Allow the definition of allowed networks for isolated clusters

metal-stack · Nov 20, 2023 · 3b80ac4 · 3b80ac4
1 parent cf00b12
commit 3b80ac4
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/api/v2/types_firewall.go b/api/v2/types_firewall.go
@@ -110,6 +110,11 @@ type FirewallSpec struct {
 	DNSServerAddress string `json:"dnsServerAddress,omitempty"`
 	// DNSPort specifies port to which DNS proxy should be bound
 	DNSPort *uint `json:"dnsPort,omitempty"`
+
+	// AllowedExternalNetworks defines which networks are allowed to connect to, and allow incoming traffic from.
+	// By default, defined by an empty slice, all external networks are allowed.
+	// The node network is always allowed.
+	AllowedExternalNetworks []string `json:"allowedExternalNetworks,omitempty"`
 }
 
 // FirewallTemplateSpec describes the data a firewall should have when created from a template

diff --git a/api/v2/zz_generated.deepcopy.go b/api/v2/zz_generated.deepcopy.go