API Reference¶
Packages¶
k8s.ovn.org/v1¶
Package v1 contains API Schema definitions for the network v1 API group
EgressFirewallDestination¶
EgressFirewallDestination is the target that traffic is either allowed or denied to
Validation: - MaxProperties: 1 - MinProperties: 1
Appears in: - EgressFirewallRule
| Field | Description | Default | Validation |
|---|---|---|---|
cidrSelector string |
cidrSelector is the CIDR range to allow/deny traffic to. If this is set, dnsName and nodeSelector must be unset. | ||
dnsName string |
dnsName is the domain name to allow/deny traffic to. If this is set, cidrSelector and nodeSelector must be unset. For a wildcard DNS name, the '' will match only one label. Additionally, only a single '' can be used at the beginning of the wildcard DNS name. For example, '*.example.com' will match 'sub1.example.com' but won't match 'sub2.sub1.example.com'. |
Pattern: ^(\*\.)?([A-Za-z0-9-]+\.)*[A-Za-z0-9-]+\.?$ |
|
nodeSelector LabelSelector |
nodeSelector will allow/deny traffic to the Kubernetes node IP of selected nodes. If this is set, cidrSelector and DNSName must be unset. |
Optional: {} |
EgressFirewallPort¶
EgressFirewallPort specifies the port to allow or deny traffic to
Appears in: - EgressFirewallRule
| Field | Description | Default | Validation |
|---|---|---|---|
protocol string |
protocol (tcp, udp, sctp) that the traffic must match. | Pattern: ^TCP\|UDP\|SCTP$ |
|
port integer |
port that the traffic must match | Maximum: 65535 Minimum: 1 |
EgressFirewallRule¶
EgressFirewallRule is a single egressfirewall rule object
Appears in: - EgressFirewallSpec
| Field | Description | Default | Validation |
|---|---|---|---|
type EgressFirewallRuleType |
type marks this as an "Allow" or "Deny" rule | Pattern: ^Allow\|Deny$ |
|
ports EgressFirewallPort array |
ports specify what ports and protocols the rule applies to | Optional: {} |
|
to EgressFirewallDestination |
to is the target that traffic is allowed/denied to | MaxProperties: 1 MinProperties: 1 |
EgressFirewallRuleType¶
Underlying type: string
EgressNetworkFirewallRuleType indicates whether an EgressNetworkFirewallRule allows or denies traffic
Validation:
- Pattern: ^Allow|Deny$
Appears in: - EgressFirewallRule
| Field | Description |
|---|---|
Allow |
|
Deny |
EgressFirewallSpec¶
EgressFirewallSpec is a desired state description of EgressFirewall.
Appears in: - EgressFirewall
| Field | Description | Default | Validation |
|---|---|---|---|
egress EgressFirewallRule array |
a collection of egress firewall rule objects |
EgressFirewallStatus¶
Appears in: - EgressFirewall
| Field | Description | Default | Validation |
|---|---|---|---|
status string |
Optional: {} |
||
messages string array |
Optional: {} |