Skip to content

Commit ce03a7a

Browse files
committed
Add OpenShift 4.18 rc9 APIs
1 parent 465acff commit ce03a7a

6 files changed

+1611
-434
lines changed

rest_api/network_apis/egressfirewall-k8s-ovn-org-v1.adoc

Lines changed: 26 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,11 @@ toc::[]
1111
Description::
1212
+
1313
--
14-
EgressFirewall describes the current egress firewall for a Namespace. Traffic from a pod to an IP address outside the cluster will be checked against each EgressFirewallRule in the pod's namespace's EgressFirewall, in order. If no rule matches (or no EgressFirewall is present) then the traffic will be allowed by default.
14+
EgressFirewall describes the current egress firewall for a Namespace.
15+
Traffic from a pod to an IP address outside the cluster will be checked against
16+
each EgressFirewallRule in the pod's namespace's EgressFirewall, in
17+
order. If no rule matches (or no EgressFirewall is present) then the traffic
18+
will be allowed by default.
1519
--
1620

1721
Type::
@@ -191,18 +195,23 @@ Type::
191195

192196
| `dnsName`
193197
| `string`
194-
| dnsName is the domain name to allow/deny traffic to. If this is set, cidrSelector and nodeSelector must be unset. For a wildcard DNS name, the '*' will match only one label. Additionally, only a single '*' can be used at the beginning of the wildcard DNS name. For example, '*.example.com' will match 'sub1.example.com' but won't match 'sub2.sub1.example.com'
198+
| dnsName is the domain name to allow/deny traffic to. If this is set, cidrSelector and nodeSelector must be unset.
199+
For a wildcard DNS name, the '*' will match only one label. Additionally, only a single '*' can be
200+
used at the beginning of the wildcard DNS name. For example, '*.example.com' will match 'sub1.example.com'
201+
but won't match 'sub2.sub1.example.com'.
195202

196203
| `nodeSelector`
197204
| `object`
198-
| nodeSelector will allow/deny traffic to the Kubernetes node IP of selected nodes. If this is set, cidrSelector and DNSName must be unset.
205+
| nodeSelector will allow/deny traffic to the Kubernetes node IP of selected nodes. If this is set,
206+
cidrSelector and DNSName must be unset.
199207

200208
|===
201209
=== .spec.egress[].to.nodeSelector
202210
Description::
203211
+
204212
--
205-
nodeSelector will allow/deny traffic to the Kubernetes node IP of selected nodes. If this is set, cidrSelector and DNSName must be unset.
213+
nodeSelector will allow/deny traffic to the Kubernetes node IP of selected nodes. If this is set,
214+
cidrSelector and DNSName must be unset.
206215
--
207216

208217
Type::
@@ -221,11 +230,14 @@ Type::
221230

222231
| `matchExpressions[]`
223232
| `object`
224-
| A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
233+
| A label selector requirement is a selector that contains values, a key, and an operator that
234+
relates the key and values.
225235

226236
| `matchLabels`
227237
| `object (string)`
228-
| matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is "key", the operator is "In", and the values array contains only "value". The requirements are ANDed.
238+
| matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
239+
map is equivalent to an element of matchExpressions, whose key field is "key", the
240+
operator is "In", and the values array contains only "value". The requirements are ANDed.
229241

230242
|===
231243
=== .spec.egress[].to.nodeSelector.matchExpressions
@@ -245,7 +257,8 @@ Type::
245257
Description::
246258
+
247259
--
248-
A label selector requirement is a selector that contains values, a key, and an operator that relates the key and values.
260+
A label selector requirement is a selector that contains values, a key, and an operator that
261+
relates the key and values.
249262
--
250263

251264
Type::
@@ -267,11 +280,15 @@ Required::
267280

268281
| `operator`
269282
| `string`
270-
| operator represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists and DoesNotExist.
283+
| operator represents a key's relationship to a set of values.
284+
Valid operators are In, NotIn, Exists and DoesNotExist.
271285

272286
| `values`
273287
| `array (string)`
274-
| values is an array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. This array is replaced during a strategic merge patch.
288+
| values is an array of string values. If the operator is In or NotIn,
289+
the values array must be non-empty. If the operator is Exists or DoesNotExist,
290+
the values array must be empty. This array is replaced during a strategic
291+
merge patch.
275292

276293
|===
277294
=== .status

rest_api/network_apis/network-apis-index.adoc

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,11 @@ Type::
6969
Description::
7070
+
7171
--
72-
EgressFirewall describes the current egress firewall for a Namespace. Traffic from a pod to an IP address outside the cluster will be checked against each EgressFirewallRule in the pod's namespace's EgressFirewall, in order. If no rule matches (or no EgressFirewall is present) then the traffic will be allowed by default.
72+
EgressFirewall describes the current egress firewall for a Namespace.
73+
Traffic from a pod to an IP address outside the cluster will be checked against
74+
each EgressFirewallRule in the pod's namespace's EgressFirewall, in
75+
order. If no rule matches (or no EgressFirewall is present) then the traffic
76+
will be allowed by default.
7377
--
7478

7579
Type::

0 commit comments

Comments
 (0)