operator 3.105.0 (#162)

metalbear-co · Feb 7, 2025 · 7341f65 · 7341f65
1 parent b2d1d48
commit 7341f65
Show file tree

Hide file tree

Showing 2 changed files with 70 additions and 2 deletions.
diff --git a/mirrord-operator/Chart.yaml b/mirrord-operator/Chart.yaml
@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.19.0
+version: 1.20.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "3.104.2"
+appVersion: "3.105.0"
diff --git a/mirrord-operator/templates/crd.yaml b/mirrord-operator/templates/crd.yaml
@@ -86,6 +86,40 @@ spec:
                       type: string
                     type: array
                 type: object
+              network:
+                default:
+                  incoming:
+                    httpFilter:
+                      headerFilter: null
+                description: Fine grained control over network features like specifying required HTTP filters.
+                properties:
+                  incoming:
+                    default:
+                      httpFilter:
+                        headerFilter: null
+                    description: Incoming network operations policy that partialy mimics the mirrord `network.incoming` config.
+                    properties:
+                      httpFilter:
+                        default:
+                          headerFilter: null
+                        description: Http filter policy that allows to specify requirements for the HTTP filter used in a session.
+                        properties:
+                          headerFilter:
+                            description: |-
+                              Require the user's header filter to match this regex, if such filter is provided.
+
+                              This auto enables `steal-without-filter` policy block to require that the user specifies a header filter for the network steal feature.
+
+                              # Composed filters
+
+                              When the user requests an `all_of` HTTP filter, at least one of the nested filters must be a header filter that matches this regex. At least one nested filter is required.
+
+                              When the user requests an `any_of` HTTP filter, all nested header filters must match this regex. At least one nested header filter is required.
+                            nullable: true
+                            type: string
+                        type: object
+                    type: object
+                type: object
               selector:
                 description: If specified in a policy, the policy will only apply to targets with labels that match all of the selector's rules.
                 nullable: true
@@ -228,6 +262,40 @@ spec:
                       type: string
                     type: array
                 type: object
+              network:
+                default:
+                  incoming:
+                    httpFilter:
+                      headerFilter: null
+                description: Network operations policy that partialy mimics the mirrord network config.
+                properties:
+                  incoming:
+                    default:
+                      httpFilter:
+                        headerFilter: null
+                    description: Incoming network operations policy that partialy mimics the mirrord `network.incoming` config.
+                    properties:
+                      httpFilter:
+                        default:
+                          headerFilter: null
+                        description: Http filter policy that allows to specify requirements for the HTTP filter used in a session.
+                        properties:
+                          headerFilter:
+                            description: |-
+                              Require the user's header filter to match this regex, if such filter is provided.
+
+                              This auto enables `steal-without-filter` policy block to require that the user specifies a header filter for the network steal feature.
+
+                              # Composed filters
+
+                              When the user requests an `all_of` HTTP filter, at least one of the nested filters must be a header filter that matches this regex. At least one nested filter is required.
+
+                              When the user requests an `any_of` HTTP filter, all nested header filters must match this regex. At least one nested header filter is required.
+                            nullable: true
+                            type: string
+                        type: object
+                    type: object
+                type: object
               selector:
                 description: If specified in a policy, the policy will only apply to targets with labels that match all of the selector's rules.
                 nullable: true