ConvertStagedGlobalPolicyToEnforced converts a StagedGlobalNetworkPolicy into a StagedAction, GlobalNetworkPolicy pair.

ConvertStagedKubernetesPolicyToK8SEnforced converts a StagedKubernetesNetworkPolicy into a StagedAction, networkingv1 NetworkPolicy pair.

ConvertStagedPolicyToEnforced converts a StagedNetworkPolicy into a StagedAction, NetworkPolicy pair.

New AuthenticationReview creates a new (zeroed) AuthenticationReview struct with the TypeMetadata initialized to the current version.

New AuthorizationReview creates a new (zeroed) AuthorizationReview struct with the TypeMetadata initialized to the current version.

New BGPConfiguration creates a new (zeroed) BGPConfiguration struct with the TypeMetadata initialized to the current version.

NewBGPPeer creates a new (zeroed) BGPPeer struct with the TypeMetadata initialised to the current version.

NewCalicoNodeStatus creates a new (zeroed) CalicoNodeStatus struct with the TypeMetadata initialised to the current version.

New ClusterInformation creates a new (zeroed) ClusterInformation struct with the TypeMetadata initialized to the current version.

NewDeepPacketInspection creates a new (zeroed) DeepPacketInspection struct with the TypeMetadata initialized to the current version.

NewDeepPacketInspectionList creates a new zeroed) DeepPacketInspectionList struct with the TypeMetadata initialized to the current version.

New FelixConfiguration creates a new (zeroed) FelixConfiguration struct with the TypeMetadata initialized to the current version.

NewGlobalAlert creates a new (zeroed) GlobalAlert struct with the TypeMetadata initialized to the current version.

NewGlobalAlertList creates a new (zeroed) GlobalAlertList struct with the TypeMetadata initialized to the current version.

NewGlobalAlert creates a new (zeroed) GlobalAlert struct with the TypeMetadata initialized to the current version.

NewGlobalAlertTemplateList creates a new (zeroed) GlobalAlertTemplateList struct with the TypeMetadata initialized to the current version.

NewGlobalNetworkPolicy creates a new (zeroed) GlobalNetworkPolicy struct with the TypeMetadata initialised to the current version.

NewGlobalNetworkSet creates a new (zeroed) NetworkSet struct with the TypeMetadata initialised to the current version.

NewGlobalReport creates a new (zeroed) GlobalReport struct with the TypeMetadata initialized to the current version.

NewGlobalReportList creates a new (zeroed) GlobalReportList struct with the TypeMetadata initialized to the current version.

New GlobalReportType creates a new (zeroed) GlobalReportype struct with the TypeMetadata initialized to the current version.

NewGlobalReportTypeList creates a new (zeroed) GlobalReportTypeList struct with the TypeMetadata initialized to the current version.

NewGlobalThreatFeed creates a new (zeroed) GlobalThreatFeed struct with the TypeMetadata initialised to the current version.

NewGlobalThreatFeedList creates a new (zeroed) GlobalThreatFeedList struct with the TypeMetadata initialised to the current version.

NewHostEndpoint creates a new (zeroed) HostEndpoint struct with the TypeMetadata initialised to the current version.

NewIPPool creates a new (zeroed) IPPool struct with the TypeMetadata initialised to the current version.

NewIPReservation creates a new (zeroed) IPReservation struct with the TypeMetadata initialised to the current version.

New KubeControllersConfiguration creates a new (zeroed) KubeControllersConfiguration struct with the TypeMetadata initialized to the current version.

New LicenseKey creates a new (zeroed) LicenseKey struct with the TypeMetadata initialized to the current version.

NewLicenseKeyList creates a new (zeroed) LicenseKeyList struct with the TypeMetadata initialized to the current version.

NewManagedCluster creates a new (zeroed) ManagedCluster struct with the TypeMetadata initialised to the current version.

NewManagedClusterList creates a new (zeroed) ManagedClusterList struct with the TypeMetadata initialised to the current version.

NewNetworkPolicy creates a new (zeroed) NetworkPolicy struct with the TypeMetadata initialised to the current version.

NewNetworkSet creates a new (zeroed) NetworkSet struct with the TypeMetadata initialised to the current version.

NewPacketCapture creates a new (zeroed) PacketCapture struct with the TypeMetadata initialised to the current version.

NewPacketCaptureList creates a new (zeroed) PacketCaptureList struct with the TypeMetadata initialised to the current version.

NewProfile creates a new (zeroed) Profile struct with the TypeMetadata initialised to the current version.

New RemoteClusterConfiguration creates a new (zeroed) RemoteClusterConfiguration struct with the TypeMetadata initialized to the current version.

NewRemoteClusterConfigurationList creates a new (zeroed) RemoteClusterConfigurationList struct with the TypeMetadata initialized to the current version.

NewStagedGlobalNetworkPolicy creates a new (zeroed) StagedGlobalNetworkPolicy struct with the TypeMetadata initialised to the current version.

NewStagedGlobalNetworkPolicyList creates a new (zeroed) StagedGlobalNetworkPolicyList struct with the TypeMetadata initialised to the current version.

NewStagedKubernetesNetworkPolicy creates a new (zeroed) StagedKubernetesNetworkPolicy struct with the TypeMetadata initialised to the current version.

NewStagedKubernetesNetworkPolicyList creates a new (zeroed) StagedKubernetesNetworkPolicyList struct with the TypeMetadata initialised to the current version.

NewStagedNetworkPolicy creates a new (zeroed) StagedNetworkPolicy struct with the TypeMetadata initialised to the current version.

NewStagedNetworkPolicyList creates a new (zeroed) StagedNetworkPolicyList struct with the TypeMetadata initialised to the current version.

NewTier creates a new (zeroed) Tier struct with the TypeMetadata initialised to the current version.

NewTierList creates a new (zeroed) TierList struct with the TypeMetadata initialised to the current version.

NewUISettings creates a new (zeroed) UISettings struct with the TypeMetadata initialised to the current version.

NewUISettingsGroup creates a new (zeroed) UISettingsGroup struct with the TypeMetadata initialised to the current version.

NewUISettingsGroupList creates a new (zeroed) UISettingsGroupList struct with the TypeMetadata initialised to the current version.

NewUISettingsList creates a new (zeroed) UISettingsList struct with the TypeMetadata initialised to the current version.

RegisterDefaults adds defaulters functions to the given scheme.

Resource takes an unqualified resource and returns a Group qualified GroupResource.

AllNames is used for List or Watch queries to wildcard the name.

AllNamepaces is used for client instantiation, either for when the namespace will be specified in the resource request, or for List or Watch queries across all namespaces.

Enum options for enable/disable fields.

API group details for the Calico v3 API.

GroupName is the group name use in this package.

Some internally defined resource types that map directly onto the kubernetes resources.

Label used to denote the Namespace.

Label used to denote the Network a WorkloadEndpoint belongs too.

Label used to denote the inside pod interface for a WorkloadEndpoint.

Label used to denote the Namespace the NetworkAttachmentDefinition for a WorkloadEndpoint belongs to.

Label used to denote the Orchestrator.

Label used to denote the ServiceAccount.

Label used to denote the Tier.

Status for Type ManagedClusterConnected will be Unknown when ManagedCluster is created, True when ManagedCluster is connected to ManagementCluster via tunnel, False when the tunnel drops.

Known orchestrators.

PacketCaptureStateCapturing represents the active state of a PacketCapture of capturing traffic.

PacketCaptureStateError represents the error state of a PacketCapture.

PacketCaptureStateFinished represents the inactive state of a PacketCapture of not capturing traffic.

PacketCaptureStateScheduled represents the inactive state of a PacketCapture of being scheduled, but not capturing traffic.

PacketCaptureStateWaitingForTraffic represents the active state of a PacketCapture of capturing from a live interface, but waiting for traffic on that interface.

SchemeGroupVersion is group version used to register these objects.

AlertException defines exceptions for alert events.

AlertExceptionList contains a list of AlertException resources.

AlertExceptionSpec contains the specification for an alert exception resource.

AlertExceptionStatus contains the status of an alert exception.

AuditEventsSelection defines which set of resources should be audited.

AuditResource is used to filter Audit events in the Report configuration.

AuthenticationReviewList is a list of AuthenticationReview objects.

AuthorizationReviewList is a list of AuthorizationReview objects.

BGPConfigurationList is a list of BGPConfiguration resources.

BGPConfigurationSpec contains the values of the BGP configuration.

BGPDaemonStatus defines the observed state of BGP daemon.

BGPPassword contains ways to specify a BGP password.

BGPPeerList is a list of BGPPeer resources.

BGPPeerSpec contains the specification for a BGPPeer resource.

CalicoNodeAgentStatus defines the observed state of agent status on the node.

CalicoNodeBGPRouteStatus defines the observed state of routes status on the node.

CalicoNodeBGPStatus defines the observed state of BGP status on the node.

CalicoNodePeer contains the status of BGP peers on the node.

CalicoNodeRoute contains the status of BGP routes on the node.

CalicoNodeRouteLearnedFrom contains the information of the source from which a routes has been learned.

CalicoNodeStatusList is a list of CalicoNodeStatus resources.

CalicoNodeStatusSpec contains the specification for a CalicoNodeStatus resource.

CalicoNodeStatusStatus defines the observed state of CalicoNodeStatus.

CISBenchmarkFilter provides filters for a set of benchmarks that match particular selection criteria.

CISBenchmarkNode describes a CIS benchmarking result on a single node.

CISBenchmarkNodeSummary keeps count of tests passed, failed, and marked as info on a single node.

CISBenchmarkParams contains the parameters for configuring a CIS benchmark report.

CISBenchmarkResult describes the result of a single CIS benchmark check.

CISBenchmarkResultCount keeps track of how many nodes had a certain test result.

CISBenchmarkSectionResult describes the result of running the CIS benchmark on a single component.

CISBenchmarkSelection selects a particular set of benchmarks.

CISBenchmarkSummary describes a CIS benchmarking result across an entire cluster.

ClusterInformationList is a list of ClusterInformation objects.

ClusterInformationSpec contains the values of describing the cluster.

Community contains standard or large community value and its name.

CompletedReportJob augments the ReportJob with completion details.

ControllersConfig enables and configures individual Kubernetes controllers.

DeepPacketInspectionList contains list of DeepPacketInspection resource.

DeepPacketInspectionSpec contains the values of the deep packet inspection.

DeepPacketInspectionStatus contains status of deep packet inspection in each node.

EndpointsSelection is a set of selectors used to select the endpoints that are considered to be in-scope for the report.

This tracks different statistics for Endpoints, Summary and Services.

An EntityRule is a sub-component of a Rule comprising the match criteria specific to a particular entity (that is either the source or destination).

FederatedServicesControllerConfig configures the federated services controller, which syncs Kubernetes services from remote clusters.

FelixConfigurationList contains a list of FelixConfiguration object.

FelixConfigurationSpec contains the values of the Felix configuration.

GlobalAlertList contains a list of GlobalAlert resources.

GlobalAlertSubstitution substitutes for the variables in the set operators of a Query.

GlobalAlertList contains a list of GlobalAlert resources.

GlobalNetworkPolicyList is a list of Policy objects.

GlobalNetworkSet contains a set of arbitrary IP sub-networks/CIDRs and domain names that share labels to allow rules to refer to them via selectors.

GlobalNetworkSetList is a list of NetworkSet objects.

GlobalNetworkSetSpec contains the specification for a NetworkSet resource.

GlobalReport contains the configuration for a non-namespaced Report.

GlobalReportList contains a list of GlobalReport resources.

GlobalReportType contains the configuration for a non-namespaced report type.

GlobalReportTypeList contains a list of GlobalReportType resources.

GlobalThreatFeed is a source of intel for possible threats to the cluster.

GlobalThreatFeedList contains a list of GlobalThreatFeed resources.

GlobalThreatFeedSpec contains the specification of a GlobalThreatFeed resource.

HostEndpointList is a list of HostEndpoint objects.

HostEndpointSpec contains the specification for a HostEndpoint resource.

HTTPMatch is an optional field that apply only to HTTP requests The Methods and Path fields are joined with AND.

HTTPPath specifies an HTTP path to match.

ICMPFields defines structure for ICMP and NotICMP sub-struct for ICMP code and type.

IPPoolList contains a list of IPPool resources.

IPPoolSpec contains the specification for an IPPool resource.

IPReservation allows certain IP addresses to be reserved (i.e.

IPReservationList contains a list of IPReservation resources.

IPReservationSpec contains the specification for an IPReservation resource.

KubeControllersConfigurationList contains a list of KubeControllersConfiguration object.

KubeControllersConfigurationSpec contains the values of the Kubernetes controllers configuration.

KubeControllersConfigurationStatus represents the status of the configuration.

LicenseKey contains the Tigera CNX license key for the cluster.

LicenseKeyList contains a list of LicenseKey resources (even though there should only be one).

LicenseKeySpec contains the license key itself.

LicenseKeyStatus contains the license key information.

ManagedCluster represents a cluster that is being managed by the multi-cluster management plane.

ManagedClusterList contains a list of ManagedCluster resources.

ManagedClusterSpec contains the specification of a ManagedCluster resource.

Condition contains various status information.

A Calico format label selector with an associated name.

NamesAndLabelsMatch is used to specify resource matches using both label and name selection.

NamespaceControllerConfig configures the service account controller, which syncs Kubernetes service accounts to Calico profiles (only used for etcdv3 datastore).

NetworkPolicyList is a list of Policy objects.

NetworkSetList is a list of NetworkSet objects.

NetworkSetSpec contains the specification for a NetworkSet resource.

NodeControllerConfig configures the node controller, which automatically cleans up configuration for nodes that no longer exist.

PacketCapture contains the configuration for any packet capture.

PacketCaptureFile describes files generated by a PacketCapture.

PacketCaptureList contains a list of PacketCapture resources.

A PacketCaptureRule encapsulates a set of match criteria for traffic captured from an interface.

PacketCaptureSpec contains the values of the packet capture.

PacketCaptureStatus describes the files that have been captured, for a given PacketCapture, on each node that generates packet capture files.

PolicyControllerConfig configures the network policy controller, which syncs Kubernetes policies to Calico policies (only used for etcdv3 datastore).

UI screen position.

PrefixAdvertisement configures advertisement properties for the specified CIDR.

ProfileList is a list of Profile objects.

ProfileSpec contains the specification for a security Profile resource.

ProtoPort is combination of protocol, port, and CIDR.

RemoteClusterConfiguration contains the configuration for remote clusters.

RemoteClusterConfigurationList contains a list of RemoteClusterConfiguration resources.

RemoteClusterConfigurationSpec contains the values of describing the cluster.

ReportData contains the aggregated data available for rendering in report templates.

ReportJob contains.

ReportSpec contains the values of the GlobalReport.

ReportStatus contains the status of the automated report generation.

ReportTemplate defines a template used to render a report into downloadable or UI compatible format.

ReportTypeSpec contains the various templates, and configuration used to render a specific type of report.

ResourceID is used to identify a resource instance in the report data.

A Rule encapsulates a set of match criteria and an action.

ServiceAccountControllerConfig configures the service account controller, which syncs Kubernetes service accounts to Calico profiles (only used for etcdv3 datastore).

ServiceClusterIPBlock represents a single allowed ClusterIP CIDR block.

ServiceExternalIPBlock represents a single allowed External IP CIDR block.

ServiceLoadBalancerIPBlock represents a single allowed LoadBalancer IP CIDR block.

StagedGlobalNetworkPolicy is a staged GlobalNetworkPolicy.

StagedGlobalNetworkPolicyList contains a list of GlobalNetworkPolicy resources.

StagedKubernetesNetworkPolicy is a staged GlobalNetworkPolicy.

StagedKubernetesNetworkPolicyList contains a list of StagedKubernetesNetworkPolicy resources.

StagedNetworkPolicy is a staged NetworkPolicy.

StagedNetworkPolicyList contains a list of StagedNetworkPolicy resources.

Tier contains a set of policies that are applied to packets.

TierList contains a list of Tier resources.

TierSpec contains the specification for a security policy tier resource.

UIDashboard contains the data for a UI dashboard.

UIGraphLayer contains the data for a UI graph layer.

UIGraphNode contains details about a graph node so that the UI can render it correctly.

UIGraphNodeView contains the view configuration for a specific graph node.

UIGraphView contains the data for a UI graph view.

UISettings contains UI settings.

UISettingsGroup contains the settings that dictate how many UI settings may be created for a specific cluster/user combination.

UISettingsGroupList contains a list of UISettingsGroup resources.

UISettingsGroupSpec contains the specification for a UISettingsGroup resource.

UISettingsList contains a list of UISettings resources.

UISettingsSpec contains the specification for a UISettings resource.

WorkloadEndpointControllerConfig configures the workload endpoint controller, which syncs Kubernetes labels to Calico workload endpoints (only used for etcdv3 datastore).

+kubebuilder:validation:Enum=DoNothing;Enable;Disable.

+kubebuilder:validation:Enum=NoDelay;DelayDeniedPacket;DelayDNSResponse.

The following definitions are only used for APIv1 backwards compatibility.

+kubebuilder:validation:Enum=CloudCommunity;CloudStarter;CloudPro;Enterprise.

PacketCaptureState represents the state of the PacketCapture.

PolicyType enumerates the possible values of the PolicySpec Types field.