blob: 460c571799de54d2910e2dafcda560dcab8f6d67 [file] [log] [blame]
Serge Bazanskic6118642021-01-31 01:17:38 +01001syntax = "proto3";
2package config;
3option go_package = "code.hackerspace.pl/hscloud/cluster/admitomatic/config";
4
5// Admitomatic configuration, passed as a text proto, for
6// example:
7//
8// $ cat sample.pb.text
9// allow_domain { namespace: "example" dns: "*.example.com" }
10// allow_domain {
11// namespace: "personal-q3k" dns: "foo.q3k.org"
12// }
13// allow_domain {
14// namespace: "personal-q3k" dns: "bar.q3k.org"
15// }
16//
17message Config {
18 // List of domains that are allowed to be configured as
19 // ingresses in a given namespace. If a domain does not
20 // appear in this list, it will be allowed to run in any
21 // namespace.
22 repeated AllowDomain allow_domain = 1;
23}
24
25message AllowDomain {
26 // namespace is a kubernetes namespace. An empty string is
27 // treated as the 'default' namespace.
28 string namespace = 1;
29 // dns is a domain name like 'example.com' or a wildcard
30 // like '*.foo.example.com'.
31 // Wildcards match domains at any level beneath the root,
32 // so the example above would match 'bar.foo.example.com'
33 // and 'baz.bar.foo.example.com'. However, they do not
34 // catch the root itself, ie. the above would not catch
35 // 'foo.example.com'.
36 string dns = 2;
37}