config

type Configuration struct {
	metav1.TypeMeta

	// EgressFilter contains the configuration for the egress filter
	EgressFilter *EgressFilter

	// HealthCheckConfig is the config for the health check controller.
	HealthCheckConfig *healthcheckconfig.HealthCheckConfig
}

type DownloaderConfig struct {
	// Endpoint is the endpoint URL for downloading the filter list.
	Endpoint string
	// OAuth2Endpoint contains the optional OAuth endpoint for fetching the access token.
	// If specified, the OAuth2Secret must be provided, too.
	OAuth2Endpoint *string
	// RefreshPeriod is interval for refreshing the filter list.
	// If unset, the filter list is only fetched on startup.
	RefreshPeriod *metav1.Duration
}

type EgressFilter struct {
	// BlackholingEnabled is a flag to set blackholing or firewall approach.
	BlackholingEnabled bool

	// SleepDuration is the time interval between policy updates.
	SleepDuration *metav1.Duration

	// FilterListProviderType specifies how the filter list is retrieved.
	// Supported types are `static` and `download`.
	FilterListProviderType FilterListProviderType

	// StaticFilterList contains the static filter list.
	// Only used for provider type `static`.
	StaticFilterList []Filter

	// DownloaderConfig contains the configuration for the filter list downloader.
	// Only used for provider type `download`.
	DownloaderConfig *DownloaderConfig

	// EnsureConnectivity configures the removal of seed and/or shoot load balancers IPs from the filter list.
	EnsureConnectivity *EnsureConnectivity
}

type EnsureConnectivity struct {
	// SeedNamespaces contains the seed namespaces to check for load balancers.
	SeedNamespaces []string
}

type Filter struct {
	// Network is the network CIDR of the filter.
	Network string
	// Policy is the access policy (`BLOCK_ACCESS` or `ALLOW_ACCESS`).
	Policy Policy
}

type FilterListProviderType string

type OAuth2Secret struct {
	// ClientID is the OAuth2 client id.
	ClientID string
	// ClientSecret is the optional OAuth2 client secret.
	ClientSecret string
	// ClientCert is the optional client certificate.
	ClientCert []byte
	// ClientCertKey is the optional private key of the client certificate.
	ClientCertKey []byte
}

type Policy string