Core Networking: SecurityList¶

Manage OCI core networking resources from Kubernetes. This page is generated from checked-in package metadata, CRD schemas, and sample manifests.

Resource Snapshot¶

Field	Value
Service	`core`
Resource	`SecurityList`
API Version	`core.oracle.com/v1beta1`
Package	Core Networking
Support Status	Preview
Latest Released Version	`v2.0.0-alpha`
Install Namespace	`oci-service-operator-core-network-system`

Quick Links¶

Resource Guide Index
Setup Guide
Package Page
API Reference
Spec Reference
Status Reference
Rendered Sample (config/samples/core_v1beta1_securitylist.yaml)

Spec Fields¶

This summary shows the top-level spec fields. Use the full API reference for nested fields, defaults, and enum values.

Field	Description	Type	Required
`compartmentId`	The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the compartment to contain the security list.	`string`	Yes
`definedTags`	Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags (https://docs.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Operations": {"CostCenter": "42"}}`	`map[string, map[string, string]]`	No
`displayName`	A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.	`string`	No
`egressSecurityRules`	Rules for allowing egress IP packets.	`list[object]`	Yes
`freeformTags`	Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags (https://docs.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Department": "Finance"}`	`map[string, string]`	No
`ingressSecurityRules`	Rules for allowing ingress IP packets.	`list[object]`	Yes
`vcnId`	The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the VCN the security list belongs to.	`string`	Yes

Status Fields¶

This summary shows the top-level status fields. Use the full API reference for nested fields, defaults, and enum values.

Field	Description	Type	Required
`compartmentId`	The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the compartment containing the security list.	`string`	No
`definedTags`	Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags (https://docs.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Operations": {"CostCenter": "42"}}`	`map[string, map[string, string]]`	No
`displayName`	A user-friendly name. Does not have to be unique, and it's changeable. Avoid entering confidential information.	`string`	No
`egressSecurityRules`	Rules for allowing egress IP packets.	`list[object]`	No
`freeformTags`	Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags (https://docs.oracle.com/iaas/Content/General/Concepts/resourcetags.htm). Example: `{"Department": "Finance"}`	`map[string, string]`	No
`id`	The security list's Oracle Cloud ID (OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm)).	`string`	No
`ingressSecurityRules`	Rules for allowing ingress IP packets.	`list[object]`	No
`lifecycleState`	The security list's current state.	`string`	No
`status`	-	`object`	Yes
`timeCreated`	The date and time the security list was created, in the format defined by RFC3339 (https://tools.ietf.org/html/rfc3339). Example: `2016-08-25T21:10:29.600Z`	`string`	No
`vcnId`	The OCID (https://docs.oracle.com/iaas/Content/General/Concepts/identifiers.htm) of the VCN the security list belongs to.	`string`	No

Sample Manifest¶

This example is generated from the checked-in sample manifest at config/samples/core_v1beta1_securitylist.yaml. Replace placeholder values before applying it.

Open the rendered sample page

#
# Copyright (c) 2021, Oracle and/or its affiliates. All rights reserved.
# Licensed under the Universal Permissive License v 1.0 as shown at http://oss.oracle.com/licenses/upl.
#

#
# Replace the OCI identifiers below before running e2e.
# Update metadata.name and spec.displayName if you want to force a fresh create
# instead of reusing an existing SecurityList with the same display name in the same
# VCN.
#
apiVersion: core.oracle.com/v1beta1
kind: SecurityList
metadata:
  name: securitylist-sample
spec:
  compartmentId: ocid1.compartment.oc1..exampleuniqueID
  vcnId: ocid1.vcn.oc1..exampleuniqueID
  displayName: "securitylist-sample"
  egressSecurityRules:
    - destination: 0.0.0.0/0
      protocol: "all"
      description: "Allow outbound traffic"
  ingressSecurityRules:
    - protocol: "6"
      source: 10.0.0.0/16
      description: "Allow SSH from the VCN CIDR"
      tcpOptions:
        destinationPortRange:
          min: 22
          max: 22