Orchestrator Golden Rules
The golden rules object attributes are described below. These golden rules allow a concise specification of rules necessary for the Kubernetes cluster to stay functional once enforcement is enabled on the Kubernetes cluster nodes.
|
Attribute |
Description |
|---|---|
|
Kubelet Port |
Kubelet node-local API port |
|
Services |
Array of Kubernetes Services objects |
The kubelet port is necessary to create policies to allow traffic from the Kubernetes management daemons to kubelets such as for live logs, execs of pods in interactive mode etc. Vital connectivity between the various kubernetes services and daemons is specified as a series of services - each entry in the services array has the following structure
-
Description: A string that describes the service
-
Addresses: A list of service endpoint addresses of the format <IP>:<port>/<protocol>.
-
Consumed By: A list of consumers of the endpoints (allowed values are Pods or Nodes)
|
If kubernetes is chosen as the type, Golden Rules configuration will be allowed. |
