDeployment is the configuration for the linseed Deployment.

func (*LinseedDeployment) DeepCopy

func (in *LinseedDeployment) DeepCopy() *LinseedDeployment

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LinseedDeployment.

func (*LinseedDeployment) DeepCopyInto

func (in *LinseedDeployment) DeepCopyInto(out *LinseedDeployment)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LinseedDeploymentContainer

type LinseedDeploymentContainer struct {
	// Name is an enum which identifies the linseed Deployment container by name.
	// Supported values are: tigera-linseed
	// +kubebuilder:validation:Enum=tigera-linseed
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named linseed Deployment container's resources.
	// If omitted, the linseed Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

LinseedDeploymentContainer is a linseed Deployment container.

func (*LinseedDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LinseedDeploymentContainer.

func (*LinseedDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LinseedDeploymentInitContainer

type LinseedDeploymentInitContainer struct {
	// Name is an enum which identifies the linseed Deployment init container by name.
	// Supported values are: tigera-secure-linseed-token-tls-key-cert-provisioner,tigera-secure-linseed-cert-key-cert-provisioner
	// +kubebuilder:validation:Enum=tigera-secure-linseed-token-tls-key-cert-provisioner;tigera-secure-linseed-cert-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named linseed Deployment init container's resources.
	// If omitted, the linseed Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

LinseedDeploymentInitContainer is a linseed Deployment init container.

func (*LinseedDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LinseedDeploymentInitContainer.

func (*LinseedDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LinseedDeploymentPodSpec

type LinseedDeploymentPodSpec struct {
	// InitContainers is a list of linseed init containers.
	// If specified, this overrides the specified linseed Deployment init containers.
	// If omitted, the linseed Deployment will use its default values for its init containers.
	// +optional
	InitContainers []LinseedDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of linseed containers.
	// If specified, this overrides the specified linseed Deployment containers.
	// If omitted, the linseed Deployment will use its default values for its containers.
	// +optional
	Containers []LinseedDeploymentContainer `json:"containers,omitempty"`
}

LinseedDeploymentPodSpec is the linseed Deployment's PodSpec.

func (*LinseedDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LinseedDeploymentPodSpec.

func (*LinseedDeploymentPodSpec) DeepCopyInto

func (in *LinseedDeploymentPodSpec) DeepCopyInto(out *LinseedDeploymentPodSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LinseedDeploymentPodTemplateSpec

type LinseedDeploymentPodTemplateSpec struct {

	// Spec is the linseed Deployment's PodSpec.
	// +optional
	Spec *LinseedDeploymentPodSpec `json:"spec,omitempty"`
}

LinseedDeploymentPodTemplateSpec is the linseed Deployment's PodTemplateSpec

func (*LinseedDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LinseedDeploymentPodTemplateSpec.

func (*LinseedDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LinseedDeploymentSpec

type LinseedDeploymentSpec struct {

	// Template describes the linseed Deployment pod that will be created.
	// +optional
	Template *LinseedDeploymentPodTemplateSpec `json:"template,omitempty"`
}

LinseedDeploymentSpec defines configuration for the linseed Deployment.

func (*LinseedDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LinseedDeploymentSpec.

func (*LinseedDeploymentSpec) DeepCopyInto

func (in *LinseedDeploymentSpec) DeepCopyInto(out *LinseedDeploymentSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LinuxDataplaneOption

type LinuxDataplaneOption string

LinuxDataplaneOption controls which dataplane is to be used on Linux nodes.

One of: Iptables, BPF, VPP, Nftables +kubebuilder:validation:Enum=Iptables;BPF;VPP;Nftables;

const (
	LinuxDataplaneIptables LinuxDataplaneOption = "Iptables"
	LinuxDataplaneBPF      LinuxDataplaneOption = "BPF"
	LinuxDataplaneVPP      LinuxDataplaneOption = "VPP"
	LinuxDataplaneNftables LinuxDataplaneOption = "Nftables"
)

type LogCollectionSpec

type LogCollectionSpec struct {
	// This setting enables or disable log collection.
	// Allowed values are Enabled or Disabled.
	// +optional
	CollectLogs *LogCollectionStatusType `json:"collectLogs,omitempty"`

	// Interval in seconds for sending L7 log information for processing.
	// +optional
	// Default: 5 sec
	LogIntervalSeconds *int64 `json:"logIntervalSeconds,omitempty"`

	// Maximum number of unique L7 logs that are sent LogIntervalSeconds.
	// Adjust this to limit the number of L7 logs sent per LogIntervalSeconds
	// to felix for further processing, use negative number to ignore limits.
	// +optional
	// Default: -1
	LogRequestsPerInterval *int64 `json:"logRequestsPerInterval,omitempty"`
}

func (*LogCollectionSpec) DeepCopy

func (in *LogCollectionSpec) DeepCopy() *LogCollectionSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LogCollectionSpec.

func (*LogCollectionSpec) DeepCopyInto

func (in *LogCollectionSpec) DeepCopyInto(out *LogCollectionSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LogCollectionStatusType

type LogCollectionStatusType string

+kubebuilder:validation:Enum=Enabled;Disabled

type LogCollector

type LogCollector struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state for Tigera log collection.
	Spec LogCollectorSpec `json:"spec,omitempty"`
	// Most recently observed state for Tigera log collection.
	Status LogCollectorStatus `json:"status,omitempty"`
}

LogCollector installs the components required for Tigera flow and DNS log collection. At most one instance of this resource is supported. It must be named "tigera-secure". When created, this installs fluentd on all nodes configured to collect Tigera log data and export it to Tigera's Elasticsearch cluster as well as any additionally configured destinations.

func (*LogCollector) DeepCopy

func (in *LogCollector) DeepCopy() *LogCollector

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LogCollector.

func (*LogCollector) DeepCopyInto

func (in *LogCollector) DeepCopyInto(out *LogCollector)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*LogCollector) DeepCopyObject

func (in *LogCollector) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type LogCollectorList

type LogCollectorList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LogCollector `json:"items"`
}

LogCollectorList contains a list of LogCollector

func (*LogCollectorList) DeepCopy

func (in *LogCollectorList) DeepCopy() *LogCollectorList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LogCollectorList.

func (*LogCollectorList) DeepCopyInto

func (in *LogCollectorList) DeepCopyInto(out *LogCollectorList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*LogCollectorList) DeepCopyObject

func (in *LogCollectorList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type LogCollectorSpec

type LogCollectorSpec struct {
	// Configuration for exporting flow, audit, and DNS logs to external storage.
	// +optional
	AdditionalStores *AdditionalLogStoreSpec `json:"additionalStores,omitempty"`

	// Configuration for importing audit logs from managed kubernetes cluster log sources.
	// +optional
	AdditionalSources *AdditionalLogSourceSpec `json:"additionalSources,omitempty"`

	// Configuration for enabling/disabling process path collection in flowlogs.
	// If Enabled, this feature sets hostPID to true in order to read process cmdline.
	// Default: Enabled
	// +optional
	// +kubebuilder:validation:Enum=Enabled;Disabled
	CollectProcessPath *CollectProcessPathOption `json:"collectProcessPath,omitempty"`

	// If running as a multi-tenant management cluster, the namespace in which
	// the management cluster's tenant services are running.
	// +optional
	MultiTenantManagementClusterNamespace string `json:"multiTenantManagementClusterNamespace,omitempty"`

	// FluentdDaemonSet configures the Fluentd DaemonSet.
	FluentdDaemonSet *FluentdDaemonSet `json:"fluentdDaemonSet,omitempty"`

	// EKSLogForwarderDeployment configures the EKSLogForwarderDeployment Deployment.
	// +optional
	EKSLogForwarderDeployment *EKSLogForwarderDeployment `json:"eksLogForwarderDeployment,omitempty"`
}

LogCollectorSpec defines the desired state of Tigera flow, audit, and DNS log collection.

func (*LogCollectorSpec) DeepCopy

func (in *LogCollectorSpec) DeepCopy() *LogCollectorSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LogCollectorSpec.

func (*LogCollectorSpec) DeepCopyInto

func (in *LogCollectorSpec) DeepCopyInto(out *LogCollectorSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LogCollectorStatus

type LogCollectorStatus struct {
	// State provides user-readable status.
	State string `json:"state,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

LogCollectorStatus defines the observed state of Tigera flow and DNS log collection

func (*LogCollectorStatus) DeepCopy

func (in *LogCollectorStatus) DeepCopy() *LogCollectorStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LogCollectorStatus.

func (*LogCollectorStatus) DeepCopyInto

func (in *LogCollectorStatus) DeepCopyInto(out *LogCollectorStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LogLevel

type LogLevel string

+kubebuilder:validation:Enum=Error;Warning;Info;Debug

const (
	LogLevelError LogLevel = "Error"
	LogLevelWarn  LogLevel = "Warn"
	LogLevelInfo  LogLevel = "Info"
	LogLevelDebug LogLevel = "Debug"
)

type LogSeverity

type LogSeverity string

+kubebuilder:validation:Enum=Fatal;Error;Warn;Info;Debug;Trace

const (
	LogSeverityFatal LogSeverity = "Fatal"
	LogSeverityError LogSeverity = "Error"
	LogSeverityWarn  LogSeverity = "Warn"
	LogSeverityInfo  LogSeverity = "Info"
	LogSeverityDebug LogSeverity = "Debug"
	LogSeverityTrace LogSeverity = "Trace"
)

type LogStorage

type LogStorage struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state for Tigera log storage.
	Spec LogStorageSpec `json:"spec,omitempty"`
	// Most recently observed state for Tigera log storage.
	Status LogStorageStatus `json:"status,omitempty"`
}

LogStorage installs the components required for Tigera flow and DNS log storage. At most one instance of this resource is supported. It must be named "tigera-secure". When created, this installs an Elasticsearch cluster for use by Calico Enterprise.

func (*LogStorage) DeepCopy

func (in *LogStorage) DeepCopy() *LogStorage

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LogStorage.

func (*LogStorage) DeepCopyInto

func (in *LogStorage) DeepCopyInto(out *LogStorage)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*LogStorage) DeepCopyObject

func (in *LogStorage) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (LogStorage) Replicas

func (ls LogStorage) Replicas() int

type LogStorageComponentName

type LogStorageComponentName string

LogStorageComponentName CRD enum

const (
	ComponentNameECKOperator LogStorageComponentName = "ECKOperator"
)

type LogStorageComponentResource

type LogStorageComponentResource struct {
	// Deprecated. Please use ECKOperatorStatefulSet.
	// ComponentName is an enum which identifies the component
	// +kubebuilder:validation:Enum=ECKOperator
	ComponentName LogStorageComponentName `json:"componentName"`
	// ResourceRequirements allows customization of limits and requests for compute resources such as cpu and memory.
	ResourceRequirements *corev1.ResourceRequirements `json:"resourceRequirements"`
}

The ComponentResource struct associates a ResourceRequirements with a component by name

func (*LogStorageComponentResource) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LogStorageComponentResource.

func (*LogStorageComponentResource) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LogStorageList

type LogStorageList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []LogStorage `json:"items"`
}

LogStorageList contains a list of LogStorage

func (*LogStorageList) DeepCopy

func (in *LogStorageList) DeepCopy() *LogStorageList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LogStorageList.

func (*LogStorageList) DeepCopyInto

func (in *LogStorageList) DeepCopyInto(out *LogStorageList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*LogStorageList) DeepCopyObject

func (in *LogStorageList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type LogStorageSpec

type LogStorageSpec struct {
	// Nodes defines the configuration for a set of identical Elasticsearch cluster nodes, each of type master, data, and ingest.
	Nodes *Nodes `json:"nodes,omitempty"`

	// Index defines the configuration for the indices in the Elasticsearch cluster.
	// +optional
	Indices *Indices `json:"indices,omitempty"`

	// Retention defines how long data is retained in the Elasticsearch cluster before it is cleared.
	// +optional
	Retention *Retention `json:"retention,omitempty"`

	// StorageClassName will populate the PersistentVolumeClaim.StorageClassName that is used to provision disks to the
	// Tigera Elasticsearch cluster. The StorageClassName should only be modified when no LogStorage is currently
	// active. We recommend choosing a storage class dedicated to Tigera LogStorage only. Otherwise, data retention
	// cannot be guaranteed during upgrades. See https://docs.tigera.io/maintenance/upgrading for up-to-date instructions.
	// Default: tigera-elasticsearch
	// +optional
	StorageClassName string `json:"storageClassName,omitempty"`

	// DataNodeSelector gives you more control over the node that Elasticsearch will run on. The contents of DataNodeSelector will
	// be added to the PodSpec of the Elasticsearch nodes. For the pod to be eligible to run on a node, the node must have
	// each of the indicated key-value pairs as labels as well as access to the specified StorageClassName.
	// +optional
	DataNodeSelector map[string]string `json:"dataNodeSelector,omitempty"`

	// ComponentResources can be used to customize the resource requirements for each component.
	// Only ECKOperator is supported for this spec.
	// +optional
	ComponentResources []LogStorageComponentResource `json:"componentResources,omitempty"`

	// ECKOperatorStatefulSet configures the ECKOperator StatefulSet. If used in conjunction with the deprecated
	// ComponentResources, then these overrides take precedence.
	// +optional
	ECKOperatorStatefulSet *ECKOperatorStatefulSet `json:"eckOperatorStatefulSet,omitempty"`

	// Kibana configures the Kibana Spec.
	// +optional
	Kibana *Kibana `json:"kibana,omitempty"`

	// LinseedDeployment configures the linseed Deployment.
	LinseedDeployment *LinseedDeployment `json:"linseedDeployment,omitempty"`

	// ElasticsearchMetricsDeployment configures the tigera-elasticsearch-metric Deployment.
	ElasticsearchMetricsDeployment *ElasticsearchMetricsDeployment `json:"elasticsearchMetricsDeployment,omitempty"`

	// ESGatewayDeployment configures the es-gateway Deployment.
	ESGatewayDeployment *ESGatewayDeployment `json:"esGatewayDeployment,omitempty"`
}

LogStorageSpec defines the desired state of Tigera flow and DNS log storage.

func (*LogStorageSpec) DeepCopy

func (in *LogStorageSpec) DeepCopy() *LogStorageSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LogStorageSpec.

func (*LogStorageSpec) DeepCopyInto

func (in *LogStorageSpec) DeepCopyInto(out *LogStorageSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type LogStorageStatus

type LogStorageStatus struct {
	// State provides user-readable status.
	State string `json:"state,omitempty"`

	// ElasticsearchHash represents the current revision and configuration of the installed Elasticsearch cluster. This
	// is an opaque string which can be monitored for changes to perform actions when Elasticsearch is modified.
	ElasticsearchHash string `json:"elasticsearchHash,omitempty"`

	// KibanaHash represents the current revision and configuration of the installed Kibana dashboard. This
	// is an opaque string which can be monitored for changes to perform actions when Kibana is modified.
	KibanaHash string `json:"kibanaHash,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

LogStorageStatus defines the observed state of Tigera flow and DNS log storage.

func (*LogStorageStatus) DeepCopy

func (in *LogStorageStatus) DeepCopy() *LogStorageStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LogStorageStatus.

func (*LogStorageStatus) DeepCopyInto

func (in *LogStorageStatus) DeepCopyInto(out *LogStorageStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Logging

type Logging struct {
	// Customized logging specification for calico-cni plugin
	// +optional
	CNI *CNILogging `json:"cni,omitempty"`
}

func (*Logging) DeepCopy

func (in *Logging) DeepCopy() *Logging

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Logging.

func (*Logging) DeepCopyInto

func (in *Logging) DeepCopyInto(out *Logging)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ManagementCluster

type ManagementCluster struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec ManagementClusterSpec `json:"spec,omitempty"`
}

The presence of ManagementCluster in your cluster, will configure it to be the management plane to which managed clusters can connect. At most one instance of this resource is supported. It must be named "tigera-secure".

func (*ManagementCluster) DeepCopy

func (in *ManagementCluster) DeepCopy() *ManagementCluster

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagementCluster.

func (*ManagementCluster) DeepCopyInto

func (in *ManagementCluster) DeepCopyInto(out *ManagementCluster)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ManagementCluster) DeepCopyObject

func (in *ManagementCluster) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ManagementClusterConnection

type ManagementClusterConnection struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ManagementClusterConnectionSpec   `json:"spec,omitempty"`
	Status ManagementClusterConnectionStatus `json:"status,omitempty"`
}

ManagementClusterConnection represents a link between a managed cluster and a management cluster. At most one instance of this resource is supported. It must be named "tigera-secure".

func (*ManagementClusterConnection) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagementClusterConnection.

func (*ManagementClusterConnection) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ManagementClusterConnection) DeepCopyObject

func (in *ManagementClusterConnection) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ManagementClusterConnectionList

type ManagementClusterConnectionList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ManagementClusterConnection `json:"items"`
}

ManagementClusterConnectionList contains a list of ManagementClusterConnection.

func (*ManagementClusterConnectionList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagementClusterConnectionList.

func (*ManagementClusterConnectionList) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ManagementClusterConnectionList) DeepCopyObject

func (in *ManagementClusterConnectionList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ManagementClusterConnectionSpec

type ManagementClusterConnectionSpec struct {
	// Specify where the managed cluster can reach the management cluster. Ex.: "10.128.0.10:30449". A managed cluster
	// should be able to access this address. This field is used by managed clusters only.
	// +optional
	ManagementClusterAddr string `json:"managementClusterAddr,omitempty"`

	// TLS provides options for configuring how Managed Clusters can establish an mTLS connection with the Management Cluster.
	// +optional
	TLS *ManagementClusterTLS `json:"tls,omitempty"`

	// GuardianDeployment configures the guardian Deployment.
	GuardianDeployment *GuardianDeployment `json:"guardianDeployment,omitempty"`

	// Impersonation configures the RBAC impersonation permissions for the guardian deployment. This field is not
	// applicable to installation variant Calico as no impersonation is ever used. Otherwise, if this field is left nil,
	// a default set of permissions will be applied.
	//
	// WARNING: If this field is specified, it completely replaces the default permissions.
	// For example, providing an empty `impersonation: {}` block will result in guardian
	// having NO impersonation permissions. Similarly, if you specify `users` but omit `groups`,
	// guardian will lose its default permissions to impersonate groups.
	// +optional
	Impersonation *Impersonation `json:"impersonation,omitempty"`
}

ManagementClusterConnectionSpec defines the desired state of ManagementClusterConnection

func (*ManagementClusterConnectionSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagementClusterConnectionSpec.

func (*ManagementClusterConnectionSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ManagementClusterConnectionStatus

type ManagementClusterConnectionStatus struct {
	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ManagementClusterConnectionStatus defines the observed state of ManagementClusterConnection

func (*ManagementClusterConnectionStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagementClusterConnectionStatus.

func (*ManagementClusterConnectionStatus) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ManagementClusterList

type ManagementClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ManagementCluster `json:"items"`
}

ManagementClusterList contains a list of ManagementCluster

func (*ManagementClusterList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagementClusterList.

func (*ManagementClusterList) DeepCopyInto

func (in *ManagementClusterList) DeepCopyInto(out *ManagementClusterList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ManagementClusterList) DeepCopyObject

func (in *ManagementClusterList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ManagementClusterSpec

type ManagementClusterSpec struct {
	// This field specifies the externally reachable address to which your managed cluster will connect. When a managed
	// cluster is added, this field is used to populate an easy-to-apply manifest that will connect both clusters.
	// Valid examples are: "0.0.0.0:31000", "example.com:32000", "[::1]:32500"
	// +optional
	Address string `json:"address,omitempty"`

	// TLS provides options for configuring how Managed Clusters can establish an mTLS connection with the Management Cluster.
	// +optional
	TLS *TLS `json:"tls,omitempty"`
}

ManagementClusterSpec defines the desired state of a ManagementCluster

func (*ManagementClusterSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagementClusterSpec.

func (*ManagementClusterSpec) DeepCopyInto

func (in *ManagementClusterSpec) DeepCopyInto(out *ManagementClusterSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ManagementClusterTLS

type ManagementClusterTLS struct {
	// CA indicates which verification method the tunnel client should use to verify the tunnel server's identity.
	//
	// When left blank or set to 'Tigera', the tunnel client will expect a self-signed cert to be included in the certificate bundle
	// and will expect the cert to have a Common Name (CN) of 'voltron'.
	//
	// When set to 'Public', the tunnel client will use its installed system certs and will use the managementClusterAddr to verify the tunnel server's identity.
	//
	// Default: Tigera
	//
	// +kubebuilder:validation:Enum=Tigera;Public
	CA CAType `json:"ca,omitempty"`
}

func (*ManagementClusterTLS) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagementClusterTLS.

func (*ManagementClusterTLS) DeepCopyInto

func (in *ManagementClusterTLS) DeepCopyInto(out *ManagementClusterTLS)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Manager

type Manager struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state for the Calico Enterprise manager.
	Spec ManagerSpec `json:"spec,omitempty"`
	// Most recently observed state for the Calico Enterprise manager.
	Status ManagerStatus `json:"status,omitempty"`
}

Manager installs the Calico Enterprise manager graphical user interface. At most one instance of this resource is supported. It must be named "tigera-secure".

func (*Manager) DeepCopy

func (in *Manager) DeepCopy() *Manager

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Manager.

func (*Manager) DeepCopyInto

func (in *Manager) DeepCopyInto(out *Manager)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Manager) DeepCopyObject

func (in *Manager) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ManagerDeployment

type ManagerDeployment struct {
	// Spec is the specification of the Manager Deployment.
	// +optional
	Spec *ManagerDeploymentSpec `json:"spec,omitempty"`
}

ManagerDeployment is the configuration for the Manager Deployment.

func (*ManagerDeployment) DeepCopy

func (in *ManagerDeployment) DeepCopy() *ManagerDeployment

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagerDeployment.

func (*ManagerDeployment) DeepCopyInto

func (in *ManagerDeployment) DeepCopyInto(out *ManagerDeployment)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ManagerDeploymentContainer

type ManagerDeploymentContainer struct {
	// Name is an enum which identifies the Manager Deployment container by name.
	// Supported values are: tigera-voltron, tigera-manager, tigera-ui-apis, and tigera-es-proxy (deprecated).
	// +kubebuilder:validation:Enum=tigera-voltron;tigera-manager;tigera-es-proxy;tigera-ui-apis
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Manager Deployment container's resources.
	// If omitted, the Manager Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ManagerDeploymentContainer is a Manager Deployment container.

func (*ManagerDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagerDeploymentContainer.

func (*ManagerDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ManagerDeploymentInitContainer

type ManagerDeploymentInitContainer struct {
	// Name is an enum which identifies the Manager Deployment init container by name.
	// Supported values are: manager-tls-key-cert-provisioner, internal-manager-tls-key-cert-provisioner, tigera-voltron-linseed-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=manager-tls-key-cert-provisioner;internal-manager-tls-key-cert-provisioner;tigera-voltron-linseed-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Manager Deployment init container's resources.
	// If omitted, the Manager Deployment will use its default value for this init container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

ManagerDeploymentInitContainer is a Manager Deployment init container.

func (*ManagerDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagerDeploymentInitContainer.

func (*ManagerDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ManagerDeploymentPodSpec

type ManagerDeploymentPodSpec struct {
	// InitContainers is a list of Manager init containers.
	// If specified, this overrides the specified Manager Deployment init containers.
	// If omitted, the Manager Deployment will use its default values for its init containers.
	// +optional
	InitContainers []ManagerDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of Manager containers.
	// If specified, this overrides the specified Manager Deployment containers.
	// If omitted, the Manager Deployment will use its default values for its containers.
	// +optional
	Containers []ManagerDeploymentContainer `json:"containers,omitempty"`
}

ManagerDeploymentPodSpec is the Manager Deployment's PodSpec.

func (*ManagerDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagerDeploymentPodSpec.

func (*ManagerDeploymentPodSpec) DeepCopyInto

func (in *ManagerDeploymentPodSpec) DeepCopyInto(out *ManagerDeploymentPodSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ManagerDeploymentPodTemplateSpec

type ManagerDeploymentPodTemplateSpec struct {
	// Spec is the Manager Deployment's PodSpec.
	// +optional
	Spec *ManagerDeploymentPodSpec `json:"spec,omitempty"`
}

ManagerDeploymentPodTemplateSpec is the Manager Deployment's PodTemplateSpec

func (*ManagerDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagerDeploymentPodTemplateSpec.

func (*ManagerDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ManagerDeploymentSpec

type ManagerDeploymentSpec struct {
	// Template describes the Manager Deployment pod that will be created.
	// +optional
	Template *ManagerDeploymentPodTemplateSpec `json:"template,omitempty"`
}

ManagerDeploymentSpec defines configuration for the Manager Deployment.

func (*ManagerDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagerDeploymentSpec.

func (*ManagerDeploymentSpec) DeepCopyInto

func (in *ManagerDeploymentSpec) DeepCopyInto(out *ManagerDeploymentSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ManagerList

type ManagerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Manager `json:"items"`
}

ManagerList contains a list of Manager

func (*ManagerList) DeepCopy

func (in *ManagerList) DeepCopy() *ManagerList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagerList.

func (*ManagerList) DeepCopyInto

func (in *ManagerList) DeepCopyInto(out *ManagerList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ManagerList) DeepCopyObject

func (in *ManagerList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type ManagerSpec

type ManagerSpec struct {
	// ManagerDeployment configures the Manager Deployment.
	// +optional
	ManagerDeployment *ManagerDeployment `json:"managerDeployment,omitempty"`
}

ManagerSpec defines configuration for the Calico Enterprise manager GUI.

func (*ManagerSpec) DeepCopy

func (in *ManagerSpec) DeepCopy() *ManagerSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagerSpec.

func (*ManagerSpec) DeepCopyInto

func (in *ManagerSpec) DeepCopyInto(out *ManagerSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ManagerStatus

type ManagerStatus struct {
	// State provides user-readable status.
	State string `json:"state,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

ManagerStatus defines the observed state of the Calico Enterprise manager GUI.

func (*ManagerStatus) DeepCopy

func (in *ManagerStatus) DeepCopy() *ManagerStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ManagerStatus.

func (*ManagerStatus) DeepCopyInto

func (in *ManagerStatus) DeepCopyInto(out *ManagerStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Metadata

type Metadata struct {
	// Labels is a map of string keys and values that may match replicaset and
	// service selectors. Each of these key/value pairs are added to the
	// object's labels provided the key does not already exist in the object's labels.
	// +optional
	Labels map[string]string `json:"labels,omitempty"`

	// Annotations is a map of arbitrary non-identifying metadata. Each of these
	// key/value pairs are added to the object's annotations provided the key does not
	// already exist in the object's annotations.
	// +optional
	Annotations map[string]string `json:"annotations,omitempty"`
}

Metadata contains the standard Kubernetes labels and annotations fields.

func (*Metadata) DeepCopy

func (in *Metadata) DeepCopy() *Metadata

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Metadata.

func (*Metadata) DeepCopyInto

func (in *Metadata) DeepCopyInto(out *Metadata)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Monitor

type Monitor struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   MonitorSpec   `json:"spec,omitempty"`
	Status MonitorStatus `json:"status,omitempty"`
}

Monitor is the Schema for the monitor API. At most one instance of this resource is supported. It must be named "tigera-secure".

func (*Monitor) DeepCopy

func (in *Monitor) DeepCopy() *Monitor

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Monitor.

func (*Monitor) DeepCopyInto

func (in *Monitor) DeepCopyInto(out *Monitor)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Monitor) DeepCopyObject

func (in *Monitor) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type MonitorList

type MonitorList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Monitor `json:"items"`
}

MonitorList contains a list of Monitor

func (*MonitorList) DeepCopy

func (in *MonitorList) DeepCopy() *MonitorList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MonitorList.

func (*MonitorList) DeepCopyInto

func (in *MonitorList) DeepCopyInto(out *MonitorList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*MonitorList) DeepCopyObject

func (in *MonitorList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type MonitorSpec

type MonitorSpec struct {
	// ExternalPrometheus optionally configures integration with an external Prometheus for scraping Calico metrics. When
	// specified, the operator will render resources in the defined namespace. This option can be useful for configuring
	// scraping from git-ops tools without the need of post-installation steps.
	ExternalPrometheus *ExternalPrometheus `json:"externalPrometheus,omitempty"`

	// Prometheus is the configuration for the Prometheus.
	// +optional
	Prometheus *Prometheus `json:"prometheus,omitempty"`

	// AlertManager is the configuration for the AlertManager.
	// +optional
	AlertManager *AlertManager `json:"alertManager,omitempty"`
}

MonitorSpec defines the desired state of Tigera monitor.

func (*MonitorSpec) DeepCopy

func (in *MonitorSpec) DeepCopy() *MonitorSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MonitorSpec.

func (*MonitorSpec) DeepCopyInto

func (in *MonitorSpec) DeepCopyInto(out *MonitorSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type MonitorStatus

type MonitorStatus struct {
	// State provides user-readable status.
	State string `json:"state,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

MonitorStatus defines the observed state of Tigera monitor.

func (*MonitorStatus) DeepCopy

func (in *MonitorStatus) DeepCopy() *MonitorStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new MonitorStatus.

func (*MonitorStatus) DeepCopyInto

func (in *MonitorStatus) DeepCopyInto(out *MonitorStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type MultiInterfaceMode

type MultiInterfaceMode string

MultiInterfaceMode describes the method of providing multiple pod interfaces.

One of: None, Multus

const (
	MultiInterfaceModeNone   MultiInterfaceMode = "None"
	MultiInterfaceModeMultus MultiInterfaceMode = "Multus"
)

func (MultiInterfaceMode) Value

func (m MultiInterfaceMode) Value() string

type NATOutgoingType

type NATOutgoingType string

NATOutgoingType describe the type of outgoing NAT to use.

One of: Enabled, Disabled

const (
	NATOutgoingEnabled  NATOutgoingType = "Enabled"
	NATOutgoingDisabled NATOutgoingType = "Disabled"
)

func (NATOutgoingType) String

func (nt NATOutgoingType) String() string

type NamespacedName

type NamespacedName struct {
	Namespace string `json:"namespace"`
	Name      string `json:"name"`
}

NamespacedName references an object of a known type in any namespace.

func (*NamespacedName) DeepCopy

func (in *NamespacedName) DeepCopy() *NamespacedName

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NamespacedName.

func (*NamespacedName) DeepCopyInto

func (in *NamespacedName) DeepCopyInto(out *NamespacedName)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NativeIP

type NativeIP string

NativeIP defines if Egress Gateway pods should have AWS IPs. When NativeIP is enabled, the IPPools should be backed by AWS subnet.

const (
	NativeIPEnabled  NativeIP = "Enabled"
	NativeIPDisabled NativeIP = "Disabled"
)

type NodeAddressAutodetection

type NodeAddressAutodetection struct {
	// FirstFound uses default interface matching parameters to select an interface, performing best-effort
	// filtering based on well-known interface names.
	// +optional
	FirstFound *bool `json:"firstFound,omitempty"`

	// Kubernetes configures Calico to detect node addresses based on the Kubernetes API.
	// +optional
	// +kubebuilder:validation:Enum=NodeInternalIP
	Kubernetes *KubernetesAutodetectionMethod `json:"kubernetes,omitempty"`

	// Interface enables IP auto-detection based on interfaces that match the given regex.
	// +optional
	Interface string `json:"interface,omitempty"`

	// SkipInterface enables IP auto-detection based on interfaces that do not match
	// the given regex.
	// +optional
	SkipInterface string `json:"skipInterface,omitempty"`

	// CanReach enables IP auto-detection based on which source address on the node is used to reach the
	// specified IP or domain.
	// +optional
	CanReach string `json:"canReach,omitempty"`

	// CIDRS enables IP auto-detection based on which addresses on the nodes are within
	// one of the provided CIDRs.
	CIDRS []string `json:"cidrs,omitempty"`
}

NodeAddressAutodetection provides configuration options for auto-detecting node addresses. At most one option can be used. If no detection option is specified, then IP auto detection will be disabled for this address family and IPs must be specified directly on the Node resource.

func (*NodeAddressAutodetection) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NodeAddressAutodetection.

func (*NodeAddressAutodetection) DeepCopyInto

func (in *NodeAddressAutodetection) DeepCopyInto(out *NodeAddressAutodetection)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NodeAffinity

type NodeAffinity struct {
	// The scheduler will prefer to schedule pods to nodes that satisfy
	// the affinity expressions specified by this field, but it may choose
	// a node that violates one or more of the expressions.
	// +optional
	PreferredDuringSchedulingIgnoredDuringExecution []v1.PreferredSchedulingTerm `json:"preferredDuringSchedulingIgnoredDuringExecution,omitempty"`

	// WARNING: Please note that if the affinity requirements specified by this field are not met at
	// scheduling time, the pod will NOT be scheduled onto the node.
	// There is no fallback to another affinity rules with this setting.
	// This may cause networking disruption or even catastrophic failure!
	// PreferredDuringSchedulingIgnoredDuringExecution should be used for affinity
	// unless there is a specific well understood reason to use RequiredDuringSchedulingIgnoredDuringExecution and
	// you can guarantee that the RequiredDuringSchedulingIgnoredDuringExecution will always have sufficient nodes to satisfy the requirement.
	// NOTE: RequiredDuringSchedulingIgnoredDuringExecution is set by default for AKS nodes,
	// to avoid scheduling Typhas on virtual-nodes.
	// If the affinity requirements specified by this field cease to be met
	// at some point during pod execution (e.g. due to an update), the system
	// may or may not try to eventually evict the pod from its node.
	// +optional
	RequiredDuringSchedulingIgnoredDuringExecution *v1.NodeSelector `json:"requiredDuringSchedulingIgnoredDuringExecution,omitempty"`
}

NodeAffinity is similar to *v1.NodeAffinity, but allows us to limit available schedulers.

func (*NodeAffinity) DeepCopy

func (in *NodeAffinity) DeepCopy() *NodeAffinity

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NodeAffinity.

func (*NodeAffinity) DeepCopyInto

func (in *NodeAffinity) DeepCopyInto(out *NodeAffinity)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NodeSet

type NodeSet struct {
	// SelectionAttributes defines K8s node attributes a NodeSet should use when setting the Node Affinity selectors and
	// Elasticsearch cluster awareness attributes for the Elasticsearch nodes. The list of SelectionAttributes are used
	// to define Node Affinities and set the node awareness configuration in the running Elasticsearch instance.
	SelectionAttributes []NodeSetSelectionAttribute `json:"selectionAttributes,omitempty"`
}

NodeSets defines configuration specific to each Elasticsearch Node Set

func (*NodeSet) DeepCopy

func (in *NodeSet) DeepCopy() *NodeSet

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NodeSet.

func (*NodeSet) DeepCopyInto

func (in *NodeSet) DeepCopyInto(out *NodeSet)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NodeSetSelectionAttribute

type NodeSetSelectionAttribute struct {
	// +required
	Name string `json:"name"`
	// +required
	NodeLabel string `json:"nodeLabel"`
	// +required
	Value string `json:"value"`
}

NodeSetSelectionAttribute defines a K8s node "attribute" the Elasticsearch nodes should be aware of. The "Name" and "Value" are used together to set the "awareness" attributes in Elasticsearch, while the "NodeLabel" and "Value" are used together to define Node Affinity for the Pods created for the Elasticsearch nodes.

func (*NodeSetSelectionAttribute) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NodeSetSelectionAttribute.

func (*NodeSetSelectionAttribute) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Nodes

type Nodes struct {
	// Count defines the number of nodes in the Elasticsearch cluster.
	Count int64 `json:"count,omitempty"`

	// NodeSets defines configuration specific to each Elasticsearch Node Set
	// +optional
	NodeSets []NodeSet `json:"nodeSets,omitempty"`

	// ResourceRequirements defines the resource limits and requirements for the Elasticsearch cluster.
	// +optional
	ResourceRequirements *corev1.ResourceRequirements `json:"resourceRequirements,omitempty"`
}

Nodes defines the configuration for a set of identical Elasticsearch cluster nodes, each of type master, data, and ingest.

func (*Nodes) DeepCopy

func (in *Nodes) DeepCopy() *Nodes

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Nodes.

func (*Nodes) DeepCopyInto

func (in *Nodes) DeepCopyInto(out *Nodes)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NonClusterHost

type NonClusterHost struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state for non-cluster host log collection.
	Spec NonClusterHostSpec `json:"spec,omitempty"`
}

NonClusterHost installs the components required for non-cluster host log collection. At most one instance of this resource is supported. It must be named "tigera-secure".

func (*NonClusterHost) DeepCopy

func (in *NonClusterHost) DeepCopy() *NonClusterHost

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NonClusterHost.

func (*NonClusterHost) DeepCopyInto

func (in *NonClusterHost) DeepCopyInto(out *NonClusterHost)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*NonClusterHost) DeepCopyObject

func (in *NonClusterHost) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type NonClusterHostList

type NonClusterHostList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`

	Items []NonClusterHost `json:"items"`
}

NonClusterHostList contains a list of NonClusterHost

func (*NonClusterHostList) DeepCopy

func (in *NonClusterHostList) DeepCopy() *NonClusterHostList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NonClusterHostList.

func (*NonClusterHostList) DeepCopyInto

func (in *NonClusterHostList) DeepCopyInto(out *NonClusterHostList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*NonClusterHostList) DeepCopyObject

func (in *NonClusterHostList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type NonClusterHostSpec

type NonClusterHostSpec struct {
	// Location of the log ingestion point for non-cluster hosts. For example: https://1.2.3.4:443
	// +kubebuilder:validation:Pattern=`^https://.+$`
	Endpoint string `json:"endpoint"`

	// Location of the Typha endpoint for non-cluster host Felix and Typha communication. For example: 5.6.7.8:5473
	TyphaEndpoint string `json:"typhaEndpoint,omitempty"`
}

NonClusterHostSpec enables non-cluster hosts to connect to a cluster.

func (*NonClusterHostSpec) DeepCopy

func (in *NonClusterHostSpec) DeepCopy() *NonClusterHostSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NonClusterHostSpec.

func (*NonClusterHostSpec) DeepCopyInto

func (in *NonClusterHostSpec) DeepCopyInto(out *NonClusterHostSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type NonPrivilegedType

type NonPrivilegedType string

NonPrivilegedType specifies whether Calico runs as permissioned or not

One of: Enabled, Disabled

const (
	NonPrivilegedEnabled  NonPrivilegedType = "Enabled"
	NonPrivilegedDisabled NonPrivilegedType = "Disabled"
)

type NotificationMode

type NotificationMode string
const (
	Disabled NotificationMode = "Disabled"
	Enabled  NotificationMode = "Enabled"
)

type OIDCType

type OIDCType string

OIDCType defines how OIDC is configured for Tigera Enterprise. Dex should be the best option for most use-cases. The Tigera option can help in specific use-cases, for instance, when you are unable to configure a client secret. One of: Dex, Tigera +kubebuilder:validation:Enum=Dex;Tigera

const (
	// OIDCTypeDex uses Dex IdP, a popular open-source tool for connecting OIDC.
	OIDCTypeDex OIDCType = "Dex"
	// OIDCTypeTigera uses customer code to pass OIDC configuration directly into our server applications.
	OIDCTypeTigera OIDCType = "Tigera"
)

type PacketCaptureAPI

type PacketCaptureAPI struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	// Specification of the desired state for the PacketCaptureAPI.
	Spec PacketCaptureAPISpec `json:"spec,omitempty"`
	// Most recently observed state for the PacketCaptureAPI.
	Status PacketCaptureAPIStatus `json:"status,omitempty"`
}

PacketCaptureAPI is used to configure the resource requirement for PacketCaptureAPI deployment. It must be named "tigera-secure".

func (*PacketCaptureAPI) DeepCopy

func (in *PacketCaptureAPI) DeepCopy() *PacketCaptureAPI

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PacketCaptureAPI.

func (*PacketCaptureAPI) DeepCopyInto

func (in *PacketCaptureAPI) DeepCopyInto(out *PacketCaptureAPI)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PacketCaptureAPI) DeepCopyObject

func (in *PacketCaptureAPI) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PacketCaptureAPIDeployment

type PacketCaptureAPIDeployment struct {

	// Spec is the specification of the PacketCaptureAPI Deployment.
	// +optional
	Spec *PacketCaptureAPIDeploymentSpec `json:"spec,omitempty"`
}

PacketCaptureAPIDeployment is the configuration for the PacketCaptureAPI Deployment.

func (*PacketCaptureAPIDeployment) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PacketCaptureAPIDeployment.

func (*PacketCaptureAPIDeployment) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PacketCaptureAPIDeploymentContainer

type PacketCaptureAPIDeploymentContainer struct {
	// Name is an enum which identifies the PacketCaptureAPI Deployment container by name.
	// Supported values are: tigera-packetcapture-server
	// +kubebuilder:validation:Enum=tigera-packetcapture-server
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named PacketCaptureAPI Deployment container's resources.
	// If omitted, the PacketCaptureAPI Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

PacketCaptureAPIDeploymentContainer is a PacketCaptureAPI Deployment container.

func (*PacketCaptureAPIDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PacketCaptureAPIDeploymentContainer.

func (*PacketCaptureAPIDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PacketCaptureAPIDeploymentInitContainer

type PacketCaptureAPIDeploymentInitContainer struct {
	// Name is an enum which identifies the PacketCaptureAPI Deployment init container by name.
	// Supported values are: tigera-packetcapture-server-tls-key-cert-provisioner
	// +kubebuilder:validation:Enum=tigera-packetcapture-server-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named PacketCaptureAPI Deployment init container's resources.
	// If omitted, the PacketCaptureAPI Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

PacketCaptureAPIDeploymentInitContainer is a PacketCaptureAPI Deployment init container.

func (*PacketCaptureAPIDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PacketCaptureAPIDeploymentInitContainer.

func (*PacketCaptureAPIDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PacketCaptureAPIDeploymentPodSpec

type PacketCaptureAPIDeploymentPodSpec struct {
	// InitContainers is a list of PacketCaptureAPI init containers.
	// If specified, this overrides the specified PacketCaptureAPI Deployment init containers.
	// If omitted, the PacketCaptureAPI Deployment will use its default values for its init containers.
	// +optional
	InitContainers []PacketCaptureAPIDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of PacketCaptureAPI containers.
	// If specified, this overrides the specified PacketCaptureAPI Deployment containers.
	// If omitted, the PacketCaptureAPI Deployment will use its default values for its containers.
	// +optional
	Containers []PacketCaptureAPIDeploymentContainer `json:"containers,omitempty"`
}

PacketCaptureAPIDeploymentPodSpec is the PacketCaptureAPI Deployment's PodSpec.

func (*PacketCaptureAPIDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PacketCaptureAPIDeploymentPodSpec.

func (*PacketCaptureAPIDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PacketCaptureAPIDeploymentPodTemplateSpec

type PacketCaptureAPIDeploymentPodTemplateSpec struct {

	// Spec is the PacketCaptureAPI Deployment's PodSpec.
	// +optional
	Spec *PacketCaptureAPIDeploymentPodSpec `json:"spec,omitempty"`
}

PacketCaptureAPIDeploymentPodTemplateSpec is the PacketCaptureAPI Deployment's PodTemplateSpec

func (*PacketCaptureAPIDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PacketCaptureAPIDeploymentPodTemplateSpec.

func (*PacketCaptureAPIDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PacketCaptureAPIDeploymentSpec

type PacketCaptureAPIDeploymentSpec struct {

	// Template describes the PacketCaptureAPI Deployment pod that will be created.
	// +optional
	Template *PacketCaptureAPIDeploymentPodTemplateSpec `json:"template,omitempty"`
}

PacketCaptureAPIDeploymentSpec defines configuration for the PacketCaptureAPI Deployment.

func (*PacketCaptureAPIDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PacketCaptureAPIDeploymentSpec.

func (*PacketCaptureAPIDeploymentSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PacketCaptureAPIList

type PacketCaptureAPIList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PacketCaptureAPI `json:"items"`
}

PacketCaptureAPIList contains a list of PacketCaptureAPI

func (*PacketCaptureAPIList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PacketCaptureAPIList.

func (*PacketCaptureAPIList) DeepCopyInto

func (in *PacketCaptureAPIList) DeepCopyInto(out *PacketCaptureAPIList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PacketCaptureAPIList) DeepCopyObject

func (in *PacketCaptureAPIList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PacketCaptureAPISpec

type PacketCaptureAPISpec struct {

	// PacketCaptureAPIDeployment configures the PacketCaptureAPI Deployment.
	// +optional
	PacketCaptureAPIDeployment *PacketCaptureAPIDeployment `json:"packetCaptureAPIDeployment,omitempty"`
}

PacketCaptureAPISpec defines configuration for the Packet Capture API.

func (*PacketCaptureAPISpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PacketCaptureAPISpec.

func (*PacketCaptureAPISpec) DeepCopyInto

func (in *PacketCaptureAPISpec) DeepCopyInto(out *PacketCaptureAPISpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PacketCaptureAPIStatus

type PacketCaptureAPIStatus struct {

	// State provides user-readable status.
	State string `json:"state,omitempty"`

	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

PacketCaptureAPIStatus defines the observed state of the Packet Capture API.

func (*PacketCaptureAPIStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PacketCaptureAPIStatus.

func (*PacketCaptureAPIStatus) DeepCopyInto

func (in *PacketCaptureAPIStatus) DeepCopyInto(out *PacketCaptureAPIStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PathMatch

type PathMatch struct {
	// Path is the path portion of the URL based on which we proxy.
	// +required
	Path string `json:"path"`

	// PathRegexp, if not nil, checks if Regexp matches the path.
	// +optional
	PathRegexp *string `json:"pathRegexp,omitempty"`

	// PathReplace if not nil will be used to replace PathRegexp matches.
	// +optional
	PathReplace *string `json:"pathReplace,omitempty"`
}

func (*PathMatch) DeepCopy

func (in *PathMatch) DeepCopy() *PathMatch

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PathMatch.

func (*PathMatch) DeepCopyInto

func (in *PathMatch) DeepCopyInto(out *PathMatch)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PolicyMode

type PolicyMode string
const (
	PolicyModeDefault PolicyMode = "Default"
	PolicyModeManual  PolicyMode = "Manual"
)

type PolicyRecommendation

type PolicyRecommendation struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   PolicyRecommendationSpec   `json:"spec,omitempty"`
	Status PolicyRecommendationStatus `json:"status,omitempty"`
}

PolicyRecommendation is the Schema for the policy recommendation API. At most one instance of this resource is supported. It must be named "tigera-secure".

func (*PolicyRecommendation) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRecommendation.

func (*PolicyRecommendation) DeepCopyInto

func (in *PolicyRecommendation) DeepCopyInto(out *PolicyRecommendation)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PolicyRecommendation) DeepCopyObject

func (in *PolicyRecommendation) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PolicyRecommendationDeployment

type PolicyRecommendationDeployment struct {

	// Spec is the specification of the PolicyRecommendation Deployment.
	// +optional
	Spec *PolicyRecommendationDeploymentSpec `json:"spec,omitempty"`
}

PolicyRecommendationDeployment is the configuration for the PolicyRecommendation Deployment.

func (*PolicyRecommendationDeployment) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRecommendationDeployment.

func (*PolicyRecommendationDeployment) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PolicyRecommendationDeploymentContainer

type PolicyRecommendationDeploymentContainer struct {
	// Name is an enum which identifies the PolicyRecommendation Deployment container by name.
	// Supported values are: policy-recommendation-controller
	// +kubebuilder:validation:Enum=policy-recommendation-controller
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named PolicyRecommendation Deployment container's resources.
	// If omitted, the PolicyRecommendation Deployment will use its default value for this container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

PolicyRecommendationDeploymentContainer is a PolicyRecommendation Deployment container.

func (*PolicyRecommendationDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRecommendationDeploymentContainer.

func (*PolicyRecommendationDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PolicyRecommendationDeploymentInitContainer

type PolicyRecommendationDeploymentInitContainer struct {
	// Name is an enum which identifies the PolicyRecommendation Deployment init container by name.
	// +kubebuilder:validation:Enum=policy-recommendation-tls-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named PolicyRecommendation Deployment init container's resources.
	// If omitted, the PolicyRecommendation Deployment will use its default value for this init container's resources.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

PolicyRecommendationDeploymentInitContainer is a PolicyRecommendation Deployment init container.

func (*PolicyRecommendationDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRecommendationDeploymentInitContainer.

func (*PolicyRecommendationDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PolicyRecommendationDeploymentPodSpec

type PolicyRecommendationDeploymentPodSpec struct {
	// InitContainers is a list of PolicyRecommendation init containers.
	// If specified, this overrides the specified PolicyRecommendation Deployment init containers.
	// If omitted, the PolicyRecommendation Deployment will use its default values for its init containers.
	// +optional
	InitContainers []PolicyRecommendationDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of PolicyRecommendation containers.
	// If specified, this overrides the specified PolicyRecommendation Deployment containers.
	// If omitted, the PolicyRecommendation Deployment will use its default values for its containers.
	// +optional
	Containers []PolicyRecommendationDeploymentContainer `json:"containers,omitempty"`
}

PolicyRecommendationDeploymentPodSpec is the PolicyRecommendation Deployment's PodSpec.

func (*PolicyRecommendationDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRecommendationDeploymentPodSpec.

func (*PolicyRecommendationDeploymentPodSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PolicyRecommendationDeploymentPodTemplateSpec

type PolicyRecommendationDeploymentPodTemplateSpec struct {

	// Spec is the PolicyRecommendation Deployment's PodSpec.
	// +optional
	Spec *PolicyRecommendationDeploymentPodSpec `json:"spec,omitempty"`
}

PolicyRecommendationDeploymentPodTemplateSpec is the PolicyRecommendation Deployment's PodTemplateSpec

func (*PolicyRecommendationDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRecommendationDeploymentPodTemplateSpec.

func (*PolicyRecommendationDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PolicyRecommendationDeploymentSpec

type PolicyRecommendationDeploymentSpec struct {

	// Template describes the PolicyRecommendation Deployment pod that will be created.
	// +optional
	Template *PolicyRecommendationDeploymentPodTemplateSpec `json:"template,omitempty"`
}

PolicyRecommendationDeploymentSpec defines configuration for the PolicyRecommendation Deployment.

func (*PolicyRecommendationDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRecommendationDeploymentSpec.

func (*PolicyRecommendationDeploymentSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PolicyRecommendationList

type PolicyRecommendationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PolicyRecommendation `json:"items"`
}

PolicyRecommendationList contains a list of Monitor

func (*PolicyRecommendationList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRecommendationList.

func (*PolicyRecommendationList) DeepCopyInto

func (in *PolicyRecommendationList) DeepCopyInto(out *PolicyRecommendationList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PolicyRecommendationList) DeepCopyObject

func (in *PolicyRecommendationList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type PolicyRecommendationSpec

type PolicyRecommendationSpec struct {

	// PolicyRecommendation configures the PolicyRecommendation Deployment.
	// +optional
	PolicyRecommendationDeployment *PolicyRecommendationDeployment `json:"policyRecommendationDeployment,omitempty"`
}

PolicyRecommendationSpec defines configuration for the Calico Enterprise Policy Recommendation service.

func (*PolicyRecommendationSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRecommendationSpec.

func (*PolicyRecommendationSpec) DeepCopyInto

func (in *PolicyRecommendationSpec) DeepCopyInto(out *PolicyRecommendationSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PolicyRecommendationStatus

type PolicyRecommendationStatus struct {
	// State provides user-readable status.
	State string `json:"state,omitempty"`
}

PolicyRecommendationStatus defines the observed state of Tigera policy recommendation.

func (*PolicyRecommendationStatus) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRecommendationStatus.

func (*PolicyRecommendationStatus) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ProductVariant

type ProductVariant string

ProductVariant represents the variant of the product.

One of: Calico, TigeraSecureEnterprise

var (
	Calico                 ProductVariant = "Calico"
	TigeraSecureEnterprise ProductVariant = "TigeraSecureEnterprise"
)

type Prometheus

type Prometheus struct {
	// Spec is the specification of the Prometheus.
	// +optional
	PrometheusSpec *PrometheusSpec `json:"spec,omitempty"`
}

func (*Prometheus) DeepCopy

func (in *Prometheus) DeepCopy() *Prometheus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Prometheus.

func (*Prometheus) DeepCopyInto

func (in *Prometheus) DeepCopyInto(out *Prometheus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Prometheus) GetContainers

func (c *Prometheus) GetContainers() []corev1.Container

func (*Prometheus) GetPrometheusResource

func (c *Prometheus) GetPrometheusResource() *corev1.ResourceRequirements

type PrometheusContainer

type PrometheusContainer struct {
	// Name is an enum which identifies the Prometheus Deployment container by name.
	// Supported values are: authn-proxy
	// +kubebuilder:validation:Enum=authn-proxy
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named Prometheus container's resources.
	// If omitted, the Prometheus will use its default value for this container's resources.
	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
}

PrometheusContainer is a Prometheus container.

func (*PrometheusContainer) DeepCopy

func (in *PrometheusContainer) DeepCopy() *PrometheusContainer

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PrometheusContainer.

func (*PrometheusContainer) DeepCopyInto

func (in *PrometheusContainer) DeepCopyInto(out *PrometheusContainer)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PrometheusSpec

type PrometheusSpec struct {
	// CommonPrometheusFields are the options available to both the Prometheus server and agent.
	CommonPrometheusFields *CommonPrometheusFields `json:"commonPrometheusFields,omitempty"`
}

func (*PrometheusSpec) DeepCopy

func (in *PrometheusSpec) DeepCopy() *PrometheusSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PrometheusSpec.

func (*PrometheusSpec) DeepCopyInto

func (in *PrometheusSpec) DeepCopyInto(out *PrometheusSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type PromptType

type PromptType string

PromptType is a value that specifies whether the identity provider prompts the end user for re-authentication and consent. One of: None, Login, Consent, SelectAccount. +kubebuilder:validation:Enum=None;Login;Consent;SelectAccount

const (
	// The identity provider must not display any authentication or consent user interface pages.
	PromptTypeNone PromptType = "None"
	// The identity provider should prompt the end user for reauthentication.
	PromptTypeLogin PromptType = "Login"
	// The identity provider should prompt the end user for consent before returning information to the client.
	PromptTypeConsent PromptType = "Consent"
	// The identity provider should prompt the end user to select a user account.
	PromptTypeSelectAccount PromptType = "SelectAccount"
)

type Provider

type Provider string

Provider represents a particular provider or flavor of Kubernetes. Valid options are: EKS, GKE, AKS, RKE2, OpenShift, DockerEnterprise, TKG, Kind.

var (
	ProviderNone      Provider = ""
	ProviderEKS       Provider = "EKS"
	ProviderGKE       Provider = "GKE"
	ProviderAKS       Provider = "AKS"
	ProviderRKE2      Provider = "RKE2"
	ProviderOpenShift Provider = "OpenShift"
	ProviderDockerEE  Provider = "DockerEnterprise"
	ProviderTKG       Provider = "TKG"
	ProviderKind      Provider = "Kind"
)

func (Provider) IsAKS

func (p Provider) IsAKS() bool

func (Provider) IsDockerEE

func (p Provider) IsDockerEE() bool

func (Provider) IsEKS

func (p Provider) IsEKS() bool

func (Provider) IsGKE

func (p Provider) IsGKE() bool

func (Provider) IsKind

func (p Provider) IsKind() bool

func (Provider) IsNone

func (p Provider) IsNone() bool

func (Provider) IsOpenShift

func (p Provider) IsOpenShift() bool

func (Provider) IsRKE2

func (p Provider) IsRKE2() bool

func (Provider) IsTKG

func (p Provider) IsTKG() bool

type Proxy

type Proxy struct {
	// HTTPProxy defines the value of the HTTP_PROXY environment variable that will be set on Tigera containers that connect to
	// destinations outside the cluster.
	// +optional
	HTTPProxy string `json:"httpProxy,omitempty"`

	// HTTPSProxy defines the value of the HTTPS_PROXY environment variable that will be set on Tigera containers that connect to
	// destinations outside the cluster.
	// +optional
	HTTPSProxy string `json:"httpsProxy,omitempty"`

	// NoProxy defines the value of the NO_PROXY environment variable that will be set on Tigera containers that connect to
	// destinations outside the cluster. This value must be set such that destinations within the scope of the cluster, including
	// the Kubernetes API server, are exempt from being proxied.
	// +optional
	NoProxy string `json:"noProxy,omitempty"`
}

func (*Proxy) DeepCopy

func (in *Proxy) DeepCopy() *Proxy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Proxy.

func (*Proxy) DeepCopyInto

func (in *Proxy) DeepCopyInto(out *Proxy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Proxy) EnvVars

func (p *Proxy) EnvVars() (envVars []v1.EnvVar)

type QueryServerLogging

type QueryServerLogging struct {
	// LogSeverity defines log level for QueryServer container.
	// +optional
	// +kubebuilder:default=Info
	LogSeverity *LogSeverity `json:"logSeverity,omitempty"`
}

func (*QueryServerLogging) DeepCopy

func (in *QueryServerLogging) DeepCopy() *QueryServerLogging

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new QueryServerLogging.

func (*QueryServerLogging) DeepCopyInto

func (in *QueryServerLogging) DeepCopyInto(out *QueryServerLogging)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type Retention

type Retention struct {
	// Flows configures the retention period for flow logs, in days.  Logs written on a day that started at least this long ago
	// are removed.  To keep logs for at least x days, use a retention period of x+1.
	// Default: 8
	// +optional
	Flows *int32 `json:"flows"`

	// AuditReports configures the retention period for audit logs, in days.  Logs written on a day that started at least this long ago are
	// removed.  To keep logs for at least x days, use a retention period of x+1.
	// Default: 91
	// +optional
	AuditReports *int32 `json:"auditReports"`

	// Snapshots configures the retention period for snapshots, in days. Snapshots are periodic captures
	// of resources which along with audit events are used to generate reports.
	// Consult the Compliance Reporting documentation for more details on snapshots.
	// Logs written on a day that started at least this long ago are
	// removed.  To keep logs for at least x days, use a retention period of x+1.
	// Default: 91
	// +optional
	Snapshots *int32 `json:"snapshots"`

	// ComplianceReports configures the retention period for compliance reports, in days. Reports are output
	// from the analysis of the system state and audit events for compliance reporting.
	// Consult the Compliance Reporting documentation for more details on reports.
	// Logs written on a day that started at least this long ago are
	// removed.  To keep logs for at least x days, use a retention period of x+1.
	// Default: 91
	// +optional
	ComplianceReports *int32 `json:"complianceReports"`

	// DNSLogs configures the retention period for DNS logs, in days.  Logs written on a day that started at least this long ago
	// are removed.  To keep logs for at least x days, use a retention period of x+1.
	// Default: 8
	// +optional
	DNSLogs *int32 `json:"dnsLogs"`

	// BGPLogs configures the retention period for BGP logs, in days.  Logs written on a day that started at least this long ago
	// are removed.  To keep logs for at least x days, use a retention period of x+1.
	// Default: 8
	// +optional
	BGPLogs *int32 `json:"bgpLogs"`
}

Retention defines how long data is retained in an Elasticsearch cluster before it is cleared.

func (*Retention) DeepCopy

func (in *Retention) DeepCopy() *Retention

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Retention.

func (*Retention) DeepCopyInto

func (in *Retention) DeepCopyInto(out *Retention)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type S3StoreSpec

type S3StoreSpec struct {
	// AWS Region of the S3 bucket
	Region string `json:"region"`

	// Name of the S3 bucket to send logs
	BucketName string `json:"bucketName"`

	// Path in the S3 bucket where to send logs
	BucketPath string `json:"bucketPath"`

	// The set of hosts that will forward their logs to this store.
	// +optional
	HostScope *HostScope `json:"hostScope,omitempty"`
}

S3StoreSpec defines configuration for exporting logs to Amazon S3. +k8s:openapi-gen=true

func (*S3StoreSpec) DeepCopy

func (in *S3StoreSpec) DeepCopy() *S3StoreSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new S3StoreSpec.

func (*S3StoreSpec) DeepCopyInto

func (in *S3StoreSpec) DeepCopyInto(out *S3StoreSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SNIMatch

type SNIMatch struct {
	// ServerName is used to match the server name for the request.
	ServerName string `json:"serverName"`
}

func (*SNIMatch) DeepCopy

func (in *SNIMatch) DeepCopy() *SNIMatch

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SNIMatch.

func (*SNIMatch) DeepCopyInto

func (in *SNIMatch) DeepCopyInto(out *SNIMatch)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type ServiceMonitor

type ServiceMonitor struct {
	// Labels are the metadata.labels of the ServiceMonitor. When combined with spec.serviceMonitorSelector.matchLabels
	// on your prometheus instance, the service monitor will automatically be picked up.
	// Default: k8s-app=tigera-prometheus
	Labels map[string]string `json:"labels,omitempty"`

	// The endpoints to scrape. This struct contains a subset of the Endpoint as defined in the prometheus docs. Fields
	// related to connecting to our Prometheus server are automatically set by the operator.
	Endpoints []Endpoint `json:"endpoints,omitempty"`
}

func (*ServiceMonitor) DeepCopy

func (in *ServiceMonitor) DeepCopy() *ServiceMonitor

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceMonitor.

func (*ServiceMonitor) DeepCopyInto

func (in *ServiceMonitor) DeepCopyInto(out *ServiceMonitor)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SidecarStatusType

type SidecarStatusType string

+kubebuilder:validation:Enum=Enabled;Disabled

type SidecarWebhookStateType

type SidecarWebhookStateType string

+kubebuilder:validation:Enum=Enabled;Disabled

type SplunkStoreSpec

type SplunkStoreSpec struct {
	// Location for splunk's http event collector end point. example `https://1.2.3.4:8088`
	Endpoint string `json:"endpoint"`

	// The set of hosts that will forward their logs to this store
	// +optional
	HostScope *HostScope `json:"hostScope,omitempty"`
}

SplunkStoreSpec defines configuration for exporting logs to splunk.

func (*SplunkStoreSpec) DeepCopy

func (in *SplunkStoreSpec) DeepCopy() *SplunkStoreSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SplunkStoreSpec.

func (*SplunkStoreSpec) DeepCopyInto

func (in *SplunkStoreSpec) DeepCopyInto(out *SplunkStoreSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type StatusConditionType

type StatusConditionType string

StatusConditionType is a type of condition that may apply to a particular component.

const (
	// Available indicates that the component is healthy.
	ComponentAvailable StatusConditionType = "Available"

	// Progressing means that the component is in the process of being installed or upgraded.
	ComponentProgressing StatusConditionType = "Progressing"

	// Degraded means the component is not operating as desired and user action is required.
	ComponentDegraded StatusConditionType = "Degraded"

	// Ready indicates that the component is healthy and ready.it is identical to Available and used in Status conditions for CRs.
	ComponentReady StatusConditionType = "Ready"
)

type Sysctl

type Sysctl struct {
	// +kubebuilder:validation:Enum=net.ipv4.tcp_keepalive_intvl;net.ipv4.tcp_keepalive_probes;net.ipv4.tcp_keepalive_time
	Key   string `json:"key"`
	Value string `json:"value"`
}

func (*Sysctl) DeepCopy

func (in *Sysctl) DeepCopy() *Sysctl

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Sysctl.

func (*Sysctl) DeepCopyInto

func (in *Sysctl) DeepCopyInto(out *Sysctl)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type SyslogLogType

type SyslogLogType string

SyslogLogType represents the allowable log types for syslog. Allowable values are Audit, DNS, Flows and IDSEvents. * Audit corresponds to audit logs for both Kubernetes resources and Enterprise custom resources. * DNS corresponds to DNS logs generated by Calico node. * Flows corresponds to flow logs generated by Calico node. * IDSEvents corresponds to event logs for the intrusion detection system (anomaly detection, suspicious IPs, suspicious domains and global alerts). +kubebuilder:validation:Enum=Audit;DNS;Flows;IDSEvents

const (
	SyslogLogAudit     SyslogLogType = "Audit"
	SyslogLogDNS       SyslogLogType = "DNS"
	SyslogLogFlows     SyslogLogType = "Flows"
	SyslogLogL7        SyslogLogType = "L7"
	SyslogLogIDSEvents SyslogLogType = "IDSEvents"
)

func (SyslogLogType) String

func (cp SyslogLogType) String() string

type SyslogStoreSpec

type SyslogStoreSpec struct {
	// Location of the syslog server. example: tcp://1.2.3.4:601
	Endpoint string `json:"endpoint"`

	// PacketSize defines the maximum size of packets to send to syslog.
	// In general this is only needed if you notice long logs being truncated.
	// Default: 1024
	// +optional
	PacketSize *int32 `json:"packetSize,omitempty"`

	// If no values are provided, the list will be updated to include log types Audit, DNS and Flows.
	// Default: Audit, DNS, Flows
	LogTypes []SyslogLogType `json:"logTypes"`

	// Encryption configures traffic encryption to the Syslog server.
	// Default: None
	// +optional
	// +kubebuilder:validation:Enum=None;TLS
	Encryption EncryptionOption `json:"encryption,omitempty"`

	// The set of hosts that will forward their logs to this store.
	// +optional
	HostScope *HostScope `json:"hostScope,omitempty"`
}

SyslogStoreSpec defines configuration for exporting logs to syslog.

func (*SyslogStoreSpec) DeepCopy

func (in *SyslogStoreSpec) DeepCopy() *SyslogStoreSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SyslogStoreSpec.

func (*SyslogStoreSpec) DeepCopyInto

func (in *SyslogStoreSpec) DeepCopyInto(out *SyslogStoreSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TLS

type TLS struct {
	// SecretName indicates the name of the secret in the tigera-operator namespace that contains the private key and certificate that the management cluster uses when it listens for incoming connections.
	//
	// When set to tigera-management-cluster-connection voltron will use the same cert bundle which Guardian client certs are signed with.
	//
	// When set to manager-tls, voltron will use the same cert bundle which Manager UI is served with.
	// This cert bundle must be a publicly signed cert created by the user.
	// Note that Tigera Operator will generate a self-signed manager-tls cert if one does not exist,
	// and use of that cert will result in Guardian being unable to verify Voltron's identity.
	//
	// If changed on a running cluster with connected managed clusters, all managed clusters will disconnect as they will no longer be able to verify Voltron's identity.
	// To reconnect existing managed clusters, change the tls.ca of the  managed clusters' ManagementClusterConnection resource.
	//
	// One of: tigera-management-cluster-connection, manager-tls
	//
	// Default: tigera-management-cluster-connection
	//
	// +kubebuilder:validation:Enum=tigera-management-cluster-connection;manager-tls
	// +optional
	SecretName string `json:"secretName,omitempty"`
}

func (*TLS) DeepCopy

func (in *TLS) DeepCopy() *TLS

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TLS.

func (*TLS) DeepCopyInto

func (in *TLS) DeepCopyInto(out *TLS)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TLSCipher

type TLSCipher string

+kubebuilder:validation:Enum=TLS_AES_256_GCM_SHA384;TLS_CHACHA20_POLY1305_SHA256;TLS_AES_128_GCM_SHA256;TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384;TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384;TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256;TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256;TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256;TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256;TLS_RSA_WITH_AES_256_GCM_SHA384;TLS_RSA_WITH_AES_128_GCM_SHA256;TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA;TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA;TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

const (
	// TLS 1.3
	TLS_AES_256_GCM_SHA384       TLSCipher = "TLS_AES_256_GCM_SHA384"
	TLS_CHACHA20_POLY1305_SHA256 TLSCipher = "TLS_CHACHA20_POLY1305_SHA256"
	TLS_AES_128_GCM_SHA256       TLSCipher = "TLS_AES_128_GCM_SHA256"

	// TLS 1.2
	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384       TLSCipher = "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384         TLSCipher = "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
	TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256   TLSCipher = "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256"
	TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLSCipher = "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"
	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256         TLSCipher = "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256       TLSCipher = "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
	TLS_RSA_WITH_AES_256_GCM_SHA384               TLSCipher = "TLS_RSA_WITH_AES_256_GCM_SHA384"
	TLS_RSA_WITH_AES_128_GCM_SHA256               TLSCipher = "TLS_RSA_WITH_AES_128_GCM_SHA256"
	TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA          TLSCipher = "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA"
	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA            TLSCipher = "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA            TLSCipher = "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
)

func (TLSCipher) String

func (c TLSCipher) String() string

type TLSCipherSuite

type TLSCipherSuite struct {
	// This should be a valid TLS cipher suite name.
	// +optional
	Name *TLSCipher `json:"name"`
}

func (*TLSCipherSuite) DeepCopy

func (in *TLSCipherSuite) DeepCopy() *TLSCipherSuite

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TLSCipherSuite.

func (*TLSCipherSuite) DeepCopyInto

func (in *TLSCipherSuite) DeepCopyInto(out *TLSCipherSuite)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TLSCipherSuites

type TLSCipherSuites []TLSCipherSuite

func (TLSCipherSuites) DeepCopy

func (in TLSCipherSuites) DeepCopy() TLSCipherSuites

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TLSCipherSuites.

func (TLSCipherSuites) DeepCopyInto

func (in TLSCipherSuites) DeepCopyInto(out *TLSCipherSuites)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (TLSCipherSuites) ToString

func (s TLSCipherSuites) ToString() string

ToString returns a comma-separated string of cipher suite names.

type TLSPassThroughRoute

type TLSPassThroughRoute struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// Dest is the destination URL
	Spec TLSPassThroughRouteSpec `json:"spec"`
}

func (*TLSPassThroughRoute) DeepCopy

func (in *TLSPassThroughRoute) DeepCopy() *TLSPassThroughRoute

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TLSPassThroughRoute.

func (*TLSPassThroughRoute) DeepCopyInto

func (in *TLSPassThroughRoute) DeepCopyInto(out *TLSPassThroughRoute)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*TLSPassThroughRoute) DeepCopyObject

func (in *TLSPassThroughRoute) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type TLSPassThroughRouteList

type TLSPassThroughRouteList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata"`
	Items           []TLSPassThroughRoute `json:"items"`
}

func (*TLSPassThroughRouteList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TLSPassThroughRouteList.

func (*TLSPassThroughRouteList) DeepCopyInto

func (in *TLSPassThroughRouteList) DeepCopyInto(out *TLSPassThroughRouteList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*TLSPassThroughRouteList) DeepCopyObject

func (in *TLSPassThroughRouteList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type TLSPassThroughRouteSpec

type TLSPassThroughRouteSpec struct {
	// +kubebuilder:validation:Enum=UpstreamTunnel
	// +required
	Target TargetType `json:"target"`

	// SNIMatch is used to match requests based on the server name for the intended destination server. Matching requests
	// will be proxied to the Destination.
	// +required
	SNIMatch *SNIMatch `json:"sniMatch"`

	// Destination is the destination url to proxy the request to.
	// +required
	Destination string `json:"destination"`
}

func (*TLSPassThroughRouteSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TLSPassThroughRouteSpec.

func (*TLSPassThroughRouteSpec) DeepCopyInto

func (in *TLSPassThroughRouteSpec) DeepCopyInto(out *TLSPassThroughRouteSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TLSTerminatedRoute

type TLSTerminatedRoute struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              TLSTerminatedRouteSpec `json:"spec,omitempty"`
}

func (*TLSTerminatedRoute) DeepCopy

func (in *TLSTerminatedRoute) DeepCopy() *TLSTerminatedRoute

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TLSTerminatedRoute.

func (*TLSTerminatedRoute) DeepCopyInto

func (in *TLSTerminatedRoute) DeepCopyInto(out *TLSTerminatedRoute)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*TLSTerminatedRoute) DeepCopyObject

func (in *TLSTerminatedRoute) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type TLSTerminatedRouteList

type TLSTerminatedRouteList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata"`
	Items           []TLSTerminatedRoute `json:"items"`
}

TLSTerminatedRouteList contains a list of ManagedCluster resources.

func (*TLSTerminatedRouteList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TLSTerminatedRouteList.

func (*TLSTerminatedRouteList) DeepCopyInto

func (in *TLSTerminatedRouteList) DeepCopyInto(out *TLSTerminatedRouteList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*TLSTerminatedRouteList) DeepCopyObject

func (in *TLSTerminatedRouteList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type TLSTerminatedRouteSpec

type TLSTerminatedRouteSpec struct {
	// +kubebuilder:validation:Enum=UpstreamTunnel;UI
	Target TargetType `json:"target"`

	// PathMatch is used to match requests based on what's in the path. Matching requests will be proxied to the Destination
	// defined in this structure.
	// +required
	PathMatch *PathMatch `json:"pathMatch"`

	// Destination is the destination URL where matching traffic is routed to.
	// +required
	Destination string `json:"destination"`

	// CABundle is where we read the CA bundle from to authenticate the
	// destination (if non-empty)
	// +required
	CABundle *v1.ConfigMapKeySelector `json:"caBundle,omitempty"`

	// ForwardingMTLSCert is the certificate used for mTLS between voltron and the destination. Either both ForwardingMTLSCert
	// and ForwardingMTLSKey must be specified, or neither can be specified.
	// +optional
	ForwardingMTLSCert *v1.SecretKeySelector `json:"mtlsCert,omitempty"`

	// ForwardingMTLSKey is the key used for mTLS between voltron and the destination. Either both ForwardingMTLSCert
	// and ForwardingMTLSKey must be specified, or neither can be specified.
	// +optional
	ForwardingMTLSKey *v1.SecretKeySelector `json:"mtlsKey,omitempty"`

	// Unauthenticated says whether the request should go through authentication. This is only applicable if the Target
	// is UI.
	// +optional
	Unauthenticated *bool `json:"unauthenticated"`
}

func (*TLSTerminatedRouteSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TLSTerminatedRouteSpec.

func (*TLSTerminatedRouteSpec) DeepCopyInto

func (in *TLSTerminatedRouteSpec) DeepCopyInto(out *TLSTerminatedRouteSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TargetType

type TargetType string
const (
	TargetTypeUpstreamTunnel TargetType = "UpstreamTunnel"
	TargetTypeUI             TargetType = "UI"
)

type Tenant

type Tenant struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   TenantSpec   `json:"spec,omitempty"`
	Status TenantStatus `json:"status,omitempty"`
}

Tenant is the Schema for the tenants API

func (*Tenant) DeepCopy

func (in *Tenant) DeepCopy() *Tenant

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Tenant.

func (*Tenant) DeepCopyInto

func (in *Tenant) DeepCopyInto(out *Tenant)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Tenant) DeepCopyObject

func (in *Tenant) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*Tenant) ElasticMTLS

func (t *Tenant) ElasticMTLS() bool

func (*Tenant) ManagedClusterIsCalico

func (t *Tenant) ManagedClusterIsCalico() bool

func (*Tenant) MultiTenant

func (t *Tenant) MultiTenant() bool

MultiTenant returns true if this management cluster is configured to support multiple tenants, and false otherwise.

func (*Tenant) SingleTenant

func (t *Tenant) SingleTenant() bool

SingleTenant returns true if this management cluster is scoped to a single tenant, and false if this is either a multi-tenant management cluster or a cluster with no tenancy enabled.

type TenantElasticSpec

type TenantElasticSpec struct {
	URL       string `json:"url"`
	KibanaURL string `json:"kibanaURL,omitempty"`
	MutualTLS bool   `json:"mutualTLS"`
}

func (*TenantElasticSpec) DeepCopy

func (in *TenantElasticSpec) DeepCopy() *TenantElasticSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TenantElasticSpec.

func (*TenantElasticSpec) DeepCopyInto

func (in *TenantElasticSpec) DeepCopyInto(out *TenantElasticSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TenantList

type TenantList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Tenant `json:"items"`
}

TenantList contains a list of Tenant

func (*TenantList) DeepCopy

func (in *TenantList) DeepCopy() *TenantList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TenantList.

func (*TenantList) DeepCopyInto

func (in *TenantList) DeepCopyInto(out *TenantList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*TenantList) DeepCopyObject

func (in *TenantList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type TenantSpec

type TenantSpec struct {
	// ID is the unique identifier for this tenant.
	// +required
	ID string `json:"id,omitempty"`

	// Name is a human readable name for this tenant.
	Name string `json:"name,omitempty"`

	// Indices defines the how to store a tenant's data
	Indices []Index `json:"indices"`

	// Elastic configures per-tenant ElasticSearch and Kibana parameters.
	// This field is required for clusters using external ES.
	Elastic *TenantElasticSpec `json:"elastic,omitempty"`

	// ControlPlaneReplicas defines how many replicas of the control plane core components will be deployed
	// in the Tenant's namespace. Defaults to the controlPlaneReplicas in Installation CR
	// +optional
	ControlPlaneReplicas *int32 `json:"controlPlaneReplicas,omitempty"`

	// LinseedDeployment configures the linseed Deployment.
	LinseedDeployment *LinseedDeployment `json:"linseedDeployment,omitempty"`

	// ESKubeControllerDeployment configures the ESKubeController Deployment.
	ESKubeControllerDeployment *CalicoKubeControllersDeployment `json:"esKubeControllerDeployment,omitempty"`

	// DashboardsJob configures the Dashboards job
	DashboardsJob *DashboardsJob `json:"dashboardsJob,omitempty"`

	// ManagedClusterVariant is the variant of the managed cluster.
	// +optional
	ManagedClusterVariant *ProductVariant `json:"managedClusterVariant,omitempty"`
}

func (*TenantSpec) DeepCopy

func (in *TenantSpec) DeepCopy() *TenantSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TenantSpec.

func (*TenantSpec) DeepCopyInto

func (in *TenantSpec) DeepCopyInto(out *TenantSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TenantStatus

type TenantStatus struct{}

func (*TenantStatus) DeepCopy

func (in *TenantStatus) DeepCopy() *TenantStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TenantStatus.

func (*TenantStatus) DeepCopyInto

func (in *TenantStatus) DeepCopyInto(out *TenantStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TigeraStatus

type TigeraStatus struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   TigeraStatusSpec   `json:"spec,omitempty"`
	Status TigeraStatusStatus `json:"status,omitempty"`
}

TigeraStatus represents the most recently observed status for Calico or a Calico Enterprise functional area. +k8s:openapi-gen=true +kubebuilder:subresource:status +kubebuilder:resource:scope=Cluster +kubebuilder:printcolumn:name="Available",type="string",JSONPath=".status.conditions[?(@.type=='Available')].status",description="Whether the component running and stable." +kubebuilder:printcolumn:name="Progressing",type="string",JSONPath=".status.conditions[?(@.type=='Progressing')].status",description="Whether the component is processing changes." +kubebuilder:printcolumn:name="Degraded",type="string",JSONPath=".status.conditions[?(@.type=='Degraded')].status",description="Whether the component is degraded." +kubebuilder:printcolumn:name="Since",type="date",JSONPath=".status.conditions[?(@.type=='Available')].lastTransitionTime",description="The time the component's Available status last changed."

func (*TigeraStatus) Available

func (ts *TigeraStatus) Available() bool

Available returns true if the TigeraStatus has a condition of type "Available" with status "True".

func (*TigeraStatus) DeepCopy

func (in *TigeraStatus) DeepCopy() *TigeraStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TigeraStatus.

func (*TigeraStatus) DeepCopyInto

func (in *TigeraStatus) DeepCopyInto(out *TigeraStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*TigeraStatus) DeepCopyObject

func (in *TigeraStatus) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type TigeraStatusCondition

type TigeraStatusCondition struct {
	// The type of condition. May be Available, Progressing, or Degraded.
	Type StatusConditionType `json:"type"`

	// The status of the condition. May be True, False, or Unknown.
	Status ConditionStatus `json:"status"`

	// The timestamp representing the start time for the current status.
	LastTransitionTime metav1.Time `json:"lastTransitionTime"`

	// A brief reason explaining the condition.
	Reason string `json:"reason,omitempty"`

	// Optionally, a detailed message providing additional context.
	Message string `json:"message,omitempty"`

	// observedGeneration represents the generation that the condition was set based upon.
	// For instance, if generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
	// with respect to the current state of the instance.
	// +optional
	ObservedGeneration int64 `json:"observedGeneration,omitempty"`
}

TigeraStatusCondition represents a condition attached to a particular component. +k8s:deepcopy-gen=true

func (*TigeraStatusCondition) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TigeraStatusCondition.

func (*TigeraStatusCondition) DeepCopyInto

func (in *TigeraStatusCondition) DeepCopyInto(out *TigeraStatusCondition)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TigeraStatusList

type TigeraStatusList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TigeraStatus `json:"items"`
}

TigeraStatusList contains a list of TigeraStatus

func (*TigeraStatusList) DeepCopy

func (in *TigeraStatusList) DeepCopy() *TigeraStatusList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TigeraStatusList.

func (*TigeraStatusList) DeepCopyInto

func (in *TigeraStatusList) DeepCopyInto(out *TigeraStatusList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*TigeraStatusList) DeepCopyObject

func (in *TigeraStatusList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type TigeraStatusReason

type TigeraStatusReason string

TigeraStatusReason represents the reason for a particular condition.

const (
	AllObjectsAvailable       TigeraStatusReason = "AllObjectsAvailable"
	ResourceNotReady          TigeraStatusReason = "ResourceNotReady"
	PodFailure                TigeraStatusReason = "PodFailure"
	CertificateError          TigeraStatusReason = "CertificateError"
	CertificateReadError      TigeraStatusReason = "CertificateReadError"
	InvalidConfigurationError TigeraStatusReason = "InvalidConfigurationError"
	ResourceCreateError       TigeraStatusReason = "ResourceCreateError"
	ResourceMigrationError    TigeraStatusReason = "ResourceMigrationError"
	ResourceNotFound          TigeraStatusReason = "ResourceNotFound"
	ResourcePatchError        TigeraStatusReason = "ResourcePatchError"
	ResourceReadError         TigeraStatusReason = "ResourceReadError"
	ResourceRenderingError    TigeraStatusReason = "ResourceRenderingError"
	ResourceScalingError      TigeraStatusReason = "ResourceScalingError"
	ResourceUpdateError       TigeraStatusReason = "ResourceUpdateError"
	ResourceValidationError   TigeraStatusReason = "ResourceValidationError"
	MigrationError            TigeraStatusReason = "MigrationError"
	InternalServerError       TigeraStatusReason = "InternalServerError"
	NotApplicable             TigeraStatusReason = "NotApplicable"
	UpgradeError              TigeraStatusReason = "UpgradeError"
	Unknown                   TigeraStatusReason = "Unknown"
	ImageSetError             TigeraStatusReason = "ImageSetError"
)

type TigeraStatusSpec

type TigeraStatusSpec struct{}

TigeraStatusSpec defines the desired state of TigeraStatus

func (*TigeraStatusSpec) DeepCopy

func (in *TigeraStatusSpec) DeepCopy() *TigeraStatusSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TigeraStatusSpec.

func (*TigeraStatusSpec) DeepCopyInto

func (in *TigeraStatusSpec) DeepCopyInto(out *TigeraStatusSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TigeraStatusStatus

type TigeraStatusStatus struct {
	// Conditions represents the latest observed set of conditions for this component. A component may be one or more of
	// Available, Progressing, or Degraded.
	Conditions []TigeraStatusCondition `json:"conditions"`
}

TigeraStatusStatus defines the observed state of TigeraStatus

func (*TigeraStatusStatus) DeepCopy

func (in *TigeraStatusStatus) DeepCopy() *TigeraStatusStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TigeraStatusStatus.

func (*TigeraStatusStatus) DeepCopyInto

func (in *TigeraStatusStatus) DeepCopyInto(out *TigeraStatusStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TyphaAffinity

type TyphaAffinity struct {
	// NodeAffinity describes node affinity scheduling rules for typha.
	// +optional
	NodeAffinity *NodeAffinity `json:"nodeAffinity,omitempty"`
}

Deprecated. Please use TyphaDeployment instead. TyphaAffinity allows configuration of node affinity characteristics for Typha pods.

func (*TyphaAffinity) DeepCopy

func (in *TyphaAffinity) DeepCopy() *TyphaAffinity

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TyphaAffinity.

func (*TyphaAffinity) DeepCopyInto

func (in *TyphaAffinity) DeepCopyInto(out *TyphaAffinity)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TyphaDeployment

type TyphaDeployment struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to the Deployment.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the specification of the typha Deployment.
	// +optional
	Spec *TyphaDeploymentSpec `json:"spec,omitempty"`
}

TyphaDeployment is the configuration for the typha Deployment.

func (*TyphaDeployment) DeepCopy

func (in *TyphaDeployment) DeepCopy() *TyphaDeployment

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TyphaDeployment.

func (*TyphaDeployment) DeepCopyInto

func (in *TyphaDeployment) DeepCopyInto(out *TyphaDeployment)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TyphaDeploymentContainer

type TyphaDeploymentContainer struct {
	// Name is an enum which identifies the typha Deployment container by name.
	// Supported values are: calico-typha
	// +kubebuilder:validation:Enum=calico-typha
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named typha Deployment container's resources.
	// If omitted, the typha Deployment will use its default value for this container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

TyphaDeploymentContainer is a typha Deployment container.

func (*TyphaDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TyphaDeploymentContainer.

func (*TyphaDeploymentContainer) DeepCopyInto

func (in *TyphaDeploymentContainer) DeepCopyInto(out *TyphaDeploymentContainer)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TyphaDeploymentInitContainer

type TyphaDeploymentInitContainer struct {
	// Name is an enum which identifies the typha Deployment init container by name.
	// Supported values are: typha-certs-key-cert-provisioner
	// +kubebuilder:validation:Enum=typha-certs-key-cert-provisioner
	Name string `json:"name"`

	// Resources allows customization of limits and requests for compute resources such as cpu and memory.
	// If specified, this overrides the named typha Deployment init container's resources.
	// If omitted, the typha Deployment will use its default value for this init container's resources.
	// If used in conjunction with the deprecated ComponentResources, then this value takes precedence.
	// +optional
	Resources *v1.ResourceRequirements `json:"resources,omitempty"`
}

TyphaDeploymentInitContainer is a typha Deployment init container.

func (*TyphaDeploymentInitContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TyphaDeploymentInitContainer.

func (*TyphaDeploymentInitContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TyphaDeploymentPodSpec

type TyphaDeploymentPodSpec struct {
	// InitContainers is a list of typha init containers.
	// If specified, this overrides the specified typha Deployment init containers.
	// If omitted, the typha Deployment will use its default values for its init containers.
	// +optional
	InitContainers []TyphaDeploymentInitContainer `json:"initContainers,omitempty"`

	// Containers is a list of typha containers.
	// If specified, this overrides the specified typha Deployment containers.
	// If omitted, the typha Deployment will use its default values for its containers.
	// +optional
	Containers []TyphaDeploymentContainer `json:"containers,omitempty"`

	// Affinity is a group of affinity scheduling rules for the typha pods.
	// If specified, this overrides any affinity that may be set on the typha Deployment.
	// If omitted, the typha Deployment will use its default value for affinity.
	// If used in conjunction with the deprecated TyphaAffinity, then this value takes precedence.
	// WARNING: Please note that this field will override the default calico-typha Deployment affinity.
	// +optional
	Affinity *v1.Affinity `json:"affinity,omitempty"`

	// NodeSelector is the calico-typha pod's scheduling constraints.
	// If specified, each of the key/value pairs are added to the calico-typha Deployment nodeSelector provided
	// the key does not already exist in the object's nodeSelector.
	// If omitted, the calico-typha Deployment will use its default value for nodeSelector.
	// WARNING: Please note that this field will modify the default calico-typha Deployment nodeSelector.
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`

	// Optional duration in seconds the pod needs to terminate gracefully. May be decreased in delete request.
	// Value must be non-negative integer. The value zero indicates stop immediately via
	// the kill signal (no opportunity to shut down).
	// If this value is nil, the default grace period will be used instead.
	// The grace period is the duration in seconds after the processes running in the pod are sent
	// a termination signal and the time when the processes are forcibly halted with a kill signal.
	// Set this value longer than the expected cleanup time for your process.
	// Defaults to 30 seconds.
	// +optional
	TerminationGracePeriodSeconds *int64 `json:"terminationGracePeriodSeconds,omitempty" protobuf:"varint,4,opt,name=terminationGracePeriodSeconds"`

	// TopologySpreadConstraints describes how a group of pods ought to spread across topology
	// domains. Scheduler will schedule pods in a way which abides by the constraints.
	// All topologySpreadConstraints are ANDed.
	// +optional
	TopologySpreadConstraints []v1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`

	// Tolerations is the typha pod's tolerations.
	// If specified, this overrides any tolerations that may be set on the typha Deployment.
	// If omitted, the typha Deployment will use its default value for tolerations.
	// WARNING: Please note that this field will override the default calico-typha Deployment tolerations.
	// +optional
	Tolerations []v1.Toleration `json:"tolerations,omitempty"`
}

TyphaDeploymentPodSpec is the typha Deployment's PodSpec.

func (*TyphaDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TyphaDeploymentPodSpec.

func (*TyphaDeploymentPodSpec) DeepCopyInto

func (in *TyphaDeploymentPodSpec) DeepCopyInto(out *TyphaDeploymentPodSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TyphaDeploymentPodTemplateSpec

type TyphaDeploymentPodTemplateSpec struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to
	// the pod's metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`

	// Spec is the typha Deployment's PodSpec.
	// +optional
	Spec *TyphaDeploymentPodSpec `json:"spec,omitempty"`
}

TyphaDeploymentPodTemplateSpec is the typha Deployment's PodTemplateSpec

func (*TyphaDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TyphaDeploymentPodTemplateSpec.

func (*TyphaDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TyphaDeploymentSpec

type TyphaDeploymentSpec struct {
	// MinReadySeconds is the minimum number of seconds for which a newly created Deployment pod should
	// be ready without any of its container crashing, for it to be considered available.
	// If specified, this overrides any minReadySeconds value that may be set on the typha Deployment.
	// If omitted, the typha Deployment will use its default value for minReadySeconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	MinReadySeconds *int32 `json:"minReadySeconds,omitempty"`

	// Template describes the typha Deployment pod that will be created.
	// +optional
	Template *TyphaDeploymentPodTemplateSpec `json:"template,omitempty"`

	// The deployment strategy to use to replace existing pods with new ones.
	// +optional
	// +patchStrategy=retainKeys
	Strategy *TyphaDeploymentStrategy `json:"strategy,omitempty" patchStrategy:"retainKeys" protobuf:"bytes,4,opt,name=strategy"`
}

TyphaDeploymentSpec defines configuration for the typha Deployment.

func (*TyphaDeploymentSpec) DeepCopy

func (in *TyphaDeploymentSpec) DeepCopy() *TyphaDeploymentSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TyphaDeploymentSpec.

func (*TyphaDeploymentSpec) DeepCopyInto

func (in *TyphaDeploymentSpec) DeepCopyInto(out *TyphaDeploymentSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type TyphaDeploymentStrategy

type TyphaDeploymentStrategy struct {
	// Rolling update config params. Present only if DeploymentStrategyType =
	// RollingUpdate.
	// to be.
	// +optional
	RollingUpdate *appsv1.RollingUpdateDeployment `json:"rollingUpdate,omitempty" protobuf:"bytes,2,opt,name=rollingUpdate"`
}

TyphaDeploymentStrategy describes how to replace existing pods with new ones. Only RollingUpdate is supported at this time so the Type field is not exposed.

func (*TyphaDeploymentStrategy) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new TyphaDeploymentStrategy.

func (*TyphaDeploymentStrategy) DeepCopyInto

func (in *TyphaDeploymentStrategy) DeepCopyInto(out *TyphaDeploymentStrategy)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type UserMatch

type UserMatch struct {
	// The attribute of a user that links it to a group.
	// +required
	UserAttribute string `json:"userAttribute"`

	// The attribute of a group that links it to a user.
	// +required
	GroupAttribute string `json:"groupAttribute"`
}

UserMatch when the value of a UserAttribute and a GroupAttribute match, a user belongs to the group.

func (*UserMatch) DeepCopy

func (in *UserMatch) DeepCopy() *UserMatch

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserMatch.

func (*UserMatch) DeepCopyInto

func (in *UserMatch) DeepCopyInto(out *UserMatch)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type UserSearch

type UserSearch struct {
	// BaseDN to start the search from. For example "cn=users,dc=example,dc=com"
	// +required
	BaseDN string `json:"baseDN"`

	// Optional filter to apply when searching the directory. For example "(objectClass=person)"
	// +optional
	Filter string `json:"filter,omitempty"`

	// A mapping of the attribute that is used as the username. This attribute can be used to apply RBAC to a user.
	// Default: uid
	// +optional
	NameAttribute string `json:"nameAttribute,omitempty"`
}

User entry search configuration to match the credentials with a user.

func (*UserSearch) DeepCopy

func (in *UserSearch) DeepCopy() *UserSearch

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserSearch.

func (*UserSearch) DeepCopyInto

func (in *UserSearch) DeepCopyInto(out *UserSearch)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type WAFStatusType

type WAFStatusType string

+kubebuilder:validation:Enum=Enabled;Disabled

type Whisker

type Whisker struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   WhiskerSpec   `json:"spec,omitempty"`
	Status WhiskerStatus `json:"status,omitempty"`
}

+kubebuilder:object:root=true +kubebuilder:subresource:status +kubebuilder:resource:scope=Cluster

func (*Whisker) DeepCopy

func (in *Whisker) DeepCopy() *Whisker

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Whisker.

func (*Whisker) DeepCopyInto

func (in *Whisker) DeepCopyInto(out *Whisker)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Whisker) DeepCopyObject

func (in *Whisker) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type WhiskerDeployment

type WhiskerDeployment struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to the Deployment.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`
	// Spec is the specification of the whisker Deployment.
	// +optional
	Spec *WhiskerDeploymentSpec `json:"spec,omitempty"`
}

WhiskerDeployment is the configuration for the whisker Deployment.

func (*WhiskerDeployment) DeepCopy

func (in *WhiskerDeployment) DeepCopy() *WhiskerDeployment

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WhiskerDeployment.

func (*WhiskerDeployment) DeepCopyInto

func (in *WhiskerDeployment) DeepCopyInto(out *WhiskerDeployment)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type WhiskerDeploymentContainer

type WhiskerDeploymentContainer struct {
	// +kubebuilder:validation:Enum=whisker;whisker-backend
	Name string `json:"name"`

	// +optional
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
}

func (*WhiskerDeploymentContainer) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WhiskerDeploymentContainer.

func (*WhiskerDeploymentContainer) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type WhiskerDeploymentPodSpec

type WhiskerDeploymentPodSpec struct {
	// Affinity is a group of affinity scheduling rules for the whisker pods.
	// +optional
	Affinity *corev1.Affinity `json:"affinity"`
	// Containers is a list of whisker containers.
	// If specified, this overrides the specified EGW Deployment containers.
	// If omitted, the whisker Deployment will use its default values for its containers.
	// +optional
	Containers []WhiskerDeploymentContainer `json:"containers,omitempty"`
	// NodeSelector gives more control over the nodes where the whisker pods will run on.
	// +optional
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`
	// TerminationGracePeriodSeconds defines the termination grace period of the whisker pods in seconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	TerminationGracePeriodSeconds *int64 `json:"terminationGracePeriodSeconds,omitempty"`
	// TopologySpreadConstraints describes how a group of pods ought to spread across topology
	// domains. Scheduler will schedule pods in a way which abides by the constraints.
	// All topologySpreadConstraints are ANDed.
	// +optional
	TopologySpreadConstraints []corev1.TopologySpreadConstraint `json:"topologySpreadConstraints,omitempty"`
	// Tolerations is the whisker pod's tolerations.
	// If specified, this overrides any tolerations that may be set on the whisker Deployment.
	// If omitted, the whisker Deployment will use its default value for tolerations.
	// +optional
	Tolerations []corev1.Toleration `json:"tolerations"`
	// PriorityClassName allows to specify a PriorityClass resource to be used.
	// +optional
	PriorityClassName string `json:"priorityClassName,omitempty"`
}

WhiskerDeploymentPodSpec is the whisker Deployment's PodSpec.

func (*WhiskerDeploymentPodSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WhiskerDeploymentPodSpec.

func (*WhiskerDeploymentPodSpec) DeepCopyInto

func (in *WhiskerDeploymentPodSpec) DeepCopyInto(out *WhiskerDeploymentPodSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type WhiskerDeploymentPodTemplateSpec

type WhiskerDeploymentPodTemplateSpec struct {
	// Metadata is a subset of a Kubernetes object's metadata that is added to the pod's metadata.
	// +optional
	Metadata *Metadata `json:"metadata,omitempty"`
	// Spec is the whisker Deployment's PodSpec.
	// +optional
	Spec *WhiskerDeploymentPodSpec `json:"spec,omitempty"`
}

WhiskerDeploymentPodTemplateSpec is the whisker Deployment's PodTemplateSpec

func (*WhiskerDeploymentPodTemplateSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WhiskerDeploymentPodTemplateSpec.

func (*WhiskerDeploymentPodTemplateSpec) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type WhiskerDeploymentSpec

type WhiskerDeploymentSpec struct {
	// MinReadySeconds is the minimum number of seconds for which a newly created Deployment pod should
	// be ready without any of its container crashing, for it to be considered available.
	// If specified, this overrides any minReadySeconds value that may be set on the whisker Deployment.
	// If omitted, the whisker Deployment will use its default value for minReadySeconds.
	// +optional
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=2147483647
	MinReadySeconds *int32 `json:"minReadySeconds,omitempty"`

	// Template describes the whisker Deployment pod that will be created.
	// +optional
	Template *WhiskerDeploymentPodTemplateSpec `json:"template,omitempty"`
	// The deployment strategy to use to replace existing pods with new ones.
	// +optional
	// +patchStrategy=retainKeys
	Strategy *WhiskerDeploymentStrategy `json:"strategy,omitempty" patchStrategy:"retainKeys" protobuf:"bytes,4,opt,name=strategy"`
}

WhiskerDeploymentSpec defines configuration for the whisker Deployment.

func (*WhiskerDeploymentSpec) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WhiskerDeploymentSpec.

func (*WhiskerDeploymentSpec) DeepCopyInto

func (in *WhiskerDeploymentSpec) DeepCopyInto(out *WhiskerDeploymentSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type WhiskerDeploymentStrategy

type WhiskerDeploymentStrategy struct {
	// Rolling update config params. Present only if DeploymentStrategyType =
	// RollingUpdate.
	// to be.
	// +optional
	RollingUpdate *appsv1.RollingUpdateDeployment `json:"rollingUpdate,omitempty" protobuf:"bytes,2,opt,name=rollingUpdate"`
}

func (*WhiskerDeploymentStrategy) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WhiskerDeploymentStrategy.

func (*WhiskerDeploymentStrategy) DeepCopyInto

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type WhiskerList

type WhiskerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Whisker `json:"items"`
}

WhiskerList contains a list of Whisker.

func (*WhiskerList) DeepCopy

func (in *WhiskerList) DeepCopy() *WhiskerList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WhiskerList.

func (*WhiskerList) DeepCopyInto

func (in *WhiskerList) DeepCopyInto(out *WhiskerList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*WhiskerList) DeepCopyObject

func (in *WhiskerList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

type WhiskerSpec

type WhiskerSpec struct {
	WhiskerDeployment *WhiskerDeployment `json:"whiskerDeployment,omitempty"`

	// Default: Enabled
	// This setting enables calls to an external API to retrieve notification banner text in the Whisker UI.
	// Allowed values are Enabled or Disabled. Defaults to Enabled.
	// +optional
	Notifications *NotificationMode `json:"notifications,omitempty"`
}

func (*WhiskerSpec) DeepCopy

func (in *WhiskerSpec) DeepCopy() *WhiskerSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WhiskerSpec.

func (*WhiskerSpec) DeepCopyInto

func (in *WhiskerSpec) DeepCopyInto(out *WhiskerSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type WhiskerStatus

type WhiskerStatus struct {
	// Conditions represents the latest observed set of conditions for the component. A component may be one or more of
	// Ready, Progressing, Degraded or other customer types.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

WhiskerStatus defines the observed state of Whisker

func (*WhiskerStatus) DeepCopy

func (in *WhiskerStatus) DeepCopy() *WhiskerStatus

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WhiskerStatus.

func (*WhiskerStatus) DeepCopyInto

func (in *WhiskerStatus) DeepCopyInto(out *WhiskerStatus)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

type WindowsDataplaneOption

type WindowsDataplaneOption string

+kubebuilder:validation:Enum=HNS;Disabled

const (
	WindowsDataplaneDisabled WindowsDataplaneOption = "Disabled"
	WindowsDataplaneHNS      WindowsDataplaneOption = "HNS"
)

type WindowsNodeSpec

type WindowsNodeSpec struct {
	// CNIBinDir is the path to the CNI binaries directory on Windows, it must match what is used as 'bin_dir' under
	// [plugins]
	//   [plugins."io.containerd.grpc.v1.cri"]
	//     [plugins."io.containerd.grpc.v1.cri".cni]
	// on the containerd 'config.toml' file on the Windows nodes.
	// +optional
	CNIBinDir string `json:"cniBinDir,omitempty"`

	// CNIConfigDir is the path to the CNI configuration directory on Windows, it must match what is used as 'conf_dir' under
	// [plugins]
	//   [plugins."io.containerd.grpc.v1.cri"]
	//     [plugins."io.containerd.grpc.v1.cri".cni]
	// on the containerd 'config.toml' file on the Windows nodes.
	// +optional
	CNIConfigDir string `json:"cniConfigDir,omitempty"`

	// CNILogDir is the path to the Calico CNI logs directory on Windows.
	// +optional
	CNILogDir string `json:"cniLogDir,omitempty"`

	// VXLANMACPrefix is the prefix used when generating MAC addresses for virtual NICs
	// +optional
	// +kubebuilder:validation:Pattern=`^[0-9A-Fa-f]{2}-[0-9A-Fa-f]{2}$`
	VXLANMACPrefix string `json:"vxlanMACPrefix,omitempty"`

	// VXLANAdapter is the Network Adapter used for VXLAN, leave blank for primary NIC
	// +optional
	VXLANAdapter string `json:"vxlanAdapter,omitempty"`
}

func (*WindowsNodeSpec) DeepCopy

func (in *WindowsNodeSpec) DeepCopy() *WindowsNodeSpec

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WindowsNodeSpec.

func (*WindowsNodeSpec) DeepCopyInto

func (in *WindowsNodeSpec) DeepCopyInto(out *WindowsNodeSpec)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL