157 lines
6.9 KiB
JSON
157 lines
6.9 KiB
JSON
{
|
|
"description": "ServersTransportTCP is the CRD implementation of a TCPServersTransport.\nIf no tcpServersTransport is specified, a default one named default@internal will be used.\nThe default@internal tcpServersTransport can be configured in the static configuration.\nMore info: https://doc.traefik.io/traefik/v3.6/reference/routing-configuration/tcp/serverstransport/",
|
|
"properties": {
|
|
"apiVersion": {
|
|
"description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources",
|
|
"type": "string"
|
|
},
|
|
"kind": {
|
|
"description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds",
|
|
"type": "string"
|
|
},
|
|
"metadata": {
|
|
"type": "object"
|
|
},
|
|
"spec": {
|
|
"description": "ServersTransportTCPSpec defines the desired state of a ServersTransportTCP.",
|
|
"properties": {
|
|
"dialKeepAlive": {
|
|
"anyOf": [
|
|
{
|
|
"type": "integer"
|
|
},
|
|
{
|
|
"type": "string"
|
|
}
|
|
],
|
|
"description": "DialKeepAlive is the interval between keep-alive probes for an active network connection. If zero, keep-alive probes are sent with a default value (currently 15 seconds), if supported by the protocol and operating system. Network protocols or operating systems that do not support keep-alives ignore this field. If negative, keep-alive probes are disabled.",
|
|
"pattern": "^([0-9]+(ns|us|\u00b5s|ms|s|m|h)?)+$",
|
|
"x-kubernetes-int-or-string": true
|
|
},
|
|
"dialTimeout": {
|
|
"anyOf": [
|
|
{
|
|
"type": "integer"
|
|
},
|
|
{
|
|
"type": "string"
|
|
}
|
|
],
|
|
"description": "DialTimeout is the amount of time to wait until a connection to a backend server can be established.",
|
|
"pattern": "^([0-9]+(ns|us|\u00b5s|ms|s|m|h)?)+$",
|
|
"x-kubernetes-int-or-string": true
|
|
},
|
|
"proxyProtocol": {
|
|
"description": "ProxyProtocol holds the PROXY Protocol configuration.",
|
|
"properties": {
|
|
"version": {
|
|
"description": "Version defines the PROXY Protocol version to use.",
|
|
"maximum": 2,
|
|
"minimum": 1,
|
|
"type": "integer"
|
|
}
|
|
},
|
|
"type": "object",
|
|
"additionalProperties": false
|
|
},
|
|
"terminationDelay": {
|
|
"anyOf": [
|
|
{
|
|
"type": "integer"
|
|
},
|
|
{
|
|
"type": "string"
|
|
}
|
|
],
|
|
"description": "TerminationDelay defines the delay to wait before fully terminating the connection, after one connected peer has closed its writing capability.",
|
|
"pattern": "^([0-9]+(ns|us|\u00b5s|ms|s|m|h)?)+$",
|
|
"x-kubernetes-int-or-string": true
|
|
},
|
|
"tls": {
|
|
"description": "TLS defines the TLS configuration",
|
|
"properties": {
|
|
"certificatesSecrets": {
|
|
"description": "CertificatesSecrets defines a list of secret storing client certificates for mTLS.",
|
|
"items": {
|
|
"type": "string"
|
|
},
|
|
"type": "array"
|
|
},
|
|
"insecureSkipVerify": {
|
|
"description": "InsecureSkipVerify disables TLS certificate verification.",
|
|
"type": "boolean"
|
|
},
|
|
"peerCertURI": {
|
|
"description": "MaxIdleConnsPerHost controls the maximum idle (keep-alive) to keep per-host.\nPeerCertURI defines the peer cert URI used to match against SAN URI during the peer certificate verification.",
|
|
"type": "string"
|
|
},
|
|
"rootCAs": {
|
|
"description": "RootCAs defines a list of CA certificate Secrets or ConfigMaps used to validate server certificates.",
|
|
"items": {
|
|
"description": "RootCA defines a reference to a Secret or a ConfigMap that holds a CA certificate.\nIf both a Secret and a ConfigMap reference are defined, the Secret reference takes precedence.",
|
|
"properties": {
|
|
"configMap": {
|
|
"description": "ConfigMap defines the name of a ConfigMap that holds a CA certificate.\nThe referenced ConfigMap must contain a certificate under either a tls.ca or a ca.crt key.",
|
|
"type": "string"
|
|
},
|
|
"secret": {
|
|
"description": "Secret defines the name of a Secret that holds a CA certificate.\nThe referenced Secret must contain a certificate under either a tls.ca or a ca.crt key.",
|
|
"type": "string"
|
|
}
|
|
},
|
|
"type": "object",
|
|
"x-kubernetes-validations": [
|
|
{
|
|
"message": "RootCA cannot have both Secret and ConfigMap defined.",
|
|
"rule": "!has(self.secret) || !has(self.configMap)"
|
|
}
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
"type": "array"
|
|
},
|
|
"rootCAsSecrets": {
|
|
"description": "RootCAsSecrets defines a list of CA secret used to validate self-signed certificate.\n\nDeprecated: RootCAsSecrets is deprecated, please use the RootCAs option instead.",
|
|
"items": {
|
|
"type": "string"
|
|
},
|
|
"type": "array"
|
|
},
|
|
"serverName": {
|
|
"description": "ServerName defines the server name used to contact the server.",
|
|
"type": "string"
|
|
},
|
|
"spiffe": {
|
|
"description": "Spiffe defines the SPIFFE configuration.",
|
|
"properties": {
|
|
"ids": {
|
|
"description": "IDs defines the allowed SPIFFE IDs (takes precedence over the SPIFFE TrustDomain).",
|
|
"items": {
|
|
"type": "string"
|
|
},
|
|
"type": "array"
|
|
},
|
|
"trustDomain": {
|
|
"description": "TrustDomain defines the allowed SPIFFE trust domain.",
|
|
"type": "string"
|
|
}
|
|
},
|
|
"type": "object",
|
|
"additionalProperties": false
|
|
}
|
|
},
|
|
"type": "object",
|
|
"additionalProperties": false
|
|
}
|
|
},
|
|
"type": "object",
|
|
"additionalProperties": false
|
|
}
|
|
},
|
|
"required": [
|
|
"metadata",
|
|
"spec"
|
|
],
|
|
"type": "object"
|
|
}
|