CiliumEndpoint
cilium.io / v2
apiVersion: cilium.io/v2
kind: CiliumEndpoint
metadata:
name: example
apiVersion
string
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind
string
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata
object required
status object
EndpointStatus is the status of a Cilium endpoint.
controllers []object
Controllers is the list of failing controllers for this endpoint.
configuration object
Configuration is the controller configuration
error-retry
boolean
Retry on error
error-retry-base
integer
Base error retry back-off time
Format: duration
format:
int64
interval
integer
Regular synchronization interval
Format: duration
format:
int64
name
string
Name is the name of the controller
status object
Status is the status of the controller
consecutive-failure-count
integer
format:
int64
failure-count
integer
format:
int64
last-failure-msg
string
last-failure-timestamp
string
last-success-timestamp
string
success-count
integer
format:
int64
uuid
string
UUID is the UUID of the controller
encryption object
Encryption is the encryption configuration of the node
key
integer
Key is the index to the key to use for encryption or 0 if encryption is
disabled.
external-identifiers object
ExternalIdentifiers is a set of identifiers to identify the endpoint
apart from the pod name. This includes container runtime IDs.
cni-attachment-id
string
ID assigned to this attachment by container runtime
container-id
string
ID assigned by container runtime (deprecated, may not be unique)
container-name
string
Name assigned to container (deprecated, may not be unique)
docker-endpoint-id
string
Docker endpoint ID
docker-network-id
string
Docker network ID
k8s-namespace
string
K8s namespace for this endpoint (deprecated, may not be unique)
k8s-pod-name
string
K8s pod name for this endpoint (deprecated, may not be unique)
pod-name
string
K8s pod for this endpoint (deprecated, may not be unique)
health object
Health is the overall endpoint & subcomponent health.
bpf
string
bpf
connected
boolean
Is this endpoint reachable
overallHealth
string
overall health
policy
string
policy
id
integer
ID is the cilium-agent-local ID of the endpoint.
format:
int64identity object
Identity is the security identity associated with the endpoint
id
integer
ID is the numeric identity of the endpoint
format:
int64
labels
[]string
Labels is the list of labels associated with the identity
log []object
Log is the list of the last few warning and error log entries
code
string
Code indicate type of status change
Enum: ["ok","failed"]
message
string
Status message
state
string
state
timestamp
string
Timestamp when status change occurred
named-ports []object
NamedPorts List of named Layer 4 port and protocol pairs which will be used in Network
Policy specs.
swagger:model NamedPorts
name
string
Optional layer 4 port name
port
integer
Layer 4 port number
protocol
string
Layer 4 protocol
Enum: ["TCP","UDP","SCTP","ICMP","ICMPV6","ANY"]
networking object
Networking is the networking properties of the endpoint.
addressing []object required
IP4/6 addresses assigned to this Endpoint
ipv4
string
ipv6
string
node
string
NodeIP is the IP of the node the endpoint is running on. The IP must
be reachable between nodes.
policy object
EndpointPolicy represents the endpoint's policy by listing all allowed
ingress and egress identities in combination with L4 port and protocol.
egress object
EndpointPolicyDirection is the list of allowed identities per direction.
adding []object
Deprecated
dest-port
integer
identity
integer
format:
int64
identity-labels
object
protocol
integer
allowed []object
AllowedIdentityList is a list of IdentityTuples that species peers that are
allowed.
dest-port
integer
identity
integer
format:
int64
identity-labels
object
protocol
integer
denied []object
DenyIdentityList is a list of IdentityTuples that species peers that are
denied.
dest-port
integer
identity
integer
format:
int64
identity-labels
object
protocol
integer
enforcing
boolean required
removing []object
Deprecated
dest-port
integer
identity
integer
format:
int64
identity-labels
object
protocol
integer
state
string
EndpointPolicyState defines the state of the Policy mode: "enforcing", "non-enforcing", "disabled"
ingress object
EndpointPolicyDirection is the list of allowed identities per direction.
adding []object
Deprecated
dest-port
integer
identity
integer
format:
int64
identity-labels
object
protocol
integer
allowed []object
AllowedIdentityList is a list of IdentityTuples that species peers that are
allowed.
dest-port
integer
identity
integer
format:
int64
identity-labels
object
protocol
integer
denied []object
DenyIdentityList is a list of IdentityTuples that species peers that are
denied.
dest-port
integer
identity
integer
format:
int64
identity-labels
object
protocol
integer
enforcing
boolean required
removing []object
Deprecated
dest-port
integer
identity
integer
format:
int64
identity-labels
object
protocol
integer
state
string
EndpointPolicyState defines the state of the Policy mode: "enforcing", "non-enforcing", "disabled"
state
string
State is the state of the endpoint.
enum:
creating, waiting-for-identity, not-ready, waiting-to-regenerate, regenerating, restoring, ready, disconnecting, disconnected, invalidNo matches. Try .apiVersion for an exact path