github.phpd.cn/cilium/cilium@v1.6.12/pkg/k8s/apis/cilium.io/const.go (about) 1 // Copyright 2016-2017 Authors of Cilium 2 // 3 // Licensed under the Apache License, Version 2.0 (the "License"); 4 // you may not use this file except in compliance with the License. 5 // You may obtain a copy of the License at 6 // 7 // http://www.apache.org/licenses/LICENSE-2.0 8 // 9 // Unless required by applicable law or agreed to in writing, software 10 // distributed under the License is distributed on an "AS IS" BASIS, 11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 // See the License for the specific language governing permissions and 13 // limitations under the License. 14 15 package ciliumio 16 17 const ( 18 // PolicyLabelName is the name of the policy label which refers to the 19 // k8s policy name. 20 PolicyLabelName = "io.cilium.k8s.policy.name" 21 22 // PolicyLabelUID is the uid of the policy label which refers to the 23 // k8s policy UID. 24 PolicyLabelUID = "io.cilium.k8s.policy.uid" 25 26 // PolicyLabelNamespace is the policy's namespace set in k8s. 27 PolicyLabelNamespace = "io.cilium.k8s.policy.namespace" 28 29 // PolicyLabelDerivedFrom is the resource type which was used to 30 // derived the policy rule 31 PolicyLabelDerivedFrom = "io.cilium.k8s.policy.derived-from" 32 33 // PolicyLabelServiceAccount is the name of the label associated with 34 // an endpoint to represent the Kubernetes ServiceAccount name 35 PolicyLabelServiceAccount = "io.cilium.k8s.policy.serviceaccount" 36 37 // PolicyLabelCluster is the name of the cluster the endpoint is 38 // running in 39 PolicyLabelCluster = "io.cilium.k8s.policy.cluster" 40 41 // PolicyLabelIstioSidecarProxy is the label key added to the identity of 42 // any pod that has been injected by Istio with a Cilium-compatible sidecar 43 // proxy. The value of this label is expected to be a boolean, i.e. "true" 44 // or "false". 45 PolicyLabelIstioSidecarProxy = "io.cilium.k8s.policy.istiosidecarproxy" 46 47 // PodNamespaceMetaLabels is the label used to store the labels of the 48 // kubernetes namespace's labels. 49 PodNamespaceMetaLabels = "io.cilium.k8s.namespace.labels" 50 // PodNamespaceLabel is the label used in kubernetes containers to 51 // specify which namespace they belong to. 52 PodNamespaceLabel = "io.kubernetes.pod.namespace" 53 // AppKubernetes is the label which is recommended by the official k8s 54 // documentation ad the lablel for every resource object. 55 AppKubernetes = "app.kubernetes.io" 56 // CtrlPrefixPolicyStatus is the prefix used for the controllers set up 57 // to sync the CNP with kube-apiserver. 58 CtrlPrefixPolicyStatus = "sync-cnp-policy-status" 59 60 // CiliumK8sAnnotationPrefix is the prefix key for the annotations used in kubernetes. 61 CiliumK8sAnnotationPrefix = "cilium.io/" 62 // CiliumIdentityAnnotationDeprecated is the previous annotation key used to map to an endpoint's security identity. 63 CiliumIdentityAnnotationDeprecated = "cilium-identity" 64 ) 65 66 const ( 67 // V1 represents version 1 of cilium API 68 // Deprecated 69 V1 = iota 70 // V2 represents version 2 of cilium API 71 V2 72 )