Serverstransporttcp v1alpha1

apiVersion string

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

kind string

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

metadata object required

spec object required

ServersTransportTCPSpec defines the desired state of a ServersTransportTCP.

dialKeepAlive object

DialKeepAlive is the interval between keep-alive probes for an active network connection. If zero, keep-alive probes are sent with a default value (currently 15 seconds), if supported by the protocol and operating system. Network protocols or operating systems that do not support keep-alives ignore this field. If negative, keep-alive probes are disabled.

pattern: ^([0-9]+(ns|us|µs|ms|s|m|h)?)+$

dialTimeout object

DialTimeout is the amount of time to wait until a connection to a backend server can be established.

pattern: ^([0-9]+(ns|us|µs|ms|s|m|h)?)+$

proxyProtocol object

ProxyProtocol holds the PROXY Protocol configuration.

version integer

Version defines the PROXY Protocol version to use.

minimum: 1

maximum: 2

terminationDelay object

TerminationDelay defines the delay to wait before fully terminating the connection, after one connected peer has closed its writing capability.

pattern: ^([0-9]+(ns|us|µs|ms|s|m|h)?)+$

tls object

TLS defines the TLS configuration

certificatesSecrets []string

CertificatesSecrets defines a list of secret storing client certificates for mTLS.

insecureSkipVerify boolean

InsecureSkipVerify disables TLS certificate verification.

peerCertURI string

MaxIdleConnsPerHost controls the maximum idle (keep-alive) to keep per-host. PeerCertURI defines the peer cert URI used to match against SAN URI during the peer certificate verification.

rootCAs []object

RootCAs defines a list of CA certificate Secrets or ConfigMaps used to validate server certificates.

configMap string

ConfigMap defines the name of a ConfigMap that holds a CA certificate. The referenced ConfigMap must contain a certificate under either a tls.ca or a ca.crt key.

secret string

Secret defines the name of a Secret that holds a CA certificate. The referenced Secret must contain a certificate under either a tls.ca or a ca.crt key.

rootCAsSecrets []string

RootCAsSecrets defines a list of CA secret used to validate self-signed certificate. Deprecated: RootCAsSecrets is deprecated, please use the RootCAs option instead.

serverName string

ServerName defines the server name used to contact the server.

spiffe object

Spiffe defines the SPIFFE configuration.

ids []string

IDs defines the allowed SPIFFE IDs (takes precedence over the SPIFFE TrustDomain).

trustDomain string

TrustDomain defines the allowed SPIFFE trust domain.