mirror of https://github.com/kubernetes/kops.git
Add the docs to the api specs
This commit is contained in:
Ole Markus With
parent
8338824d9c
commit
3a32b76abc
|
|
@ -2553,160 +2553,315 @@ spec:
|
|||
description: CiliumNetworkingSpec declares that we want Cilium networking
|
||||
properties:
|
||||
IPTablesRulesNoinstall:
|
||||
description: 'IPTablesRulesNoinstall disables installing the
|
||||
base IPTables rules used for masquerading and kube-proxy.
|
||||
Default: false'
|
||||
type: boolean
|
||||
accessLog:
|
||||
description: AccessLog is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
agentLabels:
|
||||
description: AgentLabels is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
agentPrometheusPort:
|
||||
description: AgentPrometheusPort is the port to listen to for
|
||||
Prometheus metrics. Defaults to 9090.
|
||||
type: integer
|
||||
allowLocalhost:
|
||||
description: AllowLocalhost is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
autoDirectNodeRoutes:
|
||||
description: 'AutoDirectNodeRoutes adds automatic L2 routing
|
||||
between nodes. Default: false'
|
||||
type: boolean
|
||||
autoIpv6NodeRoutes:
|
||||
description: AutoIpv6NodeRoutes is not implemented and may be
|
||||
removed in the future. Setting this has no effect.
|
||||
type: boolean
|
||||
bpfCTGlobalAnyMax:
|
||||
description: 'BPFCTGlobalAnyMax is the maximum number of entries
|
||||
in the non-TCP CT table. Default: 262144'
|
||||
type: integer
|
||||
bpfCTGlobalTCPMax:
|
||||
description: 'BPFCTGlobalTCPMax is the maximum number of entries
|
||||
in the TCP CT table. Default: 524288'
|
||||
type: integer
|
||||
bpfRoot:
|
||||
description: BPFRoot is not implemented and may be removed in
|
||||
the future. Setting this has no effect.
|
||||
type: string
|
||||
clusterName:
|
||||
description: ClusterName is the name of the cluster. It is only
|
||||
relevant when building a mesh of clusters.
|
||||
type: string
|
||||
cniBinPath:
|
||||
description: CniBinPath is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
containerRuntime:
|
||||
description: ContainerRuntime is not implemented and may be
|
||||
removed in the future. Setting this has no effect.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
containerRuntimeEndpoint:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: ContainerRuntimeEndpoint is not implemented and
|
||||
may be removed in the future. Setting this has no effect.
|
||||
type: object
|
||||
containerRuntimeLabels:
|
||||
description: 'ContainerRuntimeLabels enables fetching of container-runtime
|
||||
labels from the specified container runtime and associating
|
||||
them with endpoints. Supported values are: "none", "containerd",
|
||||
"crio", "docker", "auto" As of Cilium 1.7.0, Cilium no longer
|
||||
fetches information from the container runtime and this field
|
||||
is ignored. Default: none'
|
||||
type: string
|
||||
debug:
|
||||
description: Debug runs Cilium in debug mode.
|
||||
type: boolean
|
||||
debugVerbose:
|
||||
description: DebugVerbose is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
device:
|
||||
description: Device is not implemented and may be removed in
|
||||
the future. Setting this has no effect.
|
||||
type: string
|
||||
disableConntrack:
|
||||
description: DisableConntrack is not implemented and may be
|
||||
removed in the future. Setting this has no effect.
|
||||
type: boolean
|
||||
disableIpv4:
|
||||
description: 'DisableIpv4 is deprecated: Use EnableIpv4 instead.
|
||||
Setting this flag has no effect.'
|
||||
type: boolean
|
||||
disableK8sServices:
|
||||
description: DisableK8sServices is not implemented and may be
|
||||
removed in the future. Setting this has no effect.
|
||||
type: boolean
|
||||
disableMasquerade:
|
||||
description: DisableMasquerade disables masquerading traffic
|
||||
to external destinations behind the node IP.
|
||||
type: boolean
|
||||
enableNodePort:
|
||||
description: 'EnableNodePort replaces kube-proxy with Cilium''s
|
||||
BPF implementation. Requires spec.kubeProxy.enabled be set
|
||||
to false. Default: false'
|
||||
type: boolean
|
||||
enablePolicy:
|
||||
description: 'EnablePolicy specifies the policy enforcement
|
||||
mode. "default": Follows Kubernetes policy enforcement. "always":
|
||||
Cilium restricts all traffic if no policy is in place. "never":
|
||||
Cilium allows all traffic regardless of policies in place.
|
||||
If unspecified, "default" policy mode will be used.'
|
||||
type: string
|
||||
enablePrometheusMetrics:
|
||||
description: EnablePrometheusMetrics enables the Cilium "/metrics"
|
||||
endpoint for both the agent and the operator.
|
||||
type: boolean
|
||||
enableTracing:
|
||||
description: EnableTracing is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: boolean
|
||||
enableipv4:
|
||||
description: 'EnableIpv4 enables cluster IPv4 traffic. If both
|
||||
EnableIpv6 and EnableIpv4 are set to false then IPv4 will
|
||||
be enabled. Default: false'
|
||||
type: boolean
|
||||
enableipv6:
|
||||
description: 'EnableIpv6 enables cluster IPv6 traffic. If both
|
||||
EnableIpv6 and EnableIpv4 are set to false then IPv4 will
|
||||
be enabled. Default: false'
|
||||
type: boolean
|
||||
envoyLog:
|
||||
description: EnvoyLog is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
ipam:
|
||||
description: Ipam specifies the IP address allocation mode to
|
||||
use. Possible values are "crd" and "eni". "eni" will use AWS
|
||||
native networking for pods. Eni requires masquerade to be
|
||||
set to false. "crd" will use CRDs for controlling IP address
|
||||
management. Empty value will use host-scope address management.
|
||||
type: string
|
||||
ipv4ClusterCidrMaskSize:
|
||||
description: Ipv4ClusterCIDRMaskSize is not implemented and
|
||||
may be removed in the future. Setting this has no effect.
|
||||
type: integer
|
||||
ipv4Node:
|
||||
description: Ipv4Node is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
ipv4Range:
|
||||
description: Ipv4Range is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
ipv4ServiceRange:
|
||||
description: Ipv4ServiceRange is not implemented and may be
|
||||
removed in the future. Setting this has no effect.
|
||||
type: string
|
||||
ipv6ClusterAllocCidr:
|
||||
description: Ipv6ClusterAllocCidr is not implemented and may
|
||||
be removed in the future. Setting this has no effect.
|
||||
type: string
|
||||
ipv6Node:
|
||||
description: Ipv6Node is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
ipv6Range:
|
||||
description: Ipv6Range is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
ipv6ServiceRange:
|
||||
description: Ipv6ServiceRange is not implemented and may be
|
||||
removed in the future. Setting this has no effect.
|
||||
type: string
|
||||
k8sApiServer:
|
||||
description: K8sAPIServer is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
k8sKubeconfigPath:
|
||||
description: K8sKubeconfigPath is not implemented and may be
|
||||
removed in the future. Setting this has no effect.
|
||||
type: string
|
||||
keepBpfTemplates:
|
||||
description: KeepBPFTemplates is not implemented and may be
|
||||
removed in the future. Setting this has no effect.
|
||||
type: boolean
|
||||
keepConfig:
|
||||
description: KeepConfig is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: boolean
|
||||
labelPrefixFile:
|
||||
description: LabelPrefixFile is not implemented and may be removed
|
||||
in the future. Setting this has currently no effect
|
||||
type: string
|
||||
labels:
|
||||
description: Labels is not implemented and may be removed in
|
||||
the future. Setting this has no effect.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
lb:
|
||||
description: LB is not implemented and may be removed in the
|
||||
future. Setting this has no effect.
|
||||
type: string
|
||||
libDir:
|
||||
description: LibDir is not implemented and may be removed in
|
||||
the future. Setting this has no effect.
|
||||
type: string
|
||||
logDriver:
|
||||
description: LogDrivers is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
logOpt:
|
||||
additionalProperties:
|
||||
type: string
|
||||
description: LogOpt is not implemented and may be removed in
|
||||
the future. Setting this has no effect.
|
||||
type: object
|
||||
logstash:
|
||||
description: Logstash is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: boolean
|
||||
logstashAgent:
|
||||
description: LogstashAgent is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
logstashProbeTimer:
|
||||
description: LogstashProbeTimer is not implemented and may be
|
||||
removed in the future. Setting this has no effect.
|
||||
format: int32
|
||||
type: integer
|
||||
monitorAggregation:
|
||||
description: 'MonitorAggregation sets the level of packet monitoring.
|
||||
Possible values are "low", "medium", or "maximum". Default:
|
||||
medium'
|
||||
type: string
|
||||
nat46Range:
|
||||
description: Nat6Range is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
nodeInitBootstrapFile:
|
||||
description: NodeInitBootstrapFile is not implemented and may
|
||||
be removed in the future. Setting this has no effect.
|
||||
type: string
|
||||
pprof:
|
||||
description: Pprof is not implemented and may be removed in
|
||||
the future. Setting this has no effect.
|
||||
type: boolean
|
||||
preallocateBPFMaps:
|
||||
description: 'PreallocateBPFMaps reduces the per-packet latency
|
||||
at the expense of up-front memory allocation. Default: true'
|
||||
type: boolean
|
||||
prefilterDevice:
|
||||
description: PrefilterDevice is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
prometheusServeAddr:
|
||||
description: PrometheusServeAddr is deprecated. Use EnablePrometheusMetrics
|
||||
and AgentPrometheusPort instead. Setting this has no effect.
|
||||
type: string
|
||||
reconfigureKubelet:
|
||||
description: ReconfigureKubelet is not implemented and may be
|
||||
removed in the future. Setting this has no effect.
|
||||
type: boolean
|
||||
removeCbrBridge:
|
||||
description: node init options
|
||||
description: RemoveCbrBridge is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: boolean
|
||||
restartPods:
|
||||
description: RestartPods is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: boolean
|
||||
restore:
|
||||
description: Restore is not implemented and may be removed in
|
||||
the future. Setting this has no effect.
|
||||
type: boolean
|
||||
sidecarIstioProxyImage:
|
||||
description: 'SidecarIstioProxyImage is the regular expression
|
||||
matching compatible Istio sidecar istio-proxy container image
|
||||
names. Default: cilium/istio_proxy'
|
||||
type: string
|
||||
singleClusterRoute:
|
||||
description: SingleClusterRoute is not implemented and may be
|
||||
removed in the future. Setting this has no effect.
|
||||
type: boolean
|
||||
socketPath:
|
||||
description: SocketPath is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
stateDir:
|
||||
description: StateDir is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: string
|
||||
toFqdnsEnablePoller:
|
||||
description: 'ToFqdnsEnablePoller replaces the DNS proxy-based
|
||||
implementation of FQDN policies with the less powerful legacy
|
||||
implementation. Default: false'
|
||||
type: boolean
|
||||
tracePayloadlen:
|
||||
description: TracePayloadLen is not implemented and may be removed
|
||||
in the future. Setting this has no effect.
|
||||
type: integer
|
||||
tunnel:
|
||||
description: 'Tunnel specifies the Cilium tunelling mode. Possible
|
||||
values are "vxlan", "geneve", or "disabled". Default: vxlan'
|
||||
type: string
|
||||
version:
|
||||
description: Version is the version of the Cilium agent and
|
||||
the Cilium Operator.
|
||||
type: string
|
||||
required:
|
||||
- IPTablesRulesNoinstall
|
||||
|
|
|
|||
|
|
@ -191,80 +191,228 @@ type AmazonVPCNetworkingSpec struct {
|
|||
ImageName string `json:"imageName,omitempty"`
|
||||
}
|
||||
|
||||
// CiliumNetworkingSpec declares that we want Cilium networking
|
||||
type CiliumNetworkingSpec struct {
|
||||
// Version is the version of the Cilium agent and the Cilium Operator.
|
||||
Version string `json:"version,omitempty"`
|
||||
|
||||
// AccessLog is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
AccessLog string `json:"accessLog,omitempty"`
|
||||
// AgentLabels is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
AgentLabels []string `json:"agentLabels,omitempty"`
|
||||
// AgentPrometheusPort is the port to listen to for Prometheus metrics.
|
||||
// Defaults to 9090.
|
||||
AgentPrometheusPort int `json:"agentPrometheusPort,omitempty"`
|
||||
// AllowLocalhost is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
AllowLocalhost string `json:"allowLocalhost,omitempty"`
|
||||
// AutoIpv6NodeRoutes is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
AutoIpv6NodeRoutes bool `json:"autoIpv6NodeRoutes,omitempty"`
|
||||
// BPFRoot is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
BPFRoot string `json:"bpfRoot,omitempty"`
|
||||
// ContainerRuntime is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
ContainerRuntime []string `json:"containerRuntime,omitempty"`
|
||||
// ContainerRuntimeEndpoint is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
ContainerRuntimeEndpoint map[string]string `json:"containerRuntimeEndpoint,omitempty"`
|
||||
// Debug runs Cilium in debug mode.
|
||||
Debug bool `json:"debug,omitempty"`
|
||||
// DebugVerbose is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
DebugVerbose []string `json:"debugVerbose,omitempty"`
|
||||
// Device is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Device string `json:"device,omitempty"`
|
||||
// DisableConntrack is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
DisableConntrack bool `json:"disableConntrack,omitempty"`
|
||||
// DisableIpv4 is deprecated: Use EnableIpv4 instead.
|
||||
// Setting this flag has no effect.
|
||||
DisableIpv4 bool `json:"disableIpv4,omitempty"`
|
||||
// DisableK8sServices is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
DisableK8sServices bool `json:"disableK8sServices,omitempty"`
|
||||
// EnablePolicy specifies the policy enforcement mode.
|
||||
// "default": Follows Kubernetes policy enforcement.
|
||||
// "always": Cilium restricts all traffic if no policy is in place.
|
||||
// "never": Cilium allows all traffic regardless of policies in place.
|
||||
// If unspecified, "default" policy mode will be used.
|
||||
EnablePolicy string `json:"enablePolicy,omitempty"`
|
||||
EnablePrometheusMetrics bool `json:"enablePrometheusMetrics,omitempty"`
|
||||
// EnableTracing is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
EnableTracing bool `json:"enableTracing,omitempty"`
|
||||
// EnablePrometheusMetrics enables the Cilium "/metrics" endpoint for both the agent and the operator.
|
||||
EnablePrometheusMetrics bool `json:"enablePrometheusMetrics,omitempty"`
|
||||
// EnvoyLog is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
EnvoyLog string `json:"envoyLog,omitempty"`
|
||||
// Ipv4ClusterCIDRMaskSize is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv4ClusterCIDRMaskSize int `json:"ipv4ClusterCidrMaskSize,omitempty"`
|
||||
// Ipv4Node is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv4Node string `json:"ipv4Node,omitempty"`
|
||||
// Ipv4Range is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv4Range string `json:"ipv4Range,omitempty"`
|
||||
// Ipv4ServiceRange is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv4ServiceRange string `json:"ipv4ServiceRange,omitempty"`
|
||||
// Ipv6ClusterAllocCidr is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv6ClusterAllocCidr string `json:"ipv6ClusterAllocCidr,omitempty"`
|
||||
// Ipv6Node is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv6Node string `json:"ipv6Node,omitempty"`
|
||||
// Ipv6Range is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv6Range string `json:"ipv6Range,omitempty"`
|
||||
// Ipv6ServiceRange is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv6ServiceRange string `json:"ipv6ServiceRange,omitempty"`
|
||||
// K8sAPIServer is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
K8sAPIServer string `json:"k8sApiServer,omitempty"`
|
||||
// K8sKubeconfigPath is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
K8sKubeconfigPath string `json:"k8sKubeconfigPath,omitempty"`
|
||||
// KeepBPFTemplates is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
KeepBPFTemplates bool `json:"keepBpfTemplates,omitempty"`
|
||||
// KeepConfig is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
KeepConfig bool `json:"keepConfig,omitempty"`
|
||||
// LabelPrefixFile is not implemented and may be removed in the future.
|
||||
// Setting this has currently no effect
|
||||
LabelPrefixFile string `json:"labelPrefixFile,omitempty"`
|
||||
// Labels is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Labels []string `json:"labels,omitempty"`
|
||||
// LB is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LB string `json:"lb,omitempty"`
|
||||
// LibDir is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LibDir string `json:"libDir,omitempty"`
|
||||
// LogDrivers is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LogDrivers []string `json:"logDriver,omitempty"`
|
||||
// LogOpt is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LogOpt map[string]string `json:"logOpt,omitempty"`
|
||||
// Logstash is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Logstash bool `json:"logstash,omitempty"`
|
||||
// LogstashAgent is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LogstashAgent string `json:"logstashAgent,omitempty"`
|
||||
// LogstashProbeTimer is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LogstashProbeTimer uint32 `json:"logstashProbeTimer,omitempty"`
|
||||
// DisableMasquerade disables masquerading traffic to external destinations behind the node IP.
|
||||
DisableMasquerade bool `json:"disableMasquerade,omitempty"`
|
||||
// Nat6Range is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Nat46Range string `json:"nat46Range,omitempty"`
|
||||
// Pprof is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Pprof bool `json:"pprof,omitempty"`
|
||||
// PrefilterDevice is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
PrefilterDevice string `json:"prefilterDevice,omitempty"`
|
||||
// PrometheusServeAddr is deprecated. Use EnablePrometheusMetrics and AgentPrometheusPort instead.
|
||||
// Setting this has no effect.
|
||||
PrometheusServeAddr string `json:"prometheusServeAddr,omitempty"`
|
||||
// Restore is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Restore bool `json:"restore,omitempty"`
|
||||
// SingleClusterRoute is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
SingleClusterRoute bool `json:"singleClusterRoute,omitempty"`
|
||||
// SocketPath is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
SocketPath string `json:"socketPath,omitempty"`
|
||||
// StateDir is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
StateDir string `json:"stateDir,omitempty"`
|
||||
// TracePayloadLen is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
TracePayloadLen int `json:"tracePayloadlen,omitempty"`
|
||||
// Tunnel specifies the Cilium tunelling mode. Possible values are "vxlan", "geneve", or "disabled".
|
||||
// Default: vxlan
|
||||
Tunnel string `json:"tunnel,omitempty"`
|
||||
|
||||
// EnableIpv6 enables cluster IPv6 traffic. If both EnableIpv6 and EnableIpv4 are set to false
|
||||
// then IPv4 will be enabled.
|
||||
// Default: false
|
||||
EnableIpv6 bool `json:"enableipv6"`
|
||||
// EnableIpv4 enables cluster IPv4 traffic. If both EnableIpv6 and EnableIpv4 are set to false
|
||||
// then IPv4 will be enabled.
|
||||
// Default: false
|
||||
EnableIpv4 bool `json:"enableipv4"`
|
||||
// MonitorAggregation sets the level of packet monitoring. Possible values are "low", "medium", or "maximum".
|
||||
// Default: medium
|
||||
MonitorAggregation string `json:"monitorAggregation"`
|
||||
// BPFCTGlobalTCPMax is the maximum number of entries in the TCP CT table.
|
||||
// Default: 524288
|
||||
BPFCTGlobalTCPMax int `json:"bpfCTGlobalTCPMax"`
|
||||
// BPFCTGlobalAnyMax is the maximum number of entries in the non-TCP CT table.
|
||||
// Default: 262144
|
||||
BPFCTGlobalAnyMax int `json:"bpfCTGlobalAnyMax"`
|
||||
// PreallocateBPFMaps reduces the per-packet latency at the expense of up-front memory allocation.
|
||||
// Default: true
|
||||
PreallocateBPFMaps bool `json:"preallocateBPFMaps"`
|
||||
// SidecarIstioProxyImage is the regular expression matching compatible Istio sidecar istio-proxy
|
||||
// container image names.
|
||||
// Default: cilium/istio_proxy
|
||||
SidecarIstioProxyImage string `json:"sidecarIstioProxyImage"`
|
||||
// ClusterName is the name of the cluster. It is only relevant when building a mesh of clusters.
|
||||
ClusterName string `json:"clusterName"`
|
||||
// ToFqdnsEnablePoller replaces the DNS proxy-based implementation of FQDN policies
|
||||
// with the less powerful legacy implementation.
|
||||
// Default: false
|
||||
ToFqdnsEnablePoller bool `json:"toFqdnsEnablePoller"`
|
||||
// ContainerRuntimeLabels enables fetching of container-runtime labels from the specified container runtime and associating them with endpoints.
|
||||
// Supported values are: "none", "containerd", "crio", "docker", "auto"
|
||||
// As of Cilium 1.7.0, Cilium no longer fetches information from the
|
||||
// container runtime and this field is ignored.
|
||||
// Default: none
|
||||
ContainerRuntimeLabels string `json:"containerRuntimeLabels,omitempty"`
|
||||
IPTablesRulesNoinstall bool `json:"IPTablesRulesNoinstall"`
|
||||
AutoDirectNodeRoutes bool `json:"autoDirectNodeRoutes"`
|
||||
EnableNodePort bool `json:"enableNodePort"`
|
||||
// Ipam specifies the IP address allocation mode to use.
|
||||
// Possible values are "crd" and "eni".
|
||||
// "eni" will use AWS native networking for pods. Eni requires masquerade to be set to false.
|
||||
// "crd" will use CRDs for controlling IP address management.
|
||||
// Empty value will use host-scope address management.
|
||||
Ipam string `json:"ipam,omitempty"`
|
||||
// IPTablesRulesNoinstall disables installing the base IPTables rules used for masquerading and kube-proxy.
|
||||
// Default: false
|
||||
IPTablesRulesNoinstall bool `json:"IPTablesRulesNoinstall"`
|
||||
// AutoDirectNodeRoutes adds automatic L2 routing between nodes.
|
||||
// Default: false
|
||||
AutoDirectNodeRoutes bool `json:"autoDirectNodeRoutes"`
|
||||
// EnableNodePort replaces kube-proxy with Cilium's BPF implementation.
|
||||
// Requires spec.kubeProxy.enabled be set to false.
|
||||
// Default: false
|
||||
EnableNodePort bool `json:"enableNodePort"`
|
||||
|
||||
//node init options
|
||||
// RemoveCbrBridge is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
RemoveCbrBridge bool `json:"removeCbrBridge"`
|
||||
// RestartPods is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
RestartPods bool `json:"restartPods"`
|
||||
// ReconfigureKubelet is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
ReconfigureKubelet bool `json:"reconfigureKubelet"`
|
||||
// NodeInitBootstrapFile is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
NodeInitBootstrapFile string `json:"nodeInitBootstrapFile"`
|
||||
// CniBinPath is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
CniBinPath string `json:"cniBinPath"`
|
||||
}
|
||||
|
||||
|
|
|
|||
|
|
@ -1263,8 +1263,8 @@ func autoConvert_v1alpha1_CiliumNetworkingSpec_To_kops_CiliumNetworkingSpec(in *
|
|||
out.DisableIpv4 = in.DisableIpv4
|
||||
out.DisableK8sServices = in.DisableK8sServices
|
||||
out.EnablePolicy = in.EnablePolicy
|
||||
out.EnablePrometheusMetrics = in.EnablePrometheusMetrics
|
||||
out.EnableTracing = in.EnableTracing
|
||||
out.EnablePrometheusMetrics = in.EnablePrometheusMetrics
|
||||
out.EnvoyLog = in.EnvoyLog
|
||||
out.Ipv4ClusterCIDRMaskSize = in.Ipv4ClusterCIDRMaskSize
|
||||
out.Ipv4Node = in.Ipv4Node
|
||||
|
|
@ -1308,10 +1308,10 @@ func autoConvert_v1alpha1_CiliumNetworkingSpec_To_kops_CiliumNetworkingSpec(in *
|
|||
out.ClusterName = in.ClusterName
|
||||
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
||||
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
||||
out.Ipam = in.Ipam
|
||||
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
||||
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
||||
out.EnableNodePort = in.EnableNodePort
|
||||
out.Ipam = in.Ipam
|
||||
out.RemoveCbrBridge = in.RemoveCbrBridge
|
||||
out.RestartPods = in.RestartPods
|
||||
out.ReconfigureKubelet = in.ReconfigureKubelet
|
||||
|
|
@ -1387,10 +1387,10 @@ func autoConvert_kops_CiliumNetworkingSpec_To_v1alpha1_CiliumNetworkingSpec(in *
|
|||
out.ClusterName = in.ClusterName
|
||||
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
||||
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
||||
out.Ipam = in.Ipam
|
||||
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
||||
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
||||
out.EnableNodePort = in.EnableNodePort
|
||||
out.Ipam = in.Ipam
|
||||
out.RemoveCbrBridge = in.RemoveCbrBridge
|
||||
out.RestartPods = in.RestartPods
|
||||
out.ReconfigureKubelet = in.ReconfigureKubelet
|
||||
|
|
|
|||
|
|
@ -193,79 +193,226 @@ type AmazonVPCNetworkingSpec struct {
|
|||
|
||||
// CiliumNetworkingSpec declares that we want Cilium networking
|
||||
type CiliumNetworkingSpec struct {
|
||||
// Version is the version of the Cilium agent and the Cilium Operator.
|
||||
Version string `json:"version,omitempty"`
|
||||
|
||||
// AccessLog is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
AccessLog string `json:"accessLog,omitempty"`
|
||||
// AgentLabels is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
AgentLabels []string `json:"agentLabels,omitempty"`
|
||||
// AgentPrometheusPort is the port to listen to for Prometheus metrics.
|
||||
// Defaults to 9090.
|
||||
AgentPrometheusPort int `json:"agentPrometheusPort,omitempty"`
|
||||
// AllowLocalhost is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
AllowLocalhost string `json:"allowLocalhost,omitempty"`
|
||||
// AutoIpv6NodeRoutes is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
AutoIpv6NodeRoutes bool `json:"autoIpv6NodeRoutes,omitempty"`
|
||||
// BPFRoot is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
BPFRoot string `json:"bpfRoot,omitempty"`
|
||||
// ContainerRuntime is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
ContainerRuntime []string `json:"containerRuntime,omitempty"`
|
||||
// ContainerRuntimeEndpoint is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
ContainerRuntimeEndpoint map[string]string `json:"containerRuntimeEndpoint,omitempty"`
|
||||
// Debug runs Cilium in debug mode.
|
||||
Debug bool `json:"debug,omitempty"`
|
||||
// DebugVerbose is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
DebugVerbose []string `json:"debugVerbose,omitempty"`
|
||||
// Device is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Device string `json:"device,omitempty"`
|
||||
// DisableConntrack is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
DisableConntrack bool `json:"disableConntrack,omitempty"`
|
||||
// DisableIpv4 is deprecated: Use EnableIpv4 instead.
|
||||
// Setting this flag has no effect.
|
||||
DisableIpv4 bool `json:"disableIpv4,omitempty"`
|
||||
// DisableK8sServices is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
DisableK8sServices bool `json:"disableK8sServices,omitempty"`
|
||||
// EnablePolicy specifies the policy enforcement mode.
|
||||
// "default": Follows Kubernetes policy enforcement.
|
||||
// "always": Cilium restricts all traffic if no policy is in place.
|
||||
// "never": Cilium allows all traffic regardless of policies in place.
|
||||
// If unspecified, "default" policy mode will be used.
|
||||
EnablePolicy string `json:"enablePolicy,omitempty"`
|
||||
EnablePrometheusMetrics bool `json:"enablePrometheusMetrics,omitempty"`
|
||||
// EnableTracing is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
EnableTracing bool `json:"enableTracing,omitempty"`
|
||||
// EnablePrometheusMetrics enables the Cilium "/metrics" endpoint for both the agent and the operator.
|
||||
EnablePrometheusMetrics bool `json:"enablePrometheusMetrics,omitempty"`
|
||||
// EnvoyLog is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
EnvoyLog string `json:"envoyLog,omitempty"`
|
||||
// Ipv4ClusterCIDRMaskSize is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv4ClusterCIDRMaskSize int `json:"ipv4ClusterCidrMaskSize,omitempty"`
|
||||
// Ipv4Node is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv4Node string `json:"ipv4Node,omitempty"`
|
||||
// Ipv4Range is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv4Range string `json:"ipv4Range,omitempty"`
|
||||
// Ipv4ServiceRange is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv4ServiceRange string `json:"ipv4ServiceRange,omitempty"`
|
||||
// Ipv6ClusterAllocCidr is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv6ClusterAllocCidr string `json:"ipv6ClusterAllocCidr,omitempty"`
|
||||
// Ipv6Node is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv6Node string `json:"ipv6Node,omitempty"`
|
||||
// Ipv6Range is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv6Range string `json:"ipv6Range,omitempty"`
|
||||
// Ipv6ServiceRange is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Ipv6ServiceRange string `json:"ipv6ServiceRange,omitempty"`
|
||||
// K8sAPIServer is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
K8sAPIServer string `json:"k8sApiServer,omitempty"`
|
||||
// K8sKubeconfigPath is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
K8sKubeconfigPath string `json:"k8sKubeconfigPath,omitempty"`
|
||||
// KeepBPFTemplates is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
KeepBPFTemplates bool `json:"keepBpfTemplates,omitempty"`
|
||||
// KeepConfig is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
KeepConfig bool `json:"keepConfig,omitempty"`
|
||||
// LabelPrefixFile is not implemented and may be removed in the future.
|
||||
// Setting this has currently no effect
|
||||
LabelPrefixFile string `json:"labelPrefixFile,omitempty"`
|
||||
// Labels is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Labels []string `json:"labels,omitempty"`
|
||||
// LB is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LB string `json:"lb,omitempty"`
|
||||
// LibDir is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LibDir string `json:"libDir,omitempty"`
|
||||
// LogDrivers is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LogDrivers []string `json:"logDriver,omitempty"`
|
||||
// LogOpt is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LogOpt map[string]string `json:"logOpt,omitempty"`
|
||||
// Logstash is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Logstash bool `json:"logstash,omitempty"`
|
||||
// LogstashAgent is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LogstashAgent string `json:"logstashAgent,omitempty"`
|
||||
// LogstashProbeTimer is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
LogstashProbeTimer uint32 `json:"logstashProbeTimer,omitempty"`
|
||||
// DisableMasquerade disables masquerading traffic to external destinations behind the node IP.
|
||||
DisableMasquerade bool `json:"disableMasquerade,omitempty"`
|
||||
// Nat6Range is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Nat46Range string `json:"nat46Range,omitempty"`
|
||||
// Pprof is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Pprof bool `json:"pprof,omitempty"`
|
||||
// PrefilterDevice is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
PrefilterDevice string `json:"prefilterDevice,omitempty"`
|
||||
// PrometheusServeAddr is deprecated. Use EnablePrometheusMetrics and AgentPrometheusPort instead.
|
||||
// Setting this has no effect.
|
||||
PrometheusServeAddr string `json:"prometheusServeAddr,omitempty"`
|
||||
// Restore is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
Restore bool `json:"restore,omitempty"`
|
||||
// SingleClusterRoute is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
SingleClusterRoute bool `json:"singleClusterRoute,omitempty"`
|
||||
// SocketPath is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
SocketPath string `json:"socketPath,omitempty"`
|
||||
// StateDir is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
StateDir string `json:"stateDir,omitempty"`
|
||||
// TracePayloadLen is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
TracePayloadLen int `json:"tracePayloadlen,omitempty"`
|
||||
// Tunnel specifies the Cilium tunelling mode. Possible values are "vxlan", "geneve", or "disabled".
|
||||
// Default: vxlan
|
||||
Tunnel string `json:"tunnel,omitempty"`
|
||||
|
||||
// EnableIpv6 enables cluster IPv6 traffic. If both EnableIpv6 and EnableIpv4 are set to false
|
||||
// then IPv4 will be enabled.
|
||||
// Default: false
|
||||
EnableIpv6 bool `json:"enableipv6"`
|
||||
// EnableIpv4 enables cluster IPv4 traffic. If both EnableIpv6 and EnableIpv4 are set to false
|
||||
// then IPv4 will be enabled.
|
||||
// Default: false
|
||||
EnableIpv4 bool `json:"enableipv4"`
|
||||
// MonitorAggregation sets the level of packet monitoring. Possible values are "low", "medium", or "maximum".
|
||||
// Default: medium
|
||||
MonitorAggregation string `json:"monitorAggregation"`
|
||||
// BPFCTGlobalTCPMax is the maximum number of entries in the TCP CT table.
|
||||
// Default: 524288
|
||||
BPFCTGlobalTCPMax int `json:"bpfCTGlobalTCPMax"`
|
||||
// BPFCTGlobalAnyMax is the maximum number of entries in the non-TCP CT table.
|
||||
// Default: 262144
|
||||
BPFCTGlobalAnyMax int `json:"bpfCTGlobalAnyMax"`
|
||||
// PreallocateBPFMaps reduces the per-packet latency at the expense of up-front memory allocation.
|
||||
// Default: true
|
||||
PreallocateBPFMaps bool `json:"preallocateBPFMaps"`
|
||||
// SidecarIstioProxyImage is the regular expression matching compatible Istio sidecar istio-proxy
|
||||
// container image names.
|
||||
// Default: cilium/istio_proxy
|
||||
SidecarIstioProxyImage string `json:"sidecarIstioProxyImage"`
|
||||
// ClusterName is the name of the cluster. It is only relevant when building a mesh of clusters.
|
||||
ClusterName string `json:"clusterName"`
|
||||
// ToFqdnsEnablePoller replaces the DNS proxy-based implementation of FQDN policies
|
||||
// with the less powerful legacy implementation.
|
||||
// Default: false
|
||||
ToFqdnsEnablePoller bool `json:"toFqdnsEnablePoller"`
|
||||
// ContainerRuntimeLabels enables fetching of container-runtime labels from the specified container runtime and associating them with endpoints.
|
||||
// Supported values are: "none", "containerd", "crio", "docker", "auto"
|
||||
// As of Cilium 1.7.0, Cilium no longer fetches information from the
|
||||
// container runtime and this field is ignored.
|
||||
// Default: none
|
||||
ContainerRuntimeLabels string `json:"containerRuntimeLabels,omitempty"`
|
||||
IPTablesRulesNoinstall bool `json:"IPTablesRulesNoinstall"`
|
||||
AutoDirectNodeRoutes bool `json:"autoDirectNodeRoutes"`
|
||||
EnableNodePort bool `json:"enableNodePort"`
|
||||
// Ipam specifies the IP address allocation mode to use.
|
||||
// Possible values are "crd" and "eni".
|
||||
// "eni" will use AWS native networking for pods. Eni requires masquerade to be set to false.
|
||||
// "crd" will use CRDs for controlling IP address management.
|
||||
// Empty value will use host-scope address management.
|
||||
Ipam string `json:"ipam,omitempty"`
|
||||
// IPTablesRulesNoinstall disables installing the base IPTables rules used for masquerading and kube-proxy.
|
||||
// Default: false
|
||||
IPTablesRulesNoinstall bool `json:"IPTablesRulesNoinstall"`
|
||||
// AutoDirectNodeRoutes adds automatic L2 routing between nodes.
|
||||
// Default: false
|
||||
AutoDirectNodeRoutes bool `json:"autoDirectNodeRoutes"`
|
||||
// EnableNodePort replaces kube-proxy with Cilium's BPF implementation.
|
||||
// Requires spec.kubeProxy.enabled be set to false.
|
||||
// Default: false
|
||||
EnableNodePort bool `json:"enableNodePort"`
|
||||
|
||||
//node init options
|
||||
// RemoveCbrBridge is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
RemoveCbrBridge bool `json:"removeCbrBridge"`
|
||||
// RestartPods is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
RestartPods bool `json:"restartPods"`
|
||||
// ReconfigureKubelet is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
ReconfigureKubelet bool `json:"reconfigureKubelet"`
|
||||
// NodeInitBootstrapFile is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
NodeInitBootstrapFile string `json:"nodeInitBootstrapFile"`
|
||||
// CniBinPath is not implemented and may be removed in the future.
|
||||
// Setting this has no effect.
|
||||
CniBinPath string `json:"cniBinPath"`
|
||||
}
|
||||
|
||||
|
|
|
|||
|
|
@ -1305,8 +1305,8 @@ func autoConvert_v1alpha2_CiliumNetworkingSpec_To_kops_CiliumNetworkingSpec(in *
|
|||
out.DisableIpv4 = in.DisableIpv4
|
||||
out.DisableK8sServices = in.DisableK8sServices
|
||||
out.EnablePolicy = in.EnablePolicy
|
||||
out.EnablePrometheusMetrics = in.EnablePrometheusMetrics
|
||||
out.EnableTracing = in.EnableTracing
|
||||
out.EnablePrometheusMetrics = in.EnablePrometheusMetrics
|
||||
out.EnvoyLog = in.EnvoyLog
|
||||
out.Ipv4ClusterCIDRMaskSize = in.Ipv4ClusterCIDRMaskSize
|
||||
out.Ipv4Node = in.Ipv4Node
|
||||
|
|
@ -1350,10 +1350,10 @@ func autoConvert_v1alpha2_CiliumNetworkingSpec_To_kops_CiliumNetworkingSpec(in *
|
|||
out.ClusterName = in.ClusterName
|
||||
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
||||
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
||||
out.Ipam = in.Ipam
|
||||
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
||||
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
||||
out.EnableNodePort = in.EnableNodePort
|
||||
out.Ipam = in.Ipam
|
||||
out.RemoveCbrBridge = in.RemoveCbrBridge
|
||||
out.RestartPods = in.RestartPods
|
||||
out.ReconfigureKubelet = in.ReconfigureKubelet
|
||||
|
|
@ -1429,10 +1429,10 @@ func autoConvert_kops_CiliumNetworkingSpec_To_v1alpha2_CiliumNetworkingSpec(in *
|
|||
out.ClusterName = in.ClusterName
|
||||
out.ToFqdnsEnablePoller = in.ToFqdnsEnablePoller
|
||||
out.ContainerRuntimeLabels = in.ContainerRuntimeLabels
|
||||
out.Ipam = in.Ipam
|
||||
out.IPTablesRulesNoinstall = in.IPTablesRulesNoinstall
|
||||
out.AutoDirectNodeRoutes = in.AutoDirectNodeRoutes
|
||||
out.EnableNodePort = in.EnableNodePort
|
||||
out.Ipam = in.Ipam
|
||||
out.RemoveCbrBridge = in.RemoveCbrBridge
|
||||
out.RestartPods = in.RestartPods
|
||||
out.ReconfigureKubelet = in.ReconfigureKubelet
|
||||
|
|
|
|||
Loading…
Reference in New Issue