UNPKG

cdktf-crd

Version:
238 lines (237 loc) 11.2 kB
import { Manifest, type ManifestConfig } from "@cdktf/provider-kubernetes/lib/manifest"; import { Construct } from "constructs"; export declare class CiliumIoCiliumEndpointV2 extends Manifest { constructor(scope: Construct, id: string, config: CiliumIoCiliumEndpointV2Config); } export interface CiliumIoCiliumEndpointV2Config extends ManifestConfig { manifest: { apiVersion: "cilium.io/v2"; kind: "CiliumEndpoint"; metadata: { annotations?: { [key: string]: string; }; labels?: { [key: string]: string; }; name: string; namespace?: string; }; /** @description EndpointStatus is the status of a Cilium endpoint. */ status?: { /** @description Controllers is the list of failing controllers for this endpoint. */ controllers?: { /** @description Configuration is the controller configuration */ configuration?: { /** @description Retry on error */ "error-retry"?: boolean; /** * Format: int64 * @description Base error retry back-off time Format: duration */ "error-retry-base"?: number; /** * Format: int64 * @description Regular synchronization interval Format: duration */ interval?: number; }; /** @description Name is the name of the controller */ name?: string; /** @description Status is the status of the controller */ status?: { /** Format: int64 */ "consecutive-failure-count"?: number; /** Format: int64 */ "failure-count"?: number; "last-failure-msg"?: string; "last-failure-timestamp"?: string; "last-success-timestamp"?: string; /** Format: int64 */ "success-count"?: number; }; /** @description UUID is the UUID of the controller */ uuid?: string; }[]; /** @description Encryption is the encryption configuration of the node */ encryption?: { /** @description Key is the index to the key to use for encryption or 0 if encryption is disabled. */ key?: number; }; /** @description ExternalIdentifiers is a set of identifiers to identify the endpoint apart from the pod name. This includes container runtime IDs. */ "external-identifiers"?: { /** @description ID assigned to this attachment by container runtime */ "cni-attachment-id"?: string; /** @description ID assigned by container runtime (deprecated, may not be unique) */ "container-id"?: string; /** @description Name assigned to container (deprecated, may not be unique) */ "container-name"?: string; /** @description Docker endpoint ID */ "docker-endpoint-id"?: string; /** @description Docker network ID */ "docker-network-id"?: string; /** @description K8s namespace for this endpoint (deprecated, may not be unique) */ "k8s-namespace"?: string; /** @description K8s pod name for this endpoint (deprecated, may not be unique) */ "k8s-pod-name"?: string; /** @description K8s pod for this endpoint (deprecated, may not be unique) */ "pod-name"?: string; }; /** @description Health is the overall endpoint & subcomponent health. */ health?: { /** @description bpf */ bpf?: string; /** @description Is this endpoint reachable */ connected?: boolean; /** @description overall health */ overallHealth?: string; /** @description policy */ policy?: string; }; /** * Format: int64 * @description ID is the cilium-agent-local ID of the endpoint. */ id?: number; /** @description Identity is the security identity associated with the endpoint */ identity?: { /** * Format: int64 * @description ID is the numeric identity of the endpoint */ id?: number; /** @description Labels is the list of labels associated with the identity */ labels?: string[]; }; /** @description Log is the list of the last few warning and error log entries */ log?: { /** @description Code indicate type of status change Enum: ["ok","failed"] */ code?: string; /** @description Status message */ message?: string; /** @description state */ state?: string; /** @description Timestamp when status change occurred */ timestamp?: string; }[]; /** @description NamedPorts List of named Layer 4 port and protocol pairs which will be used in Network Policy specs. * swagger:model NamedPorts */ "named-ports"?: { /** @description Optional layer 4 port name */ name?: string; /** @description Layer 4 port number */ port?: number; /** @description Layer 4 protocol Enum: ["TCP","UDP","SCTP","ICMP","ICMPV6","ANY"] */ protocol?: string; }[]; /** @description Networking is the networking properties of the endpoint. */ networking?: { /** @description IP4/6 addresses assigned to this Endpoint */ addressing: { ipv4?: string; ipv6?: string; }[]; /** @description NodeIP is the IP of the node the endpoint is running on. The IP must be reachable between nodes. */ node?: string; }; /** @description EndpointPolicy represents the endpoint's policy by listing all allowed ingress and egress identities in combination with L4 port and protocol. */ policy?: { /** @description EndpointPolicyDirection is the list of allowed identities per direction. */ egress?: { /** @description Deprecated */ adding?: { "dest-port"?: number; /** Format: int64 */ identity?: number; "identity-labels"?: { [key: string]: string; }; protocol?: number; }[]; /** @description AllowedIdentityList is a list of IdentityTuples that species peers that are allowed. */ allowed?: { "dest-port"?: number; /** Format: int64 */ identity?: number; "identity-labels"?: { [key: string]: string; }; protocol?: number; }[]; /** @description DenyIdentityList is a list of IdentityTuples that species peers that are denied. */ denied?: { "dest-port"?: number; /** Format: int64 */ identity?: number; "identity-labels"?: { [key: string]: string; }; protocol?: number; }[]; enforcing: boolean; /** @description Deprecated */ removing?: { "dest-port"?: number; /** Format: int64 */ identity?: number; "identity-labels"?: { [key: string]: string; }; protocol?: number; }[]; /** @description EndpointPolicyState defines the state of the Policy mode: "enforcing", "non-enforcing", "disabled" */ state?: string; }; /** @description EndpointPolicyDirection is the list of allowed identities per direction. */ ingress?: { /** @description Deprecated */ adding?: { "dest-port"?: number; /** Format: int64 */ identity?: number; "identity-labels"?: { [key: string]: string; }; protocol?: number; }[]; /** @description AllowedIdentityList is a list of IdentityTuples that species peers that are allowed. */ allowed?: { "dest-port"?: number; /** Format: int64 */ identity?: number; "identity-labels"?: { [key: string]: string; }; protocol?: number; }[]; /** @description DenyIdentityList is a list of IdentityTuples that species peers that are denied. */ denied?: { "dest-port"?: number; /** Format: int64 */ identity?: number; "identity-labels"?: { [key: string]: string; }; protocol?: number; }[]; enforcing: boolean; /** @description Deprecated */ removing?: { "dest-port"?: number; /** Format: int64 */ identity?: number; "identity-labels"?: { [key: string]: string; }; protocol?: number; }[]; /** @description EndpointPolicyState defines the state of the Policy mode: "enforcing", "non-enforcing", "disabled" */ state?: string; }; }; /** @description State is the state of the endpoint. */ state?: string; "visibility-policy-status"?: string; }; }; }