Create manifests

metal-stack · Dec 18, 2023 · 4fd5ff5 · 4fd5ff5
1 parent 3b80ac4
commit 4fd5ff5
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 0 deletions.
diff --git a/config/crds/firewall.metal-stack.io_firewalldeployments.yaml b/config/crds/firewall.metal-stack.io_firewalldeployments.yaml
@@ -99,6 +99,14 @@ spec:
                   spec:
                     description: Spec contains the firewall specification.
                     properties:
+                      allowedExternalNetworks:
+                        description: AllowedExternalNetworks defines which networks
+                          are allowed to connect to, and allow incoming traffic from.
+                          By default, defined by an empty slice, all external networks
+                          are allowed. The node network is always allowed.
+                        items:
+                          type: string
+                        type: array
                       controllerURL:
                         description: ControllerURL points to the downloadable binary
                           artifact of the firewall controller.

diff --git a/config/crds/firewall.metal-stack.io_firewalls.yaml b/config/crds/firewall.metal-stack.io_firewalls.yaml
@@ -66,6 +66,14 @@ spec:
           spec:
             description: Spec contains the firewall specification.
             properties:
+              allowedExternalNetworks:
+                description: AllowedExternalNetworks defines which networks are allowed
+                  to connect to, and allow incoming traffic from. By default, defined
+                  by an empty slice, all external networks are allowed. The node network
+                  is always allowed.
+                items:
+                  type: string
+                type: array
               controllerURL:
                 description: ControllerURL points to the downloadable binary artifact
                   of the firewall controller.

diff --git a/config/crds/firewall.metal-stack.io_firewallsets.yaml b/config/crds/firewall.metal-stack.io_firewallsets.yaml
@@ -102,6 +102,14 @@ spec:
                   spec:
                     description: Spec contains the firewall specification.
                     properties:
+                      allowedExternalNetworks:
+                        description: AllowedExternalNetworks defines which networks
+                          are allowed to connect to, and allow incoming traffic from.
+                          By default, defined by an empty slice, all external networks
+                          are allowed. The node network is always allowed.
+                        items:
+                          type: string
+                        type: array
                       controllerURL:
                         description: ControllerURL points to the downloadable binary
                           artifact of the firewall controller.