import "github.com/cilium/cilium/api/v1/models"
Package models defines all models to be used in the Cilium API. +groupName=v1
address.go address_pair.go allocation_map.go b_p_f_map.go b_p_f_map_entry.go b_p_f_map_list.go b_p_f_map_properties.go b_p_f_map_status.go backend_address.go c_id_r_list.go c_id_r_policy.go cluster_mesh_status.go cluster_node_status.go cluster_nodes_response.go cluster_status.go configuration_map.go controller_status.go controller_statuses.go daemon_configuration.go daemon_configuration_spec.go daemon_configuration_status.go datapath_mode.go debug_info.go dns_lookup.go doc.go endpoint.go endpoint_change_request.go endpoint_configuration_spec.go endpoint_configuration_status.go endpoint_datapath_configuration.go endpoint_health.go endpoint_health_status.go endpoint_identifiers.go endpoint_networking.go endpoint_policy.go endpoint_policy_enabled.go endpoint_policy_status.go endpoint_state.go endpoint_status.go endpoint_status_change.go endpoint_status_log.go error.go frontend_address.go hubble_status.go identity.go identity_endpoints.go ip_a_m_address_response.go ip_a_m_response.go ip_a_m_status.go ip_list_entry.go ip_list_entry_metadata.go ipvlan_configuration.go k8s_status.go k_vstore_configuration.go kube_proxy_replacement.go l4_policy.go label_configuration.go label_configuration_spec.go label_configuration_status.go labels.go masquerading.go message_forwarding_statistics.go metric.go monitor_status.go name_manager.go named_ports.go node_addressing.go node_addressing_element.go node_element.go policy.go policy_rule.go policy_trace_result.go port.go prefilter.go prefilter_spec.go prefilter_status.go proxy_redirect.go proxy_statistics.go proxy_status.go remote_cluster.go request_response_statistics.go selector_cache.go selector_entry.go selector_identity_mapping.go service.go service_spec.go service_status.go status.go status_response.go trace_from.go trace_selector.go trace_to.go zz_generated.deepcopy.go zz_generated.deepequal.go
const (
// BPFMapEntryDesiredActionOk captures enum value "ok"
BPFMapEntryDesiredActionOk string = "ok"
// BPFMapEntryDesiredActionInsert captures enum value "insert"
BPFMapEntryDesiredActionInsert string = "insert"
// BPFMapEntryDesiredActionDelete captures enum value "delete"
BPFMapEntryDesiredActionDelete string = "delete"
)const (
// DaemonConfigurationSpecPolicyEnforcementDefault captures enum value "default"
DaemonConfigurationSpecPolicyEnforcementDefault string = "default"
// DaemonConfigurationSpecPolicyEnforcementAlways captures enum value "always"
DaemonConfigurationSpecPolicyEnforcementAlways string = "always"
// DaemonConfigurationSpecPolicyEnforcementNever captures enum value "never"
DaemonConfigurationSpecPolicyEnforcementNever string = "never"
)const (
// EndpointStatusChangeCodeOk captures enum value "ok"
EndpointStatusChangeCodeOk string = "ok"
// EndpointStatusChangeCodeFailed captures enum value "failed"
EndpointStatusChangeCodeFailed string = "failed"
)const (
// FrontendAddressProtocolTCP captures enum value "tcp"
FrontendAddressProtocolTCP string = "tcp"
// FrontendAddressProtocolUDP captures enum value "udp"
FrontendAddressProtocolUDP string = "udp"
// FrontendAddressProtocolAny captures enum value "any"
FrontendAddressProtocolAny string = "any"
)const (
// FrontendAddressScopeExternal captures enum value "external"
FrontendAddressScopeExternal string = "external"
// FrontendAddressScopeInternal captures enum value "internal"
FrontendAddressScopeInternal string = "internal"
)const (
// HubbleStatusStateOk captures enum value "Ok"
HubbleStatusStateOk string = "Ok"
// HubbleStatusStateWarning captures enum value "Warning"
HubbleStatusStateWarning string = "Warning"
// HubbleStatusStateFailure captures enum value "Failure"
HubbleStatusStateFailure string = "Failure"
// HubbleStatusStateDisabled captures enum value "Disabled"
HubbleStatusStateDisabled string = "Disabled"
)const (
// HubbleStatusMetricsStateOk captures enum value "Ok"
HubbleStatusMetricsStateOk string = "Ok"
// HubbleStatusMetricsStateWarning captures enum value "Warning"
HubbleStatusMetricsStateWarning string = "Warning"
// HubbleStatusMetricsStateFailure captures enum value "Failure"
HubbleStatusMetricsStateFailure string = "Failure"
// HubbleStatusMetricsStateDisabled captures enum value "Disabled"
HubbleStatusMetricsStateDisabled string = "Disabled"
)const (
// IpvlanConfigurationOperationModeL3 captures enum value "L3"
IpvlanConfigurationOperationModeL3 string = "L3"
// IpvlanConfigurationOperationModeL3S captures enum value "L3S"
IpvlanConfigurationOperationModeL3S string = "L3S"
)const (
// K8sStatusStateOk captures enum value "Ok"
K8sStatusStateOk string = "Ok"
// K8sStatusStateWarning captures enum value "Warning"
K8sStatusStateWarning string = "Warning"
// K8sStatusStateFailure captures enum value "Failure"
K8sStatusStateFailure string = "Failure"
// K8sStatusStateDisabled captures enum value "Disabled"
K8sStatusStateDisabled string = "Disabled"
)const (
// KubeProxyReplacementModeDisabled captures enum value "Disabled"
KubeProxyReplacementModeDisabled string = "Disabled"
// KubeProxyReplacementModeStrict captures enum value "Strict"
KubeProxyReplacementModeStrict string = "Strict"
// KubeProxyReplacementModeProbe captures enum value "Probe"
KubeProxyReplacementModeProbe string = "Probe"
// KubeProxyReplacementModePartial captures enum value "Partial"
KubeProxyReplacementModePartial string = "Partial"
)const (
// KubeProxyReplacementFeaturesNodePortAccelerationNONE captures enum value "NONE"
KubeProxyReplacementFeaturesNodePortAccelerationNONE string = "NONE"
// KubeProxyReplacementFeaturesNodePortAccelerationNATIVE captures enum value "NATIVE"
KubeProxyReplacementFeaturesNodePortAccelerationNATIVE string = "NATIVE"
// KubeProxyReplacementFeaturesNodePortAccelerationGENERIC captures enum value "GENERIC"
KubeProxyReplacementFeaturesNodePortAccelerationGENERIC string = "GENERIC"
)const (
// KubeProxyReplacementFeaturesNodePortModeSNAT captures enum value "SNAT"
KubeProxyReplacementFeaturesNodePortModeSNAT string = "SNAT"
// KubeProxyReplacementFeaturesNodePortModeDSR captures enum value "DSR"
KubeProxyReplacementFeaturesNodePortModeDSR string = "DSR"
// KubeProxyReplacementFeaturesNodePortModeHYBRID captures enum value "HYBRID"
KubeProxyReplacementFeaturesNodePortModeHYBRID string = "HYBRID"
)const (
// MasqueradingModeBPF captures enum value "BPF"
MasqueradingModeBPF string = "BPF"
// MasqueradingModeIptables captures enum value "iptables"
MasqueradingModeIptables string = "iptables"
)const (
// PortProtocolTCP captures enum value "TCP"
PortProtocolTCP string = "TCP"
// PortProtocolUDP captures enum value "UDP"
PortProtocolUDP string = "UDP"
// PortProtocolANY captures enum value "ANY"
PortProtocolANY string = "ANY"
)const (
// ProxyStatisticsLocationIngress captures enum value "ingress"
ProxyStatisticsLocationIngress string = "ingress"
// ProxyStatisticsLocationEgress captures enum value "egress"
ProxyStatisticsLocationEgress string = "egress"
)const (
// ServiceSpecFlagsTrafficPolicyCluster captures enum value "Cluster"
ServiceSpecFlagsTrafficPolicyCluster string = "Cluster"
// ServiceSpecFlagsTrafficPolicyLocal captures enum value "Local"
ServiceSpecFlagsTrafficPolicyLocal string = "Local"
)const (
// ServiceSpecFlagsTypeClusterIP captures enum value "ClusterIP"
ServiceSpecFlagsTypeClusterIP string = "ClusterIP"
// ServiceSpecFlagsTypeNodePort captures enum value "NodePort"
ServiceSpecFlagsTypeNodePort string = "NodePort"
// ServiceSpecFlagsTypeExternalIPs captures enum value "ExternalIPs"
ServiceSpecFlagsTypeExternalIPs string = "ExternalIPs"
// ServiceSpecFlagsTypeHostPort captures enum value "HostPort"
ServiceSpecFlagsTypeHostPort string = "HostPort"
// ServiceSpecFlagsTypeLoadBalancer captures enum value "LoadBalancer"
ServiceSpecFlagsTypeLoadBalancer string = "LoadBalancer"
)const (
// StatusStateOk captures enum value "Ok"
StatusStateOk string = "Ok"
// StatusStateWarning captures enum value "Warning"
StatusStateWarning string = "Warning"
// StatusStateFailure captures enum value "Failure"
StatusStateFailure string = "Failure"
// StatusStateDisabled captures enum value "Disabled"
StatusStateDisabled string = "Disabled"
)Address IP address
swagger:model Address
Validate validates this address
type AddressPair struct {
// IPv4 address
IPV4 string `json:"ipv4,omitempty"`
// UUID of IPv4 expiration timer
IPV4ExpirationUUID string `json:"ipv4-expiration-uuid,omitempty"`
// IPv6 address
IPV6 string `json:"ipv6,omitempty"`
// UUID of IPv6 expiration timer
IPV6ExpirationUUID string `json:"ipv6-expiration-uuid,omitempty"`
}AddressPair Addressing information of an endpoint
swagger:model AddressPair
func (m *AddressPair) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *AddressPair) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *AddressPair) Validate(formats strfmt.Registry) error
Validate validates this address pair
AllocationMap Map of allocated IPs
swagger:model AllocationMap
func (m AllocationMap) Validate(formats strfmt.Registry) error
Validate validates this allocation map
type BPFMap struct {
// Contents of cache
Cache []*BPFMapEntry `json:"cache"`
// Path to BPF map
Path string `json:"path,omitempty"`
}BPFMap BPF map definition and content
swagger:model BPFMap
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this b p f map
type BPFMapEntry struct {
// Desired action to be performed
// Enum: [ok insert delete]
DesiredAction string `json:"desired-action,omitempty"`
// Key of map entry
Key string `json:"key,omitempty"`
// Last error seen while performing desired action
LastError string `json:"last-error,omitempty"`
// Value of map entry
Value string `json:"value,omitempty"`
}BPFMapEntry BPF map cache entry
swagger:model BPFMapEntry
func (m *BPFMapEntry) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *BPFMapEntry) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *BPFMapEntry) Validate(formats strfmt.Registry) error
Validate validates this b p f map entry
BPFMapList List of BPF Maps
swagger:model BPFMapList
func (m *BPFMapList) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *BPFMapList) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *BPFMapList) Validate(formats strfmt.Registry) error
Validate validates this b p f map list
type BPFMapProperties struct {
// Name of the BPF map
Name string `json:"name,omitempty"`
// Size of the BPF map
Size int64 `json:"size,omitempty"`
}BPFMapProperties BPF map properties
swagger:model BPFMapProperties
func (m *BPFMapProperties) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *BPFMapProperties) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *BPFMapProperties) Validate(formats strfmt.Registry) error
Validate validates this b p f map properties
type BPFMapStatus struct {
// Ratio of total system memory to use for dynamic sizing of BPF maps
DynamicSizeRatio float64 `json:"dynamic-size-ratio,omitempty"`
// BPF maps
Maps []*BPFMapProperties `json:"maps"`
}BPFMapStatus BPF map status
+k8s:deepcopy-gen=true
swagger:model BPFMapStatus
func (in *BPFMapStatus) DeepCopy() *BPFMapStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new BPFMapStatus.
func (in *BPFMapStatus) DeepCopyInto(out *BPFMapStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *BPFMapStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *BPFMapStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *BPFMapStatus) Validate(formats strfmt.Registry) error
Validate validates this b p f map status
type BackendAddress struct {
// Layer 3 address
// Required: true
IP *string `json:"ip"`
// Optional name of the node on which this backend runs
NodeName string `json:"nodeName,omitempty"`
// Layer 4 port number
Port uint16 `json:"port,omitempty"`
}BackendAddress Service backend address
swagger:model BackendAddress
func (m *BackendAddress) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *BackendAddress) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *BackendAddress) Validate(formats strfmt.Registry) error
Validate validates this backend address
type CIDRList struct {
// list
List []string `json:"list"`
// revision
Revision int64 `json:"revision,omitempty"`
}CIDRList List of CIDRs
swagger:model CIDRList
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this c ID r list
type CIDRPolicy struct {
// List of CIDR egress rules
Egress []*PolicyRule `json:"egress"`
// List of CIDR ingress rules
Ingress []*PolicyRule `json:"ingress"`
}CIDRPolicy CIDR endpoint policy
+k8s:deepcopy-gen=true
swagger:model CIDRPolicy
func (in *CIDRPolicy) DeepCopy() *CIDRPolicy
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new CIDRPolicy.
func (in *CIDRPolicy) DeepCopyInto(out *CIDRPolicy)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *CIDRPolicy) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *CIDRPolicy) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *CIDRPolicy) Validate(formats strfmt.Registry) error
Validate validates this c ID r policy
type ClusterMeshStatus struct {
// List of remote clusters
Clusters []*RemoteCluster `json:"clusters"`
// Number of global services
NumGlobalServices int64 `json:"num-global-services,omitempty"`
}ClusterMeshStatus Status of ClusterMesh
+k8s:deepcopy-gen=true
swagger:model ClusterMeshStatus
func (in *ClusterMeshStatus) DeepCopy() *ClusterMeshStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterMeshStatus.
func (in *ClusterMeshStatus) DeepCopyInto(out *ClusterMeshStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *ClusterMeshStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ClusterMeshStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ClusterMeshStatus) Validate(formats strfmt.Registry) error
Validate validates this cluster mesh status
type ClusterNodeStatus struct {
// ID that should be used by the client to receive a diff from the previous request
ClientID int64 `json:"client-id,omitempty"`
// List of known nodes
NodesAdded []*NodeElement `json:"nodes-added"`
// List of known nodes
NodesRemoved []*NodeElement `json:"nodes-removed"`
// Name of local node (if available)
Self string `json:"self,omitempty"`
}ClusterNodeStatus Status of cluster
swagger:model ClusterNodeStatus
func (m *ClusterNodeStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ClusterNodeStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ClusterNodeStatus) Validate(formats strfmt.Registry) error
Validate validates this cluster node status
type ClusterNodesResponse struct {
// List of known nodes
Nodes []*NodeElement `json:"nodes"`
// Name of local node (if available)
Self string `json:"self,omitempty"`
}ClusterNodesResponse cluster nodes response
swagger:model ClusterNodesResponse
func (m *ClusterNodesResponse) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ClusterNodesResponse) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ClusterNodesResponse) Validate(formats strfmt.Registry) error
Validate validates this cluster nodes response
type ClusterStatus struct {
// Status of local cilium-health daemon
CiliumHealth *Status `json:"ciliumHealth,omitempty"`
// List of known nodes
Nodes []*NodeElement `json:"nodes"`
// Name of local node (if available)
Self string `json:"self,omitempty"`
}ClusterStatus Status of cluster
+k8s:deepcopy-gen=true
swagger:model ClusterStatus
func (in *ClusterStatus) DeepCopy() *ClusterStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterStatus.
func (in *ClusterStatus) DeepCopyInto(out *ClusterStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *ClusterStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ClusterStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ClusterStatus) Validate(formats strfmt.Registry) error
Validate validates this cluster status
ConfigurationMap Map of configuration key/value pairs.
swagger:model ConfigurationMap
func (m ConfigurationMap) Validate(formats strfmt.Registry) error
Validate validates this configuration map
type ControllerStatus struct {
// configuration
Configuration *ControllerStatusConfiguration `json:"configuration,omitempty"`
// Name of controller
Name string `json:"name,omitempty"`
// status
Status *ControllerStatusStatus `json:"status,omitempty"`
// UUID of controller
// Format: uuid
UUID strfmt.UUID `json:"uuid,omitempty"`
}ControllerStatus Status of a controller
+k8s:deepcopy-gen=true
swagger:model ControllerStatus
func (in *ControllerStatus) DeepCopy() *ControllerStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ControllerStatus.
func (in *ControllerStatus) DeepCopyInto(out *ControllerStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *ControllerStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ControllerStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ControllerStatus) Validate(formats strfmt.Registry) error
Validate validates this controller status
type ControllerStatusConfiguration struct {
// Retry on error
ErrorRetry bool `json:"error-retry,omitempty"`
// Base error retry back-off time
// Format: duration
ErrorRetryBase strfmt.Duration `json:"error-retry-base,omitempty"`
// Regular synchronization interval
// Format: duration
Interval strfmt.Duration `json:"interval,omitempty"`
}ControllerStatusConfiguration Configuration of controller
+deepequal-gen=true +k8s:deepcopy-gen=true
swagger:model ControllerStatusConfiguration
func (in *ControllerStatusConfiguration) DeepCopy() *ControllerStatusConfiguration
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ControllerStatusConfiguration.
func (in *ControllerStatusConfiguration) DeepCopyInto(out *ControllerStatusConfiguration)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ControllerStatusConfiguration) DeepEqual(other *ControllerStatusConfiguration) bool
DeepEqual is an autogenerated deepequal function, deeply comparing the receiver with other. in must be non-nil.
func (m *ControllerStatusConfiguration) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ControllerStatusConfiguration) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ControllerStatusConfiguration) Validate(formats strfmt.Registry) error
Validate validates this controller status configuration
type ControllerStatusStatus struct {
// Number of consecutive errors since last success
ConsecutiveFailureCount int64 `json:"consecutive-failure-count,omitempty"`
// Total number of failed runs
FailureCount int64 `json:"failure-count,omitempty"`
// Error message of last failed run
LastFailureMsg string `json:"last-failure-msg,omitempty"`
// Timestamp of last error
// Format: date-time
LastFailureTimestamp strfmt.DateTime `json:"last-failure-timestamp,omitempty"`
// Timestamp of last success
// Format: date-time
LastSuccessTimestamp strfmt.DateTime `json:"last-success-timestamp,omitempty"`
// Total number of successful runs
SuccessCount int64 `json:"success-count,omitempty"`
}ControllerStatusStatus Current status of controller
+k8s:deepcopy-gen=true
swagger:model ControllerStatusStatus
func (in *ControllerStatusStatus) DeepCopy() *ControllerStatusStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ControllerStatusStatus.
func (in *ControllerStatusStatus) DeepCopyInto(out *ControllerStatusStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *ControllerStatusStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ControllerStatusStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ControllerStatusStatus) Validate(formats strfmt.Registry) error
Validate validates this controller status status
type ControllerStatuses []*ControllerStatus
ControllerStatuses Collection of controller statuses
swagger:model ControllerStatuses
func (m ControllerStatuses) Validate(formats strfmt.Registry) error
Validate validates this controller statuses
type DNSLookup struct {
// The endpoint that made this lookup, or 0 for the agent itself.
EndpointID int64 `json:"endpoint-id,omitempty"`
// The absolute time when this data will expire in this cache
// Format: date-time
ExpirationTime strfmt.DateTime `json:"expiration-time,omitempty"`
// DNS name
Fqdn string `json:"fqdn,omitempty"`
// IP addresses returned in this lookup
Ips []string `json:"ips"`
// The absolute time when this data was recieved
// Format: date-time
LookupTime strfmt.DateTime `json:"lookup-time,omitempty"`
// The reason this FQDN IP association exists. Either a DNS lookup or an ongoing connection to an IP that was created by a DNS lookup.
Source string `json:"source,omitempty"`
// The TTL in the DNS response
TTL int64 `json:"ttl,omitempty"`
}DNSLookup An IP -> DNS mapping, with metadata
swagger:model DNSLookup
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this DNS lookup
type DaemonConfiguration struct {
// Changeable configuration
Spec *DaemonConfigurationSpec `json:"spec,omitempty"`
// Current daemon configuration related status.Contains the addressing
// information, k8s, node monitor and immutable and mutable
// configuration settings.
//
Status *DaemonConfigurationStatus `json:"status,omitempty"`
}DaemonConfiguration Response to a daemon configuration request.
swagger:model DaemonConfiguration
func (m *DaemonConfiguration) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *DaemonConfiguration) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *DaemonConfiguration) Validate(formats strfmt.Registry) error
Validate validates this daemon configuration
type DaemonConfigurationSpec struct {
// Changeable configuration
Options ConfigurationMap `json:"options,omitempty"`
// The policy-enforcement mode
// Enum: [default always never]
PolicyEnforcement string `json:"policy-enforcement,omitempty"`
}DaemonConfigurationSpec The controllable configuration of the daemon.
swagger:model DaemonConfigurationSpec
func (m *DaemonConfigurationSpec) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *DaemonConfigurationSpec) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *DaemonConfigurationSpec) Validate(formats strfmt.Registry) error
Validate validates this daemon configuration spec
type DaemonConfigurationStatus struct {
// addressing
Addressing *NodeAddressing `json:"addressing,omitempty"`
// datapath mode
DatapathMode DatapathMode `json:"datapathMode,omitempty"`
// MTU on workload facing devices
DeviceMTU int64 `json:"deviceMTU,omitempty"`
// Immutable configuration (read-only)
Immutable ConfigurationMap `json:"immutable,omitempty"`
// Configured IPAM mode
IpamMode string `json:"ipam-mode,omitempty"`
// ipvlan configuration
IpvlanConfiguration *IpvlanConfiguration `json:"ipvlanConfiguration,omitempty"`
// k8s configuration
K8sConfiguration string `json:"k8s-configuration,omitempty"`
// k8s endpoint
K8sEndpoint string `json:"k8s-endpoint,omitempty"`
// kvstore configuration
KvstoreConfiguration *KVstoreConfiguration `json:"kvstoreConfiguration,omitempty"`
// Status of masquerading feature
Masquerade bool `json:"masquerade,omitempty"`
// Status of the node monitor
NodeMonitor *MonitorStatus `json:"nodeMonitor,omitempty"`
// Currently applied configuration
Realized *DaemonConfigurationSpec `json:"realized,omitempty"`
// MTU for network facing routes
RouteMTU int64 `json:"routeMTU,omitempty"`
}DaemonConfigurationStatus Response to a daemon configuration request. Contains the addressing information, k8s, node monitor and immutable and mutable configuration settings.
swagger:model DaemonConfigurationStatus
func (m *DaemonConfigurationStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *DaemonConfigurationStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *DaemonConfigurationStatus) Validate(formats strfmt.Registry) error
Validate validates this daemon configuration status
DatapathMode Datapath mode
swagger:model DatapathMode
const (
// DatapathModeVeth captures enum value "veth"
DatapathModeVeth DatapathMode = "veth"
// DatapathModeIpvlan captures enum value "ipvlan"
DatapathModeIpvlan DatapathMode = "ipvlan"
)func (m DatapathMode) Validate(formats strfmt.Registry) error
Validate validates this datapath mode
type DebugInfo struct {
// cilium memory map
CiliumMemoryMap string `json:"cilium-memory-map,omitempty"`
// cilium nodemonitor memory map
CiliumNodemonitorMemoryMap string `json:"cilium-nodemonitor-memory-map,omitempty"`
// cilium status
CiliumStatus *StatusResponse `json:"cilium-status,omitempty"`
// cilium version
CiliumVersion string `json:"cilium-version,omitempty"`
// endpoint list
EndpointList []*Endpoint `json:"endpoint-list"`
// environment variables
EnvironmentVariables []string `json:"environment-variables"`
// kernel version
KernelVersion string `json:"kernel-version,omitempty"`
// policy
Policy *Policy `json:"policy,omitempty"`
// service list
ServiceList []*Service `json:"service-list"`
// subsystem
Subsystem map[string]string `json:"subsystem,omitempty"`
}DebugInfo groups some debugging related information on the agent
swagger:model DebugInfo
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this debug info
type Endpoint struct {
// The cilium-agent-local ID of the endpoint
ID int64 `json:"id,omitempty"`
// The desired configuration state of the endpoint
Spec *EndpointConfigurationSpec `json:"spec,omitempty"`
// The desired and realized configuration state of the endpoint
Status *EndpointStatus `json:"status,omitempty"`
}Endpoint An endpoint is a namespaced network interface to which cilium applies policies
swagger:model Endpoint
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this endpoint
type EndpointChangeRequest struct {
// addressing
Addressing *AddressPair `json:"addressing,omitempty"`
// ID assigned by container runtime
ContainerID string `json:"container-id,omitempty"`
// Name assigned to container
ContainerName string `json:"container-name,omitempty"`
// datapath configuration
DatapathConfiguration *EndpointDatapathConfiguration `json:"datapath-configuration,omitempty"`
// ID of datapath tail call map
DatapathMapID int64 `json:"datapath-map-id,omitempty"`
// Docker endpoint ID
DockerEndpointID string `json:"docker-endpoint-id,omitempty"`
// Docker network ID
DockerNetworkID string `json:"docker-network-id,omitempty"`
// MAC address
HostMac string `json:"host-mac,omitempty"`
// Local endpoint ID
ID int64 `json:"id,omitempty"`
// Index of network device
InterfaceIndex int64 `json:"interface-index,omitempty"`
// Name of network device
InterfaceName string `json:"interface-name,omitempty"`
// Kubernetes namespace name
K8sNamespace string `json:"k8s-namespace,omitempty"`
// Kubernetes pod name
K8sPodName string `json:"k8s-pod-name,omitempty"`
// Labels describing the identity
Labels Labels `json:"labels,omitempty"`
// MAC address
Mac string `json:"mac,omitempty"`
// Process ID of the workload belonging to this endpoint
Pid int64 `json:"pid,omitempty"`
// Whether policy enforcement is enabled or not
PolicyEnabled bool `json:"policy-enabled,omitempty"`
// Current state of endpoint
// Required: true
State EndpointState `json:"state"`
// Whether to build an endpoint synchronously
//
SyncBuildEndpoint bool `json:"sync-build-endpoint,omitempty"`
}EndpointChangeRequest Structure which contains the mutable elements of an Endpoint.
swagger:model EndpointChangeRequest
func (m *EndpointChangeRequest) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *EndpointChangeRequest) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *EndpointChangeRequest) Validate(formats strfmt.Registry) error
Validate validates this endpoint change request
type EndpointConfigurationSpec struct {
// the endpoint's labels
LabelConfiguration *LabelConfigurationSpec `json:"label-configuration,omitempty"`
// Changeable configuration
Options ConfigurationMap `json:"options,omitempty"`
}EndpointConfigurationSpec An endpoint's configuration
swagger:model EndpointConfigurationSpec
func (m *EndpointConfigurationSpec) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *EndpointConfigurationSpec) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *EndpointConfigurationSpec) Validate(formats strfmt.Registry) error
Validate validates this endpoint configuration spec
type EndpointConfigurationStatus struct {
// Most recent error, if applicable
Error Error `json:"error,omitempty"`
// Immutable configuration (read-only)
Immutable ConfigurationMap `json:"immutable,omitempty"`
// currently applied changeable configuration
Realized *EndpointConfigurationSpec `json:"realized,omitempty"`
}EndpointConfigurationStatus An endpoint's configuration
swagger:model EndpointConfigurationStatus
func (m *EndpointConfigurationStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *EndpointConfigurationStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *EndpointConfigurationStatus) Validate(formats strfmt.Registry) error
Validate validates this endpoint configuration status
type EndpointDatapathConfiguration struct {
// Indicates that IPAM is done external to Cilium. This will prevent the IP from being released and re-allocation of the IP address is skipped on restore.
//
ExternalIpam bool `json:"external-ipam,omitempty"`
// Installs a route in the Linux routing table pointing to the device of the endpoint's interface.
//
InstallEndpointRoute bool `json:"install-endpoint-route,omitempty"`
// Enable ARP passthrough mode
RequireArpPassthrough bool `json:"require-arp-passthrough,omitempty"`
// Endpoint requires a host-facing egress program to be attached to implement ingress policy and reverse NAT.
//
RequireEgressProg bool `json:"require-egress-prog,omitempty"`
// Endpoint requires BPF routing to be enabled, when disabled, routing is delegated to Linux routing.
//
RequireRouting *bool `json:"require-routing,omitempty"`
}EndpointDatapathConfiguration Datapath configuration to be used for the endpoint
swagger:model EndpointDatapathConfiguration
func (m *EndpointDatapathConfiguration) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *EndpointDatapathConfiguration) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *EndpointDatapathConfiguration) Validate(formats strfmt.Registry) error
Validate validates this endpoint datapath configuration
type EndpointHealth struct {
// bpf
Bpf EndpointHealthStatus `json:"bpf,omitempty"`
// Is this endpoint reachable
Connected bool `json:"connected,omitempty"`
// overall health
OverallHealth EndpointHealthStatus `json:"overallHealth,omitempty"`
// policy
Policy EndpointHealthStatus `json:"policy,omitempty"`
}EndpointHealth Health of the endpoint
+deepequal-gen=true
swagger:model EndpointHealth
func (in *EndpointHealth) DeepEqual(other *EndpointHealth) bool
DeepEqual is an autogenerated deepequal function, deeply comparing the receiver with other. in must be non-nil.
func (m *EndpointHealth) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *EndpointHealth) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *EndpointHealth) Validate(formats strfmt.Registry) error
Validate validates this endpoint health
EndpointHealthStatus A common set of statuses for endpoint health * “OK“ = All components operational * “Bootstrap“ = This component is being created * “Pending“ = A change is being processed to be applied * “Warning“ = This component is not applying up-to-date policies (but is still applying the previous version) * “Failure“ = An error has occurred and no policy is being applied * “Disabled“ = This endpoint is disabled and will not handle traffic
swagger:model EndpointHealthStatus
const (
// EndpointHealthStatusOK captures enum value "OK"
EndpointHealthStatusOK EndpointHealthStatus = "OK"
// EndpointHealthStatusBootstrap captures enum value "Bootstrap"
EndpointHealthStatusBootstrap EndpointHealthStatus = "Bootstrap"
// EndpointHealthStatusPending captures enum value "Pending"
EndpointHealthStatusPending EndpointHealthStatus = "Pending"
// EndpointHealthStatusWarning captures enum value "Warning"
EndpointHealthStatusWarning EndpointHealthStatus = "Warning"
// EndpointHealthStatusFailure captures enum value "Failure"
EndpointHealthStatusFailure EndpointHealthStatus = "Failure"
// EndpointHealthStatusDisabled captures enum value "Disabled"
EndpointHealthStatusDisabled EndpointHealthStatus = "Disabled"
)func (m EndpointHealthStatus) Validate(formats strfmt.Registry) error
Validate validates this endpoint health status
type EndpointIdentifiers struct {
// ID assigned by container runtime
ContainerID string `json:"container-id,omitempty"`
// Name assigned to container
ContainerName string `json:"container-name,omitempty"`
// Docker endpoint ID
DockerEndpointID string `json:"docker-endpoint-id,omitempty"`
// Docker network ID
DockerNetworkID string `json:"docker-network-id,omitempty"`
// K8s namespace for this endpoint
K8sNamespace string `json:"k8s-namespace,omitempty"`
// K8s pod name for this endpoint
K8sPodName string `json:"k8s-pod-name,omitempty"`
// K8s pod for this endpoint(Deprecated, use K8sPodName and K8sNamespace instead)
PodName string `json:"pod-name,omitempty"`
}EndpointIdentifiers Unique identifiers for this endpoint from outside cilium
+deepequal-gen=true
swagger:model EndpointIdentifiers
func (in *EndpointIdentifiers) DeepEqual(other *EndpointIdentifiers) bool
DeepEqual is an autogenerated deepequal function, deeply comparing the receiver with other. in must be non-nil.
func (m *EndpointIdentifiers) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *EndpointIdentifiers) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *EndpointIdentifiers) Validate(formats strfmt.Registry) error
Validate validates this endpoint identifiers
type EndpointNetworking struct {
// IP4/6 addresses assigned to this Endpoint
Addressing []*AddressPair `json:"addressing"`
// host addressing
HostAddressing *NodeAddressing `json:"host-addressing,omitempty"`
// MAC address
HostMac string `json:"host-mac,omitempty"`
// Index of network device
InterfaceIndex int64 `json:"interface-index,omitempty"`
// Name of network device
InterfaceName string `json:"interface-name,omitempty"`
// MAC address
Mac string `json:"mac,omitempty"`
}EndpointNetworking Unique identifiers for this endpoint from outside cilium
swagger:model EndpointNetworking
func (m *EndpointNetworking) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *EndpointNetworking) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *EndpointNetworking) Validate(formats strfmt.Registry) error
Validate validates this endpoint networking
type EndpointPolicy struct {
// List of identities to which this endpoint is allowed to communicate
//
AllowedEgressIdentities []int64 `json:"allowed-egress-identities"`
// List of identities allowed to communicate to this endpoint
//
AllowedIngressIdentities []int64 `json:"allowed-ingress-identities"`
// Build number of calculated policy in use
Build int64 `json:"build,omitempty"`
// cidr policy
CidrPolicy *CIDRPolicy `json:"cidr-policy,omitempty"`
// Own identity of endpoint
ID int64 `json:"id,omitempty"`
// l4
L4 *L4Policy `json:"l4,omitempty"`
// Whether policy enforcement is enabled (ingress, egress, both or none)
PolicyEnabled EndpointPolicyEnabled `json:"policy-enabled,omitempty"`
// The agent-local policy revision
PolicyRevision int64 `json:"policy-revision,omitempty"`
}EndpointPolicy Policy information of an endpoint
+k8s:deepcopy-gen=true
swagger:model EndpointPolicy
func (in *EndpointPolicy) DeepCopy() *EndpointPolicy
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new EndpointPolicy.
func (in *EndpointPolicy) DeepCopyInto(out *EndpointPolicy)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *EndpointPolicy) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *EndpointPolicy) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *EndpointPolicy) Validate(formats strfmt.Registry) error
Validate validates this endpoint policy
EndpointPolicyEnabled Whether policy enforcement is enabled (ingress, egress, both or none)
swagger:model EndpointPolicyEnabled
const (
// EndpointPolicyEnabledNone captures enum value "none"
EndpointPolicyEnabledNone EndpointPolicyEnabled = "none"
// EndpointPolicyEnabledIngress captures enum value "ingress"
EndpointPolicyEnabledIngress EndpointPolicyEnabled = "ingress"
// EndpointPolicyEnabledEgress captures enum value "egress"
EndpointPolicyEnabledEgress EndpointPolicyEnabled = "egress"
// EndpointPolicyEnabledBoth captures enum value "both"
EndpointPolicyEnabledBoth EndpointPolicyEnabled = "both"
// EndpointPolicyEnabledAuditIngress captures enum value "audit-ingress"
EndpointPolicyEnabledAuditIngress EndpointPolicyEnabled = "audit-ingress"
// EndpointPolicyEnabledAuditEgress captures enum value "audit-egress"
EndpointPolicyEnabledAuditEgress EndpointPolicyEnabled = "audit-egress"
// EndpointPolicyEnabledAuditBoth captures enum value "audit-both"
EndpointPolicyEnabledAuditBoth EndpointPolicyEnabled = "audit-both"
)func (m EndpointPolicyEnabled) Validate(formats strfmt.Registry) error
Validate validates this endpoint policy enabled
type EndpointPolicyStatus struct {
// The policy revision currently enforced in the proxy for this endpoint
ProxyPolicyRevision int64 `json:"proxy-policy-revision,omitempty"`
// Statistics of the proxy redirects configured for this endpoint
ProxyStatistics []*ProxyStatistics `json:"proxy-statistics"`
// The policy in the datapath for this endpoint
Realized *EndpointPolicy `json:"realized,omitempty"`
// The policy that should apply to this endpoint
Spec *EndpointPolicy `json:"spec,omitempty"`
}EndpointPolicyStatus Policy information of an endpoint
swagger:model EndpointPolicyStatus
func (m *EndpointPolicyStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *EndpointPolicyStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *EndpointPolicyStatus) Validate(formats strfmt.Registry) error
Validate validates this endpoint policy status
EndpointState State of endpoint
swagger:model EndpointState
const (
// EndpointStateWaitingForIdentity captures enum value "waiting-for-identity"
EndpointStateWaitingForIdentity EndpointState = "waiting-for-identity"
// EndpointStateNotReady captures enum value "not-ready"
EndpointStateNotReady EndpointState = "not-ready"
// EndpointStateWaitingToRegenerate captures enum value "waiting-to-regenerate"
EndpointStateWaitingToRegenerate EndpointState = "waiting-to-regenerate"
// EndpointStateRegenerating captures enum value "regenerating"
EndpointStateRegenerating EndpointState = "regenerating"
// EndpointStateRestoring captures enum value "restoring"
EndpointStateRestoring EndpointState = "restoring"
// EndpointStateReady captures enum value "ready"
EndpointStateReady EndpointState = "ready"
// EndpointStateDisconnecting captures enum value "disconnecting"
EndpointStateDisconnecting EndpointState = "disconnecting"
// EndpointStateDisconnected captures enum value "disconnected"
EndpointStateDisconnected EndpointState = "disconnected"
// EndpointStateInvalid captures enum value "invalid"
EndpointStateInvalid EndpointState = "invalid"
)func (m EndpointState) Validate(formats strfmt.Registry) error
Validate validates this endpoint state
type EndpointStatus struct {
// Status of internal controllers attached to this endpoint
Controllers ControllerStatuses `json:"controllers,omitempty"`
// Unique identifiers for this endpoint from outside cilium
ExternalIdentifiers *EndpointIdentifiers `json:"external-identifiers,omitempty"`
// Summary overall endpoint & subcomponent health
Health *EndpointHealth `json:"health,omitempty"`
// The security identity for this endpoint
Identity *Identity `json:"identity,omitempty"`
// Labels applied to this endpoint
Labels *LabelConfigurationStatus `json:"labels,omitempty"`
// Most recent status log. See endpoint/{id}/log for the complete log.
Log EndpointStatusLog `json:"log,omitempty"`
// List of named ports that can be used in Network Policy
NamedPorts NamedPorts `json:"namedPorts,omitempty"`
// Networking properties of the endpoint
Networking *EndpointNetworking `json:"networking,omitempty"`
// The policy applied to this endpoint from the policy repository
Policy *EndpointPolicyStatus `json:"policy,omitempty"`
// The configuration in effect on this endpoint
Realized *EndpointConfigurationSpec `json:"realized,omitempty"`
// Current state of endpoint
// Required: true
State EndpointState `json:"state"`
}EndpointStatus The current state and configuration of the endpoint, its policy & datapath, and subcomponents
swagger:model EndpointStatus
func (m *EndpointStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *EndpointStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *EndpointStatus) Validate(formats strfmt.Registry) error
Validate validates this endpoint status
type EndpointStatusChange struct {
// Code indicate type of status change
// Enum: [ok failed]
Code string `json:"code,omitempty"`
// Status message
Message string `json:"message,omitempty"`
// state
State EndpointState `json:"state,omitempty"`
// Timestamp when status change occurred
Timestamp string `json:"timestamp,omitempty"`
}EndpointStatusChange Indication of a change of status
+deepequal-gen=true
swagger:model EndpointStatusChange
func (in *EndpointStatusChange) DeepEqual(other *EndpointStatusChange) bool
DeepEqual is an autogenerated deepequal function, deeply comparing the receiver with other. in must be non-nil.
func (m *EndpointStatusChange) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *EndpointStatusChange) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *EndpointStatusChange) Validate(formats strfmt.Registry) error
Validate validates this endpoint status change
type EndpointStatusLog []*EndpointStatusChange
EndpointStatusLog Status log of endpoint
swagger:model EndpointStatusLog
func (m EndpointStatusLog) Validate(formats strfmt.Registry) error
Validate validates this endpoint status log
Error error
swagger:model Error
Validate validates this error
type FrontendAddress struct {
// Layer 3 address
IP string `json:"ip,omitempty"`
// Layer 4 port number
Port uint16 `json:"port,omitempty"`
// Layer 4 protocol
// Enum: [tcp udp any]
Protocol string `json:"protocol,omitempty"`
// Load balancing scope for frontend address
// Enum: [external internal]
Scope string `json:"scope,omitempty"`
}FrontendAddress Layer 4 address. The protocol is currently ignored, all services will behave as if protocol any is specified. To restrict to a particular protocol, use policy.
swagger:model FrontendAddress
func (m *FrontendAddress) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *FrontendAddress) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *FrontendAddress) Validate(formats strfmt.Registry) error
Validate validates this frontend address
type HubbleStatus struct {
// metrics
Metrics *HubbleStatusMetrics `json:"metrics,omitempty"`
// Human readable status/error/warning message
Msg string `json:"msg,omitempty"`
// observer
Observer *HubbleStatusObserver `json:"observer,omitempty"`
// State the component is in
// Enum: [Ok Warning Failure Disabled]
State string `json:"state,omitempty"`
}HubbleStatus Status of the Hubble server
+k8s:deepcopy-gen=true
swagger:model HubbleStatus
func (in *HubbleStatus) DeepCopy() *HubbleStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HubbleStatus.
func (in *HubbleStatus) DeepCopyInto(out *HubbleStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *HubbleStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *HubbleStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *HubbleStatus) Validate(formats strfmt.Registry) error
Validate validates this hubble status
type HubbleStatusMetrics struct {
// State of the Hubble metrics
// Enum: [Ok Warning Failure Disabled]
State string `json:"state,omitempty"`
}HubbleStatusMetrics Status of the Hubble metrics server
swagger:model HubbleStatusMetrics
func (m *HubbleStatusMetrics) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *HubbleStatusMetrics) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *HubbleStatusMetrics) Validate(formats strfmt.Registry) error
Validate validates this hubble status metrics
type HubbleStatusObserver struct {
// Current number of flows this Hubble observer stores
CurrentFlows int64 `json:"current-flows,omitempty"`
// Maximum number of flows this Hubble observer is able to store
MaxFlows int64 `json:"max-flows,omitempty"`
// Total number of flows this Hubble observer has seen
SeenFlows int64 `json:"seen-flows,omitempty"`
// Uptime of this Hubble observer instance
// Format: duration
Uptime strfmt.Duration `json:"uptime,omitempty"`
}HubbleStatusObserver Status of the Hubble observer
+k8s:deepcopy-gen=true
swagger:model HubbleStatusObserver
func (in *HubbleStatusObserver) DeepCopy() *HubbleStatusObserver
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new HubbleStatusObserver.
func (in *HubbleStatusObserver) DeepCopyInto(out *HubbleStatusObserver)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *HubbleStatusObserver) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *HubbleStatusObserver) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *HubbleStatusObserver) Validate(formats strfmt.Registry) error
Validate validates this hubble status observer
type IPAMAddressResponse struct {
// List of CIDRs out of which IPs are allocated
Cidrs []string `json:"cidrs"`
// The UUID for the expiration timer. Set when expiration has been
// enabled while allocating.
//
ExpirationUUID string `json:"expiration-uuid,omitempty"`
// IP of gateway
Gateway string `json:"gateway,omitempty"`
// Allocated IP for endpoint
IP string `json:"ip,omitempty"`
// MAC of master interface if address is a slave/secondary of a master interface
MasterMac string `json:"master-mac,omitempty"`
}IPAMAddressResponse IPAM configuration of an individual address family
swagger:model IPAMAddressResponse
func (m *IPAMAddressResponse) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *IPAMAddressResponse) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *IPAMAddressResponse) Validate(formats strfmt.Registry) error
Validate validates this IP a m address response
type IPAMResponse struct {
// address
// Required: true
Address *AddressPair `json:"address"`
// host addressing
// Required: true
HostAddressing *NodeAddressing `json:"host-addressing"`
// ipv4
IPV4 *IPAMAddressResponse `json:"ipv4,omitempty"`
// ipv6
IPV6 *IPAMAddressResponse `json:"ipv6,omitempty"`
}IPAMResponse IPAM configuration of an endpoint
swagger:model IPAMResponse
func (m *IPAMResponse) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *IPAMResponse) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *IPAMResponse) Validate(formats strfmt.Registry) error
Validate validates this IP a m response
type IPAMStatus struct {
// allocations
Allocations AllocationMap `json:"allocations,omitempty"`
// ipv4
IPV4 []string `json:"ipv4"`
// ipv6
IPV6 []string `json:"ipv6"`
// status
Status string `json:"status,omitempty"`
}IPAMStatus Status of IP address management
+k8s:deepcopy-gen=true
swagger:model IPAMStatus
func (in *IPAMStatus) DeepCopy() *IPAMStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IPAMStatus.
func (in *IPAMStatus) DeepCopyInto(out *IPAMStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *IPAMStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *IPAMStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *IPAMStatus) Validate(formats strfmt.Registry) error
Validate validates this IP a m status
type IPListEntry struct {
// Key of the entry in the form of a CIDR range
// Required: true
Cidr *string `json:"cidr"`
// The context ID for the encryption session
EncryptKey int64 `json:"encryptKey,omitempty"`
// IP address of the host
HostIP string `json:"hostIP,omitempty"`
// Numerical identity assigned to the IP
// Required: true
Identity *int64 `json:"identity"`
// metadata
Metadata *IPListEntryMetadata `json:"metadata,omitempty"`
}IPListEntry IP entry with metadata
swagger:model IPListEntry
func (m *IPListEntry) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *IPListEntry) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *IPListEntry) Validate(formats strfmt.Registry) error
Validate validates this IP list entry
type IPListEntryMetadata struct {
// Name assigned to the IP (e.g. Kubernetes pod name)
Name string `json:"name,omitempty"`
// Namespace of the IP (e.g. Kubernetes namespace)
Namespace string `json:"namespace,omitempty"`
// Source of the IP entry and its metadata
Source string `json:"source,omitempty"`
}IPListEntryMetadata Additional metadata assigned to an IP list entry
swagger:model IPListEntryMetadata
func (m *IPListEntryMetadata) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *IPListEntryMetadata) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *IPListEntryMetadata) Validate(formats strfmt.Registry) error
Validate validates this IP list entry metadata
type Identity struct {
// Unique identifier
ID int64 `json:"id,omitempty"`
// Labels describing the identity
Labels Labels `json:"labels,omitempty"`
// SHA256 of labels
LabelsSHA256 string `json:"labelsSHA256,omitempty"`
}Identity Security identity
swagger:model Identity
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this identity
type IdentityEndpoints struct {
// Security identity
Identity *Identity `json:"identity,omitempty"`
// number of endpoints consuming this identity locally (should always be > 0)
RefCount int64 `json:"refCount,omitempty"`
}IdentityEndpoints Security identities owned by endpoints on the local node
swagger:model IdentityEndpoints
func (m *IdentityEndpoints) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *IdentityEndpoints) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *IdentityEndpoints) Validate(formats strfmt.Registry) error
Validate validates this identity endpoints
type IpvlanConfiguration struct {
// Workload facing ipvlan master device ifindex.
MasterDeviceIndex int64 `json:"masterDeviceIndex,omitempty"`
// Mode in which ipvlan setup operates.
// Enum: [L3 L3S]
OperationMode string `json:"operationMode,omitempty"`
}IpvlanConfiguration Setup for datapath when operating in ipvlan mode.
swagger:model IpvlanConfiguration
func (m *IpvlanConfiguration) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *IpvlanConfiguration) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *IpvlanConfiguration) Validate(formats strfmt.Registry) error
Validate validates this ipvlan configuration
type K8sStatus struct {
// k8s api versions
K8sAPIVersions []string `json:"k8s-api-versions"`
// Human readable status/error/warning message
Msg string `json:"msg,omitempty"`
// State the component is in
// Enum: [Ok Warning Failure Disabled]
State string `json:"state,omitempty"`
}K8sStatus Status of Kubernetes integration
+k8s:deepcopy-gen=true
swagger:model K8sStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new K8sStatus.
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this k8s status
type KVstoreConfiguration struct {
// Configuration options
Options map[string]string `json:"options,omitempty"`
// Type of kvstore
Type string `json:"type,omitempty"`
}KVstoreConfiguration Configuration used for the kvstore
swagger:model KVstoreConfiguration
func (m *KVstoreConfiguration) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *KVstoreConfiguration) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *KVstoreConfiguration) Validate(formats strfmt.Registry) error
Validate validates this k vstore configuration
type KubeProxyReplacement struct {
// devices
Devices []string `json:"devices"`
// direct routing device
DirectRoutingDevice string `json:"directRoutingDevice,omitempty"`
// features
Features *KubeProxyReplacementFeatures `json:"features,omitempty"`
// mode
// Enum: [Disabled Strict Probe Partial]
Mode string `json:"mode,omitempty"`
}KubeProxyReplacement Status of kube-proxy replacement
+k8s:deepcopy-gen=true
swagger:model KubeProxyReplacement
func (in *KubeProxyReplacement) DeepCopy() *KubeProxyReplacement
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KubeProxyReplacement.
func (in *KubeProxyReplacement) DeepCopyInto(out *KubeProxyReplacement)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *KubeProxyReplacement) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *KubeProxyReplacement) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *KubeProxyReplacement) Validate(formats strfmt.Registry) error
Validate validates this kube proxy replacement
type KubeProxyReplacementFeatures struct {
// external i ps
ExternalIPs *KubeProxyReplacementFeaturesExternalIPs `json:"externalIPs,omitempty"`
// host port
HostPort *KubeProxyReplacementFeaturesHostPort `json:"hostPort,omitempty"`
// host reachable services
HostReachableServices *KubeProxyReplacementFeaturesHostReachableServices `json:"hostReachableServices,omitempty"`
// node port
NodePort *KubeProxyReplacementFeaturesNodePort `json:"nodePort,omitempty"`
// session affinity
SessionAffinity *KubeProxyReplacementFeaturesSessionAffinity `json:"sessionAffinity,omitempty"`
}KubeProxyReplacementFeatures
+k8s:deepcopy-gen=true
swagger:model KubeProxyReplacementFeatures
func (in *KubeProxyReplacementFeatures) DeepCopy() *KubeProxyReplacementFeatures
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KubeProxyReplacementFeatures.
func (in *KubeProxyReplacementFeatures) DeepCopyInto(out *KubeProxyReplacementFeatures)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *KubeProxyReplacementFeatures) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *KubeProxyReplacementFeatures) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *KubeProxyReplacementFeatures) Validate(formats strfmt.Registry) error
Validate validates this kube proxy replacement features
type KubeProxyReplacementFeaturesExternalIPs struct {
// enabled
Enabled bool `json:"enabled,omitempty"`
}KubeProxyReplacementFeaturesExternalIPs
+k8s:deepcopy-gen=true
swagger:model KubeProxyReplacementFeaturesExternalIPs
func (in *KubeProxyReplacementFeaturesExternalIPs) DeepCopy() *KubeProxyReplacementFeaturesExternalIPs
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KubeProxyReplacementFeaturesExternalIPs.
func (in *KubeProxyReplacementFeaturesExternalIPs) DeepCopyInto(out *KubeProxyReplacementFeaturesExternalIPs)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *KubeProxyReplacementFeaturesExternalIPs) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *KubeProxyReplacementFeaturesExternalIPs) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *KubeProxyReplacementFeaturesExternalIPs) Validate(formats strfmt.Registry) error
Validate validates this kube proxy replacement features external i ps
type KubeProxyReplacementFeaturesHostPort struct {
// enabled
Enabled bool `json:"enabled,omitempty"`
}KubeProxyReplacementFeaturesHostPort
+k8s:deepcopy-gen=true
swagger:model KubeProxyReplacementFeaturesHostPort
func (in *KubeProxyReplacementFeaturesHostPort) DeepCopy() *KubeProxyReplacementFeaturesHostPort
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KubeProxyReplacementFeaturesHostPort.
func (in *KubeProxyReplacementFeaturesHostPort) DeepCopyInto(out *KubeProxyReplacementFeaturesHostPort)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *KubeProxyReplacementFeaturesHostPort) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *KubeProxyReplacementFeaturesHostPort) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *KubeProxyReplacementFeaturesHostPort) Validate(formats strfmt.Registry) error
Validate validates this kube proxy replacement features host port
type KubeProxyReplacementFeaturesHostReachableServices struct {
// enabled
Enabled bool `json:"enabled,omitempty"`
// protocols
Protocols []string `json:"protocols"`
}KubeProxyReplacementFeaturesHostReachableServices
+k8s:deepcopy-gen=true
swagger:model KubeProxyReplacementFeaturesHostReachableServices
func (in *KubeProxyReplacementFeaturesHostReachableServices) DeepCopy() *KubeProxyReplacementFeaturesHostReachableServices
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KubeProxyReplacementFeaturesHostReachableServices.
func (in *KubeProxyReplacementFeaturesHostReachableServices) DeepCopyInto(out *KubeProxyReplacementFeaturesHostReachableServices)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *KubeProxyReplacementFeaturesHostReachableServices) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *KubeProxyReplacementFeaturesHostReachableServices) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *KubeProxyReplacementFeaturesHostReachableServices) Validate(formats strfmt.Registry) error
Validate validates this kube proxy replacement features host reachable services
type KubeProxyReplacementFeaturesNodePort struct {
// acceleration
// Enum: [NONE NATIVE GENERIC]
Acceleration string `json:"acceleration,omitempty"`
// enabled
Enabled bool `json:"enabled,omitempty"`
// mode
// Enum: [SNAT DSR HYBRID]
Mode string `json:"mode,omitempty"`
// port max
PortMax int64 `json:"portMax,omitempty"`
// port min
PortMin int64 `json:"portMin,omitempty"`
}KubeProxyReplacementFeaturesNodePort
+k8s:deepcopy-gen=true
swagger:model KubeProxyReplacementFeaturesNodePort
func (in *KubeProxyReplacementFeaturesNodePort) DeepCopy() *KubeProxyReplacementFeaturesNodePort
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KubeProxyReplacementFeaturesNodePort.
func (in *KubeProxyReplacementFeaturesNodePort) DeepCopyInto(out *KubeProxyReplacementFeaturesNodePort)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *KubeProxyReplacementFeaturesNodePort) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *KubeProxyReplacementFeaturesNodePort) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *KubeProxyReplacementFeaturesNodePort) Validate(formats strfmt.Registry) error
Validate validates this kube proxy replacement features node port
type KubeProxyReplacementFeaturesSessionAffinity struct {
// enabled
Enabled bool `json:"enabled,omitempty"`
}KubeProxyReplacementFeaturesSessionAffinity
+k8s:deepcopy-gen=true
swagger:model KubeProxyReplacementFeaturesSessionAffinity
func (in *KubeProxyReplacementFeaturesSessionAffinity) DeepCopy() *KubeProxyReplacementFeaturesSessionAffinity
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new KubeProxyReplacementFeaturesSessionAffinity.
func (in *KubeProxyReplacementFeaturesSessionAffinity) DeepCopyInto(out *KubeProxyReplacementFeaturesSessionAffinity)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *KubeProxyReplacementFeaturesSessionAffinity) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *KubeProxyReplacementFeaturesSessionAffinity) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *KubeProxyReplacementFeaturesSessionAffinity) Validate(formats strfmt.Registry) error
Validate validates this kube proxy replacement features session affinity
type L4Policy struct {
// List of L4 egress rules
Egress []*PolicyRule `json:"egress"`
// List of L4 ingress rules
Ingress []*PolicyRule `json:"ingress"`
}L4Policy L4 endpoint policy
+k8s:deepcopy-gen=true
swagger:model L4Policy
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new L4Policy.
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this l4 policy
type LabelConfiguration struct {
// The user provided desired configuration
Spec *LabelConfigurationSpec `json:"spec,omitempty"`
// The current configuration
Status *LabelConfigurationStatus `json:"status,omitempty"`
}LabelConfiguration Label configuration of an endpoint
swagger:model LabelConfiguration
func (m *LabelConfiguration) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *LabelConfiguration) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *LabelConfiguration) Validate(formats strfmt.Registry) error
Validate validates this label configuration
type LabelConfigurationSpec struct {
// Custom labels in addition to orchestration system labels.
User Labels `json:"user,omitempty"`
}LabelConfigurationSpec User desired Label configuration of an endpoint
swagger:model LabelConfigurationSpec
func (m *LabelConfigurationSpec) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *LabelConfigurationSpec) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *LabelConfigurationSpec) Validate(formats strfmt.Registry) error
Validate validates this label configuration spec
type LabelConfigurationStatus struct {
// All labels derived from the orchestration system
Derived Labels `json:"derived,omitempty"`
// Labels derived from orchestration system which have been disabled.
Disabled Labels `json:"disabled,omitempty"`
// The current configuration
Realized *LabelConfigurationSpec `json:"realized,omitempty"`
// Labels derived from orchestration system that are used in computing a security identity
SecurityRelevant Labels `json:"security-relevant,omitempty"`
}LabelConfigurationStatus Labels and label configuration of an endpoint
swagger:model LabelConfigurationStatus
func (m *LabelConfigurationStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *LabelConfigurationStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *LabelConfigurationStatus) Validate(formats strfmt.Registry) error
Validate validates this label configuration status
Labels Set of labels
swagger:model Labels
Validate validates this labels
type Masquerading struct {
// Is masquerading enabled
Enabled bool `json:"enabled,omitempty"`
// Is BPF ip-masq-agent enabled
IPMasqAgent bool `json:"ip-masq-agent,omitempty"`
// mode
// Enum: [BPF iptables]
Mode string `json:"mode,omitempty"`
// Any packet sent to IP addr belonging to CIDR will not be SNAT'd
SnatExclusionCidr string `json:"snat-exclusion-cidr,omitempty"`
}Masquerading Status of masquerading
+k8s:deepcopy-gen=true
swagger:model Masquerading
func (in *Masquerading) DeepCopy() *Masquerading
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Masquerading.
func (in *Masquerading) DeepCopyInto(out *Masquerading)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *Masquerading) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *Masquerading) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *Masquerading) Validate(formats strfmt.Registry) error
Validate validates this masquerading
type MessageForwardingStatistics struct {
// Number of messages denied
Denied int64 `json:"denied,omitempty"`
// Number of errors while parsing messages
Error int64 `json:"error,omitempty"`
// Number of messages forwarded
Forwarded int64 `json:"forwarded,omitempty"`
// Number of messages received
Received int64 `json:"received,omitempty"`
}MessageForwardingStatistics Statistics of a message forwarding entity
swagger:model MessageForwardingStatistics
func (m *MessageForwardingStatistics) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *MessageForwardingStatistics) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *MessageForwardingStatistics) Validate(formats strfmt.Registry) error
Validate validates this message forwarding statistics
type Metric struct {
// Labels of the metric
Labels map[string]string `json:"labels,omitempty"`
// Name of the metric
Name string `json:"name,omitempty"`
// Value of the metric
Value float64 `json:"value,omitempty"`
}Metric Metric information
swagger:model Metric
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this metric
type MonitorStatus struct {
// Number of CPUs to listen on for events.
Cpus int64 `json:"cpus,omitempty"`
// Number of samples lost by perf.
Lost int64 `json:"lost,omitempty"`
// Number of pages used for the perf ring buffer.
Npages int64 `json:"npages,omitempty"`
// Pages size used for the perf ring buffer.
Pagesize int64 `json:"pagesize,omitempty"`
// Number of unknown samples.
Unknown int64 `json:"unknown,omitempty"`
}MonitorStatus Status of the node monitor
swagger:model MonitorStatus
func (m *MonitorStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *MonitorStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *MonitorStatus) Validate(formats strfmt.Registry) error
Validate validates this monitor status
type NameManager struct {
// Names to poll for DNS Poller
DNSPollNames []string `json:"DNSPollNames"`
// Mapping of FQDNSelectors to corresponding regular expressions
FQDNPolicySelectors []*SelectorEntry `json:"FQDNPolicySelectors"`
}NameManager Internal state about DNS names in relation to policy subsystem
swagger:model NameManager
func (m *NameManager) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *NameManager) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *NameManager) Validate(formats strfmt.Registry) error
Validate validates this name manager
NamedPorts List of named Layer 4 port and protocol pairs which will be used in Network Policy specs.
+deepequal-gen=true
swagger:model NamedPorts
func (in *NamedPorts) DeepEqual(other *NamedPorts) bool
DeepEqual is an autogenerated deepequal function, deeply comparing the receiver with other. in must be non-nil.
func (m NamedPorts) Validate(formats strfmt.Registry) error
Validate validates this named ports
type NodeAddressing struct {
// ipv4
IPV4 *NodeAddressingElement `json:"ipv4,omitempty"`
// ipv6
IPV6 *NodeAddressingElement `json:"ipv6,omitempty"`
}NodeAddressing Addressing information of a node for all address families
+k8s:deepcopy-gen=true
swagger:model NodeAddressing
func (in *NodeAddressing) DeepCopy() *NodeAddressing
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NodeAddressing.
func (in *NodeAddressing) DeepCopyInto(out *NodeAddressing)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *NodeAddressing) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *NodeAddressing) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *NodeAddressing) Validate(formats strfmt.Registry) error
Validate validates this node addressing
type NodeAddressingElement struct {
// Node address type, one of HostName, ExternalIP or InternalIP
AddressType string `json:"address-type,omitempty"`
// Address pool to be used for local endpoints
AllocRange string `json:"alloc-range,omitempty"`
// True if address family is enabled
Enabled bool `json:"enabled,omitempty"`
// IP address of node
IP string `json:"ip,omitempty"`
}NodeAddressingElement Addressing information
swagger:model NodeAddressingElement
func (m *NodeAddressingElement) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *NodeAddressingElement) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *NodeAddressingElement) Validate(formats strfmt.Registry) error
Validate validates this node addressing element
type NodeElement struct {
// Address used for probing cluster connectivity
HealthEndpointAddress *NodeAddressing `json:"health-endpoint-address,omitempty"`
// Name of the node including the cluster association. This is typically
// <clustername>/<hostname>.
//
Name string `json:"name,omitempty"`
// Primary address used for intra-cluster communication
PrimaryAddress *NodeAddressing `json:"primary-address,omitempty"`
// Alternative addresses assigned to the node
SecondaryAddresses []*NodeAddressingElement `json:"secondary-addresses"`
}NodeElement Known node in the cluster
+k8s:deepcopy-gen=true
swagger:model NodeElement
func (in *NodeElement) DeepCopy() *NodeElement
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NodeElement.
func (in *NodeElement) DeepCopyInto(out *NodeElement)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *NodeElement) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *NodeElement) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *NodeElement) Validate(formats strfmt.Registry) error
Validate validates this node element
type Policy struct {
// Policy definition as JSON.
Policy string `json:"policy,omitempty"`
// Revision number of the policy. Incremented each time the policy is
// changed in the agent's repository
//
Revision int64 `json:"revision,omitempty"`
}Policy Policy definition
swagger:model Policy
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this policy
type PolicyRule struct {
// The policy rule labels identifying the policy rules this rule derives from
DerivedFromRules [][]string `json:"derived-from-rules"`
// The policy rule as json
Rule string `json:"rule,omitempty"`
}PolicyRule A policy rule including the rule labels it derives from
+k8s:deepcopy-gen=true
swagger:model PolicyRule
func (in *PolicyRule) DeepCopy() *PolicyRule
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRule.
func (in *PolicyRule) DeepCopyInto(out *PolicyRule)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *PolicyRule) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *PolicyRule) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *PolicyRule) Validate(formats strfmt.Registry) error
Validate validates this policy rule
type PolicyTraceResult struct {
// log
Log string `json:"log,omitempty"`
// verdict
Verdict string `json:"verdict,omitempty"`
}PolicyTraceResult Response to a policy resolution process
swagger:model PolicyTraceResult
func (m *PolicyTraceResult) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *PolicyTraceResult) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *PolicyTraceResult) Validate(formats strfmt.Registry) error
Validate validates this policy trace result
type Port struct {
// Optional layer 4 port name
Name string `json:"name,omitempty"`
// Layer 4 port number
Port uint16 `json:"port,omitempty"`
// Layer 4 protocol
// Enum: [TCP UDP ANY]
Protocol string `json:"protocol,omitempty"`
}Port Layer 4 port / protocol pair
+deepequal-gen=true
swagger:model Port
DeepEqual is an autogenerated deepequal function, deeply comparing the receiver with other. in must be non-nil.
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this port
type Prefilter struct {
// spec
Spec *PrefilterSpec `json:"spec,omitempty"`
// status
Status *PrefilterStatus `json:"status,omitempty"`
}Prefilter Collection of endpoints to be served
swagger:model Prefilter
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this prefilter
type PrefilterSpec struct {
// deny
Deny []string `json:"deny"`
// revision
Revision int64 `json:"revision,omitempty"`
}PrefilterSpec CIDR ranges implemented in the Prefilter
swagger:model PrefilterSpec
func (m *PrefilterSpec) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *PrefilterSpec) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *PrefilterSpec) Validate(formats strfmt.Registry) error
Validate validates this prefilter spec
type PrefilterStatus struct {
// realized
Realized *PrefilterSpec `json:"realized,omitempty"`
}PrefilterStatus CIDR ranges implemented in the Prefilter
swagger:model PrefilterStatus
func (m *PrefilterStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *PrefilterStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *PrefilterStatus) Validate(formats strfmt.Registry) error
Validate validates this prefilter status
type ProxyRedirect struct {
// Name of the proxy redirect
Name string `json:"name,omitempty"`
// Name of the proxy this redirect points to
Proxy string `json:"proxy,omitempty"`
// Host port that this redirect points to
ProxyPort int64 `json:"proxy-port,omitempty"`
}ProxyRedirect Configured proxy redirection state
swagger:model ProxyRedirect
func (m *ProxyRedirect) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ProxyRedirect) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ProxyRedirect) Validate(formats strfmt.Registry) error
Validate validates this proxy redirect
type ProxyStatistics struct {
// The port the proxy is listening on
AllocatedProxyPort int64 `json:"allocated-proxy-port,omitempty"`
// Location of where the redirect is installed
// Enum: [ingress egress]
Location string `json:"location,omitempty"`
// The port subject to the redirect
Port int64 `json:"port,omitempty"`
// Name of the L7 protocol
Protocol string `json:"protocol,omitempty"`
// Statistics of this set of proxy redirect
Statistics *RequestResponseStatistics `json:"statistics,omitempty"`
}ProxyStatistics Statistics of a set of proxy redirects for an endpoint
+k8s:deepcopy-gen=true
swagger:model ProxyStatistics
func (in *ProxyStatistics) DeepCopy() *ProxyStatistics
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProxyStatistics.
func (in *ProxyStatistics) DeepCopyInto(out *ProxyStatistics)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *ProxyStatistics) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ProxyStatistics) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ProxyStatistics) Validate(formats strfmt.Registry) error
Validate validates this proxy statistics
type ProxyStatus struct {
// IP address that the proxy listens on
IP string `json:"ip,omitempty"`
// Port range used for proxying
PortRange string `json:"port-range,omitempty"`
// Detailed description of configured redirects
Redirects []*ProxyRedirect `json:"redirects"`
// Total number of listening proxy ports
TotalPorts int64 `json:"total-ports,omitempty"`
// Total number of ports configured to redirect to proxies
TotalRedirects int64 `json:"total-redirects,omitempty"`
}ProxyStatus Status of proxy
+k8s:deepcopy-gen=true
swagger:model ProxyStatus
func (in *ProxyStatus) DeepCopy() *ProxyStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ProxyStatus.
func (in *ProxyStatus) DeepCopyInto(out *ProxyStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *ProxyStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ProxyStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ProxyStatus) Validate(formats strfmt.Registry) error
Validate validates this proxy status
type RemoteCluster struct {
// Time of last failure that occurred while attempting to reach the cluster
// Format: date-time
LastFailure strfmt.DateTime `json:"last-failure,omitempty"`
// Name of the cluster
Name string `json:"name,omitempty"`
// Number of failures reaching the cluster
NumFailures int64 `json:"num-failures,omitempty"`
// Number of identities in the cluster
NumIdentities int64 `json:"num-identities,omitempty"`
// Number of nodes in the cluster
NumNodes int64 `json:"num-nodes,omitempty"`
// Number of services in the cluster
int64 `json:"num-shared-services,omitempty"`
// Indicates readiness of the remote cluser
Ready bool `json:"ready,omitempty"`
// Status of the control plane
Status string `json:"status,omitempty"`
}RemoteCluster Status of remote cluster
+k8s:deepcopy-gen=true
swagger:model RemoteCluster
func (in *RemoteCluster) DeepCopy() *RemoteCluster
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RemoteCluster.
func (in *RemoteCluster) DeepCopyInto(out *RemoteCluster)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *RemoteCluster) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *RemoteCluster) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *RemoteCluster) Validate(formats strfmt.Registry) error
Validate validates this remote cluster
type RequestResponseStatistics struct {
// requests
Requests *MessageForwardingStatistics `json:"requests,omitempty"`
// responses
Responses *MessageForwardingStatistics `json:"responses,omitempty"`
}RequestResponseStatistics Statistics of a proxy redirect
+k8s:deepcopy-gen=true
swagger:model RequestResponseStatistics
func (in *RequestResponseStatistics) DeepCopy() *RequestResponseStatistics
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RequestResponseStatistics.
func (in *RequestResponseStatistics) DeepCopyInto(out *RequestResponseStatistics)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *RequestResponseStatistics) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *RequestResponseStatistics) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *RequestResponseStatistics) Validate(formats strfmt.Registry) error
Validate validates this request response statistics
type SelectorCache []*SelectorIdentityMapping
SelectorCache cache of which identities match selectors in the policy repository
swagger:model SelectorCache
func (m SelectorCache) Validate(formats strfmt.Registry) error
Validate validates this selector cache
type SelectorEntry struct {
// String representation of regular expression form of FQDNSelector
RegexString string `json:"regexString,omitempty"`
// FQDNSelector in string representation
SelectorString string `json:"selectorString,omitempty"`
}SelectorEntry Mapping of FQDNSelector to corresponding regular expression
swagger:model SelectorEntry
func (m *SelectorEntry) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *SelectorEntry) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *SelectorEntry) Validate(formats strfmt.Registry) error
Validate validates this selector entry
type SelectorIdentityMapping struct {
// identities mapping to this selector
Identities []int64 `json:"identities"`
// string form of selector
Selector string `json:"selector,omitempty"`
// number of users of this selector in the cache
Users int64 `json:"users,omitempty"`
}SelectorIdentityMapping mapping of selector to identities which match it
swagger:model SelectorIdentityMapping
func (m *SelectorIdentityMapping) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *SelectorIdentityMapping) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *SelectorIdentityMapping) Validate(formats strfmt.Registry) error
Validate validates this selector identity mapping
type Service struct {
// spec
Spec *ServiceSpec `json:"spec,omitempty"`
// status
Status *ServiceStatus `json:"status,omitempty"`
}Service Collection of endpoints to be served
swagger:model Service
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this service
type ServiceSpec struct {
// List of backend addresses
BackendAddresses []*BackendAddress `json:"backend-addresses"`
// flags
Flags *ServiceSpecFlags `json:"flags,omitempty"`
// Frontend address
// Required: true
FrontendAddress *FrontendAddress `json:"frontend-address"`
// Unique identification
ID int64 `json:"id,omitempty"`
}ServiceSpec Configuration of a service
swagger:model ServiceSpec
func (m *ServiceSpec) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ServiceSpec) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ServiceSpec) Validate(formats strfmt.Registry) error
Validate validates this service spec
type ServiceSpecFlags struct {
// Service health check node port
HealthCheckNodePort uint16 `json:"healthCheckNodePort,omitempty"`
// Service name (e.g. Kubernetes service name)
Name string `json:"name,omitempty"`
// Service namespace (e.g. Kubernetes namespace)
Namespace string `json:"namespace,omitempty"`
// Service traffic policy
// Enum: [Cluster Local]
TrafficPolicy string `json:"trafficPolicy,omitempty"`
// Service type
// Enum: [ClusterIP NodePort ExternalIPs HostPort LoadBalancer]
Type string `json:"type,omitempty"`
}ServiceSpecFlags Optional service configuration flags
swagger:model ServiceSpecFlags
func (m *ServiceSpecFlags) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ServiceSpecFlags) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ServiceSpecFlags) Validate(formats strfmt.Registry) error
Validate validates this service spec flags
type ServiceStatus struct {
// realized
Realized *ServiceSpec `json:"realized,omitempty"`
}ServiceStatus Configuration of a service
swagger:model ServiceStatus
func (m *ServiceStatus) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *ServiceStatus) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *ServiceStatus) Validate(formats strfmt.Registry) error
Validate validates this service status
type Status struct {
// Human readable status/error/warning message
Msg string `json:"msg,omitempty"`
// State the component is in
// Enum: [Ok Warning Failure Disabled]
State string `json:"state,omitempty"`
}Status Status of an individual component
swagger:model Status
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this status
type StatusResponse struct {
// Status of BPF maps
BpfMaps *BPFMapStatus `json:"bpf-maps,omitempty"`
// Status of Cilium daemon
Cilium *Status `json:"cilium,omitempty"`
// When supported by the API, this client ID should be used by the
// client when making another request to the server.
// See for example "/cluster/nodes".
//
ClientID int64 `json:"client-id,omitempty"`
// Status of cluster
Cluster *ClusterStatus `json:"cluster,omitempty"`
// Status of ClusterMesh
ClusterMesh *ClusterMeshStatus `json:"cluster-mesh,omitempty"`
// Status of local container runtime
ContainerRuntime *Status `json:"container-runtime,omitempty"`
// Status of all endpoint controllers
Controllers ControllerStatuses `json:"controllers,omitempty"`
// Status of Hubble server
Hubble *HubbleStatus `json:"hubble,omitempty"`
// Status of IP address management
Ipam *IPAMStatus `json:"ipam,omitempty"`
// Status of kube-proxy replacement
KubeProxyReplacement *KubeProxyReplacement `json:"kube-proxy-replacement,omitempty"`
// Status of Kubernetes integration
Kubernetes *K8sStatus `json:"kubernetes,omitempty"`
// Status of key/value datastore
Kvstore *Status `json:"kvstore,omitempty"`
// Status of masquerading
Masquerading *Masquerading `json:"masquerading,omitempty"`
// Status of the node monitor
NodeMonitor *MonitorStatus `json:"nodeMonitor,omitempty"`
// Status of proxy
Proxy *ProxyStatus `json:"proxy,omitempty"`
// List of stale information in the status
Stale map[string]strfmt.DateTime `json:"stale,omitempty"`
}StatusResponse Health and status information of daemon
+k8s:deepcopy-gen=true
swagger:model StatusResponse
func (in *StatusResponse) DeepCopy() *StatusResponse
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new StatusResponse.
func (in *StatusResponse) DeepCopyInto(out *StatusResponse)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (m *StatusResponse) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *StatusResponse) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *StatusResponse) Validate(formats strfmt.Registry) error
Validate validates this status response
TraceFrom trace from
swagger:model TraceFrom
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this trace from
type TraceSelector struct {
// from
From *TraceFrom `json:"from,omitempty"`
// to
To *TraceTo `json:"to,omitempty"`
// Enable verbose tracing.
//
Verbose bool `json:"verbose,omitempty"`
}TraceSelector Context describing a pair of source and destination identity
swagger:model TraceSelector
func (m *TraceSelector) MarshalBinary() ([]byte, error)
MarshalBinary interface implementation
func (m *TraceSelector) UnmarshalBinary(b []byte) error
UnmarshalBinary interface implementation
func (m *TraceSelector) Validate(formats strfmt.Registry) error
Validate validates this trace selector
type TraceTo struct {
// List of Layer 4 port and protocol pairs which will be used in communication
// from the source identity to the destination identity.
//
Dports []*Port `json:"dports"`
// labels
Labels Labels `json:"labels,omitempty"`
}TraceTo trace to
swagger:model TraceTo
MarshalBinary interface implementation
UnmarshalBinary interface implementation
Validate validates this trace to
Package models imports 6 packages (graph) and is imported by 267 packages. Updated 2020-08-03. Refresh now. Tools for package owners.