Firewall rule API, including needed changes in other APIs

This commit is contained in:
2025-04-18 23:59:19 +02:00
parent 89a811bef9
commit c63d52bb46
15 changed files with 1084 additions and 80 deletions

View File

@@ -39,7 +39,6 @@ spec:
spec:
properties:
auto_created_from:
description: FirewallRuleSpec defines the desired state of FirewallRule.
properties:
name:
type: string
@@ -93,6 +92,20 @@ spec:
type: object
type: object
x-kubernetes-map-type: atomic
id:
description: |-
Foo is an example field of FirewallGroup. Edit firewallgroup_types.go to remove/update
Description is a human-readable explanation for the object
type: string
manual_services:
items:
properties:
name:
type: string
namespace:
type: string
type: object
type: array
manualAddresses:
description: ManualAddresses is a list of manual IPs or CIDRs (IPv4
or IPv6)
@@ -106,9 +119,6 @@ spec:
matchServicesInAllNamespaces:
type: boolean
name:
description: |-
Foo is an example field of FirewallGroup. Edit firewallgroup_types.go to remove/update
Description is a human-readable explanation for the object
type: string
type: object
status:
@@ -118,10 +128,57 @@ spec:
description: LastSyncTime is the last time the object was synced
format: date-time
type: string
resolvedAddresses:
resolvedIPV4Addresses:
items:
type: string
type: array
resolvedIPV6Addresses:
items:
type: string
type: array
resolvedTCPorts:
items:
type: string
type: array
resolvedUDPorts:
items:
type: string
type: array
resources_managed:
properties:
ipv4_object:
description: FirewallRuleSpec defines the desired state of FirewallRule.
properties:
id:
type: string
name:
type: string
type: object
ipv6_object:
description: FirewallRuleSpec defines the desired state of FirewallRule.
properties:
id:
type: string
name:
type: string
type: object
tcp_ports_object:
description: FirewallRuleSpec defines the desired state of FirewallRule.
properties:
id:
type: string
name:
type: string
type: object
udp_ports_object:
description: FirewallRuleSpec defines the desired state of FirewallRule.
properties:
id:
type: string
name:
type: string
type: object
type: object
syncedWithUnifi:
description: SyncedWithUnifi indicates whether the addresses are successfully
pushed

View File

@@ -40,13 +40,17 @@ spec:
properties:
destination:
properties:
firewall_group:
firewall_groups:
items:
type: string
properties:
name:
type: string
namespace:
type: string
type: object
type: array
service:
services:
items:
description: FirewallRuleSpec defines the desired state of FirewallRule.
properties:
name:
type: string
@@ -65,11 +69,21 @@ spec:
properties:
from_networks:
items:
type: string
properties:
name:
type: string
namespace:
type: string
type: object
type: array
from_zones:
items:
type: string
properties:
name:
type: string
namespace:
type: string
type: object
type: array
type: object
required:
@@ -79,6 +93,34 @@ spec:
type: object
status:
description: FirewallRuleStatus defines the observed state of FirewallRule.
properties:
resources_managed:
properties:
firewall_groups_managed:
items:
properties:
name:
type: string
namespace:
type: string
type: object
type: array
firewall_rules_managed:
items:
properties:
from:
type: string
rule_id:
type: string
to:
type: string
required:
- from
- rule_id
- to
type: object
type: array
type: object
type: object
type: object
served: true

View File

@@ -54,6 +54,20 @@ spec:
type: object
status:
description: FirewallZoneStatus defines the observed state of FirewallZone.
properties:
resources_managed:
properties:
firewall_zones_managed:
items:
description: FirewallRuleSpec defines the desired state of FirewallRule.
properties:
id:
type: string
name:
type: string
type: object
type: array
type: object
type: object
type: object
served: true

View File

@@ -93,6 +93,19 @@ spec:
description: LastSyncTime is the last time the object was synced
format: date-time
type: string
resources_managed:
properties:
networks_managed:
items:
description: FirewallRuleSpec defines the desired state of FirewallRule.
properties:
id:
type: string
name:
type: string
type: object
type: array
type: object
syncedWithUnifi:
description: SyncedWithUnifi indicates whether the addresses are successfully
pushed