Kind
Serverstransport
Group
traefik.io
Version
v1alpha1
apiVersion: traefik.io/v1alpha1 kind: Serverstransport metadata: name: example
View raw schema
apiVersion string
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind string
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata object required
spec object required
ServersTransportSpec defines the desired state of a ServersTransport.
certificatesSecrets []string
CertificatesSecrets defines a list of secret storing client certificates for mTLS.
disableHTTP2 boolean
DisableHTTP2 disables HTTP/2 for connections with backend servers.
forwardingTimeouts object
ForwardingTimeouts defines the timeouts for requests forwarded to the backend servers.
dialTimeout object
DialTimeout is the amount of time to wait until a connection to a backend server can be established.
pattern: ^([0-9]+(ns|us|µs|ms|s|m|h)?)+$
idleConnTimeout object
IdleConnTimeout is the maximum period for which an idle HTTP keep-alive connection will remain open before closing itself.
pattern: ^([0-9]+(ns|us|µs|ms|s|m|h)?)+$
pingTimeout object
PingTimeout is the timeout after which the HTTP/2 connection will be closed if a response to ping is not received.
pattern: ^([0-9]+(ns|us|µs|ms|s|m|h)?)+$
readIdleTimeout object
ReadIdleTimeout is the timeout after which a health check using ping frame will be carried out if no frame is received on the HTTP/2 connection.
pattern: ^([0-9]+(ns|us|µs|ms|s|m|h)?)+$
responseHeaderTimeout object
ResponseHeaderTimeout is the amount of time to wait for a server's response headers after fully writing the request (including its body, if any).
pattern: ^([0-9]+(ns|us|µs|ms|s|m|h)?)+$
insecureSkipVerify boolean
InsecureSkipVerify disables SSL certificate verification.
maxIdleConnsPerHost integer
MaxIdleConnsPerHost controls the maximum idle (keep-alive) to keep per-host.
minimum: -1
peerCertURI string
PeerCertURI defines the peer cert URI used to match against SAN URI during the peer certificate verification.
rootCAs []object
RootCAs defines a list of CA certificate Secrets or ConfigMaps used to validate server certificates.
configMap string
ConfigMap defines the name of a ConfigMap that holds a CA certificate. The referenced ConfigMap must contain a certificate under either a tls.ca or a ca.crt key.
secret string
Secret defines the name of a Secret that holds a CA certificate. The referenced Secret must contain a certificate under either a tls.ca or a ca.crt key.
rootCAsSecrets []string
RootCAsSecrets defines a list of CA secret used to validate self-signed certificate. Deprecated: RootCAsSecrets is deprecated, please use the RootCAs option instead.
serverName string
ServerName defines the server name used to contact the server.
spiffe object
Spiffe defines the SPIFFE configuration.
ids []string
IDs defines the allowed SPIFFE IDs (takes precedence over the SPIFFE TrustDomain).
trustDomain string
TrustDomain defines the allowed SPIFFE trust domain.
Copied!