You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
deploy-controller-on-dataplane: ## Deploys the Network Policy controller on an existing cluster. Optionally call with AMAZON_NP_CONTROLLER=<Image URI> to update the image
deploy-controller-on-dataplane: ## Deploys the Network Policy controller on an existing cluster. Optionally call with NP_CONTROLLER_IMAGE=<Image URI> to update the image
deploy-and-test: ## Deploys the Network Policy controller on an existing cluster and runs cyclonus tests. Call with CLUSTER_NAME=<name of the cluster> and AMAZON_NP_CONTROLLER=<Image URI>
deploy-and-test: ## Deploys the Network Policy controller on an existing cluster and runs cyclonus tests. Call with CLUSTER_NAME=<name of the cluster> and NP_CONTROLLER_IMAGE=<Image URI>
| fullnameOverride | Override the fullname of the chart | amazon-network-policy-controller-k8s |
26
+
| nameOverride | override for the name of the Helm Chart | amazon-network-policy-controller-k8s |
27
+
| image.repository | ECR repository to use. Should match your cluster | public.ecr.aws/eks/amazon-network-policy-controller-k8s |
28
+
| image.tag | Image tag | v1.0.4 |
29
+
| enableConfigMapCheck | Enable configmap check to enable/disable controller in Control Plane | false |
30
+
| endpointChunkSize | Number of endpoints to include in a single policy endpoints resource | 1000 |
31
+
| maxConcurrentReconciles | Maximum number of concurrent reconcile loops | 3 |
32
+
| podUpdateBatchPeriodDuration | Duration between batch updates of pods in seconds | 1 |
33
+
| livenessProbe | Liveness Probe configuration for controller | see `values.yaml`|
34
+
| readinessProbe | Readiness Probe configuration for controller | see `values.yaml`|
35
+
36
+
Specify each parameter using the `--set key=value[,key=value]` argument to `helm install` or provide a YAML file containing the values for the above parameters:
description: PolicyEndpoint is the Schema for the policyendpoints API
23
+
properties:
24
+
apiVersion:
25
+
description: 'APIVersion defines the versioned schema of this representation
26
+
of an object. Servers should convert recognized schemas to the latest
27
+
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
28
+
type: string
29
+
kind:
30
+
description: 'Kind is a string value representing the REST resource this
31
+
object represents. Servers may infer this from the endpoint the client
32
+
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
33
+
type: string
34
+
metadata:
35
+
type: object
36
+
spec:
37
+
description: PolicyEndpointSpec defines the desired state of PolicyEndpoint
38
+
properties:
39
+
egress:
40
+
description: Egress is the list of egress rules containing resolved
41
+
network addresses
42
+
items:
43
+
description: EndpointInfo defines the network endpoint information
44
+
for the policy ingress/egress
45
+
properties:
46
+
cidr:
47
+
description: CIDR is the network address(s) of the endpoint
48
+
type: string
49
+
except:
50
+
description: Except is the exceptions to the CIDR ranges mentioned
51
+
above.
52
+
items:
53
+
type: string
54
+
type: array
55
+
ports:
56
+
description: Ports is the list of ports
57
+
items:
58
+
description: Port contains information about the transport
59
+
port/protocol
60
+
properties:
61
+
endPort:
62
+
description: Endport specifies the port range port to
63
+
endPort port must be defined and an integer, endPort
64
+
> port
65
+
format: int32
66
+
type: integer
67
+
port:
68
+
description: Port specifies the numerical port for the
69
+
protocol. If empty applies to all ports
70
+
format: int32
71
+
type: integer
72
+
protocol:
73
+
default: TCP
74
+
description: Protocol specifies the transport protocol,
75
+
default TCP
76
+
type: string
77
+
type: object
78
+
type: array
79
+
required:
80
+
- cidr
81
+
type: object
82
+
type: array
83
+
ingress:
84
+
description: Ingress is the list of ingress rules containing resolved
85
+
network addresses
86
+
items:
87
+
description: EndpointInfo defines the network endpoint information
88
+
for the policy ingress/egress
89
+
properties:
90
+
cidr:
91
+
description: CIDR is the network address(s) of the endpoint
92
+
type: string
93
+
except:
94
+
description: Except is the exceptions to the CIDR ranges mentioned
95
+
above.
96
+
items:
97
+
type: string
98
+
type: array
99
+
ports:
100
+
description: Ports is the list of ports
101
+
items:
102
+
description: Port contains information about the transport
103
+
port/protocol
104
+
properties:
105
+
endPort:
106
+
description: Endport specifies the port range port to
107
+
endPort port must be defined and an integer, endPort
108
+
> port
109
+
format: int32
110
+
type: integer
111
+
port:
112
+
description: Port specifies the numerical port for the
113
+
protocol. If empty applies to all ports
114
+
format: int32
115
+
type: integer
116
+
protocol:
117
+
default: TCP
118
+
description: Protocol specifies the transport protocol,
119
+
default TCP
120
+
type: string
121
+
type: object
122
+
type: array
123
+
required:
124
+
- cidr
125
+
type: object
126
+
type: array
127
+
podIsolation:
128
+
description: PodIsolation specifies whether the pod needs to be isolated
129
+
for a particular traffic direction Ingress or Egress, or both. If
130
+
default isolation is not specified, and there are no ingress/egress
131
+
rules, then the pod is not isolated from the point of view of this
132
+
policy. This follows the NetworkPolicy spec.PolicyTypes.
133
+
items:
134
+
description: PolicyType string describes the NetworkPolicy type
135
+
This type is beta-level in 1.8
136
+
type: string
137
+
type: array
138
+
podSelector:
139
+
description: PodSelector is the podSelector from the policy resource
140
+
properties:
141
+
matchExpressions:
142
+
description: matchExpressions is a list of label selector requirements.
143
+
The requirements are ANDed.
144
+
items:
145
+
description: A label selector requirement is a selector that
146
+
contains values, a key, and an operator that relates the key
147
+
and values.
148
+
properties:
149
+
key:
150
+
description: key is the label key that the selector applies
151
+
to.
152
+
type: string
153
+
operator:
154
+
description: operator represents a key's relationship to
155
+
a set of values. Valid operators are In, NotIn, Exists
156
+
and DoesNotExist.
157
+
type: string
158
+
values:
159
+
description: values is an array of string values. If the
160
+
operator is In or NotIn, the values array must be non-empty.
161
+
If the operator is Exists or DoesNotExist, the values
162
+
array must be empty. This array is replaced during a strategic
163
+
merge patch.
164
+
items:
165
+
type: string
166
+
type: array
167
+
required:
168
+
- key
169
+
- operator
170
+
type: object
171
+
type: array
172
+
matchLabels:
173
+
additionalProperties:
174
+
type: string
175
+
description: matchLabels is a map of {key,value} pairs. A single
176
+
{key,value} in the matchLabels map is equivalent to an element
177
+
of matchExpressions, whose key field is "key", the operator
178
+
is "In", and the values array contains only "value". The requirements
179
+
are ANDed.
180
+
type: object
181
+
type: object
182
+
x-kubernetes-map-type: atomic
183
+
podSelectorEndpoints:
184
+
description: PodSelectorEndpoints contains information about the pods
185
+
matching the podSelector
186
+
items:
187
+
description: PodEndpoint defines the summary information for the
188
+
pods
189
+
properties:
190
+
hostIP:
191
+
description: HostIP is the IP address of the host the pod is
192
+
currently running on
193
+
type: string
194
+
name:
195
+
description: Name is the pod name
196
+
type: string
197
+
namespace:
198
+
description: Namespace is the pod namespace
199
+
type: string
200
+
podIP:
201
+
description: PodIP is the IP address of the pod
202
+
type: string
203
+
required:
204
+
- hostIP
205
+
- name
206
+
- namespace
207
+
- podIP
208
+
type: object
209
+
type: array
210
+
policyRef:
211
+
description: PolicyRef is a reference to the Kubernetes NetworkPolicy
212
+
resource.
213
+
properties:
214
+
name:
215
+
description: Name is the name of the Policy
216
+
type: string
217
+
namespace:
218
+
description: Namespace is the namespace of the Policy
219
+
type: string
220
+
required:
221
+
- name
222
+
- namespace
223
+
type: object
224
+
required:
225
+
- policyRef
226
+
type: object
227
+
status:
228
+
description: PolicyEndpointStatus defines the observed state of PolicyEndpoint
0 commit comments