Vrf

The Vrf resource creates a tenant-specific Virtual Routing and Forwarding (VRF) instance for routing domain isolation.

metadata

Field

Type

Required

Constraints

Description

name

string

Yes

Maximum length is 15

The VRF name. Used by other CRDs to reference this VRF. The system generates a deterministic route domain ID from this name.

spec

Field

Type

Required

Default

Description

strictIsolation

boolean

No

true

Enables strict isolation for the route domain. When enabled, traffic forwarding is restricted exclusively to the specified parent domain. Both child and parent domains require strict isolation to restrict forwarding. When disabled, traffic can flow freely between any route domains with strict isolation disabled.

interconnectVrf

array of strings

No

—

Lists the VRFs to connect for cross-route-domain proxying. Each of the referenced VRF must already exist and in a PROGRAMMED state. Self-references and circular references are not allowed. Note: Each entry in interconnectVrf must be unique, and a VRF cannot reference itself. If either rule is violated, the API server rejects the configuration.