ClientGroup

ClientGroup names a set of clients so that Policies can target them.


API version	`kudurru.io/v1alpha1`
Kind	`ClientGroup`
Scope	Namespaced
Resource	`clientgroups.kudurru.io`
Short names	`cg`
Subresources	`status`

Columns of kubectl get clientgroups:

Column	Type	Value
MEMBERS	integer	`.status.members`
READY	string	`.status.conditions[?(@.type=="Ready")].status`

Spec

ClientGroupSpec defines which clients belong to the group.

Field	Type	Description
`spec.clients`	`[]object`	Items: at most 1000
`spec.clients[].cidr`	`string`
`spec.clients[].clientID`	`string`	ClientID matches DoT SNI / DoH path client identifiers (v0.2).
`spec.clients[].comment`	`string`
`spec.clients[].hostname`	`string`
`spec.clients[].ip`	`string`
`spec.clients[].mac`	`string`	MAC matches through an inventory source such as UniFi (v0.2).
`spec.clients[].name`	`string`
`spec.clients[].nameGlob`	`string`
`spec.sources`	`object`	ClientGroupSources lets an integration add members (v0.2).
`spec.sources.integrationRef`	`object`	ObjectRef points at another kudurru object. Namespace is omitted for cluster-scoped kinds and for same-namespace references.
`spec.sources.integrationRef.name`	`string`	Required. Length: at least 1
`spec.sources.integrationRef.namespace`	`string`

Status

ClientGroupStatus is the observed state of a client group.

Field	Type	Description
`status.conditions`	`[]Condition`	List type: `map`, keyed by `type`
`status.members`	`integer`
`status.observedGeneration`	`integer`	Format: `int64`

Example

config/samples/kudurru.io_v1alpha1_clientgroup.yaml:

apiVersion: kudurru.io/v1alpha1
kind: ClientGroup
metadata:
  name: kids
  namespace: dns
spec:
  clients:
    - cidr: 10.0.20.0/24
      name: Kids VLAN
    - hostname: "ps5*"