Merge pull request #281 from MrHohn/cloud-armor-api

Define security policy API in BackendConfig
kubernetes · May 25, 2018 · fa9447c · fa9447c
2 parents e00e925 + 0506bf1
commit fa9447c
Show file tree

Hide file tree

Showing 3 changed files with 40 additions and 3 deletions.
diff --git a/pkg/apis/backendconfig/v1beta1/types.go b/pkg/apis/backendconfig/v1beta1/types.go
@@ -37,8 +37,9 @@ type BackendConfig struct {
 // BackendConfigSpec is the spec for a BackendConfig resource
 // +k8s:openapi-gen=true
 type BackendConfigSpec struct {
-	Iap *IAPConfig `json:"iap,omitempty"`
-	Cdn *CDNConfig `json:"cdn,omitempty"`
+	Iap            *IAPConfig            `json:"iap,omitempty"`
+	Cdn            *CDNConfig            `json:"cdn,omitempty"`
+	SecurityPolicy *SecurityPolicyConfig `json:"securityPolicy,omitempty"`
 }
 
 // BackendConfigStatus is the status for a BackendConfig resource
@@ -97,3 +98,9 @@ type CacheKeyPolicy struct {
 	// QueryStringWhitelist, but not both.
 	QueryStringWhitelist []string `json:"queryStringWhitelist,omitempty"`
 }
+
+// SecurityPolicyConfig contains configuration for CloudArmor-enabled backends.
+type SecurityPolicyConfig struct {
+	// Name of the security policy that should be associated.
+	Name string `json:"name"`
+}
diff --git a/pkg/apis/backendconfig/v1beta1/zz_generated.deepcopy.go b/pkg/apis/backendconfig/v1beta1/zz_generated.deepcopy.go
diff --git a/pkg/apis/backendconfig/v1beta1/zz_generated.openapi.go b/pkg/apis/backendconfig/v1beta1/zz_generated.openapi.go