mirror of https://github.com/kubernetes/kops.git
Add the docs to the api specs
This commit is contained in:
Ole Markus With
parent
8338824d9c
commit
3a32b76abc
|
|
@ -2553,160 +2553,315 @@ spec:
|
||||||
description: CiliumNetworkingSpec declares that we want Cilium networking
|
description: CiliumNetworkingSpec declares that we want Cilium networking
|
||||||
properties:
|
properties:
|
||||||
IPTablesRulesNoinstall:
|
IPTablesRulesNoinstall:
|
||||||
|
description: 'IPTablesRulesNoinstall disables installing the
|
||||||
|
base IPTables rules used for masquerading and kube-proxy.
|
||||||
|
Default: false'
|
||||||
type: boolean
|
type: boolean
|
||||||
accessLog:
|
accessLog:
|
||||||
|
description: AccessLog is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
agentLabels:
|
agentLabels:
|
||||||
|
description: AgentLabels is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
items:
|
items:
|
||||||
type: string
|
type: string
|
||||||
type: array
|
type: array
|
||||||
agentPrometheusPort:
|
agentPrometheusPort:
|
||||||
|
description: AgentPrometheusPort is the port to listen to for
|
||||||
|
Prometheus metrics. Defaults to 9090.
|
||||||
type: integer
|
type: integer
|
||||||
allowLocalhost:
|
allowLocalhost:
|
||||||
|
description: AllowLocalhost is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
autoDirectNodeRoutes:
|
autoDirectNodeRoutes:
|
||||||
|
description: 'AutoDirectNodeRoutes adds automatic L2 routing
|
||||||
|
between nodes. Default: false'
|
||||||
type: boolean
|
type: boolean
|
||||||
autoIpv6NodeRoutes:
|
autoIpv6NodeRoutes:
|
||||||
|
description: AutoIpv6NodeRoutes is not implemented and may be
|
||||||
|
removed in the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
bpfCTGlobalAnyMax:
|
bpfCTGlobalAnyMax:
|
||||||
|
description: 'BPFCTGlobalAnyMax is the maximum number of entries
|
||||||
|
in the non-TCP CT table. Default: 262144'
|
||||||
type: integer
|
type: integer
|
||||||
bpfCTGlobalTCPMax:
|
bpfCTGlobalTCPMax:
|
||||||
|
description: 'BPFCTGlobalTCPMax is the maximum number of entries
|
||||||
|
in the TCP CT table. Default: 524288'
|
||||||
type: integer
|
type: integer
|
||||||
bpfRoot:
|
bpfRoot:
|
||||||
|
description: BPFRoot is not implemented and may be removed in
|
||||||
|
the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
clusterName:
|
clusterName:
|
||||||
|
description: ClusterName is the name of the cluster. It is only
|
||||||
|
relevant when building a mesh of clusters.
|
||||||
type: string
|
type: string
|
||||||
cniBinPath:
|
cniBinPath:
|
||||||
|
description: CniBinPath is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
containerRuntime:
|
containerRuntime:
|
||||||
|
description: ContainerRuntime is not implemented and may be
|
||||||
|
removed in the future. Setting this has no effect.
|
||||||
items:
|
items:
|
||||||
type: string
|
type: string
|
||||||
type: array
|
type: array
|
||||||
containerRuntimeEndpoint:
|
containerRuntimeEndpoint:
|
||||||
additionalProperties:
|
additionalProperties:
|
||||||
type: string
|
type: string
|
||||||
|
description: ContainerRuntimeEndpoint is not implemented and
|
||||||
|
may be removed in the future. Setting this has no effect.
|
||||||
type: object
|
type: object
|
||||||
containerRuntimeLabels:
|
containerRuntimeLabels:
|
||||||
|
description: 'ContainerRuntimeLabels enables fetching of container-runtime
|
||||||
|
labels from the specified container runtime and associating
|
||||||
|
them with endpoints. Supported values are: "none", "containerd",
|
||||||
|
"crio", "docker", "auto" As of Cilium 1.7.0, Cilium no longer
|
||||||
|
fetches information from the container runtime and this field
|
||||||
|
is ignored. Default: none'
|
||||||
type: string
|
type: string
|
||||||
debug:
|
debug:
|
||||||
|
description: Debug runs Cilium in debug mode.
|
||||||
type: boolean
|
type: boolean
|
||||||
debugVerbose:
|
debugVerbose:
|
||||||
|
description: DebugVerbose is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
items:
|
items:
|
||||||
type: string
|
type: string
|
||||||
type: array
|
type: array
|
||||||
device:
|
device:
|
||||||
|
description: Device is not implemented and may be removed in
|
||||||
|
the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
disableConntrack:
|
disableConntrack:
|
||||||
|
description: DisableConntrack is not implemented and may be
|
||||||
|
removed in the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
disableIpv4:
|
disableIpv4:
|
||||||
|
description: 'DisableIpv4 is deprecated: Use EnableIpv4 instead.
|
||||||
|
Setting this flag has no effect.'
|
||||||
type: boolean
|
type: boolean
|
||||||
disableK8sServices:
|
disableK8sServices:
|
||||||
|
description: DisableK8sServices is not implemented and may be
|
||||||
|
removed in the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
disableMasquerade:
|
disableMasquerade:
|
||||||
|
description: DisableMasquerade disables masquerading traffic
|
||||||
|
to external destinations behind the node IP.
|
||||||
type: boolean
|
type: boolean
|
||||||
enableNodePort:
|
enableNodePort:
|
||||||
|
description: 'EnableNodePort replaces kube-proxy with Cilium''s
|
||||||
|
BPF implementation. Requires spec.kubeProxy.enabled be set
|
||||||
|
to false. Default: false'
|
||||||
type: boolean
|
type: boolean
|
||||||
enablePolicy:
|
enablePolicy:
|
||||||
|
description: 'EnablePolicy specifies the policy enforcement
|
||||||
|
mode. "default": Follows Kubernetes policy enforcement. "always":
|
||||||
|
Cilium restricts all traffic if no policy is in place. "never":
|
||||||
|
Cilium allows all traffic regardless of policies in place.
|
||||||
|
If unspecified, "default" policy mode will be used.'
|
||||||
type: string
|
type: string
|
||||||
enablePrometheusMetrics:
|
enablePrometheusMetrics:
|
||||||
|
description: EnablePrometheusMetrics enables the Cilium "/metrics"
|
||||||
|
endpoint for both the agent and the operator.
|
||||||
type: boolean
|
type: boolean
|
||||||
enableTracing:
|
enableTracing:
|
||||||
|
description: EnableTracing is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
enableipv4:
|
enableipv4:
|
||||||
|
description: 'EnableIpv4 enables cluster IPv4 traffic. If both
|
||||||
|
EnableIpv6 and EnableIpv4 are set to false then IPv4 will
|
||||||
|
be enabled. Default: false'
|
||||||
type: boolean
|
type: boolean
|
||||||
enableipv6:
|
enableipv6:
|
||||||
|
description: 'EnableIpv6 enables cluster IPv6 traffic. If both
|
||||||
|
EnableIpv6 and EnableIpv4 are set to false then IPv4 will
|
||||||
|
be enabled. Default: false'
|
||||||
type: boolean
|
type: boolean
|
||||||
envoyLog:
|
envoyLog:
|
||||||
|
description: EnvoyLog is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
ipam:
|
ipam:
|
||||||
|
description: Ipam specifies the IP address allocation mode to
|
||||||
|
use. Possible values are "crd" and "eni". "eni" will use AWS
|
||||||
|
native networking for pods. Eni requires masquerade to be
|
||||||
|
set to false. "crd" will use CRDs for controlling IP address
|
||||||
|
management. Empty value will use host-scope address management.
|
||||||
type: string
|
type: string
|
||||||
ipv4ClusterCidrMaskSize:
|
ipv4ClusterCidrMaskSize:
|
||||||
|
description: Ipv4ClusterCIDRMaskSize is not implemented and
|
||||||
|
may be removed in the future. Setting this has no effect.
|
||||||
type: integer
|
type: integer
|
||||||
ipv4Node:
|
ipv4Node:
|
||||||
|
description: Ipv4Node is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
ipv4Range:
|
ipv4Range:
|
||||||
|
description: Ipv4Range is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
ipv4ServiceRange:
|
ipv4ServiceRange:
|
||||||
|
description: Ipv4ServiceRange is not implemented and may be
|
||||||
|
removed in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
ipv6ClusterAllocCidr:
|
ipv6ClusterAllocCidr:
|
||||||
|
description: Ipv6ClusterAllocCidr is not implemented and may
|
||||||
|
be removed in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
ipv6Node:
|
ipv6Node:
|
||||||
|
description: Ipv6Node is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
ipv6Range:
|
ipv6Range:
|
||||||
|
description: Ipv6Range is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
ipv6ServiceRange:
|
ipv6ServiceRange:
|
||||||
|
description: Ipv6ServiceRange is not implemented and may be
|
||||||
|
removed in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
k8sApiServer:
|
k8sApiServer:
|
||||||
|
description: K8sAPIServer is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
k8sKubeconfigPath:
|
k8sKubeconfigPath:
|
||||||
|
description: K8sKubeconfigPath is not implemented and may be
|
||||||
|
removed in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
keepBpfTemplates:
|
keepBpfTemplates:
|
||||||
|
description: KeepBPFTemplates is not implemented and may be
|
||||||
|
removed in the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
keepConfig:
|
keepConfig:
|
||||||
|
description: KeepConfig is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
labelPrefixFile:
|
labelPrefixFile:
|
||||||
|
description: LabelPrefixFile is not implemented and may be removed
|
||||||
|
in the future. Setting this has currently no effect
|
||||||
type: string
|
type: string
|
||||||
labels:
|
labels:
|
||||||
|
description: Labels is not implemented and may be removed in
|
||||||
|
the future. Setting this has no effect.
|
||||||
items:
|
items:
|
||||||
type: string
|
type: string
|
||||||
type: array
|
type: array
|
||||||
lb:
|
lb:
|
||||||
|
description: LB is not implemented and may be removed in the
|
||||||
|
future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
libDir:
|
libDir:
|
||||||
|
description: LibDir is not implemented and may be removed in
|
||||||
|
the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
logDriver:
|
logDriver:
|
||||||
|
description: LogDrivers is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
items:
|
items:
|
||||||
type: string
|
type: string
|
||||||
type: array
|
type: array
|
||||||
logOpt:
|
logOpt:
|
||||||
additionalProperties:
|
additionalProperties:
|
||||||
type: string
|
type: string
|
||||||
|
description: LogOpt is not implemented and may be removed in
|
||||||
|
the future. Setting this has no effect.
|
||||||
type: object
|
type: object
|
||||||
logstash:
|
logstash:
|
||||||
|
description: Logstash is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
logstashAgent:
|
logstashAgent:
|
||||||
|
description: LogstashAgent is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
logstashProbeTimer:
|
logstashProbeTimer:
|
||||||
|
description: LogstashProbeTimer is not implemented and may be
|
||||||
|
removed in the future. Setting this has no effect.
|
||||||
format: int32
|
format: int32
|
||||||
type: integer
|
type: integer
|
||||||
monitorAggregation:
|
monitorAggregation:
|
||||||
|
description: 'MonitorAggregation sets the level of packet monitoring.
|
||||||
|
Possible values are "low", "medium", or "maximum". Default:
|
||||||
|
medium'
|
||||||
type: string
|
type: string
|
||||||
nat46Range:
|
nat46Range:
|
||||||
|
description: Nat6Range is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
nodeInitBootstrapFile:
|
nodeInitBootstrapFile:
|
||||||
|
description: NodeInitBootstrapFile is not implemented and may
|
||||||
|
be removed in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
pprof:
|
pprof:
|
||||||
|
description: Pprof is not implemented and may be removed in
|
||||||
|
the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
preallocateBPFMaps:
|
preallocateBPFMaps:
|
||||||
|
description: 'PreallocateBPFMaps reduces the per-packet latency
|
||||||
|
at the expense of up-front memory allocation. Default: true'
|
||||||
type: boolean
|
type: boolean
|
||||||
prefilterDevice:
|
prefilterDevice:
|
||||||
|
description: PrefilterDevice is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
prometheusServeAddr:
|
prometheusServeAddr:
|
||||||
|
description: PrometheusServeAddr is deprecated. Use EnablePrometheusMetrics
|
||||||
|
and AgentPrometheusPort instead. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
reconfigureKubelet:
|
reconfigureKubelet:
|
||||||
|
description: ReconfigureKubelet is not implemented and may be
|
||||||
|
removed in the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
removeCbrBridge:
|
removeCbrBridge:
|
||||||
description: node init options
|
description: RemoveCbrBridge is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
restartPods:
|
restartPods:
|
||||||
|
description: RestartPods is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
restore:
|
restore:
|
||||||
|
description: Restore is not implemented and may be removed in
|
||||||
|
the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
sidecarIstioProxyImage:
|
sidecarIstioProxyImage:
|
||||||
|
description: 'SidecarIstioProxyImage is the regular expression
|
||||||
|
matching compatible Istio sidecar istio-proxy container image
|
||||||
|
names. Default: cilium/istio_proxy'
|
||||||
type: string
|
type: string
|
||||||
singleClusterRoute:
|
singleClusterRoute:
|
||||||
|
description: SingleClusterRoute is not implemented and may be
|
||||||
|
removed in the future. Setting this has no effect.
|
||||||
type: boolean
|
type: boolean
|
||||||
socketPath:
|
socketPath:
|
||||||
|
description: SocketPath is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
stateDir:
|
stateDir:
|
||||||
|
description: StateDir is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: string
|
type: string
|
||||||
toFqdnsEnablePoller:
|
toFqdnsEnablePoller:
|
||||||
|
description: 'ToFqdnsEnablePoller replaces the DNS proxy-based
|
||||||
|
implementation of FQDN policies with the less powerful legacy
|
||||||
|
implementation. Default: false'
|
||||||
type: boolean
|
type: boolean
|
||||||
tracePayloadlen:
|
tracePayloadlen:
|
||||||
|
description: TracePayloadLen is not implemented and may be removed
|
||||||
|
in the future. Setting this has no effect.
|
||||||
type: integer
|
type: integer
|
||||||
tunnel:
|
tunnel:
|
||||||
|
description: 'Tunnel specifies the Cilium tunelling mode. Possible
|
||||||
|
values are "vxlan", "geneve", or "disabled". Default: vxlan'
|
||||||
type: string
|
type: string
|
||||||
version:
|
version:
|
||||||
|
description: Version is the version of the Cilium agent and
|
||||||
|
the Cilium Operator.
|
||||||
type: string
|
type: string
|
||||||
required:
|
required:
|
||||||
- IPTablesRulesNoinstall
|
- IPTablesRulesNoinstall
|
||||||
|
|
|
||||||
|
|
@ -385,7 +385,7 @@ type CiliumNetworkingSpec struct {
|
||||||
// Default: none
|
// Default: none
|
||||||
ContainerRuntimeLabels string `json:"containerRuntimeLabels,omitempty"`
|
ContainerRuntimeLabels string `json:"containerRuntimeLabels,omitempty"`
|
||||||
// Ipam specifies the IP address allocation mode to use.
|
// Ipam specifies the IP address allocation mode to use.
|
||||||
// Possible values are "crd" and "eni".
|
// Possible values are "crd" and "eni".
|
||||||
// "eni" will use AWS native networking for pods. Eni requires masquerade to be set to false.
|
// "eni" will use AWS native networking for pods. Eni requires masquerade to be set to false.
|
||||||
// "crd" will use CRDs for controlling IP address management.
|
// "crd" will use CRDs for controlling IP address management.
|
||||||
// Empty value will use host-scope address management.
|
// Empty value will use host-scope address management.
|
||||||
|
|
|
||||||
|
|
@ -191,81 +191,229 @@ type AmazonVPCNetworkingSpec struct {
|
||||||
ImageName string `json:"imageName,omitempty"`
|
ImageName string `json:"imageName,omitempty"`
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// CiliumNetworkingSpec declares that we want Cilium networking
|
||||||
type CiliumNetworkingSpec struct {
|
type CiliumNetworkingSpec struct {
|
||||||
|
// Version is the version of the Cilium agent and the Cilium Operator.
|
||||||
Version string `json:"version,omitempty"`
|
Version string `json:"version,omitempty"`
|
||||||
|
|
||||||
AccessLog string `json:"accessLog,omitempty"`
|
// AccessLog is not implemented and may be removed in the future.
|
||||||
AgentLabels []string `json:"agentLabels,omitempty"`
|
// Setting this has no effect.
|
||||||
AgentPrometheusPort int `json:"agentPrometheusPort,omitempty"`
|
AccessLog string `json:"accessLog,omitempty"`
|
||||||
AllowLocalhost string `json:"allowLocalhost,omitempty"`
|
// AgentLabels is not implemented and may be removed in the future.
|
||||||
AutoIpv6NodeRoutes bool `json:"autoIpv6NodeRoutes,omitempty"`
|
// Setting this has no effect.
|
||||||
BPFRoot string `json:"bpfRoot,omitempty"`
|
AgentLabels []string `json:"agentLabels,omitempty"`
|
||||||
ContainerRuntime []string `json:"containerRuntime,omitempty"`
|
// AgentPrometheusPort is the port to listen to for Prometheus metrics.
|
||||||
|
// Defaults to 9090.
|
||||||
|
AgentPrometheusPort int `json:"agentPrometheusPort,omitempty"`
|
||||||
|
// AllowLocalhost is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
AllowLocalhost string `json:"allowLocalhost,omitempty"`
|
||||||
|
// AutoIpv6NodeRoutes is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
AutoIpv6NodeRoutes bool `json:"autoIpv6NodeRoutes,omitempty"`
|
||||||
|
// BPFRoot is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
BPFRoot string `json:"bpfRoot,omitempty"`
|
||||||
|
// ContainerRuntime is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
ContainerRuntime []string `json:"containerRuntime,omitempty"`
|
||||||
|
// ContainerRuntimeEndpoint is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
ContainerRuntimeEndpoint map[string]string `json:"containerRuntimeEndpoint,omitempty"`
|
ContainerRuntimeEndpoint map[string]string `json:"containerRuntimeEndpoint,omitempty"`
|
||||||
Debug bool `json:"debug,omitempty"`
|
// Debug runs Cilium in debug mode.
|
||||||
DebugVerbose []string `json:"debugVerbose,omitempty"`
|
Debug bool `json:"debug,omitempty"`
|
||||||
Device string `json:"device,omitempty"`
|
// DebugVerbose is not implemented and may be removed in the future.
|
||||||
DisableConntrack bool `json:"disableConntrack,omitempty"`
|
// Setting this has no effect.
|
||||||
DisableIpv4 bool `json:"disableIpv4,omitempty"`
|
DebugVerbose []string `json:"debugVerbose,omitempty"`
|
||||||
DisableK8sServices bool `json:"disableK8sServices,omitempty"`
|
// Device is not implemented and may be removed in the future.
|
||||||
EnablePolicy string `json:"enablePolicy,omitempty"`
|
// Setting this has no effect.
|
||||||
EnablePrometheusMetrics bool `json:"enablePrometheusMetrics,omitempty"`
|
Device string `json:"device,omitempty"`
|
||||||
EnableTracing bool `json:"enableTracing,omitempty"`
|
// DisableConntrack is not implemented and may be removed in the future.
|
||||||
EnvoyLog string `json:"envoyLog,omitempty"`
|
// Setting this has no effect.
|
||||||
Ipv4ClusterCIDRMaskSize int `json:"ipv4ClusterCidrMaskSize,omitempty"`
|
DisableConntrack bool `json:"disableConntrack,omitempty"`
|
||||||
Ipv4Node string `json:"ipv4Node,omitempty"`
|
// DisableIpv4 is deprecated: Use EnableIpv4 instead.
|
||||||
Ipv4Range string `json:"ipv4Range,omitempty"`
|
// Setting this flag has no effect.
|
||||||
Ipv4ServiceRange string `json:"ipv4ServiceRange,omitempty"`
|
DisableIpv4 bool `json:"disableIpv4,omitempty"`
|
||||||
Ipv6ClusterAllocCidr string `json:"ipv6ClusterAllocCidr,omitempty"`
|
// DisableK8sServices is not implemented and may be removed in the future.
|
||||||
Ipv6Node string `json:"ipv6Node,omitempty"`
|
// Setting this has no effect.
|
||||||
Ipv6Range string `json:"ipv6Range,omitempty"`
|
DisableK8sServices bool `json:"disableK8sServices,omitempty"`
|
||||||
Ipv6ServiceRange string `json:"ipv6ServiceRange,omitempty"`
|
// EnablePolicy specifies the policy enforcement mode.
|
||||||
K8sAPIServer string `json:"k8sApiServer,omitempty"`
|
// "default": Follows Kubernetes policy enforcement.
|
||||||
K8sKubeconfigPath string `json:"k8sKubeconfigPath,omitempty"`
|
// "always": Cilium restricts all traffic if no policy is in place.
|
||||||
KeepBPFTemplates bool `json:"keepBpfTemplates,omitempty"`
|
// "never": Cilium allows all traffic regardless of policies in place.
|
||||||
KeepConfig bool `json:"keepConfig,omitempty"`
|
// If unspecified, "default" policy mode will be used.
|
||||||
LabelPrefixFile string `json:"labelPrefixFile,omitempty"`
|
EnablePolicy string `json:"enablePolicy,omitempty"`
|
||||||
Labels []string `json:"labels,omitempty"`
|
// EnableTracing is not implemented and may be removed in the future.
|
||||||
LB string `json:"lb,omitempty"`
|
// Setting this has no effect.
|
||||||
LibDir string `json:"libDir,omitempty"`
|
EnableTracing bool `json:"enableTracing,omitempty"`
|
||||||
LogDrivers []string `json:"logDriver,omitempty"`
|
// EnablePrometheusMetrics enables the Cilium "/metrics" endpoint for both the agent and the operator.
|
||||||
LogOpt map[string]string `json:"logOpt,omitempty"`
|
EnablePrometheusMetrics bool `json:"enablePrometheusMetrics,omitempty"`
|
||||||
Logstash bool `json:"logstash,omitempty"`
|
// EnvoyLog is not implemented and may be removed in the future.
|
||||||
LogstashAgent string `json:"logstashAgent,omitempty"`
|
// Setting this has no effect.
|
||||||
LogstashProbeTimer uint32 `json:"logstashProbeTimer,omitempty"`
|
EnvoyLog string `json:"envoyLog,omitempty"`
|
||||||
DisableMasquerade bool `json:"disableMasquerade,omitempty"`
|
// Ipv4ClusterCIDRMaskSize is not implemented and may be removed in the future.
|
||||||
Nat46Range string `json:"nat46Range,omitempty"`
|
// Setting this has no effect.
|
||||||
Pprof bool `json:"pprof,omitempty"`
|
Ipv4ClusterCIDRMaskSize int `json:"ipv4ClusterCidrMaskSize,omitempty"`
|
||||||
PrefilterDevice string `json:"prefilterDevice,omitempty"`
|
// Ipv4Node is not implemented and may be removed in the future.
|
||||||
PrometheusServeAddr string `json:"prometheusServeAddr,omitempty"`
|
// Setting this has no effect.
|
||||||
Restore bool `json:"restore,omitempty"`
|
Ipv4Node string `json:"ipv4Node,omitempty"`
|
||||||
SingleClusterRoute bool `json:"singleClusterRoute,omitempty"`
|
// Ipv4Range is not implemented and may be removed in the future.
|
||||||
SocketPath string `json:"socketPath,omitempty"`
|
// Setting this has no effect.
|
||||||
StateDir string `json:"stateDir,omitempty"`
|
Ipv4Range string `json:"ipv4Range,omitempty"`
|
||||||
TracePayloadLen int `json:"tracePayloadlen,omitempty"`
|
// Ipv4ServiceRange is not implemented and may be removed in the future.
|
||||||
Tunnel string `json:"tunnel,omitempty"`
|
// Setting this has no effect.
|
||||||
|
Ipv4ServiceRange string `json:"ipv4ServiceRange,omitempty"`
|
||||||
EnableIpv6 bool `json:"enableipv6"`
|
// Ipv6ClusterAllocCidr is not implemented and may be removed in the future.
|
||||||
EnableIpv4 bool `json:"enableipv4"`
|
// Setting this has no effect.
|
||||||
MonitorAggregation string `json:"monitorAggregation"`
|
Ipv6ClusterAllocCidr string `json:"ipv6ClusterAllocCidr,omitempty"`
|
||||||
BPFCTGlobalTCPMax int `json:"bpfCTGlobalTCPMax"`
|
// Ipv6Node is not implemented and may be removed in the future.
|
||||||
BPFCTGlobalAnyMax int `json:"bpfCTGlobalAnyMax"`
|
// Setting this has no effect.
|
||||||
PreallocateBPFMaps bool `json:"preallocateBPFMaps"`
|
Ipv6Node string `json:"ipv6Node,omitempty"`
|
||||||
|
// Ipv6Range is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Ipv6Range string `json:"ipv6Range,omitempty"`
|
||||||
|
// Ipv6ServiceRange is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Ipv6ServiceRange string `json:"ipv6ServiceRange,omitempty"`
|
||||||
|
// K8sAPIServer is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
K8sAPIServer string `json:"k8sApiServer,omitempty"`
|
||||||
|
// K8sKubeconfigPath is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
K8sKubeconfigPath string `json:"k8sKubeconfigPath,omitempty"`
|
||||||
|
// KeepBPFTemplates is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
KeepBPFTemplates bool `json:"keepBpfTemplates,omitempty"`
|
||||||
|
// KeepConfig is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
KeepConfig bool `json:"keepConfig,omitempty"`
|
||||||
|
// LabelPrefixFile is not implemented and may be removed in the future.
|
||||||
|
// Setting this has currently no effect
|
||||||
|
LabelPrefixFile string `json:"labelPrefixFile,omitempty"`
|
||||||
|
// Labels is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Labels []string `json:"labels,omitempty"`
|
||||||
|
// LB is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LB string `json:"lb,omitempty"`
|
||||||
|
// LibDir is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LibDir string `json:"libDir,omitempty"`
|
||||||
|
// LogDrivers is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LogDrivers []string `json:"logDriver,omitempty"`
|
||||||
|
// LogOpt is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LogOpt map[string]string `json:"logOpt,omitempty"`
|
||||||
|
// Logstash is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Logstash bool `json:"logstash,omitempty"`
|
||||||
|
// LogstashAgent is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LogstashAgent string `json:"logstashAgent,omitempty"`
|
||||||
|
// LogstashProbeTimer is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LogstashProbeTimer uint32 `json:"logstashProbeTimer,omitempty"`
|
||||||
|
// DisableMasquerade disables masquerading traffic to external destinations behind the node IP.
|
||||||
|
DisableMasquerade bool `json:"disableMasquerade,omitempty"`
|
||||||
|
// Nat6Range is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Nat46Range string `json:"nat46Range,omitempty"`
|
||||||
|
// Pprof is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Pprof bool `json:"pprof,omitempty"`
|
||||||
|
// PrefilterDevice is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
PrefilterDevice string `json:"prefilterDevice,omitempty"`
|
||||||
|
// PrometheusServeAddr is deprecated. Use EnablePrometheusMetrics and AgentPrometheusPort instead.
|
||||||
|
// Setting this has no effect.
|
||||||
|
PrometheusServeAddr string `json:"prometheusServeAddr,omitempty"`
|
||||||
|
// Restore is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Restore bool `json:"restore,omitempty"`
|
||||||
|
// SingleClusterRoute is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
SingleClusterRoute bool `json:"singleClusterRoute,omitempty"`
|
||||||
|
// SocketPath is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
SocketPath string `json:"socketPath,omitempty"`
|
||||||
|
// StateDir is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
StateDir string `json:"stateDir,omitempty"`
|
||||||
|
// TracePayloadLen is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
TracePayloadLen int `json:"tracePayloadlen,omitempty"`
|
||||||
|
// Tunnel specifies the Cilium tunelling mode. Possible values are "vxlan", "geneve", or "disabled".
|
||||||
|
// Default: vxlan
|
||||||
|
Tunnel string `json:"tunnel,omitempty"`
|
||||||
|
// EnableIpv6 enables cluster IPv6 traffic. If both EnableIpv6 and EnableIpv4 are set to false
|
||||||
|
// then IPv4 will be enabled.
|
||||||
|
// Default: false
|
||||||
|
EnableIpv6 bool `json:"enableipv6"`
|
||||||
|
// EnableIpv4 enables cluster IPv4 traffic. If both EnableIpv6 and EnableIpv4 are set to false
|
||||||
|
// then IPv4 will be enabled.
|
||||||
|
// Default: false
|
||||||
|
EnableIpv4 bool `json:"enableipv4"`
|
||||||
|
// MonitorAggregation sets the level of packet monitoring. Possible values are "low", "medium", or "maximum".
|
||||||
|
// Default: medium
|
||||||
|
MonitorAggregation string `json:"monitorAggregation"`
|
||||||
|
// BPFCTGlobalTCPMax is the maximum number of entries in the TCP CT table.
|
||||||
|
// Default: 524288
|
||||||
|
BPFCTGlobalTCPMax int `json:"bpfCTGlobalTCPMax"`
|
||||||
|
// BPFCTGlobalAnyMax is the maximum number of entries in the non-TCP CT table.
|
||||||
|
// Default: 262144
|
||||||
|
BPFCTGlobalAnyMax int `json:"bpfCTGlobalAnyMax"`
|
||||||
|
// PreallocateBPFMaps reduces the per-packet latency at the expense of up-front memory allocation.
|
||||||
|
// Default: true
|
||||||
|
PreallocateBPFMaps bool `json:"preallocateBPFMaps"`
|
||||||
|
// SidecarIstioProxyImage is the regular expression matching compatible Istio sidecar istio-proxy
|
||||||
|
// container image names.
|
||||||
|
// Default: cilium/istio_proxy
|
||||||
SidecarIstioProxyImage string `json:"sidecarIstioProxyImage"`
|
SidecarIstioProxyImage string `json:"sidecarIstioProxyImage"`
|
||||||
ClusterName string `json:"clusterName"`
|
// ClusterName is the name of the cluster. It is only relevant when building a mesh of clusters.
|
||||||
ToFqdnsEnablePoller bool `json:"toFqdnsEnablePoller"`
|
ClusterName string `json:"clusterName"`
|
||||||
|
// ToFqdnsEnablePoller replaces the DNS proxy-based implementation of FQDN policies
|
||||||
|
// with the less powerful legacy implementation.
|
||||||
|
// Default: false
|
||||||
|
ToFqdnsEnablePoller bool `json:"toFqdnsEnablePoller"`
|
||||||
|
// ContainerRuntimeLabels enables fetching of container-runtime labels from the specified container runtime and associating them with endpoints.
|
||||||
|
// Supported values are: "none", "containerd", "crio", "docker", "auto"
|
||||||
|
// As of Cilium 1.7.0, Cilium no longer fetches information from the
|
||||||
|
// container runtime and this field is ignored.
|
||||||
|
// Default: none
|
||||||
ContainerRuntimeLabels string `json:"containerRuntimeLabels,omitempty"`
|
ContainerRuntimeLabels string `json:"containerRuntimeLabels,omitempty"`
|
||||||
IPTablesRulesNoinstall bool `json:"IPTablesRulesNoinstall"`
|
// Ipam specifies the IP address allocation mode to use.
|
||||||
AutoDirectNodeRoutes bool `json:"autoDirectNodeRoutes"`
|
// Possible values are "crd" and "eni".
|
||||||
EnableNodePort bool `json:"enableNodePort"`
|
// "eni" will use AWS native networking for pods. Eni requires masquerade to be set to false.
|
||||||
Ipam string `json:"ipam,omitempty"`
|
// "crd" will use CRDs for controlling IP address management.
|
||||||
|
// Empty value will use host-scope address management.
|
||||||
|
Ipam string `json:"ipam,omitempty"`
|
||||||
|
// IPTablesRulesNoinstall disables installing the base IPTables rules used for masquerading and kube-proxy.
|
||||||
|
// Default: false
|
||||||
|
IPTablesRulesNoinstall bool `json:"IPTablesRulesNoinstall"`
|
||||||
|
// AutoDirectNodeRoutes adds automatic L2 routing between nodes.
|
||||||
|
// Default: false
|
||||||
|
AutoDirectNodeRoutes bool `json:"autoDirectNodeRoutes"`
|
||||||
|
// EnableNodePort replaces kube-proxy with Cilium's BPF implementation.
|
||||||
|
// Requires spec.kubeProxy.enabled be set to false.
|
||||||
|
// Default: false
|
||||||
|
EnableNodePort bool `json:"enableNodePort"`
|
||||||
|
|
||||||
//node init options
|
// RemoveCbrBridge is not implemented and may be removed in the future.
|
||||||
RemoveCbrBridge bool `json:"removeCbrBridge"`
|
// Setting this has no effect.
|
||||||
RestartPods bool `json:"restartPods"`
|
RemoveCbrBridge bool `json:"removeCbrBridge"`
|
||||||
ReconfigureKubelet bool `json:"reconfigureKubelet"`
|
// RestartPods is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
RestartPods bool `json:"restartPods"`
|
||||||
|
// ReconfigureKubelet is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
ReconfigureKubelet bool `json:"reconfigureKubelet"`
|
||||||
|
// NodeInitBootstrapFile is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
NodeInitBootstrapFile string `json:"nodeInitBootstrapFile"`
|
NodeInitBootstrapFile string `json:"nodeInitBootstrapFile"`
|
||||||
CniBinPath string `json:"cniBinPath"`
|
// CniBinPath is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
CniBinPath string `json:"cniBinPath"`
|
||||||
}
|
}
|
||||||
|
|
||||||
// LyftIpVlanNetworkingSpec declares that we want to use the cni-ipvlan-vpc-k8s CNI networking
|
// LyftIpVlanNetworkingSpec declares that we want to use the cni-ipvlan-vpc-k8s CNI networking
|
||||||
|
|
|
||||||
|
|
@ -1263,8 +1263,8 @@ func autoConvert_v1alpha1_CiliumNetworkingSpec_To_kops_CiliumNetworkingSpec(in *
|
||||||
out.DisableIpv4 = in.DisableIpv4
|
out.DisableIpv4 = in.DisableIpv4
|
||||||
out.DisableK8sServices = in.DisableK8sServices
|
out.DisableK8sServices = in.DisableK8sServices
|
||||||
out.EnablePolicy = in.EnablePolicy
|
out.EnablePolicy = in.EnablePolicy
|
||||||
out.EnablePrometheusMetrics = in.EnablePrometheusMetrics
|
|
||||||
out.EnableTracing = in.EnableTracing
|
out.EnableTracing = in.EnableTracing
|
||||||
|
out.EnablePrometheusMetrics = in.EnablePrometheusMetrics
|
||||||
out.EnvoyLog = in.EnvoyLog
|
out.EnvoyLog = in.EnvoyLog
|
||||||
out.Ipv4ClusterCIDRMaskSize = in.Ipv4ClusterCIDRMaskSize
|
out.Ipv4ClusterCIDRMaskSize = in.Ipv4ClusterCIDRMaskSize
|
||||||
out.Ipv4Node = in.Ipv4Node
|
out.Ipv4Node = in.Ipv4Node
|
||||||
|
|
@ -1308,10 +1308,10 @@ func autoConvert_v1alpha1_CiliumNetworkingSpec_To_kops_CiliumNetworkingSpec(in *
|
||||||
out.ClusterName = in.ClusterName
|
out.ClusterName = in.ClusterName
|
||||||
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
||||||
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
||||||
|
out.Ipam = in.Ipam
|
||||||
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
||||||
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
||||||
out.EnableNodePort = in.EnableNodePort
|
out.EnableNodePort = in.EnableNodePort
|
||||||
out.Ipam = in.Ipam
|
|
||||||
out.RemoveCbrBridge = in.RemoveCbrBridge
|
out.RemoveCbrBridge = in.RemoveCbrBridge
|
||||||
out.RestartPods = in.RestartPods
|
out.RestartPods = in.RestartPods
|
||||||
out.ReconfigureKubelet = in.ReconfigureKubelet
|
out.ReconfigureKubelet = in.ReconfigureKubelet
|
||||||
|
|
@ -1387,10 +1387,10 @@ func autoConvert_kops_CiliumNetworkingSpec_To_v1alpha1_CiliumNetworkingSpec(in *
|
||||||
out.ClusterName = in.ClusterName
|
out.ClusterName = in.ClusterName
|
||||||
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
||||||
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
||||||
|
out.Ipam = in.Ipam
|
||||||
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
||||||
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
||||||
out.EnableNodePort = in.EnableNodePort
|
out.EnableNodePort = in.EnableNodePort
|
||||||
out.Ipam = in.Ipam
|
|
||||||
out.RemoveCbrBridge = in.RemoveCbrBridge
|
out.RemoveCbrBridge = in.RemoveCbrBridge
|
||||||
out.RestartPods = in.RestartPods
|
out.RestartPods = in.RestartPods
|
||||||
out.ReconfigureKubelet = in.ReconfigureKubelet
|
out.ReconfigureKubelet = in.ReconfigureKubelet
|
||||||
|
|
|
||||||
|
|
@ -193,80 +193,227 @@ type AmazonVPCNetworkingSpec struct {
|
||||||
|
|
||||||
// CiliumNetworkingSpec declares that we want Cilium networking
|
// CiliumNetworkingSpec declares that we want Cilium networking
|
||||||
type CiliumNetworkingSpec struct {
|
type CiliumNetworkingSpec struct {
|
||||||
|
// Version is the version of the Cilium agent and the Cilium Operator.
|
||||||
Version string `json:"version,omitempty"`
|
Version string `json:"version,omitempty"`
|
||||||
|
|
||||||
AccessLog string `json:"accessLog,omitempty"`
|
// AccessLog is not implemented and may be removed in the future.
|
||||||
AgentLabels []string `json:"agentLabels,omitempty"`
|
// Setting this has no effect.
|
||||||
AgentPrometheusPort int `json:"agentPrometheusPort,omitempty"`
|
AccessLog string `json:"accessLog,omitempty"`
|
||||||
AllowLocalhost string `json:"allowLocalhost,omitempty"`
|
// AgentLabels is not implemented and may be removed in the future.
|
||||||
AutoIpv6NodeRoutes bool `json:"autoIpv6NodeRoutes,omitempty"`
|
// Setting this has no effect.
|
||||||
BPFRoot string `json:"bpfRoot,omitempty"`
|
AgentLabels []string `json:"agentLabels,omitempty"`
|
||||||
ContainerRuntime []string `json:"containerRuntime,omitempty"`
|
// AgentPrometheusPort is the port to listen to for Prometheus metrics.
|
||||||
|
// Defaults to 9090.
|
||||||
|
AgentPrometheusPort int `json:"agentPrometheusPort,omitempty"`
|
||||||
|
// AllowLocalhost is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
AllowLocalhost string `json:"allowLocalhost,omitempty"`
|
||||||
|
// AutoIpv6NodeRoutes is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
AutoIpv6NodeRoutes bool `json:"autoIpv6NodeRoutes,omitempty"`
|
||||||
|
// BPFRoot is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
BPFRoot string `json:"bpfRoot,omitempty"`
|
||||||
|
// ContainerRuntime is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
ContainerRuntime []string `json:"containerRuntime,omitempty"`
|
||||||
|
// ContainerRuntimeEndpoint is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
ContainerRuntimeEndpoint map[string]string `json:"containerRuntimeEndpoint,omitempty"`
|
ContainerRuntimeEndpoint map[string]string `json:"containerRuntimeEndpoint,omitempty"`
|
||||||
Debug bool `json:"debug,omitempty"`
|
// Debug runs Cilium in debug mode.
|
||||||
DebugVerbose []string `json:"debugVerbose,omitempty"`
|
Debug bool `json:"debug,omitempty"`
|
||||||
Device string `json:"device,omitempty"`
|
// DebugVerbose is not implemented and may be removed in the future.
|
||||||
DisableConntrack bool `json:"disableConntrack,omitempty"`
|
// Setting this has no effect.
|
||||||
DisableIpv4 bool `json:"disableIpv4,omitempty"`
|
DebugVerbose []string `json:"debugVerbose,omitempty"`
|
||||||
DisableK8sServices bool `json:"disableK8sServices,omitempty"`
|
// Device is not implemented and may be removed in the future.
|
||||||
EnablePolicy string `json:"enablePolicy,omitempty"`
|
// Setting this has no effect.
|
||||||
EnablePrometheusMetrics bool `json:"enablePrometheusMetrics,omitempty"`
|
Device string `json:"device,omitempty"`
|
||||||
EnableTracing bool `json:"enableTracing,omitempty"`
|
// DisableConntrack is not implemented and may be removed in the future.
|
||||||
EnvoyLog string `json:"envoyLog,omitempty"`
|
// Setting this has no effect.
|
||||||
Ipv4ClusterCIDRMaskSize int `json:"ipv4ClusterCidrMaskSize,omitempty"`
|
DisableConntrack bool `json:"disableConntrack,omitempty"`
|
||||||
Ipv4Node string `json:"ipv4Node,omitempty"`
|
// DisableIpv4 is deprecated: Use EnableIpv4 instead.
|
||||||
Ipv4Range string `json:"ipv4Range,omitempty"`
|
// Setting this flag has no effect.
|
||||||
Ipv4ServiceRange string `json:"ipv4ServiceRange,omitempty"`
|
DisableIpv4 bool `json:"disableIpv4,omitempty"`
|
||||||
Ipv6ClusterAllocCidr string `json:"ipv6ClusterAllocCidr,omitempty"`
|
// DisableK8sServices is not implemented and may be removed in the future.
|
||||||
Ipv6Node string `json:"ipv6Node,omitempty"`
|
// Setting this has no effect.
|
||||||
Ipv6Range string `json:"ipv6Range,omitempty"`
|
DisableK8sServices bool `json:"disableK8sServices,omitempty"`
|
||||||
Ipv6ServiceRange string `json:"ipv6ServiceRange,omitempty"`
|
// EnablePolicy specifies the policy enforcement mode.
|
||||||
K8sAPIServer string `json:"k8sApiServer,omitempty"`
|
// "default": Follows Kubernetes policy enforcement.
|
||||||
K8sKubeconfigPath string `json:"k8sKubeconfigPath,omitempty"`
|
// "always": Cilium restricts all traffic if no policy is in place.
|
||||||
KeepBPFTemplates bool `json:"keepBpfTemplates,omitempty"`
|
// "never": Cilium allows all traffic regardless of policies in place.
|
||||||
KeepConfig bool `json:"keepConfig,omitempty"`
|
// If unspecified, "default" policy mode will be used.
|
||||||
LabelPrefixFile string `json:"labelPrefixFile,omitempty"`
|
EnablePolicy string `json:"enablePolicy,omitempty"`
|
||||||
Labels []string `json:"labels,omitempty"`
|
// EnableTracing is not implemented and may be removed in the future.
|
||||||
LB string `json:"lb,omitempty"`
|
// Setting this has no effect.
|
||||||
LibDir string `json:"libDir,omitempty"`
|
EnableTracing bool `json:"enableTracing,omitempty"`
|
||||||
LogDrivers []string `json:"logDriver,omitempty"`
|
// EnablePrometheusMetrics enables the Cilium "/metrics" endpoint for both the agent and the operator.
|
||||||
LogOpt map[string]string `json:"logOpt,omitempty"`
|
EnablePrometheusMetrics bool `json:"enablePrometheusMetrics,omitempty"`
|
||||||
Logstash bool `json:"logstash,omitempty"`
|
// EnvoyLog is not implemented and may be removed in the future.
|
||||||
LogstashAgent string `json:"logstashAgent,omitempty"`
|
// Setting this has no effect.
|
||||||
LogstashProbeTimer uint32 `json:"logstashProbeTimer,omitempty"`
|
EnvoyLog string `json:"envoyLog,omitempty"`
|
||||||
DisableMasquerade bool `json:"disableMasquerade,omitempty"`
|
// Ipv4ClusterCIDRMaskSize is not implemented and may be removed in the future.
|
||||||
Nat46Range string `json:"nat46Range,omitempty"`
|
// Setting this has no effect.
|
||||||
Pprof bool `json:"pprof,omitempty"`
|
Ipv4ClusterCIDRMaskSize int `json:"ipv4ClusterCidrMaskSize,omitempty"`
|
||||||
PrefilterDevice string `json:"prefilterDevice,omitempty"`
|
// Ipv4Node is not implemented and may be removed in the future.
|
||||||
PrometheusServeAddr string `json:"prometheusServeAddr,omitempty"`
|
// Setting this has no effect.
|
||||||
Restore bool `json:"restore,omitempty"`
|
Ipv4Node string `json:"ipv4Node,omitempty"`
|
||||||
SingleClusterRoute bool `json:"singleClusterRoute,omitempty"`
|
// Ipv4Range is not implemented and may be removed in the future.
|
||||||
SocketPath string `json:"socketPath,omitempty"`
|
// Setting this has no effect.
|
||||||
StateDir string `json:"stateDir,omitempty"`
|
Ipv4Range string `json:"ipv4Range,omitempty"`
|
||||||
TracePayloadLen int `json:"tracePayloadlen,omitempty"`
|
// Ipv4ServiceRange is not implemented and may be removed in the future.
|
||||||
Tunnel string `json:"tunnel,omitempty"`
|
// Setting this has no effect.
|
||||||
|
Ipv4ServiceRange string `json:"ipv4ServiceRange,omitempty"`
|
||||||
EnableIpv6 bool `json:"enableipv6"`
|
// Ipv6ClusterAllocCidr is not implemented and may be removed in the future.
|
||||||
EnableIpv4 bool `json:"enableipv4"`
|
// Setting this has no effect.
|
||||||
MonitorAggregation string `json:"monitorAggregation"`
|
Ipv6ClusterAllocCidr string `json:"ipv6ClusterAllocCidr,omitempty"`
|
||||||
BPFCTGlobalTCPMax int `json:"bpfCTGlobalTCPMax"`
|
// Ipv6Node is not implemented and may be removed in the future.
|
||||||
BPFCTGlobalAnyMax int `json:"bpfCTGlobalAnyMax"`
|
// Setting this has no effect.
|
||||||
PreallocateBPFMaps bool `json:"preallocateBPFMaps"`
|
Ipv6Node string `json:"ipv6Node,omitempty"`
|
||||||
|
// Ipv6Range is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Ipv6Range string `json:"ipv6Range,omitempty"`
|
||||||
|
// Ipv6ServiceRange is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Ipv6ServiceRange string `json:"ipv6ServiceRange,omitempty"`
|
||||||
|
// K8sAPIServer is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
K8sAPIServer string `json:"k8sApiServer,omitempty"`
|
||||||
|
// K8sKubeconfigPath is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
K8sKubeconfigPath string `json:"k8sKubeconfigPath,omitempty"`
|
||||||
|
// KeepBPFTemplates is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
KeepBPFTemplates bool `json:"keepBpfTemplates,omitempty"`
|
||||||
|
// KeepConfig is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
KeepConfig bool `json:"keepConfig,omitempty"`
|
||||||
|
// LabelPrefixFile is not implemented and may be removed in the future.
|
||||||
|
// Setting this has currently no effect
|
||||||
|
LabelPrefixFile string `json:"labelPrefixFile,omitempty"`
|
||||||
|
// Labels is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Labels []string `json:"labels,omitempty"`
|
||||||
|
// LB is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LB string `json:"lb,omitempty"`
|
||||||
|
// LibDir is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LibDir string `json:"libDir,omitempty"`
|
||||||
|
// LogDrivers is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LogDrivers []string `json:"logDriver,omitempty"`
|
||||||
|
// LogOpt is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LogOpt map[string]string `json:"logOpt,omitempty"`
|
||||||
|
// Logstash is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Logstash bool `json:"logstash,omitempty"`
|
||||||
|
// LogstashAgent is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LogstashAgent string `json:"logstashAgent,omitempty"`
|
||||||
|
// LogstashProbeTimer is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
LogstashProbeTimer uint32 `json:"logstashProbeTimer,omitempty"`
|
||||||
|
// DisableMasquerade disables masquerading traffic to external destinations behind the node IP.
|
||||||
|
DisableMasquerade bool `json:"disableMasquerade,omitempty"`
|
||||||
|
// Nat6Range is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Nat46Range string `json:"nat46Range,omitempty"`
|
||||||
|
// Pprof is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Pprof bool `json:"pprof,omitempty"`
|
||||||
|
// PrefilterDevice is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
PrefilterDevice string `json:"prefilterDevice,omitempty"`
|
||||||
|
// PrometheusServeAddr is deprecated. Use EnablePrometheusMetrics and AgentPrometheusPort instead.
|
||||||
|
// Setting this has no effect.
|
||||||
|
PrometheusServeAddr string `json:"prometheusServeAddr,omitempty"`
|
||||||
|
// Restore is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
Restore bool `json:"restore,omitempty"`
|
||||||
|
// SingleClusterRoute is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
SingleClusterRoute bool `json:"singleClusterRoute,omitempty"`
|
||||||
|
// SocketPath is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
SocketPath string `json:"socketPath,omitempty"`
|
||||||
|
// StateDir is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
StateDir string `json:"stateDir,omitempty"`
|
||||||
|
// TracePayloadLen is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
TracePayloadLen int `json:"tracePayloadlen,omitempty"`
|
||||||
|
// Tunnel specifies the Cilium tunelling mode. Possible values are "vxlan", "geneve", or "disabled".
|
||||||
|
// Default: vxlan
|
||||||
|
Tunnel string `json:"tunnel,omitempty"`
|
||||||
|
// EnableIpv6 enables cluster IPv6 traffic. If both EnableIpv6 and EnableIpv4 are set to false
|
||||||
|
// then IPv4 will be enabled.
|
||||||
|
// Default: false
|
||||||
|
EnableIpv6 bool `json:"enableipv6"`
|
||||||
|
// EnableIpv4 enables cluster IPv4 traffic. If both EnableIpv6 and EnableIpv4 are set to false
|
||||||
|
// then IPv4 will be enabled.
|
||||||
|
// Default: false
|
||||||
|
EnableIpv4 bool `json:"enableipv4"`
|
||||||
|
// MonitorAggregation sets the level of packet monitoring. Possible values are "low", "medium", or "maximum".
|
||||||
|
// Default: medium
|
||||||
|
MonitorAggregation string `json:"monitorAggregation"`
|
||||||
|
// BPFCTGlobalTCPMax is the maximum number of entries in the TCP CT table.
|
||||||
|
// Default: 524288
|
||||||
|
BPFCTGlobalTCPMax int `json:"bpfCTGlobalTCPMax"`
|
||||||
|
// BPFCTGlobalAnyMax is the maximum number of entries in the non-TCP CT table.
|
||||||
|
// Default: 262144
|
||||||
|
BPFCTGlobalAnyMax int `json:"bpfCTGlobalAnyMax"`
|
||||||
|
// PreallocateBPFMaps reduces the per-packet latency at the expense of up-front memory allocation.
|
||||||
|
// Default: true
|
||||||
|
PreallocateBPFMaps bool `json:"preallocateBPFMaps"`
|
||||||
|
// SidecarIstioProxyImage is the regular expression matching compatible Istio sidecar istio-proxy
|
||||||
|
// container image names.
|
||||||
|
// Default: cilium/istio_proxy
|
||||||
SidecarIstioProxyImage string `json:"sidecarIstioProxyImage"`
|
SidecarIstioProxyImage string `json:"sidecarIstioProxyImage"`
|
||||||
ClusterName string `json:"clusterName"`
|
// ClusterName is the name of the cluster. It is only relevant when building a mesh of clusters.
|
||||||
ToFqdnsEnablePoller bool `json:"toFqdnsEnablePoller"`
|
ClusterName string `json:"clusterName"`
|
||||||
|
// ToFqdnsEnablePoller replaces the DNS proxy-based implementation of FQDN policies
|
||||||
|
// with the less powerful legacy implementation.
|
||||||
|
// Default: false
|
||||||
|
ToFqdnsEnablePoller bool `json:"toFqdnsEnablePoller"`
|
||||||
|
// ContainerRuntimeLabels enables fetching of container-runtime labels from the specified container runtime and associating them with endpoints.
|
||||||
|
// Supported values are: "none", "containerd", "crio", "docker", "auto"
|
||||||
|
// As of Cilium 1.7.0, Cilium no longer fetches information from the
|
||||||
|
// container runtime and this field is ignored.
|
||||||
|
// Default: none
|
||||||
ContainerRuntimeLabels string `json:"containerRuntimeLabels,omitempty"`
|
ContainerRuntimeLabels string `json:"containerRuntimeLabels,omitempty"`
|
||||||
IPTablesRulesNoinstall bool `json:"IPTablesRulesNoinstall"`
|
// Ipam specifies the IP address allocation mode to use.
|
||||||
AutoDirectNodeRoutes bool `json:"autoDirectNodeRoutes"`
|
// Possible values are "crd" and "eni".
|
||||||
EnableNodePort bool `json:"enableNodePort"`
|
// "eni" will use AWS native networking for pods. Eni requires masquerade to be set to false.
|
||||||
Ipam string `json:"ipam,omitempty"`
|
// "crd" will use CRDs for controlling IP address management.
|
||||||
|
// Empty value will use host-scope address management.
|
||||||
|
Ipam string `json:"ipam,omitempty"`
|
||||||
|
// IPTablesRulesNoinstall disables installing the base IPTables rules used for masquerading and kube-proxy.
|
||||||
|
// Default: false
|
||||||
|
IPTablesRulesNoinstall bool `json:"IPTablesRulesNoinstall"`
|
||||||
|
// AutoDirectNodeRoutes adds automatic L2 routing between nodes.
|
||||||
|
// Default: false
|
||||||
|
AutoDirectNodeRoutes bool `json:"autoDirectNodeRoutes"`
|
||||||
|
// EnableNodePort replaces kube-proxy with Cilium's BPF implementation.
|
||||||
|
// Requires spec.kubeProxy.enabled be set to false.
|
||||||
|
// Default: false
|
||||||
|
EnableNodePort bool `json:"enableNodePort"`
|
||||||
|
|
||||||
//node init options
|
// RemoveCbrBridge is not implemented and may be removed in the future.
|
||||||
RemoveCbrBridge bool `json:"removeCbrBridge"`
|
// Setting this has no effect.
|
||||||
RestartPods bool `json:"restartPods"`
|
RemoveCbrBridge bool `json:"removeCbrBridge"`
|
||||||
ReconfigureKubelet bool `json:"reconfigureKubelet"`
|
// RestartPods is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
RestartPods bool `json:"restartPods"`
|
||||||
|
// ReconfigureKubelet is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
ReconfigureKubelet bool `json:"reconfigureKubelet"`
|
||||||
|
// NodeInitBootstrapFile is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
NodeInitBootstrapFile string `json:"nodeInitBootstrapFile"`
|
NodeInitBootstrapFile string `json:"nodeInitBootstrapFile"`
|
||||||
CniBinPath string `json:"cniBinPath"`
|
// CniBinPath is not implemented and may be removed in the future.
|
||||||
|
// Setting this has no effect.
|
||||||
|
CniBinPath string `json:"cniBinPath"`
|
||||||
}
|
}
|
||||||
|
|
||||||
// LyftIpVlanNetworkingSpec declares that we want to use the cni-ipvlan-vpc-k8s CNI networking
|
// LyftIpVlanNetworkingSpec declares that we want to use the cni-ipvlan-vpc-k8s CNI networking
|
||||||
|
|
|
||||||
|
|
@ -1305,8 +1305,8 @@ func autoConvert_v1alpha2_CiliumNetworkingSpec_To_kops_CiliumNetworkingSpec(in *
|
||||||
out.DisableIpv4 = in.DisableIpv4
|
out.DisableIpv4 = in.DisableIpv4
|
||||||
out.DisableK8sServices = in.DisableK8sServices
|
out.DisableK8sServices = in.DisableK8sServices
|
||||||
out.EnablePolicy = in.EnablePolicy
|
out.EnablePolicy = in.EnablePolicy
|
||||||
out.EnablePrometheusMetrics = in.EnablePrometheusMetrics
|
|
||||||
out.EnableTracing = in.EnableTracing
|
out.EnableTracing = in.EnableTracing
|
||||||
|
out.EnablePrometheusMetrics = in.EnablePrometheusMetrics
|
||||||
out.EnvoyLog = in.EnvoyLog
|
out.EnvoyLog = in.EnvoyLog
|
||||||
out.Ipv4ClusterCIDRMaskSize = in.Ipv4ClusterCIDRMaskSize
|
out.Ipv4ClusterCIDRMaskSize = in.Ipv4ClusterCIDRMaskSize
|
||||||
out.Ipv4Node = in.Ipv4Node
|
out.Ipv4Node = in.Ipv4Node
|
||||||
|
|
@ -1350,10 +1350,10 @@ func autoConvert_v1alpha2_CiliumNetworkingSpec_To_kops_CiliumNetworkingSpec(in *
|
||||||
out.ClusterName = in.ClusterName
|
out.ClusterName = in.ClusterName
|
||||||
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
||||||
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
||||||
|
out.Ipam = in.Ipam
|
||||||
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
||||||
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
||||||
out.EnableNodePort = in.EnableNodePort
|
out.EnableNodePort = in.EnableNodePort
|
||||||
out.Ipam = in.Ipam
|
|
||||||
out.RemoveCbrBridge = in.RemoveCbrBridge
|
out.RemoveCbrBridge = in.RemoveCbrBridge
|
||||||
out.RestartPods = in.RestartPods
|
out.RestartPods = in.RestartPods
|
||||||
out.ReconfigureKubelet = in.ReconfigureKubelet
|
out.ReconfigureKubelet = in.ReconfigureKubelet
|
||||||
|
|
@ -1429,10 +1429,10 @@ func autoConvert_kops_CiliumNetworkingSpec_To_v1alpha2_CiliumNetworkingSpec(in *
|
||||||
out.ClusterName = in.ClusterName
|
out.ClusterName = in.ClusterName
|
||||||
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
||||||
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
||||||
|
out.Ipam = in.Ipam
|
||||||
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
||||||
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
||||||
out.EnableNodePort = in.EnableNodePort
|
out.EnableNodePort = in.EnableNodePort
|
||||||
out.Ipam = in.Ipam
|
|
||||||
out.RemoveCbrBridge = in.RemoveCbrBridge
|
out.RemoveCbrBridge = in.RemoveCbrBridge
|
||||||
out.RestartPods = in.RestartPods
|
out.RestartPods = in.RestartPods
|
||||||
out.ReconfigureKubelet = in.ReconfigureKubelet
|
out.ReconfigureKubelet = in.ReconfigureKubelet
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue