CRD reference
The kudurru.io custom resources: every field, its type and its validation.
The kudurru.io kinds are the same documents in every deployment shape:
CRDs in Kubernetes (kubectl apply), and the objects of the sqlite store in a
single container (kudurru apply -f, objects.d/, the API and the UI). The
field tables are generated from the OpenAPI v3 schemas of the CRDs, so the
validation listed here is what the apiserver, and kudurru's own store
validator in Docker mode, enforce.
| Kind | Scope | Short names | Description |
|---|---|---|---|
| BlockList | Namespaced | blocklist | BlockList is a named, refreshable set of block or allow entries. |
| ClientGroup | Namespaced | cg | ClientGroup names a set of clients so that Policies can target them. |
| DNSRecordSet | Namespaced | rrset | DNSRecordSet is a set of records that belong to a DNSZone. |
| DNSZone | Cluster | zone | DNSZone is a recorded grant of authority over a name space: the stone kept in the temple. |
| Policy | Namespaced | pol | Policy applies lists, schedules and resolver settings to client groups. |
| UnblockRequest | Namespaced | ubr | UnblockRequest is a user's request, made on the block page, to allow a blocked name. |
- BlockList
BlockList is a named, refreshable set of block or allow entries.
- ClientGroup
ClientGroup names a set of clients so that Policies can target them.
- DNSRecordSet
DNSRecordSet is a set of records that belong to a DNSZone.
- DNSZone
DNSZone is a recorded grant of authority over a name space: the stone kept in the temple.
- Policy
Policy applies lists, schedules and resolver settings to client groups.
- UnblockRequest
UnblockRequest is a user's request, made on the block page, to allow a blocked name.