kuma

1
---
2
apiVersion: apiextensions.k8s.io/v1
3
kind: CustomResourceDefinition
4
metadata:
5
  annotations:
6
    controller-gen.kubebuilder.io/version: v0.14.0
7
  name: meshtrafficpermissions.kuma.io
8
spec:
9
  group: kuma.io
10
  names:
11
    categories:
12
    - kuma
13
    kind: MeshTrafficPermission
14
    listKind: MeshTrafficPermissionList
15
    plural: meshtrafficpermissions
16
    singular: meshtrafficpermission
17
  scope: Namespaced
18
  versions:
19
  - additionalPrinterColumns:
20
    - jsonPath: .spec.targetRef.kind
21
      name: TargetRef Kind
22
      type: string
23
    - jsonPath: .spec.targetRef.name
24
      name: TargetRef Name
25
      type: string
26
    name: v1alpha1
27
    schema:
28
      openAPIV3Schema:
29
        properties:
30
          apiVersion:
31
            description: |-
32
              APIVersion defines the versioned schema of this representation of an object.
33
              Servers should convert recognized schemas to the latest internal value, and
34
              may reject unrecognized values.
35
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
36
            type: string
37
          kind:
38
            description: |-
39
              Kind is a string value representing the REST resource this object represents.
40
              Servers may infer this from the endpoint the client submits requests to.
41
              Cannot be updated.
42
              In CamelCase.
43
              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
44
            type: string
45
          metadata:
46
            type: object
47
          spec:
48
            description: Spec is the specification of the Kuma MeshTrafficPermission
49
              resource.
50
            properties:
51
              from:
52
                description: From list makes a match between clients and corresponding
53
                  configurations
54
                items:
55
                  properties:
56
                    default:
57
                      description: |-
58
                        Default is a configuration specific to the group of clients referenced in
59
                        'targetRef'
60
                      properties:
61
                        action:
62
                          description: 'Action defines a behavior for the specified
63
                            group of clients:'
64
                          enum:
65
                          - Allow
66
                          - Deny
67
                          - AllowWithShadowDeny
68
                          type: string
69
                      type: object
70
                    targetRef:
71
                      description: |-
72
                        TargetRef is a reference to the resource that represents a group of
73
                        clients.
74
                      properties:
75
                        kind:
76
                          description: Kind of the referenced resource
77
                          enum:
78
                          - Mesh
79
                          - MeshSubset
80
                          - MeshGateway
81
                          - MeshService
82
                          - MeshServiceSubset
83
                          - MeshHTTPRoute
84
                          type: string
85
                        mesh:
86
                          description: Mesh is reserved for future use to identify
87
                            cross mesh resources.
88
                          type: string
89
                        name:
90
                          description: |-
91
                            Name of the referenced resource. Can only be used with kinds: `MeshService`,
92
                            `MeshServiceSubset` and `MeshGatewayRoute`
93
                          type: string
94
                        proxyTypes:
95
                          description: |-
96
                            ProxyTypes specifies the data plane types that are subject to the policy. When not specified,
97
                            all data plane types are targeted by the policy.
98
                          items:
99
                            enum:
100
                            - Sidecar
101
                            - Gateway
102
                            type: string
103
                          minItems: 1
104
                          type: array
105
                        tags:
106
                          additionalProperties:
107
                            type: string
108
                          description: |-
109
                            Tags used to select a subset of proxies by tags. Can only be used with kinds
110
                            `MeshSubset` and `MeshServiceSubset`
111
                          type: object
112
                      type: object
113
                  required:
114
                  - targetRef
115
                  type: object
116
                type: array
117
              targetRef:
118
                description: |-
119
                  TargetRef is a reference to the resource the policy takes an effect on.
120
                  The resource could be either a real store object or virtual resource
121
                  defined inplace.
122
                properties:
123
                  kind:
124
                    description: Kind of the referenced resource
125
                    enum:
126
                    - Mesh
127
                    - MeshSubset
128
                    - MeshGateway
129
                    - MeshService
130
                    - MeshServiceSubset
131
                    - MeshHTTPRoute
132
                    type: string
133
                  mesh:
134
                    description: Mesh is reserved for future use to identify cross
135
                      mesh resources.
136
                    type: string
137
                  name:
138
                    description: |-
139
                      Name of the referenced resource. Can only be used with kinds: `MeshService`,
140
                      `MeshServiceSubset` and `MeshGatewayRoute`
141
                    type: string
142
                  proxyTypes:
143
                    description: |-
144
                      ProxyTypes specifies the data plane types that are subject to the policy. When not specified,
145
                      all data plane types are targeted by the policy.
146
                    items:
147
                      enum:
148
                      - Sidecar
149
                      - Gateway
150
                      type: string
151
                    minItems: 1
152
                    type: array
153
                  tags:
154
                    additionalProperties:
155
                      type: string
156
                    description: |-
157
                      Tags used to select a subset of proxies by tags. Can only be used with kinds
158
                      `MeshSubset` and `MeshServiceSubset`
159
                    type: object
160
                type: object
161
            required:
162
            - targetRef
163
            type: object
164
        type: object
165
    served: true
166
    storage: true
167
    subresources: {}
168