Struct NetworkPolicyBuilder 

pub struct NetworkPolicyBuilder { /* private fields */ }

Fluent builder for NetworkPolicy.

Construct via NetworkPolicy::builder.

Implementations

impl NetworkPolicyBuilder

pub fn new() -> Self

Create an empty builder.

pub fn default_allow(self) -> Self

Set both default_egress and default_ingress to Allow.

pub fn default_deny(self) -> Self

Set both default_egress and default_ingress to Deny.

pub fn default_egress(self, action: Action) -> Self

Per-direction override for the egress default action.

pub fn default_ingress(self, action: Action) -> Self

Per-direction override for the ingress default action.

pub fn rule<F>(self, f: F) -> Self

where F: for<'a> FnOnce(&'a mut RuleBuilder) -> &'a mut RuleBuilder,

Open a multi-rule batch closure. Direction must be set inside via .egress(), .ingress(), or .any() before any rule-adder.

pub fn egress<F>(self, f: F) -> Self

where F: for<'a> FnOnce(&'a mut RuleBuilder) -> &'a mut RuleBuilder,

Sugar for Self::rule with direction pre-set to Egress.

pub fn ingress<F>(self, f: F) -> Self

where F: for<'a> FnOnce(&'a mut RuleBuilder) -> &'a mut RuleBuilder,

Sugar for Self::rule with direction pre-set to Ingress.

pub fn any<F>(self, f: F) -> Self

where F: for<'a> FnOnce(&'a mut RuleBuilder) -> &'a mut RuleBuilder,

Sugar for Self::rule with direction pre-set to Any. Rules committed inside apply in both directions.

pub fn build(self) -> Result<NetworkPolicy, BuildError>

Consume the builder and produce a NetworkPolicy.

Lazy-parses every .ip() / .cidr() / .domain() / .domain_suffix() input, validates direction-set and ICMP-egress-only invariants, and emits a tracing::warn! for each shadowed rule pair detected.

Returns the first BuildError encountered.

Trait Implementations

impl Debug for NetworkPolicyBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NetworkPolicyBuilder

fn default() -> NetworkPolicyBuilder

Returns the “default value” for a type.