ClusterwideNetworkPolicyNamespace defines the namespace CNWPs are expected.

AddToScheme adds the types in this group-version to the given scheme.

GroupVersion is group version used to register these objects.

SchemeBuilder is used to add go types to the GroupVersionKind scheme.

ClusterwideNetworkPolicy contains the desired state for a cluster wide network policy to be applied.

ClusterwideNetworkPolicyList contains a list of ClusterwideNetworkPolicy +kubebuilder:object:root=true.

Counter holds values of a nftables counter object.

Data contains the fields over which the signature is calculated.

DeviceStat contains statistics of a device.

EgressRule describes a particular set of traffic that is allowed out of the cluster The traffic must match both ports and to.

EgressRuleSNAT holds a Source-NAT rule.

Firewall is the Schema for the firewalls API +kubebuilder:object:root=true +kubebuilder:resource:shortName=fw +kubebuilder:subresource:status +kubebuilder:printcolumn:name="Interval",type=string,JSONPath=`.spec.interval` +kubebuilder:printcolumn:name="InternalPrefixes",type=string,JSONPath=`.spec.internalprefixes`.

FirewallList contains a list of Firewall +kubebuilder:object:root=true.

FirewallSpec defines the desired state of Firewall.

FirewallStats contains firewall statistics.

FirewallStatus defines the observed state of Firewall.

FQDNSelector describes rules for matching DNS names.

IngressRule describes a particular set of traffic that is allowed to the cluster.

IPSet stores set name association to IP addresses.

PolicySpec defines the rules to create for ingress and egress.

PolicyStatus defines the observed state for CWNP resource.

RateLimit contains the rate limit rule for a network.

RuleStat contains the statistics for a single nftables rule.

DeviceStatsByDevice contains DeviceStatistics grouped by device name.

RuleStats contains firewall rule statistics of all rules of an action.

RuleStatsByAction contains firewall rule statistics groups by action: e.g.