Ciliumendpoint v2 — cilium.io

apiVersion string

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

kind string

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

metadata object required

status object

EndpointStatus is the status of a Cilium endpoint.

controllers []object

Controllers is the list of failing controllers for this endpoint.

configuration object

Configuration is the controller configuration

error-retry boolean

Retry on error

error-retry-base integer

Base error retry back-off time Format: duration

format: int64

interval integer

Regular synchronization interval Format: duration

format: int64

name string

Name is the name of the controller

status object

Status is the status of the controller

consecutive-failure-count integer

format: int64

failure-count integer

format: int64

last-failure-msg string

last-failure-timestamp string

last-success-timestamp string

success-count integer

format: int64

uuid string

UUID is the UUID of the controller

encryption object

Encryption is the encryption configuration of the node

key integer

Key is the index to the key to use for encryption or 0 if encryption is disabled.

external-identifiers object

ExternalIdentifiers is a set of identifiers to identify the endpoint apart from the pod name. This includes container runtime IDs.

cni-attachment-id string

ID assigned to this attachment by container runtime

container-id string

ID assigned by container runtime (deprecated, may not be unique)

container-name string

Name assigned to container (deprecated, may not be unique)

docker-endpoint-id string

Docker endpoint ID

docker-network-id string

Docker network ID

k8s-namespace string

K8s namespace for this endpoint (deprecated, may not be unique)

k8s-pod-name string

K8s pod name for this endpoint (deprecated, may not be unique)

pod-name string

K8s pod for this endpoint (deprecated, may not be unique)

health object

Health is the overall endpoint & subcomponent health.

bpf string

bpf

connected boolean

Is this endpoint reachable

overallHealth string

overall health

policy string

policy

id integer

ID is the cilium-agent-local ID of the endpoint.

format: int64

identity object

Identity is the security identity associated with the endpoint

id integer

ID is the numeric identity of the endpoint

format: int64

labels []string

Labels is the list of labels associated with the identity

log []object

Log is the list of the last few warning and error log entries

code string

Code indicate type of status change Enum: ["ok","failed"]

message string

Status message

state string

state

timestamp string

Timestamp when status change occurred

named-ports []object

NamedPorts List of named Layer 4 port and protocol pairs which will be used in Network Policy specs. swagger:model NamedPorts

name string

Optional layer 4 port name

port integer

Layer 4 port number

protocol string

Layer 4 protocol Enum: ["TCP","UDP","SCTP","ICMP","ICMPV6","ANY"]

networking object

Networking is the networking properties of the endpoint.

addressing []object required

IP4/6 addresses assigned to this Endpoint

ipv4 string

ipv6 string

node string

NodeIP is the IP of the node the endpoint is running on. The IP must be reachable between nodes.

policy object

EndpointPolicy represents the endpoint's policy by listing all allowed ingress and egress identities in combination with L4 port and protocol.

egress object

EndpointPolicyDirection is the list of allowed identities per direction.

adding []object

Deprecated

dest-port integer

identity integer

format: int64

identity-labels object

protocol integer

allowed []object

AllowedIdentityList is a list of IdentityTuples that species peers that are allowed.

dest-port integer

identity integer

format: int64

identity-labels object

protocol integer

denied []object

DenyIdentityList is a list of IdentityTuples that species peers that are denied.

dest-port integer

identity integer

format: int64

identity-labels object

protocol integer

enforcing boolean required

removing []object

Deprecated

dest-port integer

identity integer

format: int64

identity-labels object

protocol integer

state string

EndpointPolicyState defines the state of the Policy mode: "enforcing", "non-enforcing", "disabled"

ingress object

EndpointPolicyDirection is the list of allowed identities per direction.

adding []object

Deprecated

dest-port integer

identity integer

format: int64

identity-labels object

protocol integer

allowed []object

AllowedIdentityList is a list of IdentityTuples that species peers that are allowed.

dest-port integer

identity integer

format: int64

identity-labels object

protocol integer

denied []object

DenyIdentityList is a list of IdentityTuples that species peers that are denied.

dest-port integer

identity integer

format: int64

identity-labels object

protocol integer

enforcing boolean required

removing []object

Deprecated

dest-port integer

identity integer

format: int64

identity-labels object

protocol integer

state string

EndpointPolicyState defines the state of the Policy mode: "enforcing", "non-enforcing", "disabled"

service-account string

ServiceAccount is the service account associated with the endpoint

state string

State is the state of the endpoint.

enum: creating, waiting-for-identity, not-ready, waiting-to-regenerate, regenerating, restoring, ready, disconnecting, disconnected, invalid