Created
January 21, 2023 15:41
-
-
Save sharkymcdongles/19d4d729ceeda694c3bc2e5737c99ea3 to your computer and use it in GitHub Desktop.
ambassador_crds_v2
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: authservices.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: AuthService | |
| listKind: AuthServiceList | |
| plural: authservices | |
| singular: authservice | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: AuthService is the Schema for the authservices API | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: AuthServiceSpec defines the desired state of AuthService | |
| properties: | |
| add_auth_headers: | |
| additionalProperties: | |
| type: string | |
| type: object | |
| add_linkerd_headers: | |
| type: boolean | |
| allow_request_body: | |
| type: boolean | |
| allowed_authorization_headers: | |
| items: | |
| type: string | |
| type: array | |
| allowed_request_headers: | |
| items: | |
| type: string | |
| type: array | |
| auth_service: | |
| type: string | |
| failure_mode_allow: | |
| type: boolean | |
| include_body: | |
| properties: | |
| allow_partial: | |
| type: boolean | |
| max_bytes: | |
| description: These aren't pointer types because they are required. | |
| type: integer | |
| required: | |
| - allow_partial | |
| - max_bytes | |
| type: object | |
| path_prefix: | |
| type: string | |
| proto: | |
| enum: | |
| - http | |
| - grpc | |
| type: string | |
| protocol_version: | |
| enum: | |
| - v2 | |
| - v3 | |
| type: string | |
| status_on_error: | |
| description: Why isn't this just an int?? | |
| properties: | |
| code: | |
| type: integer | |
| type: object | |
| timeout_ms: | |
| type: integer | |
| v3CircuitBreakers: | |
| items: | |
| properties: | |
| max_connections: | |
| type: integer | |
| max_pending_requests: | |
| type: integer | |
| max_requests: | |
| type: integer | |
| max_retries: | |
| type: integer | |
| priority: | |
| enum: | |
| - default | |
| - high | |
| type: string | |
| type: object | |
| type: array | |
| v3StatsName: | |
| type: string | |
| required: | |
| - auth_service | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| served: true | |
| storage: true | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: consulresolvers.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: ConsulResolver | |
| listKind: ConsulResolverList | |
| plural: consulresolvers | |
| singular: consulresolver | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: ConsulResolver is the Schema for the ConsulResolver API | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: ConsulResolver tells Ambassador to use Consul to resolve | |
| services. In addition to the AmbassadorID, it needs information about | |
| which Consul server and DC to use. | |
| properties: | |
| address: | |
| type: string | |
| datacenter: | |
| type: string | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| served: true | |
| storage: true | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: devportals.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: DevPortal | |
| listKind: DevPortalList | |
| plural: devportals | |
| singular: devportal | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: "DevPortal is the Schema for the DevPortals API \n DevPortal | |
| resources specify the `what` and `how` is shown in a DevPortal: \n 1. `what` | |
| is in a DevPortal can be controlled with \n - a `selector`, that can | |
| be used for filtering `Mappings`. \n - a `docs` listing of (services, | |
| url) \n 2. `how` is a pointer to some `contents` (a checkout of a Git repository | |
| \ with go-templates/markdown/css). \n Multiple `DevPortal`s can exist | |
| in the cluster, and the Dev Portal server will show them at different endpoints. | |
| A `DevPortal` resource with a special name, `ambassador`, will be used for | |
| configuring the default Dev Portal (served at `/docs/` by default)." | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: DevPortalSpec defines the desired state of DevPortal | |
| properties: | |
| content: | |
| description: Content specifies where the content shown in the DevPortal | |
| come from | |
| properties: | |
| branch: | |
| type: string | |
| dir: | |
| type: string | |
| url: | |
| type: string | |
| type: object | |
| default: | |
| description: Default must be true when this is the default DevPortal | |
| type: boolean | |
| docs: | |
| description: Docs is a static docs definition | |
| items: | |
| description: 'DevPortalDocsSpec is a static documentation definition: | |
| instead of using a Selector for finding documentation for services, | |
| users can provide a static list of <service>:<URL> tuples. These | |
| services will be shown in the Dev Portal with the documentation | |
| obtained from this URL.' | |
| properties: | |
| service: | |
| description: Service is the service being documented | |
| type: string | |
| timeout_ms: | |
| description: Timeout specifies the amount of time devportal | |
| will wait for the downstream service to report an openapi | |
| spec back | |
| type: integer | |
| url: | |
| description: URL is the URL used for obtaining docs | |
| type: string | |
| type: object | |
| type: array | |
| naming_scheme: | |
| description: Describes how to display "services" in the DevPortal. | |
| Default namespace.name | |
| enum: | |
| - namespace.name | |
| - name.prefix | |
| type: string | |
| preserve_servers: | |
| description: Configures this DevPortal to use server definitions from | |
| the openAPI doc instead of rewriting them based on the url used | |
| for the connection. | |
| type: boolean | |
| search: | |
| description: DevPortalSearchSpec allows configuration over search | |
| functionality for the DevPortal | |
| properties: | |
| enabled: | |
| type: boolean | |
| type: | |
| description: 'Type of search. "title-only" does a fuzzy search | |
| over openapi and page titles "all-content" will fuzzy search | |
| over all openapi and page content. "title-only" is the default. | |
| warning: using all-content may incur a larger memory footprint' | |
| enum: | |
| - title-only | |
| - all-content | |
| type: string | |
| type: object | |
| selector: | |
| description: Selector is used for choosing what is shown in the DevPortal | |
| properties: | |
| matchLabels: | |
| additionalProperties: | |
| type: string | |
| description: MatchLabels specifies the list of labels that must | |
| be present in Mappings for being present in this DevPortal. | |
| type: object | |
| matchNamespaces: | |
| description: MatchNamespaces is a list of namespaces that will | |
| be included in this DevPortal. | |
| items: | |
| type: string | |
| type: array | |
| type: object | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| served: true | |
| storage: true | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: hosts.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: Host | |
| listKind: HostList | |
| plural: hosts | |
| singular: host | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - additionalPrinterColumns: | |
| - jsonPath: .spec.hostname | |
| name: Hostname | |
| type: string | |
| - jsonPath: .status.state | |
| name: State | |
| type: string | |
| - jsonPath: .status.phaseCompleted | |
| name: Phase Completed | |
| type: string | |
| - jsonPath: .status.phasePending | |
| name: Phase Pending | |
| type: string | |
| - jsonPath: .metadata.creationTimestamp | |
| name: Age | |
| type: date | |
| name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: Host is the Schema for the hosts API | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: HostSpec defines the desired state of Host | |
| properties: | |
| acmeProvider: | |
| description: Specifies whether/who to talk ACME with to automatically | |
| manage the $tlsSecret. | |
| properties: | |
| authority: | |
| description: Specifies who to talk ACME with to get certs. Defaults | |
| to Let's Encrypt; if "none" (case-insensitive), do not try to | |
| do ACME for this Host. | |
| type: string | |
| email: | |
| type: string | |
| privateKeySecret: | |
| description: "Specifies the Kubernetes Secret to use to store | |
| the private key of the ACME account (essentially, where to store | |
| the auto-generated password for the auto-created ACME account). | |
| \ You should not normally need to set this--the default value | |
| is based on a combination of the ACME authority being registered | |
| wit and the email address associated with the account. \n Note | |
| that this is a native-Kubernetes-style core.v1.LocalObjectReference, | |
| not an Ambassador-style `{name}.{namespace}` string. Because | |
| we're opinionated, it does not support referencing a Secret | |
| in another namespace (because most native Kubernetes resources | |
| don't support that), but if we ever abandon that opinion and | |
| decide to support non-local references it, it would be by adding | |
| a `namespace:` field by changing it from a core.v1.LocalObjectReference | |
| to a core.v1.SecretReference, not by adopting the `{name}.{namespace}` | |
| notation." | |
| properties: | |
| name: | |
| description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names | |
| TODO: Add other useful fields. apiVersion, kind, uid?' | |
| type: string | |
| type: object | |
| registration: | |
| description: This is normally set automatically | |
| type: string | |
| type: object | |
| hostname: | |
| description: Hostname by which the Ambassador can be reached. | |
| type: string | |
| previewUrl: | |
| description: Configuration for the Preview URL feature of Service | |
| Preview. Defaults to preview URLs not enabled. | |
| properties: | |
| enabled: | |
| description: Is the Preview URL feature enabled? | |
| type: boolean | |
| type: | |
| description: What type of Preview URL is allowed? | |
| enum: | |
| - Path | |
| type: string | |
| type: object | |
| requestPolicy: | |
| description: Request policy definition. | |
| properties: | |
| insecure: | |
| properties: | |
| action: | |
| enum: | |
| - Redirect | |
| - Reject | |
| - Route | |
| type: string | |
| additionalPort: | |
| type: integer | |
| type: object | |
| type: object | |
| selector: | |
| description: Selector by which we can find further configuration. | |
| Defaults to hostname=$hostname | |
| properties: | |
| matchExpressions: | |
| description: matchExpressions is a list of label selector requirements. | |
| The requirements are ANDed. | |
| items: | |
| description: A label selector requirement is a selector that | |
| contains values, a key, and an operator that relates the key | |
| and values. | |
| properties: | |
| key: | |
| description: key is the label key that the selector applies | |
| to. | |
| type: string | |
| operator: | |
| description: operator represents a key's relationship to | |
| a set of values. Valid operators are In, NotIn, Exists | |
| and DoesNotExist. | |
| type: string | |
| values: | |
| description: values is an array of string values. If the | |
| operator is In or NotIn, the values array must be non-empty. | |
| If the operator is Exists or DoesNotExist, the values | |
| array must be empty. This array is replaced during a strategic | |
| merge patch. | |
| items: | |
| type: string | |
| type: array | |
| required: | |
| - key | |
| - operator | |
| type: object | |
| type: array | |
| matchLabels: | |
| additionalProperties: | |
| type: string | |
| description: matchLabels is a map of {key,value} pairs. A single | |
| {key,value} in the matchLabels map is equivalent to an element | |
| of matchExpressions, whose key field is "key", the operator | |
| is "In", and the values array contains only "value". The requirements | |
| are ANDed. | |
| type: object | |
| type: object | |
| tls: | |
| description: TLS configuration. It is not valid to specify both `tlsContext` | |
| and `tls`. | |
| properties: | |
| alpn_protocols: | |
| type: string | |
| ca_secret: | |
| type: string | |
| cacert_chain_file: | |
| type: string | |
| cert_chain_file: | |
| type: string | |
| cert_required: | |
| type: boolean | |
| cipher_suites: | |
| items: | |
| type: string | |
| type: array | |
| ecdh_curves: | |
| items: | |
| type: string | |
| type: array | |
| max_tls_version: | |
| type: string | |
| min_tls_version: | |
| type: string | |
| private_key_file: | |
| type: string | |
| redirect_cleartext_from: | |
| type: integer | |
| sni: | |
| type: string | |
| v3CRLSecret: | |
| type: string | |
| type: object | |
| tlsContext: | |
| description: "Name of the TLSContext the Host resource is linked with. | |
| It is not valid to specify both `tlsContext` and `tls`. \n Note | |
| that this is a native-Kubernetes-style core.v1.LocalObjectReference, | |
| not an Ambassador-style `{name}.{namespace}` string. Because we're | |
| opinionated, it does not support referencing a Secret in another | |
| namespace (because most native Kubernetes resources don't support | |
| that), but if we ever abandon that opinion and decide to support | |
| non-local references it, it would be by adding a `namespace:` field | |
| by changing it from a core.v1.LocalObjectReference to a core.v1.SecretReference, | |
| not by adopting the `{name}.{namespace}` notation." | |
| properties: | |
| name: | |
| description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names | |
| TODO: Add other useful fields. apiVersion, kind, uid?' | |
| type: string | |
| type: object | |
| tlsSecret: | |
| description: Name of the Kubernetes secret into which to save generated | |
| certificates. If ACME is enabled (see $acmeProvider), then the | |
| default is $hostname; otherwise the default is "". If the value | |
| is "", then we do not do TLS for this Host. | |
| properties: | |
| name: | |
| description: Name is unique within a namespace to reference a | |
| secret resource. | |
| type: string | |
| namespace: | |
| description: Namespace defines the space within which the secret | |
| name must be unique. | |
| type: string | |
| type: object | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| status: | |
| description: HostStatus defines the observed state of Host | |
| properties: | |
| errorBackoff: | |
| type: string | |
| errorReason: | |
| description: errorReason, errorTimestamp, and errorBackoff are valid | |
| when state==Error. | |
| type: string | |
| errorTimestamp: | |
| format: date-time | |
| type: string | |
| phaseCompleted: | |
| description: phaseCompleted and phasePending are valid when state==Pending | |
| or state==Error. | |
| enum: | |
| - NA | |
| - DefaultsFilled | |
| - ACMEUserPrivateKeyCreated | |
| - ACMEUserRegistered | |
| - ACMECertificateChallenge | |
| type: string | |
| phasePending: | |
| description: phaseCompleted and phasePending are valid when state==Pending | |
| or state==Error. | |
| enum: | |
| - NA | |
| - DefaultsFilled | |
| - ACMEUserPrivateKeyCreated | |
| - ACMEUserRegistered | |
| - ACMECertificateChallenge | |
| type: string | |
| state: | |
| description: The first value listed in the Enum marker becomes the | |
| "zero" value, and it would be great if "Pending" could be the default | |
| value; but it's Important that the "zero" value be able to be shown | |
| as empty/omitted from display, and we really do want `kubectl get | |
| hosts` to say "Pending" in the "STATE" column, and not leave the | |
| column empty. | |
| enum: | |
| - Initial | |
| - Pending | |
| - Ready | |
| - Error | |
| type: string | |
| tlsCertificateSource: | |
| enum: | |
| - Unknown | |
| - None | |
| - Other | |
| - ACME | |
| type: string | |
| type: object | |
| type: object | |
| served: true | |
| storage: true | |
| subresources: | |
| status: {} | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: kubernetesendpointresolvers.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: KubernetesEndpointResolver | |
| listKind: KubernetesEndpointResolverList | |
| plural: kubernetesendpointresolvers | |
| singular: kubernetesendpointresolver | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: KubernetesEndpointResolver is the Schema for the kubernetesendpointresolver | |
| API | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: KubernetesEndpointResolver tells Ambassador to use Kubernetes | |
| Endpoints resources to resolve services. It actually has no spec other | |
| than the AmbassadorID. | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| served: true | |
| storage: true | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: kubernetesserviceresolvers.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: KubernetesServiceResolver | |
| listKind: KubernetesServiceResolverList | |
| plural: kubernetesserviceresolvers | |
| singular: kubernetesserviceresolver | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: KubernetesServiceResolver is the Schema for the kubernetesserviceresolver | |
| API | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: KubernetesServiceResolver tells Ambassador to use Kubernetes | |
| Service resources to resolve services. It actually has no spec other | |
| than the AmbassadorID. | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| served: true | |
| storage: true | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: logservices.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: LogService | |
| listKind: LogServiceList | |
| plural: logservices | |
| singular: logservice | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: LogService is the Schema for the logservices API | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: LogServiceSpec defines the desired state of LogService | |
| properties: | |
| driver: | |
| enum: | |
| - tcp | |
| - http | |
| type: string | |
| driver_config: | |
| properties: | |
| additional_log_headers: | |
| items: | |
| properties: | |
| during_request: | |
| type: boolean | |
| during_response: | |
| type: boolean | |
| during_trailer: | |
| type: boolean | |
| header_name: | |
| type: string | |
| type: object | |
| type: array | |
| type: object | |
| flush_interval_byte_size: | |
| type: integer | |
| flush_interval_time: | |
| type: integer | |
| grpc: | |
| type: boolean | |
| service: | |
| type: string | |
| v3ProtocolVersion: | |
| enum: | |
| - v2 | |
| - v3 | |
| type: string | |
| v3StatsName: | |
| type: string | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| served: true | |
| storage: true | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: mappings.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: Mapping | |
| listKind: MappingList | |
| plural: mappings | |
| singular: mapping | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - additionalPrinterColumns: | |
| - jsonPath: .spec.host | |
| name: Source Host | |
| type: string | |
| - jsonPath: .spec.prefix | |
| name: Source Prefix | |
| type: string | |
| - jsonPath: .spec.service | |
| name: Dest Service | |
| type: string | |
| - jsonPath: .status.state | |
| name: State | |
| type: string | |
| - jsonPath: .status.reason | |
| name: Reason | |
| type: string | |
| name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: Mapping is the Schema for the mappings API | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: MappingSpec defines the desired state of Mapping | |
| properties: | |
| add_linkerd_headers: | |
| type: boolean | |
| add_request_headers: | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| add_response_headers: | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| allow_upgrade: | |
| description: "A case-insensitive list of the non-HTTP protocols to | |
| allow \"upgrading\" to from HTTP via the \"Connection: upgrade\" | |
| mechanism[1]. After the upgrade, Ambassador does not interpret | |
| the traffic, and behaves similarly to how it does for TCPMappings. | |
| \n [1]: https://tools.ietf.org/html/rfc7230#section-6.7 \n For example, | |
| if your upstream service supports WebSockets, you would write \n | |
| \ allow_upgrade: - websocket \n Or if your upstream service | |
| supports upgrading from HTTP to SPDY (as the Kubernetes apiserver | |
| does for `kubectl exec` functionality), you would write \n allow_upgrade: | |
| \ - spdy/3.1" | |
| items: | |
| type: string | |
| type: array | |
| auth_context_extensions: | |
| additionalProperties: | |
| type: string | |
| type: object | |
| auto_host_rewrite: | |
| type: boolean | |
| bypass_auth: | |
| type: boolean | |
| bypass_error_response_overrides: | |
| description: If true, bypasses any `error_response_overrides` set | |
| on the Ambassador module. | |
| type: boolean | |
| case_sensitive: | |
| type: boolean | |
| circuit_breakers: | |
| items: | |
| properties: | |
| max_connections: | |
| type: integer | |
| max_pending_requests: | |
| type: integer | |
| max_requests: | |
| type: integer | |
| max_retries: | |
| type: integer | |
| priority: | |
| enum: | |
| - default | |
| - high | |
| type: string | |
| type: object | |
| type: array | |
| cluster_idle_timeout_ms: | |
| type: integer | |
| cluster_max_connection_lifetime_ms: | |
| type: integer | |
| cluster_tag: | |
| type: string | |
| connect_timeout_ms: | |
| type: integer | |
| cors: | |
| properties: | |
| credentials: | |
| type: boolean | |
| max_age: | |
| type: string | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| dns_type: | |
| type: string | |
| docs: | |
| description: DocsInfo provides some extra information about the docs | |
| for the Mapping (used by the Dev Portal) | |
| properties: | |
| display_name: | |
| type: string | |
| ignored: | |
| type: boolean | |
| path: | |
| type: string | |
| timeout_ms: | |
| type: integer | |
| url: | |
| type: string | |
| type: object | |
| enable_ipv4: | |
| type: boolean | |
| enable_ipv6: | |
| type: boolean | |
| envoy_override: | |
| description: UntypedDict is relatively opaque as a Go type, but it | |
| preserves its contents in a roundtrippable way. | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| error_response_overrides: | |
| description: Error response overrides for this Mapping. Replaces all | |
| of the `error_response_overrides` set on the Ambassador module, | |
| if any. | |
| items: | |
| description: A response rewrite for an HTTP error response | |
| properties: | |
| body: | |
| description: The new response body | |
| properties: | |
| content_type: | |
| description: The content type to set on the error response | |
| body when using text_format or text_format_source. Defaults | |
| to 'text/plain'. | |
| type: string | |
| json_format: | |
| additionalProperties: | |
| type: string | |
| description: 'A JSON response with content-type: application/json. | |
| The values can contain format text like in text_format.' | |
| type: object | |
| text_format: | |
| description: A format string representing a text response | |
| body. Content-Type can be set using the `content_type` | |
| field below. | |
| type: string | |
| text_format_source: | |
| description: A format string sourced from a file on the | |
| Ambassador container. Useful for larger response bodies | |
| that should not be placed inline in configuration. | |
| properties: | |
| filename: | |
| description: The name of a file on the Ambassador pod | |
| that contains a format text string. | |
| type: string | |
| type: object | |
| type: object | |
| on_status_code: | |
| description: The status code to match on -- not a pointer because | |
| it's required. | |
| maximum: 599 | |
| minimum: 400 | |
| type: integer | |
| required: | |
| - body | |
| - on_status_code | |
| type: object | |
| minItems: 1 | |
| type: array | |
| grpc: | |
| type: boolean | |
| headers: | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| host: | |
| type: string | |
| host_redirect: | |
| type: boolean | |
| host_regex: | |
| type: boolean | |
| host_rewrite: | |
| type: string | |
| idle_timeout_ms: | |
| type: integer | |
| keepalive: | |
| properties: | |
| idle_time: | |
| type: integer | |
| interval: | |
| type: integer | |
| probes: | |
| type: integer | |
| type: object | |
| labels: | |
| additionalProperties: | |
| description: A MappingLabelGroupsArray is an array of MappingLabelGroups. | |
| I know, complex. | |
| items: | |
| description: 'A MappingLabelGroup is a single element of a MappingLabelGroupsArray: | |
| a second map, where the key is a human-readable name that identifies | |
| the group.' | |
| maxProperties: 1 | |
| minProperties: 1 | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: array | |
| description: A DomainMap is the overall Mapping.spec.Labels type. | |
| It maps domains (kind of like namespaces for Mapping labels) to | |
| arrays of label groups. | |
| type: object | |
| load_balancer: | |
| properties: | |
| cookie: | |
| properties: | |
| name: | |
| type: string | |
| path: | |
| type: string | |
| ttl: | |
| type: string | |
| required: | |
| - name | |
| type: object | |
| header: | |
| type: string | |
| policy: | |
| enum: | |
| - round_robin | |
| - ring_hash | |
| - maglev | |
| - least_request | |
| type: string | |
| source_ip: | |
| type: boolean | |
| required: | |
| - policy | |
| type: object | |
| method: | |
| type: string | |
| method_regex: | |
| type: boolean | |
| modules: | |
| items: | |
| description: UntypedDict is relatively opaque as a Go type, but | |
| it preserves its contents in a roundtrippable way. | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: array | |
| outlier_detection: | |
| type: string | |
| path_redirect: | |
| description: Path replacement to use when generating an HTTP redirect. | |
| Used with `host_redirect`. | |
| type: string | |
| precedence: | |
| type: integer | |
| prefix: | |
| type: string | |
| prefix_exact: | |
| type: boolean | |
| prefix_redirect: | |
| description: Prefix rewrite to use when generating an HTTP redirect. | |
| Used with `host_redirect`. | |
| type: string | |
| prefix_regex: | |
| type: boolean | |
| priority: | |
| type: string | |
| query_parameters: | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| redirect_response_code: | |
| description: The response code to use when generating an HTTP redirect. | |
| Defaults to 301. Used with `host_redirect`. | |
| enum: | |
| - 301 | |
| - 302 | |
| - 303 | |
| - 307 | |
| - 308 | |
| type: integer | |
| regex_headers: | |
| additionalProperties: | |
| type: string | |
| type: object | |
| regex_query_parameters: | |
| additionalProperties: | |
| type: string | |
| type: object | |
| regex_redirect: | |
| description: Prefix regex rewrite to use when generating an HTTP redirect. | |
| Used with `host_redirect`. | |
| properties: | |
| pattern: | |
| type: string | |
| substitution: | |
| type: string | |
| type: object | |
| regex_rewrite: | |
| properties: | |
| pattern: | |
| type: string | |
| substitution: | |
| type: string | |
| type: object | |
| resolver: | |
| type: string | |
| respect_dns_ttl: | |
| type: boolean | |
| retry_policy: | |
| properties: | |
| num_retries: | |
| type: integer | |
| per_try_timeout: | |
| type: string | |
| retry_on: | |
| enum: | |
| - 5xx | |
| - gateway-error | |
| - connect-failure | |
| - retriable-4xx | |
| - refused-stream | |
| - retriable-status-codes | |
| type: string | |
| type: object | |
| rewrite: | |
| type: string | |
| service: | |
| type: string | |
| shadow: | |
| type: boolean | |
| timeout_ms: | |
| description: The timeout for requests that use this Mapping. Overrides | |
| `cluster_request_timeout_ms` set on the Ambassador Module, if it | |
| exists. | |
| type: integer | |
| use_websocket: | |
| description: 'use_websocket is deprecated, and is equivlaent to setting | |
| `allow_upgrade: ["websocket"]`' | |
| type: boolean | |
| v3StatsName: | |
| type: string | |
| v3health_checks: | |
| items: | |
| description: HealthCheck specifies settings for performing active | |
| health checking on upstreams | |
| properties: | |
| health_check: | |
| description: Configuration for where the healthcheck request | |
| should be made to | |
| maxProperties: 1 | |
| minProperties: 1 | |
| properties: | |
| grpc: | |
| description: HealthCheck for gRPC upstreams. Only one of | |
| grpc_health_check or http_health_check may be specified | |
| properties: | |
| authority: | |
| description: The value of the :authority header in the | |
| gRPC health check request. If left empty the upstream | |
| name will be used. | |
| type: string | |
| upstream_name: | |
| description: The upstream name parameter which will | |
| be sent to gRPC service in the health check message | |
| type: string | |
| required: | |
| - upstream_name | |
| type: object | |
| http: | |
| description: HealthCheck for HTTP upstreams. Only one of | |
| http_health_check or grpc_health_check may be specified | |
| properties: | |
| add_request_headers: | |
| additionalProperties: | |
| properties: | |
| append: | |
| type: boolean | |
| v2Representation: | |
| enum: | |
| - "" | |
| - string | |
| - "null" | |
| type: string | |
| value: | |
| type: string | |
| type: object | |
| type: object | |
| expected_statuses: | |
| items: | |
| description: A range of response statuses from Start | |
| to End inclusive | |
| properties: | |
| max: | |
| description: End of the statuses to include. Must | |
| be between 100 and 599 (inclusive) | |
| maximum: 599 | |
| minimum: 100 | |
| type: integer | |
| min: | |
| description: Start of the statuses to include. | |
| Must be between 100 and 599 (inclusive) | |
| maximum: 599 | |
| minimum: 100 | |
| type: integer | |
| required: | |
| - max | |
| - min | |
| type: object | |
| type: array | |
| hostname: | |
| type: string | |
| path: | |
| type: string | |
| remove_request_headers: | |
| items: | |
| type: string | |
| type: array | |
| required: | |
| - path | |
| type: object | |
| type: object | |
| healthy_threshold: | |
| description: Number of expected responses for the upstream to | |
| be considered healthy. Defaults to 1. | |
| type: integer | |
| interval: | |
| description: Interval between health checks. Defaults to every | |
| 5 seconds. | |
| type: string | |
| timeout: | |
| description: Timeout for connecting to the health checking endpoint. | |
| Defaults to 3 seconds. | |
| type: string | |
| unhealthy_threshold: | |
| description: Number of non-expected responses for the upstream | |
| to be considered unhealthy. A single 503 will mark the upstream | |
| as unhealthy regardless of the threshold. Defaults to 2. | |
| type: integer | |
| required: | |
| - health_check | |
| type: object | |
| minItems: 1 | |
| type: array | |
| weight: | |
| type: integer | |
| required: | |
| - prefix | |
| - service | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| status: | |
| description: MappingStatus defines the observed state of Mapping | |
| properties: | |
| reason: | |
| type: string | |
| state: | |
| enum: | |
| - "" | |
| - Inactive | |
| - Running | |
| type: string | |
| type: object | |
| type: object | |
| served: true | |
| storage: true | |
| subresources: | |
| status: {} | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: modules.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: Module | |
| listKind: ModuleList | |
| plural: modules | |
| singular: module | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: "A Module defines system-wide configuration. The type of module | |
| is controlled by the .metadata.name; valid names are \"ambassador\" or \"tls\". | |
| \n https://www.getambassador.io/docs/edge-stack/latest/topics/running/ambassador/#the-ambassador-module | |
| https://www.getambassador.io/docs/edge-stack/latest/topics/running/tls/#tls-module-deprecated" | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| properties: | |
| config: | |
| description: UntypedDict is relatively opaque as a Go type, but it | |
| preserves its contents in a roundtrippable way. | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| served: true | |
| storage: true | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: ratelimitservices.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: RateLimitService | |
| listKind: RateLimitServiceList | |
| plural: ratelimitservices | |
| singular: ratelimitservice | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: RateLimitService is the Schema for the ratelimitservices API | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: RateLimitServiceSpec defines the desired state of RateLimitService | |
| properties: | |
| domain: | |
| type: string | |
| failure_mode_deny: | |
| description: FailureModeDeny when set to true, envoy will deny traffic | |
| if it is unable to communicate with the rate limit service. | |
| type: boolean | |
| protocol_version: | |
| enum: | |
| - v2 | |
| - v3 | |
| type: string | |
| service: | |
| type: string | |
| timeout_ms: | |
| type: integer | |
| v3StatsName: | |
| type: string | |
| required: | |
| - service | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| served: true | |
| storage: true | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: tcpmappings.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: TCPMapping | |
| listKind: TCPMappingList | |
| plural: tcpmappings | |
| singular: tcpmapping | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: TCPMapping is the Schema for the tcpmappings API | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: TCPMappingSpec defines the desired state of TCPMapping | |
| properties: | |
| address: | |
| type: string | |
| circuit_breakers: | |
| items: | |
| properties: | |
| max_connections: | |
| type: integer | |
| max_pending_requests: | |
| type: integer | |
| max_requests: | |
| type: integer | |
| max_retries: | |
| type: integer | |
| priority: | |
| enum: | |
| - default | |
| - high | |
| type: string | |
| type: object | |
| type: array | |
| cluster_tag: | |
| type: string | |
| enable_ipv4: | |
| type: boolean | |
| enable_ipv6: | |
| type: boolean | |
| host: | |
| type: string | |
| idle_timeout_ms: | |
| description: 'FIXME(lukeshu): Surely this should be an ''int''?' | |
| type: string | |
| port: | |
| description: Port isn't a pointer because it's required. | |
| type: integer | |
| resolver: | |
| type: string | |
| service: | |
| type: string | |
| v3StatsName: | |
| type: string | |
| weight: | |
| type: integer | |
| required: | |
| - port | |
| - service | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| served: true | |
| storage: true | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: tlscontexts.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: TLSContext | |
| listKind: TLSContextList | |
| plural: tlscontexts | |
| singular: tlscontext | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: TLSContext is the Schema for the tlscontexts API | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: TLSContextSpec defines the desired state of TLSContext | |
| properties: | |
| alpn_protocols: | |
| type: string | |
| ca_secret: | |
| type: string | |
| cacert_chain_file: | |
| type: string | |
| cert_chain_file: | |
| type: string | |
| cert_required: | |
| type: boolean | |
| cipher_suites: | |
| items: | |
| type: string | |
| type: array | |
| ecdh_curves: | |
| items: | |
| type: string | |
| type: array | |
| hosts: | |
| items: | |
| type: string | |
| type: array | |
| max_tls_version: | |
| enum: | |
| - v1.0 | |
| - v1.1 | |
| - v1.2 | |
| - v1.3 | |
| type: string | |
| min_tls_version: | |
| enum: | |
| - v1.0 | |
| - v1.1 | |
| - v1.2 | |
| - v1.3 | |
| type: string | |
| private_key_file: | |
| type: string | |
| redirect_cleartext_from: | |
| type: integer | |
| secret: | |
| type: string | |
| secret_namespacing: | |
| type: boolean | |
| sni: | |
| type: string | |
| v3CRLSecret: | |
| type: string | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| served: true | |
| storage: true | |
| --- | |
| apiVersion: apiextensions.k8s.io/v1 | |
| kind: CustomResourceDefinition | |
| metadata: | |
| annotations: | |
| controller-gen.kubebuilder.io/version: v0.6.2 | |
| labels: | |
| app.kubernetes.io/instance: emissary-apiext | |
| app.kubernetes.io/managed-by: kubectl_apply_-f_emissary-apiext.yaml | |
| app.kubernetes.io/name: emissary-apiext | |
| app.kubernetes.io/part-of: emissary-apiext | |
| name: tracingservices.getambassador.io | |
| spec: | |
| group: getambassador.io | |
| names: | |
| categories: | |
| - ambassador-crds | |
| kind: TracingService | |
| listKind: TracingServiceList | |
| plural: tracingservices | |
| singular: tracingservice | |
| preserveUnknownFields: false | |
| scope: Namespaced | |
| versions: | |
| - name: v2 | |
| schema: | |
| openAPIV3Schema: | |
| description: TracingService is the Schema for the tracingservices API | |
| properties: | |
| apiVersion: | |
| description: 'APIVersion defines the versioned schema of this representation | |
| of an object. Servers should convert recognized schemas to the latest | |
| internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources' | |
| type: string | |
| kind: | |
| description: 'Kind is a string value representing the REST resource this | |
| object represents. Servers may infer this from the endpoint the client | |
| submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds' | |
| type: string | |
| metadata: | |
| type: object | |
| spec: | |
| description: TracingServiceSpec defines the desired state of TracingService | |
| properties: | |
| config: | |
| properties: | |
| access_token_file: | |
| type: string | |
| collector_cluster: | |
| type: string | |
| collector_endpoint: | |
| type: string | |
| collector_endpoint_version: | |
| enum: | |
| - HTTP_JSON_V1 | |
| - HTTP_JSON | |
| - HTTP_PROTO | |
| type: string | |
| collector_hostname: | |
| type: string | |
| service_name: | |
| type: string | |
| shared_span_context: | |
| type: boolean | |
| trace_id_128bit: | |
| type: boolean | |
| v3PropagationModes: | |
| items: | |
| enum: | |
| - ENVOY | |
| - LIGHTSTEP | |
| - B3 | |
| - TRACE_CONTEXT | |
| type: string | |
| type: array | |
| type: object | |
| driver: | |
| enum: | |
| - lightstep | |
| - zipkin | |
| - datadog | |
| type: string | |
| sampling: | |
| properties: | |
| client: | |
| type: integer | |
| overall: | |
| type: integer | |
| random: | |
| type: integer | |
| type: object | |
| service: | |
| type: string | |
| tag_headers: | |
| items: | |
| type: string | |
| type: array | |
| v3CustomTags: | |
| items: | |
| description: TracingCustomTag provides a data structure for capturing | |
| envoy's `type.tracing.v3.CustomTag` | |
| properties: | |
| environment: | |
| description: Environment explicitly specifies the protocol stack | |
| to set up. Exactly one of Literal, Environment or Header must | |
| be supplied. | |
| properties: | |
| default_value: | |
| type: string | |
| name: | |
| type: string | |
| required: | |
| - name | |
| type: object | |
| literal: | |
| description: Literal explicitly specifies the protocol stack | |
| to set up. Exactly one of Literal, Environment or Header must | |
| be supplied. | |
| properties: | |
| value: | |
| type: string | |
| required: | |
| - value | |
| type: object | |
| request_header: | |
| description: Header explicitly specifies the protocol stack | |
| to set up. Exactly one of Literal, Environment or Header must | |
| be supplied. | |
| properties: | |
| default_value: | |
| type: string | |
| name: | |
| type: string | |
| required: | |
| - name | |
| type: object | |
| tag: | |
| type: string | |
| required: | |
| - tag | |
| type: object | |
| type: array | |
| v3StatsName: | |
| type: string | |
| required: | |
| - driver | |
| - service | |
| type: object | |
| x-kubernetes-preserve-unknown-fields: true | |
| type: object | |
| served: true | |
| storage: true |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment