4ac20ffc2b
add service mesh metrics remove unused circle yaml fix travis misconfiguration fix travis misconfiguration fix travis misconfiguration
130 lines
5.7 KiB
YAML
130 lines
5.7 KiB
YAML
apiVersion: apiextensions.k8s.io/v1beta1
|
|
kind: CustomResourceDefinition
|
|
metadata:
|
|
creationTimestamp: null
|
|
labels:
|
|
controller-tools.k8s.io: "1.0"
|
|
name: gateways.istio.kubesphere.io
|
|
spec:
|
|
group: istio.kubesphere.io
|
|
names:
|
|
kind: Gateway
|
|
plural: gateways
|
|
scope: Namespaced
|
|
validation:
|
|
openAPIV3Schema:
|
|
properties:
|
|
apiVersion:
|
|
description: 'APIVersion defines the versioned schema of this representation
|
|
of an object. Servers should convert recognized schemas to the latest
|
|
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources'
|
|
type: string
|
|
kind:
|
|
description: 'Kind is a string value representing the REST resource this
|
|
object represents. Servers may infer this from the endpoint the client
|
|
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds'
|
|
type: string
|
|
metadata:
|
|
type: object
|
|
spec:
|
|
properties:
|
|
selector:
|
|
description: One or more labels that indicate a specific set of pods/VMs
|
|
on which this gateway configuration should be applied. If no selectors
|
|
are provided, the gateway will be implemented by the default istio-ingress
|
|
controller.
|
|
type: object
|
|
servers:
|
|
description: 'REQUIRED: A list of server specifications.'
|
|
items:
|
|
properties:
|
|
hosts:
|
|
description: A list of hosts exposed by this gateway. While typically
|
|
applicable to HTTP services, it can also be used for TCP services
|
|
using TLS with SNI. Standard DNS wildcard prefix syntax is permitted. A
|
|
VirtualService that is bound to a gateway must having a matching
|
|
host in its default destination. Specifically one of the VirtualService
|
|
destination hosts is a strict suffix of a gateway host or a
|
|
gateway host is a suffix of one of the VirtualService hosts.
|
|
items:
|
|
type: string
|
|
type: array
|
|
port:
|
|
description: 'REQUIRED: The Port on which the proxy should listen
|
|
for incoming connections'
|
|
properties:
|
|
name:
|
|
description: Label assigned to the port.
|
|
type: string
|
|
number:
|
|
description: 'REQUIRED: A valid non-negative integer port
|
|
number.'
|
|
format: int64
|
|
type: integer
|
|
protocol:
|
|
description: 'REQUIRED: The protocol exposed on the port.
|
|
MUST BE one of HTTP|HTTPS|GRPC|HTTP2|MONGO|TCP.'
|
|
type: string
|
|
required:
|
|
- number
|
|
- protocol
|
|
type: object
|
|
tls:
|
|
description: Set of TLS related options that govern the server's
|
|
behavior. Use these options to control if all http requests
|
|
should be redirected to https, and the TLS modes to use.
|
|
properties:
|
|
caCertificates:
|
|
description: REQUIRED if mode is "MUTUAL". The path to a file
|
|
containing certificate authority certificates to use in
|
|
verifying a presented client side certificate.
|
|
type: string
|
|
httpsRedirect:
|
|
description: If set to true, the load balancer will send a
|
|
302 redirect for all http connections, asking the clients
|
|
to use HTTPS.
|
|
type: boolean
|
|
mode:
|
|
description: 'Optional: Indicates whether connections to this
|
|
port should be secured using TLS. The value of this field
|
|
determines how TLS is enforced.'
|
|
type: string
|
|
privateKey:
|
|
description: REQUIRED if mode is "SIMPLE" or "MUTUAL". The
|
|
path to the file holding the server's private key.
|
|
type: string
|
|
serverCertificate:
|
|
description: REQUIRED if mode is "SIMPLE" or "MUTUAL". The
|
|
path to the file holding the server-side TLS certificate
|
|
to use.
|
|
type: string
|
|
subjectAltNames:
|
|
description: A list of alternate names to verify the subject
|
|
identity in the certificate presented by the client.
|
|
items:
|
|
type: string
|
|
type: array
|
|
required:
|
|
- httpsRedirect
|
|
- serverCertificate
|
|
- privateKey
|
|
- caCertificates
|
|
- subjectAltNames
|
|
type: object
|
|
required:
|
|
- port
|
|
type: object
|
|
type: array
|
|
required:
|
|
- servers
|
|
type: object
|
|
required:
|
|
- spec
|
|
version: v1alpha3
|
|
status:
|
|
acceptedNames:
|
|
kind: ""
|
|
plural: ""
|
|
conditions: []
|
|
storedVersions: []
|