Documentation
¶
Index ¶
Constants ¶
View Source
const (
// AnnotationLoadBalancerSourceRangesKey is the key of the annotation on a service to set allowed ingress ranges on their LoadBalancers
//
// It should be a comma-separated list of CIDRs, e.g. `0.0.0.0/0` to
// allow full access (the default) or `18.0.0.0/8,56.0.0.0/8` to allow
// access only from the CIDRs currently allocated to MIT & the USPS.
//
// Not all cloud providers support this annotation, though AWS & GCE do.
AnnotationLoadBalancerSourceRangesKey = "service.beta.kubernetes.io/load-balancer-source-ranges"
)
Variables ¶
This section is empty.
Functions ¶
func GetLoadBalancerSourceRanges ¶
func GetLoadBalancerSourceRanges(annotations map[string]string) (netsets.IPNet, error)
GetLoadBalancerSourceRanges verifies and parses the AnnotationLoadBalancerSourceRangesKey annotation from a service, extracting the source ranges to allow, and if not present returns a default (allow-all) value.
func IsAllowAll ¶
func IsAllowAll(ipnets netsets.IPNet) bool
IsAllowAll checks whether the netsets.IPNet allows traffic from 0.0.0.0/0
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.