F5BigCnePortlist

Overview

The F5BigCnePortlist Custom Resource (CR) is useful for defining larger, more complex sets of service ports, that can then be referenced in F5BigFwRulelist and F5BigFwPolicy CRs:

• F5BigFwPolicy - Granular packet filtering based on access control list (ACL) policies.

This document guides you through creating a simple F5BigCnePortlist.

Note

The F5BigCneAddresslist CR is useful for defining lists of IP addresses ports.

Parameters

metadata

Parameter	Description
name	The unique name identifying the resource (Kubernetes object name). Example: my-portlist.
namespace	The Kubernetes namespace in which the resource is created.

The CR spec parameters used to configure larger, more complex sets of service ports:

Parameter	Type	Description	Default
portLists	array	References to other F5BigCnePortlist objects (child port lists). This allows nested/aggregated port lists.	(none in CRD)
ports	array	List of ports. Items can be individual ports or port ranges.	(none in CRD)

Sample

apiVersion: "k8s.f5net.com/v1"
kind: F5BigCnePortlist
metadata:
   name: "drop-ports"
   namespace: f5-bnk
spec:
   ports:
     - "9000"
     - "9001"
   portLists:
     -  "portlist"
---
apiVersion: "k8s.f5net.com/v1"
kind: F5BigCnePortlist
metadata:
   name: "portlist"
   namespace: f5-bnk
spec:
   ports:
     - "4000-4010"

Applying F5BigCnePortlist CR

To apply the CR in a namespace,

1. Copy the sample CR into a YAML <portlist.yaml> file.

2. Apply the F5BigCnePortlist CR:

   kubectl apply -f portlist.yaml
   f5bigcneportlist.k8s.f5net.com/drop-ports created
   f5bigcneportlist.k8s.f5net.com/portlist created
   
   kubectl get -f portlist.yaml
   NAME         READY   MESSAGE                                AGE
   drop-ports   True    CR config sent to all grpc endpoints   35s
   portlist     True    CR config sent to all grpc endpoints   35s
   

   For example: This log indicates that the F5BigCnePortlist CR was added or updated.

     Conditions:
       Last Transition Time:  2026-03-18T11:37:16Z
       Message:
       Observed Generation:   0
       Reason:                Accepted
       Status:                True
       Type:                  Accepted
       Last Transition Time:  2026-03-18T11:37:16Z
       Message:               CR config sent to all grpc endpoints
       Observed Generation:   2
       Reason:                Programmed
       Status:                True
       Type:                  Programmed
     Generation Id:           0
   Events:
     Type    Reason         Age   From               Message
     ----    ------         ----  ----               -------
     Normal  Added/Updated  57s   f5-cne-controller  F5PortList f5-bnk/portlist was added/updated