Struct NetworkIsolation 

pub struct NetworkIsolation {
    pub scope: Option<String>,
    pub fenced: bool,
    pub allow_host: bool,
    pub egress: EgressPolicy,
}

Resolved network-isolation policy for a workload, derived from its OverlayMode + NetworkMode + optional explicit isolation-network label. Each runtime translates this into its own enforcement (Seatbelt .sb ACL, Linux iptables ISO chain, HCN network, …).

Fields

scope: Option<String>

Isolation network name. None = flat cluster mesh (reach any overlay peer). Some(_) = fenced to this named network’s members only.

fenced: bool

When true, the workload must NOT be granted broad cluster-overlay reach (isolated/dedicated). When false, it may reach the whole overlay (normal).

allow_host: bool

Whether the workload may reach the daemon/node overlay IP.

egress: EgressPolicy

Outbound policy.

Trait Implementations

impl Clone for NetworkIsolation

fn clone(&self) -> NetworkIsolation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NetworkIsolation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for NetworkIsolation

impl PartialEq for NetworkIsolation

fn eq(&self, other: &NetworkIsolation) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for NetworkIsolation