Kubernetes Configuration Reference

Dynamic configuration with Kubernetes Custom Resource

Deprecated apiextensions.k8s.io/v1beta1 CRD

The apiextensions.k8s.io/v1beta1 CustomResourceDefinition is deprecated in Kubernetes v1.16+ and will be removed in v1.22+.

For Kubernetes v1.16+, please use the Traefik apiextensions.k8s.io/v1 CRDs instead.

Definitions

apiextensions.k8s.io/v1 (Kubernetes v1.16+)

  2. ---
  3. apiVersion: apiextensions.k8s.io/v1
  4. kind: CustomResourceDefinition
  5. metadata:
  6.   annotations:
  7.     controller-gen.kubebuilder.io/version: v0.6.2
  8.   creationTimestamp: null
  9.   name: ingressroutes.traefik.io
  10. spec:
  11.   group: traefik.io
  12.   names:
  13.     kind: IngressRoute
  14.     listKind: IngressRouteList
  15.     plural: ingressroutes
  16.     singular: ingressroute
  17.   scope: Namespaced
  18.   versions:
  19.   - name: v1alpha1
  20.     schema:
  21.       openAPIV3Schema:
  22.         description: IngressRoute is the CRD implementation of a Traefik HTTP Router.
  23.         properties:
  24.           apiVersion:
  25.             description: 'APIVersion defines the versioned schema of this representation
  26.               of an object. Servers should convert recognized schemas to the latest
  27.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  28.             type: string
  29.           kind:
  30.             description: 'Kind is a string value representing the REST resource this
  31.               object represents. Servers may infer this from the endpoint the client
  32.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  33.             type: string
  34.           metadata:
  35.             type: object
  36.           spec:
  37.             description: IngressRouteSpec defines the desired state of IngressRoute.
  38.             properties:
  39.               entryPoints:
  40.                 description: 'EntryPoints defines the list of entry point names to
  41.                   bind to. Entry points have to be configured in the static configuration.
  42.                   More info: https://doc.traefik.io/traefik/v2.10/routing/entrypoints/
  43.                   Default: all.'
  44.                 items:
  45.                   type: string
  46.                 type: array
  47.               routes:
  48.                 description: Routes defines the list of routes.
  49.                 items:
  50.                   description: Route holds the HTTP route configuration.
  51.                   properties:
  52.                     kind:
  53.                       description: Kind defines the kind of the route. Rule is the
  54.                         only supported kind.
  55.                       enum:
  56.                       - Rule
  57.                       type: string
  58.                     match:
  59.                       description: 'Match defines the router''s rule. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#rule'
  60.                       type: string
  61.                     middlewares:
  62.                       description: 'Middlewares defines the list of references to
  63.                         Middleware resources. More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-middleware'
  64.                       items:
  65.                         description: MiddlewareRef is a reference to a Middleware
  66.                           resource.
  67.                         properties:
  68.                           name:
  69.                             description: Name defines the name of the referenced Middleware
  70.                               resource.
  71.                             type: string
  72.                           namespace:
  73.                             description: Namespace defines the namespace of the referenced
  74.                               Middleware resource.
  75.                             type: string
  76.                         required:
  77.                         - name
  78.                         type: object
  79.                       type: array
  80.                     priority:
  81.                       description: 'Priority defines the router''s priority. More
  82.                         info: https://doc.traefik.io/traefik/v2.10/routing/routers/#priority'
  83.                       type: integer
  84.                     services:
  85.                       description: Services defines the list of Service. It can contain
  86.                         any combination of TraefikService and/or reference to a Kubernetes
  87.                         Service.
  88.                       items:
  89.                         description: Service defines an upstream HTTP service to proxy
  90.                           traffic to.
  91.                         properties:
  92.                           kind:
  93.                             description: Kind defines the kind of the Service.
  94.                             enum:
  95.                             - Service
  96.                             - TraefikService
  97.                             type: string
  98.                           name:
  99.                             description: Name defines the name of the referenced Kubernetes
  100.                               Service or TraefikService. The differentiation between
  101.                               the two is specified in the Kind field.
  102.                             type: string
  103.                           namespace:
  104.                             description: Namespace defines the namespace of the referenced
  105.                               Kubernetes Service or TraefikService.
  106.                             type: string
  107.                           nativeLB:
  108.                             description: NativeLB controls, when creating the load-balancer,
  109.                               whether the LB's children are directly the pods IPs
  110.                               or if the only child is the Kubernetes Service clusterIP.
  111.                               The Kubernetes Service itself does load-balance to the
  112.                               pods. By default, NativeLB is false.
  113.                             type: boolean
  114.                           passHostHeader:
  115.                             description: PassHostHeader defines whether the client
  116.                               Host header is forwarded to the upstream Kubernetes
  117.                               Service. By default, passHostHeader is true.
  118.                             type: boolean
  119.                           port:
  120.                             anyOf:
  121.                             - type: integer
  122.                             - type: string
  123.                             description: Port defines the port of a Kubernetes Service.
  124.                               This can be a reference to a named port.
  125.                             x-kubernetes-int-or-string: true
  126.                           responseForwarding:
  127.                             description: ResponseForwarding defines how Traefik forwards
  128.                               the response from the upstream Kubernetes Service to
  129.                               the client.
  130.                             properties:
  131.                               flushInterval:
  132.                                 description: 'FlushInterval defines the interval,
  133.                                   in milliseconds, in between flushes to the client
  134.                                   while copying the response body. A negative value
  135.                                   means to flush immediately after each write to the
  136.                                   client. This configuration is ignored when ReverseProxy
  137.                                   recognizes a response as a streaming response; for
  138.                                   such responses, writes are flushed to the client
  139.                                   immediately. Default: 100ms'
  140.                                 type: string
  141.                             type: object
  142.                           scheme:
  143.                             description: Scheme defines the scheme to use for the
  144.                               request to the upstream Kubernetes Service. It defaults
  145.                               to https when Kubernetes Service port is 443, http otherwise.
  146.                             type: string
  147.                           serversTransport:
  148.                             description: ServersTransport defines the name of ServersTransport
  149.                               resource to use. It allows to configure the transport
  150.                               between Traefik and your servers. Can only be used on
  151.                               a Kubernetes Service.
  152.                             type: string
  153.                           sticky:
  154.                             description: 'Sticky defines the sticky sessions configuration.
  155.                               More info: https://doc.traefik.io/traefik/v2.10/routing/services/#sticky-sessions'
  156.                             properties:
  157.                               cookie:
  158.                                 description: Cookie defines the sticky cookie configuration.
  159.                                 properties:
  160.                                   httpOnly:
  161.                                     description: HTTPOnly defines whether the cookie
  162.                                       can be accessed by client-side APIs, such as
  163.                                       JavaScript.
  164.                                     type: boolean
  165.                                   name:
  166.                                     description: Name defines the Cookie name.
  167.                                     type: string
  168.                                   sameSite:
  169.                                     description: 'SameSite defines the same site policy.
  170.                                       More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  171.                                     type: string
  172.                                   secure:
  173.                                     description: Secure defines whether the cookie
  174.                                       can only be transmitted over an encrypted connection
  175.                                       (i.e. HTTPS).
  176.                                     type: boolean
  177.                                 type: object
  178.                             type: object
  179.                           strategy:
  180.                             description: Strategy defines the load balancing strategy
  181.                               between the servers. RoundRobin is the only supported
  182.                               value at the moment.
  183.                             type: string
  184.                           weight:
  185.                             description: Weight defines the weight and should only
  186.                               be specified when Name references a TraefikService object
  187.                               (and to be precise, one that embeds a Weighted Round
  188.                               Robin).
  189.                             type: integer
  190.                         required:
  191.                         - name
  192.                         type: object
  193.                       type: array
  194.                   required:
  195.                   - kind
  196.                   - match
  197.                   type: object
  198.                 type: array
  199.               tls:
  200.                 description: 'TLS defines the TLS configuration. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#tls'
  201.                 properties:
  202.                   certResolver:
  203.                     description: 'CertResolver defines the name of the certificate
  204.                       resolver to use. Cert resolvers have to be configured in the
  205.                       static configuration. More info: https://doc.traefik.io/traefik/v2.10/https/acme/#certificate-resolvers'
  206.                     type: string
  207.                   domains:
  208.                     description: 'Domains defines the list of domains that will be
  209.                       used to issue certificates. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#domains'
  210.                     items:
  211.                       description: Domain holds a domain name with SANs.
  212.                       properties:
  213.                         main:
  214.                           description: Main defines the main domain name.
  215.                           type: string
  216.                         sans:
  217.                           description: SANs defines the subject alternative domain
  218.                             names.
  219.                           items:
  220.                             type: string
  221.                           type: array
  222.                       type: object
  223.                     type: array
  224.                   options:
  225.                     description: 'Options defines the reference to a TLSOption, that
  226.                       specifies the parameters of the TLS connection. If not defined,
  227.                       the `default` TLSOption is used. More info: https://doc.traefik.io/traefik/v2.10/https/tls/#tls-options'
  228.                     properties:
  229.                       name:
  230.                         description: 'Name defines the name of the referenced TLSOption.
  231.                           More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-tlsoption'
  232.                         type: string
  233.                       namespace:
  234.                         description: 'Namespace defines the namespace of the referenced
  235.                           TLSOption. More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-tlsoption'
  236.                         type: string
  237.                     required:
  238.                     - name
  239.                     type: object
  240.                   secretName:
  241.                     description: SecretName is the name of the referenced Kubernetes
  242.                       Secret to specify the certificate details.
  243.                     type: string
  244.                   store:
  245.                     description: Store defines the reference to the TLSStore, that
  246.                       will be used to store certificates. Please note that only `default`
  247.                       TLSStore can be used.
  248.                     properties:
  249.                       name:
  250.                         description: 'Name defines the name of the referenced TLSStore.
  251.                           More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-tlsstore'
  252.                         type: string
  253.                       namespace:
  254.                         description: 'Namespace defines the namespace of the referenced
  255.                           TLSStore. More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-tlsstore'
  256.                         type: string
  257.                     required:
  258.                     - name
  259.                     type: object
  260.                 type: object
  261.             required:
  262.             - routes
  263.             type: object
  264.         required:
  265.         - metadata
  266.         - spec
  267.         type: object
  268.     served: true
  269.     storage: true
  270. status:
  271.   acceptedNames:
  272.     kind: ""
  273.     plural: ""
  274.   conditions: []
  275.   storedVersions: []
  277. ---
  278. apiVersion: apiextensions.k8s.io/v1
  279. kind: CustomResourceDefinition
  280. metadata:
  281.   annotations:
  282.     controller-gen.kubebuilder.io/version: v0.6.2
  283.   creationTimestamp: null
  284.   name: ingressroutetcps.traefik.io
  285. spec:
  286.   group: traefik.io
  287.   names:
  288.     kind: IngressRouteTCP
  289.     listKind: IngressRouteTCPList
  290.     plural: ingressroutetcps
  291.     singular: ingressroutetcp
  292.   scope: Namespaced
  293.   versions:
  294.   - name: v1alpha1
  295.     schema:
  296.       openAPIV3Schema:
  297.         description: IngressRouteTCP is the CRD implementation of a Traefik TCP Router.
  298.         properties:
  299.           apiVersion:
  300.             description: 'APIVersion defines the versioned schema of this representation
  301.               of an object. Servers should convert recognized schemas to the latest
  302.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  303.             type: string
  304.           kind:
  305.             description: 'Kind is a string value representing the REST resource this
  306.               object represents. Servers may infer this from the endpoint the client
  307.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  308.             type: string
  309.           metadata:
  310.             type: object
  311.           spec:
  312.             description: IngressRouteTCPSpec defines the desired state of IngressRouteTCP.
  313.             properties:
  314.               entryPoints:
  315.                 description: 'EntryPoints defines the list of entry point names to
  316.                   bind to. Entry points have to be configured in the static configuration.
  317.                   More info: https://doc.traefik.io/traefik/v2.10/routing/entrypoints/
  318.                   Default: all.'
  319.                 items:
  320.                   type: string
  321.                 type: array
  322.               routes:
  323.                 description: Routes defines the list of routes.
  324.                 items:
  325.                   description: RouteTCP holds the TCP route configuration.
  326.                   properties:
  327.                     match:
  328.                       description: 'Match defines the router''s rule. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#rule_1'
  329.                       type: string
  330.                     middlewares:
  331.                       description: Middlewares defines the list of references to MiddlewareTCP
  332.                         resources.
  333.                       items:
  334.                         description: ObjectReference is a generic reference to a Traefik
  335.                           resource.
  336.                         properties:
  337.                           name:
  338.                             description: Name defines the name of the referenced Traefik
  339.                               resource.
  340.                             type: string
  341.                           namespace:
  342.                             description: Namespace defines the namespace of the referenced
  343.                               Traefik resource.
  344.                             type: string
  345.                         required:
  346.                         - name
  347.                         type: object
  348.                       type: array
  349.                     priority:
  350.                       description: 'Priority defines the router''s priority. More
  351.                         info: https://doc.traefik.io/traefik/v2.10/routing/routers/#priority_1'
  352.                       type: integer
  353.                     services:
  354.                       description: Services defines the list of TCP services.
  355.                       items:
  356.                         description: ServiceTCP defines an upstream TCP service to
  357.                           proxy traffic to.
  358.                         properties:
  359.                           name:
  360.                             description: Name defines the name of the referenced Kubernetes
  361.                               Service.
  362.                             type: string
  363.                           namespace:
  364.                             description: Namespace defines the namespace of the referenced
  365.                               Kubernetes Service.
  366.                             type: string
  367.                           nativeLB:
  368.                             description: NativeLB controls, when creating the load-balancer,
  369.                               whether the LB's children are directly the pods IPs
  370.                               or if the only child is the Kubernetes Service clusterIP.
  371.                               The Kubernetes Service itself does load-balance to the
  372.                               pods. By default, NativeLB is false.
  373.                             type: boolean
  374.                           port:
  375.                             anyOf:
  376.                             - type: integer
  377.                             - type: string
  378.                             description: Port defines the port of a Kubernetes Service.
  379.                               This can be a reference to a named port.
  380.                             x-kubernetes-int-or-string: true
  381.                           proxyProtocol:
  382.                             description: 'ProxyProtocol defines the PROXY protocol
  383.                               configuration. More info: https://doc.traefik.io/traefik/v2.10/routing/services/#proxy-protocol'
  384.                             properties:
  385.                               version:
  386.                                 description: Version defines the PROXY Protocol version
  387.                                   to use.
  388.                                 type: integer
  389.                             type: object
  390.                           terminationDelay:
  391.                             description: TerminationDelay defines the deadline that
  392.                               the proxy sets, after one of its connected peers indicates
  393.                               it has closed the writing capability of its connection,
  394.                               to close the reading capability as well, hence fully
  395.                               terminating the connection. It is a duration in milliseconds,
  396.                               defaulting to 100. A negative value means an infinite
  397.                               deadline (i.e. the reading capability is never closed).
  398.                             type: integer
  399.                           weight:
  400.                             description: Weight defines the weight used when balancing
  401.                               requests between multiple Kubernetes Service.
  402.                             type: integer
  403.                         required:
  404.                         - name
  405.                         - port
  406.                         type: object
  407.                       type: array
  408.                   required:
  409.                   - match
  410.                   type: object
  411.                 type: array
  412.               tls:
  413.                 description: 'TLS defines the TLS configuration on a layer 4 / TCP
  414.                   Route. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#tls_1'
  415.                 properties:
  416.                   certResolver:
  417.                     description: 'CertResolver defines the name of the certificate
  418.                       resolver to use. Cert resolvers have to be configured in the
  419.                       static configuration. More info: https://doc.traefik.io/traefik/v2.10/https/acme/#certificate-resolvers'
  420.                     type: string
  421.                   domains:
  422.                     description: 'Domains defines the list of domains that will be
  423.                       used to issue certificates. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#domains'
  424.                     items:
  425.                       description: Domain holds a domain name with SANs.
  426.                       properties:
  427.                         main:
  428.                           description: Main defines the main domain name.
  429.                           type: string
  430.                         sans:
  431.                           description: SANs defines the subject alternative domain
  432.                             names.
  433.                           items:
  434.                             type: string
  435.                           type: array
  436.                       type: object
  437.                     type: array
  438.                   options:
  439.                     description: 'Options defines the reference to a TLSOption, that
  440.                       specifies the parameters of the TLS connection. If not defined,
  441.                       the `default` TLSOption is used. More info: https://doc.traefik.io/traefik/v2.10/https/tls/#tls-options'
  442.                     properties:
  443.                       name:
  444.                         description: Name defines the name of the referenced Traefik
  445.                           resource.
  446.                         type: string
  447.                       namespace:
  448.                         description: Namespace defines the namespace of the referenced
  449.                           Traefik resource.
  450.                         type: string
  451.                     required:
  452.                     - name
  453.                     type: object
  454.                   passthrough:
  455.                     description: Passthrough defines whether a TLS router will terminate
  456.                       the TLS connection.
  457.                     type: boolean
  458.                   secretName:
  459.                     description: SecretName is the name of the referenced Kubernetes
  460.                       Secret to specify the certificate details.
  461.                     type: string
  462.                   store:
  463.                     description: Store defines the reference to the TLSStore, that
  464.                       will be used to store certificates. Please note that only `default`
  465.                       TLSStore can be used.
  466.                     properties:
  467.                       name:
  468.                         description: Name defines the name of the referenced Traefik
  469.                           resource.
  470.                         type: string
  471.                       namespace:
  472.                         description: Namespace defines the namespace of the referenced
  473.                           Traefik resource.
  474.                         type: string
  475.                     required:
  476.                     - name
  477.                     type: object
  478.                 type: object
  479.             required:
  480.             - routes
  481.             type: object
  482.         required:
  483.         - metadata
  484.         - spec
  485.         type: object
  486.     served: true
  487.     storage: true
  488. status:
  489.   acceptedNames:
  490.     kind: ""
  491.     plural: ""
  492.   conditions: []
  493.   storedVersions: []
  495. ---
  496. apiVersion: apiextensions.k8s.io/v1
  497. kind: CustomResourceDefinition
  498. metadata:
  499.   annotations:
  500.     controller-gen.kubebuilder.io/version: v0.6.2
  501.   creationTimestamp: null
  502.   name: ingressrouteudps.traefik.io
  503. spec:
  504.   group: traefik.io
  505.   names:
  506.     kind: IngressRouteUDP
  507.     listKind: IngressRouteUDPList
  508.     plural: ingressrouteudps
  509.     singular: ingressrouteudp
  510.   scope: Namespaced
  511.   versions:
  512.   - name: v1alpha1
  513.     schema:
  514.       openAPIV3Schema:
  515.         description: IngressRouteUDP is a CRD implementation of a Traefik UDP Router.
  516.         properties:
  517.           apiVersion:
  518.             description: 'APIVersion defines the versioned schema of this representation
  519.               of an object. Servers should convert recognized schemas to the latest
  520.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  521.             type: string
  522.           kind:
  523.             description: 'Kind is a string value representing the REST resource this
  524.               object represents. Servers may infer this from the endpoint the client
  525.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  526.             type: string
  527.           metadata:
  528.             type: object
  529.           spec:
  530.             description: IngressRouteUDPSpec defines the desired state of a IngressRouteUDP.
  531.             properties:
  532.               entryPoints:
  533.                 description: 'EntryPoints defines the list of entry point names to
  534.                   bind to. Entry points have to be configured in the static configuration.
  535.                   More info: https://doc.traefik.io/traefik/v2.10/routing/entrypoints/
  536.                   Default: all.'
  537.                 items:
  538.                   type: string
  539.                 type: array
  540.               routes:
  541.                 description: Routes defines the list of routes.
  542.                 items:
  543.                   description: RouteUDP holds the UDP route configuration.
  544.                   properties:
  545.                     services:
  546.                       description: Services defines the list of UDP services.
  547.                       items:
  548.                         description: ServiceUDP defines an upstream UDP service to
  549.                           proxy traffic to.
  550.                         properties:
  551.                           name:
  552.                             description: Name defines the name of the referenced Kubernetes
  553.                               Service.
  554.                             type: string
  555.                           namespace:
  556.                             description: Namespace defines the namespace of the referenced
  557.                               Kubernetes Service.
  558.                             type: string
  559.                           nativeLB:
  560.                             description: NativeLB controls, when creating the load-balancer,
  561.                               whether the LB's children are directly the pods IPs
  562.                               or if the only child is the Kubernetes Service clusterIP.
  563.                               The Kubernetes Service itself does load-balance to the
  564.                               pods. By default, NativeLB is false.
  565.                             type: boolean
  566.                           port:
  567.                             anyOf:
  568.                             - type: integer
  569.                             - type: string
  570.                             description: Port defines the port of a Kubernetes Service.
  571.                               This can be a reference to a named port.
  572.                             x-kubernetes-int-or-string: true
  573.                           weight:
  574.                             description: Weight defines the weight used when balancing
  575.                               requests between multiple Kubernetes Service.
  576.                             type: integer
  577.                         required:
  578.                         - name
  579.                         - port
  580.                         type: object
  581.                       type: array
  582.                   type: object
  583.                 type: array
  584.             required:
  585.             - routes
  586.             type: object
  587.         required:
  588.         - metadata
  589.         - spec
  590.         type: object
  591.     served: true
  592.     storage: true
  593. status:
  594.   acceptedNames:
  595.     kind: ""
  596.     plural: ""
  597.   conditions: []
  598.   storedVersions: []
  600. ---
  601. apiVersion: apiextensions.k8s.io/v1
  602. kind: CustomResourceDefinition
  603. metadata:
  604.   annotations:
  605.     controller-gen.kubebuilder.io/version: v0.6.2
  606.   creationTimestamp: null
  607.   name: middlewares.traefik.io
  608. spec:
  609.   group: traefik.io
  610.   names:
  611.     kind: Middleware
  612.     listKind: MiddlewareList
  613.     plural: middlewares
  614.     singular: middleware
  615.   scope: Namespaced
  616.   versions:
  617.   - name: v1alpha1
  618.     schema:
  619.       openAPIV3Schema:
  620.         description: 'Middleware is the CRD implementation of a Traefik Middleware.
  621.           More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/overview/'
  622.         properties:
  623.           apiVersion:
  624.             description: 'APIVersion defines the versioned schema of this representation
  625.               of an object. Servers should convert recognized schemas to the latest
  626.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  627.             type: string
  628.           kind:
  629.             description: 'Kind is a string value representing the REST resource this
  630.               object represents. Servers may infer this from the endpoint the client
  631.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  632.             type: string
  633.           metadata:
  634.             type: object
  635.           spec:
  636.             description: MiddlewareSpec defines the desired state of a Middleware.
  637.             properties:
  638.               addPrefix:
  639.                 description: 'AddPrefix holds the add prefix middleware configuration.
  640.                   This middleware updates the path of a request before forwarding
  641.                   it. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/addprefix/'
  642.                 properties:
  643.                   prefix:
  644.                     description: Prefix is the string to add before the current path
  645.                       in the requested URL. It should include a leading slash (/).
  646.                     type: string
  647.                 type: object
  648.               basicAuth:
  649.                 description: 'BasicAuth holds the basic auth middleware configuration.
  650.                   This middleware restricts access to your services to known users.
  651.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/basicauth/'
  652.                 properties:
  653.                   headerField:
  654.                     description: 'HeaderField defines a header field to store the
  655.                       authenticated user. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/basicauth/#headerfield'
  656.                     type: string
  657.                   realm:
  658.                     description: 'Realm allows the protected resources on a server
  659.                       to be partitioned into a set of protection spaces, each with
  660.                       its own authentication scheme. Default: traefik.'
  661.                     type: string
  662.                   removeHeader:
  663.                     description: 'RemoveHeader sets the removeHeader option to true
  664.                       to remove the authorization header before forwarding the request
  665.                       to your service. Default: false.'
  666.                     type: boolean
  667.                   secret:
  668.                     description: Secret is the name of the referenced Kubernetes Secret
  669.                       containing user credentials.
  670.                     type: string
  671.                 type: object
  672.               buffering:
  673.                 description: 'Buffering holds the buffering middleware configuration.
  674.                   This middleware retries or limits the size of requests that can
  675.                   be forwarded to backends. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/buffering/#maxrequestbodybytes'
  676.                 properties:
  677.                   maxRequestBodyBytes:
  678.                     description: 'MaxRequestBodyBytes defines the maximum allowed
  679.                       body size for the request (in bytes). If the request exceeds
  680.                       the allowed size, it is not forwarded to the service, and the
  681.                       client gets a 413 (Request Entity Too Large) response. Default:
  682.                       0 (no maximum).'
  683.                     format: int64
  684.                     type: integer
  685.                   maxResponseBodyBytes:
  686.                     description: 'MaxResponseBodyBytes defines the maximum allowed
  687.                       response size from the service (in bytes). If the response exceeds
  688.                       the allowed size, it is not forwarded to the client. The client
  689.                       gets a 500 (Internal Server Error) response instead. Default:
  690.                       0 (no maximum).'
  691.                     format: int64
  692.                     type: integer
  693.                   memRequestBodyBytes:
  694.                     description: 'MemRequestBodyBytes defines the threshold (in bytes)
  695.                       from which the request will be buffered on disk instead of in
  696.                       memory. Default: 1048576 (1Mi).'
  697.                     format: int64
  698.                     type: integer
  699.                   memResponseBodyBytes:
  700.                     description: 'MemResponseBodyBytes defines the threshold (in bytes)
  701.                       from which the response will be buffered on disk instead of
  702.                       in memory. Default: 1048576 (1Mi).'
  703.                     format: int64
  704.                     type: integer
  705.                   retryExpression:
  706.                     description: 'RetryExpression defines the retry conditions. It
  707.                       is a logical combination of functions with operators AND (&&)
  708.                       and OR (||). More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/buffering/#retryexpression'
  709.                     type: string
  710.                 type: object
  711.               chain:
  712.                 description: 'Chain holds the configuration of the chain middleware.
  713.                   This middleware enables to define reusable combinations of other
  714.                   pieces of middleware. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/chain/'
  715.                 properties:
  716.                   middlewares:
  717.                     description: Middlewares is the list of MiddlewareRef which composes
  718.                       the chain.
  719.                     items:
  720.                       description: MiddlewareRef is a reference to a Middleware resource.
  721.                       properties:
  722.                         name:
  723.                           description: Name defines the name of the referenced Middleware
  724.                             resource.
  725.                           type: string
  726.                         namespace:
  727.                           description: Namespace defines the namespace of the referenced
  728.                             Middleware resource.
  729.                           type: string
  730.                       required:
  731.                       - name
  732.                       type: object
  733.                     type: array
  734.                 type: object
  735.               circuitBreaker:
  736.                 description: CircuitBreaker holds the circuit breaker configuration.
  737.                 properties:
  738.                   checkPeriod:
  739.                     anyOf:
  740.                     - type: integer
  741.                     - type: string
  742.                     description: CheckPeriod is the interval between successive checks
  743.                       of the circuit breaker condition (when in standby state).
  744.                     x-kubernetes-int-or-string: true
  745.                   expression:
  746.                     description: Expression is the condition that triggers the tripped
  747.                       state.
  748.                     type: string
  749.                   fallbackDuration:
  750.                     anyOf:
  751.                     - type: integer
  752.                     - type: string
  753.                     description: FallbackDuration is the duration for which the circuit
  754.                       breaker will wait before trying to recover (from a tripped state).
  755.                     x-kubernetes-int-or-string: true
  756.                   recoveryDuration:
  757.                     anyOf:
  758.                     - type: integer
  759.                     - type: string
  760.                     description: RecoveryDuration is the duration for which the circuit
  761.                       breaker will try to recover (as soon as it is in recovering
  762.                       state).
  763.                     x-kubernetes-int-or-string: true
  764.                 type: object
  765.               compress:
  766.                 description: 'Compress holds the compress middleware configuration.
  767.                   This middleware compresses responses before sending them to the
  768.                   client, using gzip compression. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/compress/'
  769.                 properties:
  770.                   excludedContentTypes:
  771.                     description: ExcludedContentTypes defines the list of content
  772.                       types to compare the Content-Type header of the incoming requests
  773.                       and responses before compressing.
  774.                     items:
  775.                       type: string
  776.                     type: array
  777.                   minResponseBodyBytes:
  778.                     description: 'MinResponseBodyBytes defines the minimum amount
  779.                       of bytes a response body must have to be compressed. Default:
  780.                       1024.'
  781.                     type: integer
  782.                 type: object
  783.               contentType:
  784.                 description: ContentType holds the content-type middleware configuration.
  785.                   This middleware exists to enable the correct behavior until at least
  786.                   the default one can be changed in a future version.
  787.                 properties:
  788.                   autoDetect:
  789.                     description: AutoDetect specifies whether to let the `Content-Type`
  790.                       header, if it has not been set by the backend, be automatically
  791.                       set to a value derived from the contents of the response. As
  792.                       a proxy, the default behavior should be to leave the header
  793.                       alone, regardless of what the backend did with it. However,
  794.                       the historic default was to always auto-detect and set the header
  795.                       if it was nil, and it is going to be kept that way in order
  796.                       to support users currently relying on it.
  797.                     type: boolean
  798.                 type: object
  799.               digestAuth:
  800.                 description: 'DigestAuth holds the digest auth middleware configuration.
  801.                   This middleware restricts access to your services to known users.
  802.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/digestauth/'
  803.                 properties:
  804.                   headerField:
  805.                     description: 'HeaderField defines a header field to store the
  806.                       authenticated user. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/basicauth/#headerfield'
  807.                     type: string
  808.                   realm:
  809.                     description: 'Realm allows the protected resources on a server
  810.                       to be partitioned into a set of protection spaces, each with
  811.                       its own authentication scheme. Default: traefik.'
  812.                     type: string
  813.                   removeHeader:
  814.                     description: RemoveHeader defines whether to remove the authorization
  815.                       header before forwarding the request to the backend.
  816.                     type: boolean
  817.                   secret:
  818.                     description: Secret is the name of the referenced Kubernetes Secret
  819.                       containing user credentials.
  820.                     type: string
  821.                 type: object
  822.               errors:
  823.                 description: 'ErrorPage holds the custom error middleware configuration.
  824.                   This middleware returns a custom page in lieu of the default, according
  825.                   to configured ranges of HTTP Status codes. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/errorpages/'
  826.                 properties:
  827.                   query:
  828.                     description: Query defines the URL for the error page (hosted
  829.                       by service). The {status} variable can be used in order to insert
  830.                       the status code in the URL.
  831.                     type: string
  832.                   service:
  833.                     description: 'Service defines the reference to a Kubernetes Service
  834.                       that will serve the error page. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/errorpages/#service'
  835.                     properties:
  836.                       kind:
  837.                         description: Kind defines the kind of the Service.
  838.                         enum:
  839.                         - Service
  840.                         - TraefikService
  841.                         type: string
  842.                       name:
  843.                         description: Name defines the name of the referenced Kubernetes
  844.                           Service or TraefikService. The differentiation between the
  845.                           two is specified in the Kind field.
  846.                         type: string
  847.                       namespace:
  848.                         description: Namespace defines the namespace of the referenced
  849.                           Kubernetes Service or TraefikService.
  850.                         type: string
  851.                       nativeLB:
  852.                         description: NativeLB controls, when creating the load-balancer,
  853.                           whether the LB's children are directly the pods IPs or if
  854.                           the only child is the Kubernetes Service clusterIP. The
  855.                           Kubernetes Service itself does load-balance to the pods.
  856.                           By default, NativeLB is false.
  857.                         type: boolean
  858.                       passHostHeader:
  859.                         description: PassHostHeader defines whether the client Host
  860.                           header is forwarded to the upstream Kubernetes Service.
  861.                           By default, passHostHeader is true.
  862.                         type: boolean
  863.                       port:
  864.                         anyOf:
  865.                         - type: integer
  866.                         - type: string
  867.                         description: Port defines the port of a Kubernetes Service.
  868.                           This can be a reference to a named port.
  869.                         x-kubernetes-int-or-string: true
  870.                       responseForwarding:
  871.                         description: ResponseForwarding defines how Traefik forwards
  872.                           the response from the upstream Kubernetes Service to the
  873.                           client.
  874.                         properties:
  875.                           flushInterval:
  876.                             description: 'FlushInterval defines the interval, in milliseconds,
  877.                               in between flushes to the client while copying the response
  878.                               body. A negative value means to flush immediately after
  879.                               each write to the client. This configuration is ignored
  880.                               when ReverseProxy recognizes a response as a streaming
  881.                               response; for such responses, writes are flushed to
  882.                               the client immediately. Default: 100ms'
  883.                             type: string
  884.                         type: object
  885.                       scheme:
  886.                         description: Scheme defines the scheme to use for the request
  887.                           to the upstream Kubernetes Service. It defaults to https
  888.                           when Kubernetes Service port is 443, http otherwise.
  889.                         type: string
  890.                       serversTransport:
  891.                         description: ServersTransport defines the name of ServersTransport
  892.                           resource to use. It allows to configure the transport between
  893.                           Traefik and your servers. Can only be used on a Kubernetes
  894.                           Service.
  895.                         type: string
  896.                       sticky:
  897.                         description: 'Sticky defines the sticky sessions configuration.
  898.                           More info: https://doc.traefik.io/traefik/v2.10/routing/services/#sticky-sessions'
  899.                         properties:
  900.                           cookie:
  901.                             description: Cookie defines the sticky cookie configuration.
  902.                             properties:
  903.                               httpOnly:
  904.                                 description: HTTPOnly defines whether the cookie can
  905.                                   be accessed by client-side APIs, such as JavaScript.
  906.                                 type: boolean
  907.                               name:
  908.                                 description: Name defines the Cookie name.
  909.                                 type: string
  910.                               sameSite:
  911.                                 description: 'SameSite defines the same site policy.
  912.                                   More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  913.                                 type: string
  914.                               secure:
  915.                                 description: Secure defines whether the cookie can
  916.                                   only be transmitted over an encrypted connection
  917.                                   (i.e. HTTPS).
  918.                                 type: boolean
  919.                             type: object
  920.                         type: object
  921.                       strategy:
  922.                         description: Strategy defines the load balancing strategy
  923.                           between the servers. RoundRobin is the only supported value
  924.                           at the moment.
  925.                         type: string
  926.                       weight:
  927.                         description: Weight defines the weight and should only be
  928.                           specified when Name references a TraefikService object (and
  929.                           to be precise, one that embeds a Weighted Round Robin).
  930.                         type: integer
  931.                     required:
  932.                     - name
  933.                     type: object
  934.                   status:
  935.                     description: Status defines which status or range of statuses
  936.                       should result in an error page. It can be either a status code
  937.                       as a number (500), as multiple comma-separated numbers (500,502),
  938.                       as ranges by separating two codes with a dash (500-599), or
  939.                       a combination of the two (404,418,500-599).
  940.                     items:
  941.                       type: string
  942.                     type: array
  943.                 type: object
  944.               forwardAuth:
  945.                 description: 'ForwardAuth holds the forward auth middleware configuration.
  946.                   This middleware delegates the request authentication to a Service.
  947.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/forwardauth/'
  948.                 properties:
  949.                   address:
  950.                     description: Address defines the authentication server address.
  951.                     type: string
  952.                   authRequestHeaders:
  953.                     description: AuthRequestHeaders defines the list of the headers
  954.                       to copy from the request to the authentication server. If not
  955.                       set or empty then all request headers are passed.
  956.                     items:
  957.                       type: string
  958.                     type: array
  959.                   authResponseHeaders:
  960.                     description: AuthResponseHeaders defines the list of headers to
  961.                       copy from the authentication server response and set on forwarded
  962.                       request, replacing any existing conflicting headers.
  963.                     items:
  964.                       type: string
  965.                     type: array
  966.                   authResponseHeadersRegex:
  967.                     description: 'AuthResponseHeadersRegex defines the regex to match
  968.                       headers to copy from the authentication server response and
  969.                       set on forwarded request, after stripping all headers that match
  970.                       the regex. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/forwardauth/#authresponseheadersregex'
  971.                     type: string
  972.                   tls:
  973.                     description: TLS defines the configuration used to secure the
  974.                       connection to the authentication server.
  975.                     properties:
  976.                       caOptional:
  977.                         type: boolean
  978.                       caSecret:
  979.                         description: CASecret is the name of the referenced Kubernetes
  980.                           Secret containing the CA to validate the server certificate.
  981.                           The CA certificate is extracted from key `tls.ca` or `ca.crt`.
  982.                         type: string
  983.                       certSecret:
  984.                         description: CertSecret is the name of the referenced Kubernetes
  985.                           Secret containing the client certificate. The client certificate
  986.                           is extracted from the keys `tls.crt` and `tls.key`.
  987.                         type: string
  988.                       insecureSkipVerify:
  989.                         description: InsecureSkipVerify defines whether the server
  990.                           certificates should be validated.
  991.                         type: boolean
  992.                     type: object
  993.                   trustForwardHeader:
  994.                     description: 'TrustForwardHeader defines whether to trust (ie:
  995.                       forward) all X-Forwarded-* headers.'
  996.                     type: boolean
  997.                 type: object
  998.               headers:
  999.                 description: 'Headers holds the headers middleware configuration.
  1000.                   This middleware manages the requests and responses headers. More
  1001.                   info: https://doc.traefik.io/traefik/v2.10/middlewares/http/headers/#customrequestheaders'
  1002.                 properties:
  1003.                   accessControlAllowCredentials:
  1004.                     description: AccessControlAllowCredentials defines whether the
  1005.                       request can include user credentials.
  1006.                     type: boolean
  1007.                   accessControlAllowHeaders:
  1008.                     description: AccessControlAllowHeaders defines the Access-Control-Request-Headers
  1009.                       values sent in preflight response.
  1010.                     items:
  1011.                       type: string
  1012.                     type: array
  1013.                   accessControlAllowMethods:
  1014.                     description: AccessControlAllowMethods defines the Access-Control-Request-Method
  1015.                       values sent in preflight response.
  1016.                     items:
  1017.                       type: string
  1018.                     type: array
  1019.                   accessControlAllowOriginList:
  1020.                     description: AccessControlAllowOriginList is a list of allowable
  1021.                       origins. Can also be a wildcard origin "*".
  1022.                     items:
  1023.                       type: string
  1024.                     type: array
  1025.                   accessControlAllowOriginListRegex:
  1026.                     description: AccessControlAllowOriginListRegex is a list of allowable
  1027.                       origins written following the Regular Expression syntax (https://golang.org/pkg/regexp/).
  1028.                     items:
  1029.                       type: string
  1030.                     type: array
  1031.                   accessControlExposeHeaders:
  1032.                     description: AccessControlExposeHeaders defines the Access-Control-Expose-Headers
  1033.                       values sent in preflight response.
  1034.                     items:
  1035.                       type: string
  1036.                     type: array
  1037.                   accessControlMaxAge:
  1038.                     description: AccessControlMaxAge defines the time that a preflight
  1039.                       request may be cached.
  1040.                     format: int64
  1041.                     type: integer
  1042.                   addVaryHeader:
  1043.                     description: AddVaryHeader defines whether the Vary header is
  1044.                       automatically added/updated when the AccessControlAllowOriginList
  1045.                       is set.
  1046.                     type: boolean
  1047.                   allowedHosts:
  1048.                     description: AllowedHosts defines the fully qualified list of
  1049.                       allowed domain names.
  1050.                     items:
  1051.                       type: string
  1052.                     type: array
  1053.                   browserXssFilter:
  1054.                     description: BrowserXSSFilter defines whether to add the X-XSS-Protection
  1055.                       header with the value 1; mode=block.
  1056.                     type: boolean
  1057.                   contentSecurityPolicy:
  1058.                     description: ContentSecurityPolicy defines the Content-Security-Policy
  1059.                       header value.
  1060.                     type: string
  1061.                   contentTypeNosniff:
  1062.                     description: ContentTypeNosniff defines whether to add the X-Content-Type-Options
  1063.                       header with the nosniff value.
  1064.                     type: boolean
  1065.                   customBrowserXSSValue:
  1066.                     description: CustomBrowserXSSValue defines the X-XSS-Protection
  1067.                       header value. This overrides the BrowserXssFilter option.
  1068.                     type: string
  1069.                   customFrameOptionsValue:
  1070.                     description: CustomFrameOptionsValue defines the X-Frame-Options
  1071.                       header value. This overrides the FrameDeny option.
  1072.                     type: string
  1073.                   customRequestHeaders:
  1074.                     additionalProperties:
  1075.                       type: string
  1076.                     description: CustomRequestHeaders defines the header names and
  1077.                       values to apply to the request.
  1078.                     type: object
  1079.                   customResponseHeaders:
  1080.                     additionalProperties:
  1081.                       type: string
  1082.                     description: CustomResponseHeaders defines the header names and
  1083.                       values to apply to the response.
  1084.                     type: object
  1085.                   featurePolicy:
  1086.                     description: 'Deprecated: use PermissionsPolicy instead.'
  1087.                     type: string
  1088.                   forceSTSHeader:
  1089.                     description: ForceSTSHeader defines whether to add the STS header
  1090.                       even when the connection is HTTP.
  1091.                     type: boolean
  1092.                   frameDeny:
  1093.                     description: FrameDeny defines whether to add the X-Frame-Options
  1094.                       header with the DENY value.
  1095.                     type: boolean
  1096.                   hostsProxyHeaders:
  1097.                     description: HostsProxyHeaders defines the header keys that may
  1098.                       hold a proxied hostname value for the request.
  1099.                     items:
  1100.                       type: string
  1101.                     type: array
  1102.                   isDevelopment:
  1103.                     description: IsDevelopment defines whether to mitigate the unwanted
  1104.                       effects of the AllowedHosts, SSL, and STS options when developing.
  1105.                       Usually testing takes place using HTTP, not HTTPS, and on localhost,
  1106.                       not your production domain. If you would like your development
  1107.                       environment to mimic production with complete Host blocking,
  1108.                       SSL redirects, and STS headers, leave this as false.
  1109.                     type: boolean
  1110.                   permissionsPolicy:
  1111.                     description: PermissionsPolicy defines the Permissions-Policy
  1112.                       header value. This allows sites to control browser features.
  1113.                     type: string
  1114.                   publicKey:
  1115.                     description: PublicKey is the public key that implements HPKP
  1116.                       to prevent MITM attacks with forged certificates.
  1117.                     type: string
  1118.                   referrerPolicy:
  1119.                     description: ReferrerPolicy defines the Referrer-Policy header
  1120.                       value. This allows sites to control whether browsers forward
  1121.                       the Referer header to other sites.
  1122.                     type: string
  1123.                   sslForceHost:
  1124.                     description: 'Deprecated: use RedirectRegex instead.'
  1125.                     type: boolean
  1126.                   sslHost:
  1127.                     description: 'Deprecated: use RedirectRegex instead.'
  1128.                     type: string
  1129.                   sslProxyHeaders:
  1130.                     additionalProperties:
  1131.                       type: string
  1132.                     description: 'SSLProxyHeaders defines the header keys with associated
  1133.                       values that would indicate a valid HTTPS request. It can be
  1134.                       useful when using other proxies (example: "X-Forwarded-Proto":
  1135.                       "https").'
  1136.                     type: object
  1137.                   sslRedirect:
  1138.                     description: 'Deprecated: use EntryPoint redirection or RedirectScheme
  1139.                       instead.'
  1140.                     type: boolean
  1141.                   sslTemporaryRedirect:
  1142.                     description: 'Deprecated: use EntryPoint redirection or RedirectScheme
  1143.                       instead.'
  1144.                     type: boolean
  1145.                   stsIncludeSubdomains:
  1146.                     description: STSIncludeSubdomains defines whether the includeSubDomains
  1147.                       directive is appended to the Strict-Transport-Security header.
  1148.                     type: boolean
  1149.                   stsPreload:
  1150.                     description: STSPreload defines whether the preload flag is appended
  1151.                       to the Strict-Transport-Security header.
  1152.                     type: boolean
  1153.                   stsSeconds:
  1154.                     description: STSSeconds defines the max-age of the Strict-Transport-Security
  1155.                       header. If set to 0, the header is not set.
  1156.                     format: int64
  1157.                     type: integer
  1158.                 type: object
  1159.               inFlightReq:
  1160.                 description: 'InFlightReq holds the in-flight request middleware configuration.
  1161.                   This middleware limits the number of requests being processed and
  1162.                   served concurrently. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/inflightreq/'
  1163.                 properties:
  1164.                   amount:
  1165.                     description: Amount defines the maximum amount of allowed simultaneous
  1166.                       in-flight request. The middleware responds with HTTP 429 Too
  1167.                       Many Requests if there are already amount requests in progress
  1168.                       (based on the same sourceCriterion strategy).
  1169.                     format: int64
  1170.                     type: integer
  1171.                   sourceCriterion:
  1172.                     description: 'SourceCriterion defines what criterion is used to
  1173.                       group requests as originating from a common source. If several
  1174.                       strategies are defined at the same time, an error will be raised.
  1175.                       If none are set, the default is to use the requestHost. More
  1176.                       info: https://doc.traefik.io/traefik/v2.10/middlewares/http/inflightreq/#sourcecriterion'
  1177.                     properties:
  1178.                       ipStrategy:
  1179.                         description: 'IPStrategy holds the IP strategy configuration
  1180.                           used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/ipwhitelist/#ipstrategy'
  1181.                         properties:
  1182.                           depth:
  1183.                             description: Depth tells Traefik to use the X-Forwarded-For
  1184.                               header and take the IP located at the depth position
  1185.                               (starting from the right).
  1186.                             type: integer
  1187.                           excludedIPs:
  1188.                             description: ExcludedIPs configures Traefik to scan the
  1189.                               X-Forwarded-For header and select the first IP not in
  1190.                               the list.
  1191.                             items:
  1192.                               type: string
  1193.                             type: array
  1194.                         type: object
  1195.                       requestHeaderName:
  1196.                         description: RequestHeaderName defines the name of the header
  1197.                           used to group incoming requests.
  1198.                         type: string
  1199.                       requestHost:
  1200.                         description: RequestHost defines whether to consider the request
  1201.                           Host as the source.
  1202.                         type: boolean
  1203.                     type: object
  1204.                 type: object
  1205.               ipWhiteList:
  1206.                 description: 'IPWhiteList holds the IP whitelist middleware configuration.
  1207.                   This middleware accepts / refuses requests based on the client IP.
  1208.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/ipwhitelist/'
  1209.                 properties:
  1210.                   ipStrategy:
  1211.                     description: 'IPStrategy holds the IP strategy configuration used
  1212.                       by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/ipwhitelist/#ipstrategy'
  1213.                     properties:
  1214.                       depth:
  1215.                         description: Depth tells Traefik to use the X-Forwarded-For
  1216.                           header and take the IP located at the depth position (starting
  1217.                           from the right).
  1218.                         type: integer
  1219.                       excludedIPs:
  1220.                         description: ExcludedIPs configures Traefik to scan the X-Forwarded-For
  1221.                           header and select the first IP not in the list.
  1222.                         items:
  1223.                           type: string
  1224.                         type: array
  1225.                     type: object
  1226.                   sourceRange:
  1227.                     description: SourceRange defines the set of allowed IPs (or ranges
  1228.                       of allowed IPs by using CIDR notation).
  1229.                     items:
  1230.                       type: string
  1231.                     type: array
  1232.                 type: object
  1233.               passTLSClientCert:
  1234.                 description: 'PassTLSClientCert holds the pass TLS client cert middleware
  1235.                   configuration. This middleware adds the selected data from the passed
  1236.                   client TLS certificate to a header. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/passtlsclientcert/'
  1237.                 properties:
  1238.                   info:
  1239.                     description: Info selects the specific client certificate details
  1240.                       you want to add to the X-Forwarded-Tls-Client-Cert-Info header.
  1241.                     properties:
  1242.                       issuer:
  1243.                         description: Issuer defines the client certificate issuer
  1244.                           details to add to the X-Forwarded-Tls-Client-Cert-Info header.
  1245.                         properties:
  1246.                           commonName:
  1247.                             description: CommonName defines whether to add the organizationalUnit
  1248.                               information into the issuer.
  1249.                             type: boolean
  1250.                           country:
  1251.                             description: Country defines whether to add the country
  1252.                               information into the issuer.
  1253.                             type: boolean
  1254.                           domainComponent:
  1255.                             description: DomainComponent defines whether to add the
  1256.                               domainComponent information into the issuer.
  1257.                             type: boolean
  1258.                           locality:
  1259.                             description: Locality defines whether to add the locality
  1260.                               information into the issuer.
  1261.                             type: boolean
  1262.                           organization:
  1263.                             description: Organization defines whether to add the organization
  1264.                               information into the issuer.
  1265.                             type: boolean
  1266.                           province:
  1267.                             description: Province defines whether to add the province
  1268.                               information into the issuer.
  1269.                             type: boolean
  1270.                           serialNumber:
  1271.                             description: SerialNumber defines whether to add the serialNumber
  1272.                               information into the issuer.
  1273.                             type: boolean
  1274.                         type: object
  1275.                       notAfter:
  1276.                         description: NotAfter defines whether to add the Not After
  1277.                           information from the Validity part.
  1278.                         type: boolean
  1279.                       notBefore:
  1280.                         description: NotBefore defines whether to add the Not Before
  1281.                           information from the Validity part.
  1282.                         type: boolean
  1283.                       sans:
  1284.                         description: Sans defines whether to add the Subject Alternative
  1285.                           Name information from the Subject Alternative Name part.
  1286.                         type: boolean
  1287.                       serialNumber:
  1288.                         description: SerialNumber defines whether to add the client
  1289.                           serialNumber information.
  1290.                         type: boolean
  1291.                       subject:
  1292.                         description: Subject defines the client certificate subject
  1293.                           details to add to the X-Forwarded-Tls-Client-Cert-Info header.
  1294.                         properties:
  1295.                           commonName:
  1296.                             description: CommonName defines whether to add the organizationalUnit
  1297.                               information into the subject.
  1298.                             type: boolean
  1299.                           country:
  1300.                             description: Country defines whether to add the country
  1301.                               information into the subject.
  1302.                             type: boolean
  1303.                           domainComponent:
  1304.                             description: DomainComponent defines whether to add the
  1305.                               domainComponent information into the subject.
  1306.                             type: boolean
  1307.                           locality:
  1308.                             description: Locality defines whether to add the locality
  1309.                               information into the subject.
  1310.                             type: boolean
  1311.                           organization:
  1312.                             description: Organization defines whether to add the organization
  1313.                               information into the subject.
  1314.                             type: boolean
  1315.                           organizationalUnit:
  1316.                             description: OrganizationalUnit defines whether to add
  1317.                               the organizationalUnit information into the subject.
  1318.                             type: boolean
  1319.                           province:
  1320.                             description: Province defines whether to add the province
  1321.                               information into the subject.
  1322.                             type: boolean
  1323.                           serialNumber:
  1324.                             description: SerialNumber defines whether to add the serialNumber
  1325.                               information into the subject.
  1326.                             type: boolean
  1327.                         type: object
  1328.                     type: object
  1329.                   pem:
  1330.                     description: PEM sets the X-Forwarded-Tls-Client-Cert header with
  1331.                       the certificate.
  1332.                     type: boolean
  1333.                 type: object
  1334.               plugin:
  1335.                 additionalProperties:
  1336.                   x-kubernetes-preserve-unknown-fields: true
  1337.                 description: 'Plugin defines the middleware plugin configuration.
  1338.                   More info: https://doc.traefik.io/traefik/plugins/'
  1339.                 type: object
  1340.               rateLimit:
  1341.                 description: 'RateLimit holds the rate limit configuration. This middleware
  1342.                   ensures that services will receive a fair amount of requests, and
  1343.                   allows one to define what fair is. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/ratelimit/'
  1344.                 properties:
  1345.                   average:
  1346.                     description: Average is the maximum rate, by default in requests/s,
  1347.                       allowed for the given source. It defaults to 0, which means
  1348.                       no rate limiting. The rate is actually defined by dividing Average
  1349.                       by Period. So for a rate below 1req/s, one needs to define a
  1350.                       Period larger than a second.
  1351.                     format: int64
  1352.                     type: integer
  1353.                   burst:
  1354.                     description: Burst is the maximum number of requests allowed to
  1355.                       arrive in the same arbitrarily small period of time. It defaults
  1356.                       to 1.
  1357.                     format: int64
  1358.                     type: integer
  1359.                   period:
  1360.                     anyOf:
  1361.                     - type: integer
  1362.                     - type: string
  1363.                     description: 'Period, in combination with Average, defines the
  1364.                       actual maximum rate, such as: r = Average / Period. It defaults
  1365.                       to a second.'
  1366.                     x-kubernetes-int-or-string: true
  1367.                   sourceCriterion:
  1368.                     description: SourceCriterion defines what criterion is used to
  1369.                       group requests as originating from a common source. If several
  1370.                       strategies are defined at the same time, an error will be raised.
  1371.                       If none are set, the default is to use the request's remote
  1372.                       address field (as an ipStrategy).
  1373.                     properties:
  1374.                       ipStrategy:
  1375.                         description: 'IPStrategy holds the IP strategy configuration
  1376.                           used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/ipwhitelist/#ipstrategy'
  1377.                         properties:
  1378.                           depth:
  1379.                             description: Depth tells Traefik to use the X-Forwarded-For
  1380.                               header and take the IP located at the depth position
  1381.                               (starting from the right).
  1382.                             type: integer
  1383.                           excludedIPs:
  1384.                             description: ExcludedIPs configures Traefik to scan the
  1385.                               X-Forwarded-For header and select the first IP not in
  1386.                               the list.
  1387.                             items:
  1388.                               type: string
  1389.                             type: array
  1390.                         type: object
  1391.                       requestHeaderName:
  1392.                         description: RequestHeaderName defines the name of the header
  1393.                           used to group incoming requests.
  1394.                         type: string
  1395.                       requestHost:
  1396.                         description: RequestHost defines whether to consider the request
  1397.                           Host as the source.
  1398.                         type: boolean
  1399.                     type: object
  1400.                 type: object
  1401.               redirectRegex:
  1402.                 description: 'RedirectRegex holds the redirect regex middleware configuration.
  1403.                   This middleware redirects a request using regex matching and replacement.
  1404.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/redirectregex/#regex'
  1405.                 properties:
  1406.                   permanent:
  1407.                     description: Permanent defines whether the redirection is permanent
  1408.                       (301).
  1409.                     type: boolean
  1410.                   regex:
  1411.                     description: Regex defines the regex used to match and capture
  1412.                       elements from the request URL.
  1413.                     type: string
  1414.                   replacement:
  1415.                     description: Replacement defines how to modify the URL to have
  1416.                       the new target URL.
  1417.                     type: string
  1418.                 type: object
  1419.               redirectScheme:
  1420.                 description: 'RedirectScheme holds the redirect scheme middleware
  1421.                   configuration. This middleware redirects requests from a scheme/port
  1422.                   to another. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/redirectscheme/'
  1423.                 properties:
  1424.                   permanent:
  1425.                     description: Permanent defines whether the redirection is permanent
  1426.                       (301).
  1427.                     type: boolean
  1428.                   port:
  1429.                     description: Port defines the port of the new URL.
  1430.                     type: string
  1431.                   scheme:
  1432.                     description: Scheme defines the scheme of the new URL.
  1433.                     type: string
  1434.                 type: object
  1435.               replacePath:
  1436.                 description: 'ReplacePath holds the replace path middleware configuration.
  1437.                   This middleware replaces the path of the request URL and store the
  1438.                   original path in an X-Replaced-Path header. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/replacepath/'
  1439.                 properties:
  1440.                   path:
  1441.                     description: Path defines the path to use as replacement in the
  1442.                       request URL.
  1443.                     type: string
  1444.                 type: object
  1445.               replacePathRegex:
  1446.                 description: 'ReplacePathRegex holds the replace path regex middleware
  1447.                   configuration. This middleware replaces the path of a URL using
  1448.                   regex matching and replacement. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/replacepathregex/'
  1449.                 properties:
  1450.                   regex:
  1451.                     description: Regex defines the regular expression used to match
  1452.                       and capture the path from the request URL.
  1453.                     type: string
  1454.                   replacement:
  1455.                     description: Replacement defines the replacement path format,
  1456.                       which can include captured variables.
  1457.                     type: string
  1458.                 type: object
  1459.               retry:
  1460.                 description: 'Retry holds the retry middleware configuration. This
  1461.                   middleware reissues requests a given number of times to a backend
  1462.                   server if that server does not reply. As soon as the server answers,
  1463.                   the middleware stops retrying, regardless of the response status.
  1464.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/retry/'
  1465.                 properties:
  1466.                   attempts:
  1467.                     description: Attempts defines how many times the request should
  1468.                       be retried.
  1469.                     type: integer
  1470.                   initialInterval:
  1471.                     anyOf:
  1472.                     - type: integer
  1473.                     - type: string
  1474.                     description: InitialInterval defines the first wait time in the
  1475.                       exponential backoff series. The maximum interval is calculated
  1476.                       as twice the initialInterval. If unspecified, requests will
  1477.                       be retried immediately. The value of initialInterval should
  1478.                       be provided in seconds or as a valid duration format, see https://pkg.go.dev/time#ParseDuration.
  1479.                     x-kubernetes-int-or-string: true
  1480.                 type: object
  1481.               stripPrefix:
  1482.                 description: 'StripPrefix holds the strip prefix middleware configuration.
  1483.                   This middleware removes the specified prefixes from the URL path.
  1484.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/stripprefix/'
  1485.                 properties:
  1486.                   forceSlash:
  1487.                     description: 'ForceSlash ensures that the resulting stripped path
  1488.                       is not the empty string, by replacing it with / when necessary.
  1489.                       Default: true.'
  1490.                     type: boolean
  1491.                   prefixes:
  1492.                     description: Prefixes defines the prefixes to strip from the request
  1493.                       URL.
  1494.                     items:
  1495.                       type: string
  1496.                     type: array
  1497.                 type: object
  1498.               stripPrefixRegex:
  1499.                 description: 'StripPrefixRegex holds the strip prefix regex middleware
  1500.                   configuration. This middleware removes the matching prefixes from
  1501.                   the URL path. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/stripprefixregex/'
  1502.                 properties:
  1503.                   regex:
  1504.                     description: Regex defines the regular expression to match the
  1505.                       path prefix from the request URL.
  1506.                     items:
  1507.                       type: string
  1508.                     type: array
  1509.                 type: object
  1510.             type: object
  1511.         required:
  1512.         - metadata
  1513.         - spec
  1514.         type: object
  1515.     served: true
  1516.     storage: true
  1517. status:
  1518.   acceptedNames:
  1519.     kind: ""
  1520.     plural: ""
  1521.   conditions: []
  1522.   storedVersions: []
  1524. ---
  1525. apiVersion: apiextensions.k8s.io/v1
  1526. kind: CustomResourceDefinition
  1527. metadata:
  1528.   annotations:
  1529.     controller-gen.kubebuilder.io/version: v0.6.2
  1530.   creationTimestamp: null
  1531.   name: middlewaretcps.traefik.io
  1532. spec:
  1533.   group: traefik.io
  1534.   names:
  1535.     kind: MiddlewareTCP
  1536.     listKind: MiddlewareTCPList
  1537.     plural: middlewaretcps
  1538.     singular: middlewaretcp
  1539.   scope: Namespaced
  1540.   versions:
  1541.   - name: v1alpha1
  1542.     schema:
  1543.       openAPIV3Schema:
  1544.         description: 'MiddlewareTCP is the CRD implementation of a Traefik TCP middleware.
  1545.           More info: https://doc.traefik.io/traefik/v2.10/middlewares/overview/'
  1546.         properties:
  1547.           apiVersion:
  1548.             description: 'APIVersion defines the versioned schema of this representation
  1549.               of an object. Servers should convert recognized schemas to the latest
  1550.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  1551.             type: string
  1552.           kind:
  1553.             description: 'Kind is a string value representing the REST resource this
  1554.               object represents. Servers may infer this from the endpoint the client
  1555.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  1556.             type: string
  1557.           metadata:
  1558.             type: object
  1559.           spec:
  1560.             description: MiddlewareTCPSpec defines the desired state of a MiddlewareTCP.
  1561.             properties:
  1562.               inFlightConn:
  1563.                 description: InFlightConn defines the InFlightConn middleware configuration.
  1564.                 properties:
  1565.                   amount:
  1566.                     description: Amount defines the maximum amount of allowed simultaneous
  1567.                       connections. The middleware closes the connection if there are
  1568.                       already amount connections opened.
  1569.                     format: int64
  1570.                     type: integer
  1571.                 type: object
  1572.               ipWhiteList:
  1573.                 description: IPWhiteList defines the IPWhiteList middleware configuration.
  1574.                 properties:
  1575.                   sourceRange:
  1576.                     description: SourceRange defines the allowed IPs (or ranges of
  1577.                       allowed IPs by using CIDR notation).
  1578.                     items:
  1579.                       type: string
  1580.                     type: array
  1581.                 type: object
  1582.             type: object
  1583.         required:
  1584.         - metadata
  1585.         - spec
  1586.         type: object
  1587.     served: true
  1588.     storage: true
  1589. status:
  1590.   acceptedNames:
  1591.     kind: ""
  1592.     plural: ""
  1593.   conditions: []
  1594.   storedVersions: []
  1596. ---
  1597. apiVersion: apiextensions.k8s.io/v1
  1598. kind: CustomResourceDefinition
  1599. metadata:
  1600.   annotations:
  1601.     controller-gen.kubebuilder.io/version: v0.6.2
  1602.   creationTimestamp: null
  1603.   name: serverstransports.traefik.io
  1604. spec:
  1605.   group: traefik.io
  1606.   names:
  1607.     kind: ServersTransport
  1608.     listKind: ServersTransportList
  1609.     plural: serverstransports
  1610.     singular: serverstransport
  1611.   scope: Namespaced
  1612.   versions:
  1613.   - name: v1alpha1
  1614.     schema:
  1615.       openAPIV3Schema:
  1616.         description: 'ServersTransport is the CRD implementation of a ServersTransport.
  1617.           If no serversTransport is specified, the [email protected] will be used.
  1618.           The [email protected] serversTransport is created from the static configuration.
  1619.           More info: https://doc.traefik.io/traefik/v2.10/routing/services/#serverstransport_1'
  1620.         properties:
  1621.           apiVersion:
  1622.             description: 'APIVersion defines the versioned schema of this representation
  1623.               of an object. Servers should convert recognized schemas to the latest
  1624.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  1625.             type: string
  1626.           kind:
  1627.             description: 'Kind is a string value representing the REST resource this
  1628.               object represents. Servers may infer this from the endpoint the client
  1629.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  1630.             type: string
  1631.           metadata:
  1632.             type: object
  1633.           spec:
  1634.             description: ServersTransportSpec defines the desired state of a ServersTransport.
  1635.             properties:
  1636.               certificatesSecrets:
  1637.                 description: CertificatesSecrets defines a list of secret storing
  1638.                   client certificates for mTLS.
  1639.                 items:
  1640.                   type: string
  1641.                 type: array
  1642.               disableHTTP2:
  1643.                 description: DisableHTTP2 disables HTTP/2 for connections with backend
  1644.                   servers.
  1645.                 type: boolean
  1646.               forwardingTimeouts:
  1647.                 description: ForwardingTimeouts defines the timeouts for requests
  1648.                   forwarded to the backend servers.
  1649.                 properties:
  1650.                   dialTimeout:
  1651.                     anyOf:
  1652.                     - type: integer
  1653.                     - type: string
  1654.                     description: DialTimeout is the amount of time to wait until a
  1655.                       connection to a backend server can be established.
  1656.                     x-kubernetes-int-or-string: true
  1657.                   idleConnTimeout:
  1658.                     anyOf:
  1659.                     - type: integer
  1660.                     - type: string
  1661.                     description: IdleConnTimeout is the maximum period for which an
  1662.                       idle HTTP keep-alive connection will remain open before closing
  1663.                       itself.
  1664.                     x-kubernetes-int-or-string: true
  1665.                   pingTimeout:
  1666.                     anyOf:
  1667.                     - type: integer
  1668.                     - type: string
  1669.                     description: PingTimeout is the timeout after which the HTTP/2
  1670.                       connection will be closed if a response to ping is not received.
  1671.                     x-kubernetes-int-or-string: true
  1672.                   readIdleTimeout:
  1673.                     anyOf:
  1674.                     - type: integer
  1675.                     - type: string
  1676.                     description: ReadIdleTimeout is the timeout after which a health
  1677.                       check using ping frame will be carried out if no frame is received
  1678.                       on the HTTP/2 connection.
  1679.                     x-kubernetes-int-or-string: true
  1680.                   responseHeaderTimeout:
  1681.                     anyOf:
  1682.                     - type: integer
  1683.                     - type: string
  1684.                     description: ResponseHeaderTimeout is the amount of time to wait
  1685.                       for a server's response headers after fully writing the request
  1686.                       (including its body, if any).
  1687.                     x-kubernetes-int-or-string: true
  1688.                 type: object
  1689.               insecureSkipVerify:
  1690.                 description: InsecureSkipVerify disables SSL certificate verification.
  1691.                 type: boolean
  1692.               maxIdleConnsPerHost:
  1693.                 description: MaxIdleConnsPerHost controls the maximum idle (keep-alive)
  1694.                   to keep per-host.
  1695.                 type: integer
  1696.               peerCertURI:
  1697.                 description: PeerCertURI defines the peer cert URI used to match against
  1698.                   SAN URI during the peer certificate verification.
  1699.                 type: string
  1700.               rootCAsSecrets:
  1701.                 description: RootCAsSecrets defines a list of CA secret used to validate
  1702.                   self-signed certificate.
  1703.                 items:
  1704.                   type: string
  1705.                 type: array
  1706.               serverName:
  1707.                 description: ServerName defines the server name used to contact the
  1708.                   server.
  1709.                 type: string
  1710.             type: object
  1711.         required:
  1712.         - metadata
  1713.         - spec
  1714.         type: object
  1715.     served: true
  1716.     storage: true
  1717. status:
  1718.   acceptedNames:
  1719.     kind: ""
  1720.     plural: ""
  1721.   conditions: []
  1722.   storedVersions: []
  1724. ---
  1725. apiVersion: apiextensions.k8s.io/v1
  1726. kind: CustomResourceDefinition
  1727. metadata:
  1728.   annotations:
  1729.     controller-gen.kubebuilder.io/version: v0.6.2
  1730.   creationTimestamp: null
  1731.   name: tlsoptions.traefik.io
  1732. spec:
  1733.   group: traefik.io
  1734.   names:
  1735.     kind: TLSOption
  1736.     listKind: TLSOptionList
  1737.     plural: tlsoptions
  1738.     singular: tlsoption
  1739.   scope: Namespaced
  1740.   versions:
  1741.   - name: v1alpha1
  1742.     schema:
  1743.       openAPIV3Schema:
  1744.         description: 'TLSOption is the CRD implementation of a Traefik TLS Option,
  1745.           allowing to configure some parameters of the TLS connection. More info:
  1746.           https://doc.traefik.io/traefik/v2.10/https/tls/#tls-options'
  1747.         properties:
  1748.           apiVersion:
  1749.             description: 'APIVersion defines the versioned schema of this representation
  1750.               of an object. Servers should convert recognized schemas to the latest
  1751.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  1752.             type: string
  1753.           kind:
  1754.             description: 'Kind is a string value representing the REST resource this
  1755.               object represents. Servers may infer this from the endpoint the client
  1756.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  1757.             type: string
  1758.           metadata:
  1759.             type: object
  1760.           spec:
  1761.             description: TLSOptionSpec defines the desired state of a TLSOption.
  1762.             properties:
  1763.               alpnProtocols:
  1764.                 description: 'ALPNProtocols defines the list of supported application
  1765.                   level protocols for the TLS handshake, in order of preference. More
  1766.                   info: https://doc.traefik.io/traefik/v2.10/https/tls/#alpn-protocols'
  1767.                 items:
  1768.                   type: string
  1769.                 type: array
  1770.               cipherSuites:
  1771.                 description: 'CipherSuites defines the list of supported cipher suites
  1772.                   for TLS versions up to TLS 1.2. More info: https://doc.traefik.io/traefik/v2.10/https/tls/#cipher-suites'
  1773.                 items:
  1774.                   type: string
  1775.                 type: array
  1776.               clientAuth:
  1777.                 description: ClientAuth defines the server's policy for TLS Client
  1778.                   Authentication.
  1779.                 properties:
  1780.                   clientAuthType:
  1781.                     description: ClientAuthType defines the client authentication
  1782.                       type to apply.
  1783.                     enum:
  1784.                     - NoClientCert
  1785.                     - RequestClientCert
  1786.                     - RequireAnyClientCert
  1787.                     - VerifyClientCertIfGiven
  1788.                     - RequireAndVerifyClientCert
  1789.                     type: string
  1790.                   secretNames:
  1791.                     description: SecretNames defines the names of the referenced Kubernetes
  1792.                       Secret storing certificate details.
  1793.                     items:
  1794.                       type: string
  1795.                     type: array
  1796.                 type: object
  1797.               curvePreferences:
  1798.                 description: 'CurvePreferences defines the preferred elliptic curves
  1799.                   in a specific order. More info: https://doc.traefik.io/traefik/v2.10/https/tls/#curve-preferences'
  1800.                 items:
  1801.                   type: string
  1802.                 type: array
  1803.               maxVersion:
  1804.                 description: 'MaxVersion defines the maximum TLS version that Traefik
  1805.                   will accept. Possible values: VersionTLS10, VersionTLS11, VersionTLS12,
  1806.                   VersionTLS13. Default: None.'
  1807.                 type: string
  1808.               minVersion:
  1809.                 description: 'MinVersion defines the minimum TLS version that Traefik
  1810.                   will accept. Possible values: VersionTLS10, VersionTLS11, VersionTLS12,
  1811.                   VersionTLS13. Default: VersionTLS10.'
  1812.                 type: string
  1813.               preferServerCipherSuites:
  1814.                 description: 'PreferServerCipherSuites defines whether the server
  1815.                   chooses a cipher suite among his own instead of among the client''s.
  1816.                   It is enabled automatically when minVersion or maxVersion is set.
  1817.                   Deprecated: https://github.com/golang/go/issues/45430'
  1818.                 type: boolean
  1819.               sniStrict:
  1820.                 description: SniStrict defines whether Traefik allows connections
  1821.                   from clients connections that do not specify a server_name extension.
  1822.                 type: boolean
  1823.             type: object
  1824.         required:
  1825.         - metadata
  1826.         - spec
  1827.         type: object
  1828.     served: true
  1829.     storage: true
  1830. status:
  1831.   acceptedNames:
  1832.     kind: ""
  1833.     plural: ""
  1834.   conditions: []
  1835.   storedVersions: []
  1837. ---
  1838. apiVersion: apiextensions.k8s.io/v1
  1839. kind: CustomResourceDefinition
  1840. metadata:
  1841.   annotations:
  1842.     controller-gen.kubebuilder.io/version: v0.6.2
  1843.   creationTimestamp: null
  1844.   name: tlsstores.traefik.io
  1845. spec:
  1846.   group: traefik.io
  1847.   names:
  1848.     kind: TLSStore
  1849.     listKind: TLSStoreList
  1850.     plural: tlsstores
  1851.     singular: tlsstore
  1852.   scope: Namespaced
  1853.   versions:
  1854.   - name: v1alpha1
  1855.     schema:
  1856.       openAPIV3Schema:
  1857.         description: 'TLSStore is the CRD implementation of a Traefik TLS Store. For
  1858.           the time being, only the TLSStore named default is supported. This means
  1859.           that you cannot have two stores that are named default in different Kubernetes
  1860.           namespaces. More info: https://doc.traefik.io/traefik/v2.10/https/tls/#certificates-stores'
  1861.         properties:
  1862.           apiVersion:
  1863.             description: 'APIVersion defines the versioned schema of this representation
  1864.               of an object. Servers should convert recognized schemas to the latest
  1865.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  1866.             type: string
  1867.           kind:
  1868.             description: 'Kind is a string value representing the REST resource this
  1869.               object represents. Servers may infer this from the endpoint the client
  1870.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  1871.             type: string
  1872.           metadata:
  1873.             type: object
  1874.           spec:
  1875.             description: TLSStoreSpec defines the desired state of a TLSStore.
  1876.             properties:
  1877.               certificates:
  1878.                 description: Certificates is a list of secret names, each secret holding
  1879.                   a key/certificate pair to add to the store.
  1880.                 items:
  1881.                   description: Certificate holds a secret name for the TLSStore resource.
  1882.                   properties:
  1883.                     secretName:
  1884.                       description: SecretName is the name of the referenced Kubernetes
  1885.                         Secret to specify the certificate details.
  1886.                       type: string
  1887.                   required:
  1888.                   - secretName
  1889.                   type: object
  1890.                 type: array
  1891.               defaultCertificate:
  1892.                 description: DefaultCertificate defines the default certificate configuration.
  1893.                 properties:
  1894.                   secretName:
  1895.                     description: SecretName is the name of the referenced Kubernetes
  1896.                       Secret to specify the certificate details.
  1897.                     type: string
  1898.                 required:
  1899.                 - secretName
  1900.                 type: object
  1901.               defaultGeneratedCert:
  1902.                 description: DefaultGeneratedCert defines the default generated certificate
  1903.                   configuration.
  1904.                 properties:
  1905.                   domain:
  1906.                     description: Domain is the domain definition for the DefaultCertificate.
  1907.                     properties:
  1908.                       main:
  1909.                         description: Main defines the main domain name.
  1910.                         type: string
  1911.                       sans:
  1912.                         description: SANs defines the subject alternative domain names.
  1913.                         items:
  1914.                           type: string
  1915.                         type: array
  1916.                     type: object
  1917.                   resolver:
  1918.                     description: Resolver is the name of the resolver that will be
  1919.                       used to issue the DefaultCertificate.
  1920.                     type: string
  1921.                 type: object
  1922.             type: object
  1923.         required:
  1924.         - metadata
  1925.         - spec
  1926.         type: object
  1927.     served: true
  1928.     storage: true
  1929. status:
  1930.   acceptedNames:
  1931.     kind: ""
  1932.     plural: ""
  1933.   conditions: []
  1934.   storedVersions: []
  1936. ---
  1937. apiVersion: apiextensions.k8s.io/v1
  1938. kind: CustomResourceDefinition
  1939. metadata:
  1940.   annotations:
  1941.     controller-gen.kubebuilder.io/version: v0.6.2
  1942.   creationTimestamp: null
  1943.   name: traefikservices.traefik.io
  1944. spec:
  1945.   group: traefik.io
  1946.   names:
  1947.     kind: TraefikService
  1948.     listKind: TraefikServiceList
  1949.     plural: traefikservices
  1950.     singular: traefikservice
  1951.   scope: Namespaced
  1952.   versions:
  1953.   - name: v1alpha1
  1954.     schema:
  1955.       openAPIV3Schema:
  1956.         description: 'TraefikService is the CRD implementation of a Traefik Service.
  1957.           TraefikService object allows to: - Apply weight to Services on load-balancing
  1958.           - Mirror traffic on services More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-traefikservice'
  1959.         properties:
  1960.           apiVersion:
  1961.             description: 'APIVersion defines the versioned schema of this representation
  1962.               of an object. Servers should convert recognized schemas to the latest
  1963.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  1964.             type: string
  1965.           kind:
  1966.             description: 'Kind is a string value representing the REST resource this
  1967.               object represents. Servers may infer this from the endpoint the client
  1968.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  1969.             type: string
  1970.           metadata:
  1971.             type: object
  1972.           spec:
  1973.             description: TraefikServiceSpec defines the desired state of a TraefikService.
  1974.             properties:
  1975.               mirroring:
  1976.                 description: Mirroring defines the Mirroring service configuration.
  1977.                 properties:
  1978.                   kind:
  1979.                     description: Kind defines the kind of the Service.
  1980.                     enum:
  1981.                     - Service
  1982.                     - TraefikService
  1983.                     type: string
  1984.                   maxBodySize:
  1985.                     description: MaxBodySize defines the maximum size allowed for
  1986.                       the body of the request. If the body is larger, the request
  1987.                       is not mirrored. Default value is -1, which means unlimited
  1988.                       size.
  1989.                     format: int64
  1990.                     type: integer
  1991.                   mirrors:
  1992.                     description: Mirrors defines the list of mirrors where Traefik
  1993.                       will duplicate the traffic.
  1994.                     items:
  1995.                       description: MirrorService holds the mirror configuration.
  1996.                       properties:
  1997.                         kind:
  1998.                           description: Kind defines the kind of the Service.
  1999.                           enum:
  2000.                           - Service
  2001.                           - TraefikService
  2002.                           type: string
  2003.                         name:
  2004.                           description: Name defines the name of the referenced Kubernetes
  2005.                             Service or TraefikService. The differentiation between
  2006.                             the two is specified in the Kind field.
  2007.                           type: string
  2008.                         namespace:
  2009.                           description: Namespace defines the namespace of the referenced
  2010.                             Kubernetes Service or TraefikService.
  2011.                           type: string
  2012.                         nativeLB:
  2013.                           description: NativeLB controls, when creating the load-balancer,
  2014.                             whether the LB's children are directly the pods IPs or
  2015.                             if the only child is the Kubernetes Service clusterIP.
  2016.                             The Kubernetes Service itself does load-balance to the
  2017.                             pods. By default, NativeLB is false.
  2018.                           type: boolean
  2019.                         passHostHeader:
  2020.                           description: PassHostHeader defines whether the client Host
  2021.                             header is forwarded to the upstream Kubernetes Service.
  2022.                             By default, passHostHeader is true.
  2023.                           type: boolean
  2024.                         percent:
  2025.                           description: 'Percent defines the part of the traffic to
  2026.                             mirror. Supported values: 0 to 100.'
  2027.                           type: integer
  2028.                         port:
  2029.                           anyOf:
  2030.                           - type: integer
  2031.                           - type: string
  2032.                           description: Port defines the port of a Kubernetes Service.
  2033.                             This can be a reference to a named port.
  2034.                           x-kubernetes-int-or-string: true
  2035.                         responseForwarding:
  2036.                           description: ResponseForwarding defines how Traefik forwards
  2037.                             the response from the upstream Kubernetes Service to the
  2038.                             client.
  2039.                           properties:
  2040.                             flushInterval:
  2041.                               description: 'FlushInterval defines the interval, in
  2042.                                 milliseconds, in between flushes to the client while
  2043.                                 copying the response body. A negative value means
  2044.                                 to flush immediately after each write to the client.
  2045.                                 This configuration is ignored when ReverseProxy recognizes
  2046.                                 a response as a streaming response; for such responses,
  2047.                                 writes are flushed to the client immediately. Default:
  2048.                                 100ms'
  2049.                               type: string
  2050.                           type: object
  2051.                         scheme:
  2052.                           description: Scheme defines the scheme to use for the request
  2053.                             to the upstream Kubernetes Service. It defaults to https
  2054.                             when Kubernetes Service port is 443, http otherwise.
  2055.                           type: string
  2056.                         serversTransport:
  2057.                           description: ServersTransport defines the name of ServersTransport
  2058.                             resource to use. It allows to configure the transport
  2059.                             between Traefik and your servers. Can only be used on
  2060.                             a Kubernetes Service.
  2061.                           type: string
  2062.                         sticky:
  2063.                           description: 'Sticky defines the sticky sessions configuration.
  2064.                             More info: https://doc.traefik.io/traefik/v2.10/routing/services/#sticky-sessions'
  2065.                           properties:
  2066.                             cookie:
  2067.                               description: Cookie defines the sticky cookie configuration.
  2068.                               properties:
  2069.                                 httpOnly:
  2070.                                   description: HTTPOnly defines whether the cookie
  2071.                                     can be accessed by client-side APIs, such as JavaScript.
  2072.                                   type: boolean
  2073.                                 name:
  2074.                                   description: Name defines the Cookie name.
  2075.                                   type: string
  2076.                                 sameSite:
  2077.                                   description: 'SameSite defines the same site policy.
  2078.                                     More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  2079.                                   type: string
  2080.                                 secure:
  2081.                                   description: Secure defines whether the cookie can
  2082.                                     only be transmitted over an encrypted connection
  2083.                                     (i.e. HTTPS).
  2084.                                   type: boolean
  2085.                               type: object
  2086.                           type: object
  2087.                         strategy:
  2088.                           description: Strategy defines the load balancing strategy
  2089.                             between the servers. RoundRobin is the only supported
  2090.                             value at the moment.
  2091.                           type: string
  2092.                         weight:
  2093.                           description: Weight defines the weight and should only be
  2094.                             specified when Name references a TraefikService object
  2095.                             (and to be precise, one that embeds a Weighted Round Robin).
  2096.                           type: integer
  2097.                       required:
  2098.                       - name
  2099.                       type: object
  2100.                     type: array
  2101.                   name:
  2102.                     description: Name defines the name of the referenced Kubernetes
  2103.                       Service or TraefikService. The differentiation between the two
  2104.                       is specified in the Kind field.
  2105.                     type: string
  2106.                   namespace:
  2107.                     description: Namespace defines the namespace of the referenced
  2108.                       Kubernetes Service or TraefikService.
  2109.                     type: string
  2110.                   nativeLB:
  2111.                     description: NativeLB controls, when creating the load-balancer,
  2112.                       whether the LB's children are directly the pods IPs or if the
  2113.                       only child is the Kubernetes Service clusterIP. The Kubernetes
  2114.                       Service itself does load-balance to the pods. By default, NativeLB
  2115.                       is false.
  2116.                     type: boolean
  2117.                   passHostHeader:
  2118.                     description: PassHostHeader defines whether the client Host header
  2119.                       is forwarded to the upstream Kubernetes Service. By default,
  2120.                       passHostHeader is true.
  2121.                     type: boolean
  2122.                   port:
  2123.                     anyOf:
  2124.                     - type: integer
  2125.                     - type: string
  2126.                     description: Port defines the port of a Kubernetes Service. This
  2127.                       can be a reference to a named port.
  2128.                     x-kubernetes-int-or-string: true
  2129.                   responseForwarding:
  2130.                     description: ResponseForwarding defines how Traefik forwards the
  2131.                       response from the upstream Kubernetes Service to the client.
  2132.                     properties:
  2133.                       flushInterval:
  2134.                         description: 'FlushInterval defines the interval, in milliseconds,
  2135.                           in between flushes to the client while copying the response
  2136.                           body. A negative value means to flush immediately after
  2137.                           each write to the client. This configuration is ignored
  2138.                           when ReverseProxy recognizes a response as a streaming response;
  2139.                           for such responses, writes are flushed to the client immediately.
  2140.                           Default: 100ms'
  2141.                         type: string
  2142.                     type: object
  2143.                   scheme:
  2144.                     description: Scheme defines the scheme to use for the request
  2145.                       to the upstream Kubernetes Service. It defaults to https when
  2146.                       Kubernetes Service port is 443, http otherwise.
  2147.                     type: string
  2148.                   serversTransport:
  2149.                     description: ServersTransport defines the name of ServersTransport
  2150.                       resource to use. It allows to configure the transport between
  2151.                       Traefik and your servers. Can only be used on a Kubernetes Service.
  2152.                     type: string
  2153.                   sticky:
  2154.                     description: 'Sticky defines the sticky sessions configuration.
  2155.                       More info: https://doc.traefik.io/traefik/v2.10/routing/services/#sticky-sessions'
  2156.                     properties:
  2157.                       cookie:
  2158.                         description: Cookie defines the sticky cookie configuration.
  2159.                         properties:
  2160.                           httpOnly:
  2161.                             description: HTTPOnly defines whether the cookie can be
  2162.                               accessed by client-side APIs, such as JavaScript.
  2163.                             type: boolean
  2164.                           name:
  2165.                             description: Name defines the Cookie name.
  2166.                             type: string
  2167.                           sameSite:
  2168.                             description: 'SameSite defines the same site policy. More
  2169.                               info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  2170.                             type: string
  2171.                           secure:
  2172.                             description: Secure defines whether the cookie can only
  2173.                               be transmitted over an encrypted connection (i.e. HTTPS).
  2174.                             type: boolean
  2175.                         type: object
  2176.                     type: object
  2177.                   strategy:
  2178.                     description: Strategy defines the load balancing strategy between
  2179.                       the servers. RoundRobin is the only supported value at the moment.
  2180.                     type: string
  2181.                   weight:
  2182.                     description: Weight defines the weight and should only be specified
  2183.                       when Name references a TraefikService object (and to be precise,
  2184.                       one that embeds a Weighted Round Robin).
  2185.                     type: integer
  2186.                 required:
  2187.                 - name
  2188.                 type: object
  2189.               weighted:
  2190.                 description: Weighted defines the Weighted Round Robin configuration.
  2191.                 properties:
  2192.                   services:
  2193.                     description: Services defines the list of Kubernetes Service and/or
  2194.                       TraefikService to load-balance, with weight.
  2195.                     items:
  2196.                       description: Service defines an upstream HTTP service to proxy
  2197.                         traffic to.
  2198.                       properties:
  2199.                         kind:
  2200.                           description: Kind defines the kind of the Service.
  2201.                           enum:
  2202.                           - Service
  2203.                           - TraefikService
  2204.                           type: string
  2205.                         name:
  2206.                           description: Name defines the name of the referenced Kubernetes
  2207.                             Service or TraefikService. The differentiation between
  2208.                             the two is specified in the Kind field.
  2209.                           type: string
  2210.                         namespace:
  2211.                           description: Namespace defines the namespace of the referenced
  2212.                             Kubernetes Service or TraefikService.
  2213.                           type: string
  2214.                         nativeLB:
  2215.                           description: NativeLB controls, when creating the load-balancer,
  2216.                             whether the LB's children are directly the pods IPs or
  2217.                             if the only child is the Kubernetes Service clusterIP.
  2218.                             The Kubernetes Service itself does load-balance to the
  2219.                             pods. By default, NativeLB is false.
  2220.                           type: boolean
  2221.                         passHostHeader:
  2222.                           description: PassHostHeader defines whether the client Host
  2223.                             header is forwarded to the upstream Kubernetes Service.
  2224.                             By default, passHostHeader is true.
  2225.                           type: boolean
  2226.                         port:
  2227.                           anyOf:
  2228.                           - type: integer
  2229.                           - type: string
  2230.                           description: Port defines the port of a Kubernetes Service.
  2231.                             This can be a reference to a named port.
  2232.                           x-kubernetes-int-or-string: true
  2233.                         responseForwarding:
  2234.                           description: ResponseForwarding defines how Traefik forwards
  2235.                             the response from the upstream Kubernetes Service to the
  2236.                             client.
  2237.                           properties:
  2238.                             flushInterval:
  2239.                               description: 'FlushInterval defines the interval, in
  2240.                                 milliseconds, in between flushes to the client while
  2241.                                 copying the response body. A negative value means
  2242.                                 to flush immediately after each write to the client.
  2243.                                 This configuration is ignored when ReverseProxy recognizes
  2244.                                 a response as a streaming response; for such responses,
  2245.                                 writes are flushed to the client immediately. Default:
  2246.                                 100ms'
  2247.                               type: string
  2248.                           type: object
  2249.                         scheme:
  2250.                           description: Scheme defines the scheme to use for the request
  2251.                             to the upstream Kubernetes Service. It defaults to https
  2252.                             when Kubernetes Service port is 443, http otherwise.
  2253.                           type: string
  2254.                         serversTransport:
  2255.                           description: ServersTransport defines the name of ServersTransport
  2256.                             resource to use. It allows to configure the transport
  2257.                             between Traefik and your servers. Can only be used on
  2258.                             a Kubernetes Service.
  2259.                           type: string
  2260.                         sticky:
  2261.                           description: 'Sticky defines the sticky sessions configuration.
  2262.                             More info: https://doc.traefik.io/traefik/v2.10/routing/services/#sticky-sessions'
  2263.                           properties:
  2264.                             cookie:
  2265.                               description: Cookie defines the sticky cookie configuration.
  2266.                               properties:
  2267.                                 httpOnly:
  2268.                                   description: HTTPOnly defines whether the cookie
  2269.                                     can be accessed by client-side APIs, such as JavaScript.
  2270.                                   type: boolean
  2271.                                 name:
  2272.                                   description: Name defines the Cookie name.
  2273.                                   type: string
  2274.                                 sameSite:
  2275.                                   description: 'SameSite defines the same site policy.
  2276.                                     More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  2277.                                   type: string
  2278.                                 secure:
  2279.                                   description: Secure defines whether the cookie can
  2280.                                     only be transmitted over an encrypted connection
  2281.                                     (i.e. HTTPS).
  2282.                                   type: boolean
  2283.                               type: object
  2284.                           type: object
  2285.                         strategy:
  2286.                           description: Strategy defines the load balancing strategy
  2287.                             between the servers. RoundRobin is the only supported
  2288.                             value at the moment.
  2289.                           type: string
  2290.                         weight:
  2291.                           description: Weight defines the weight and should only be
  2292.                             specified when Name references a TraefikService object
  2293.                             (and to be precise, one that embeds a Weighted Round Robin).
  2294.                           type: integer
  2295.                       required:
  2296.                       - name
  2297.                       type: object
  2298.                     type: array
  2299.                   sticky:
  2300.                     description: 'Sticky defines whether sticky sessions are enabled.
  2301.                       More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#stickiness-and-load-balancing'
  2302.                     properties:
  2303.                       cookie:
  2304.                         description: Cookie defines the sticky cookie configuration.
  2305.                         properties:
  2306.                           httpOnly:
  2307.                             description: HTTPOnly defines whether the cookie can be
  2308.                               accessed by client-side APIs, such as JavaScript.
  2309.                             type: boolean
  2310.                           name:
  2311.                             description: Name defines the Cookie name.
  2312.                             type: string
  2313.                           sameSite:
  2314.                             description: 'SameSite defines the same site policy. More
  2315.                               info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  2316.                             type: string
  2317.                           secure:
  2318.                             description: Secure defines whether the cookie can only
  2319.                               be transmitted over an encrypted connection (i.e. HTTPS).
  2320.                             type: boolean
  2321.                         type: object
  2322.                     type: object
  2323.                 type: object
  2324.             type: object
  2325.         required:
  2326.         - metadata
  2327.         - spec
  2328.         type: object
  2329.     served: true
  2330.     storage: true
  2331. status:
  2332.   acceptedNames:
  2333.     kind: ""
  2334.     plural: ""
  2335.   conditions: []
  2336.   storedVersions: []
  2338. ---
  2339. apiVersion: apiextensions.k8s.io/v1
  2340. kind: CustomResourceDefinition
  2341. metadata:
  2342.   annotations:
  2343.     controller-gen.kubebuilder.io/version: v0.6.2
  2344.   creationTimestamp: null
  2345.   name: ingressroutes.traefik.containo.us
  2346. spec:
  2347.   group: traefik.containo.us
  2348.   names:
  2349.     kind: IngressRoute
  2350.     listKind: IngressRouteList
  2351.     plural: ingressroutes
  2352.     singular: ingressroute
  2353.   scope: Namespaced
  2354.   versions:
  2355.   - name: v1alpha1
  2356.     schema:
  2357.       openAPIV3Schema:
  2358.         description: IngressRoute is the CRD implementation of a Traefik HTTP Router.
  2359.         properties:
  2360.           apiVersion:
  2361.             description: 'APIVersion defines the versioned schema of this representation
  2362.               of an object. Servers should convert recognized schemas to the latest
  2363.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  2364.             type: string
  2365.           kind:
  2366.             description: 'Kind is a string value representing the REST resource this
  2367.               object represents. Servers may infer this from the endpoint the client
  2368.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  2369.             type: string
  2370.           metadata:
  2371.             type: object
  2372.           spec:
  2373.             description: IngressRouteSpec defines the desired state of IngressRoute.
  2374.             properties:
  2375.               entryPoints:
  2376.                 description: 'EntryPoints defines the list of entry point names to
  2377.                   bind to. Entry points have to be configured in the static configuration.
  2378.                   More info: https://doc.traefik.io/traefik/v2.10/routing/entrypoints/
  2379.                   Default: all.'
  2380.                 items:
  2381.                   type: string
  2382.                 type: array
  2383.               routes:
  2384.                 description: Routes defines the list of routes.
  2385.                 items:
  2386.                   description: Route holds the HTTP route configuration.
  2387.                   properties:
  2388.                     kind:
  2389.                       description: Kind defines the kind of the route. Rule is the
  2390.                         only supported kind.
  2391.                       enum:
  2392.                       - Rule
  2393.                       type: string
  2394.                     match:
  2395.                       description: 'Match defines the router''s rule. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#rule'
  2396.                       type: string
  2397.                     middlewares:
  2398.                       description: 'Middlewares defines the list of references to
  2399.                         Middleware resources. More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-middleware'
  2400.                       items:
  2401.                         description: MiddlewareRef is a reference to a Middleware
  2402.                           resource.
  2403.                         properties:
  2404.                           name:
  2405.                             description: Name defines the name of the referenced Middleware
  2406.                               resource.
  2407.                             type: string
  2408.                           namespace:
  2409.                             description: Namespace defines the namespace of the referenced
  2410.                               Middleware resource.
  2411.                             type: string
  2412.                         required:
  2413.                         - name
  2414.                         type: object
  2415.                       type: array
  2416.                     priority:
  2417.                       description: 'Priority defines the router''s priority. More
  2418.                         info: https://doc.traefik.io/traefik/v2.10/routing/routers/#priority'
  2419.                       type: integer
  2420.                     services:
  2421.                       description: Services defines the list of Service. It can contain
  2422.                         any combination of TraefikService and/or reference to a Kubernetes
  2423.                         Service.
  2424.                       items:
  2425.                         description: Service defines an upstream HTTP service to proxy
  2426.                           traffic to.
  2427.                         properties:
  2428.                           kind:
  2429.                             description: Kind defines the kind of the Service.
  2430.                             enum:
  2431.                             - Service
  2432.                             - TraefikService
  2433.                             type: string
  2434.                           name:
  2435.                             description: Name defines the name of the referenced Kubernetes
  2436.                               Service or TraefikService. The differentiation between
  2437.                               the two is specified in the Kind field.
  2438.                             type: string
  2439.                           namespace:
  2440.                             description: Namespace defines the namespace of the referenced
  2441.                               Kubernetes Service or TraefikService.
  2442.                             type: string
  2443.                           nativeLB:
  2444.                             description: NativeLB controls, when creating the load-balancer,
  2445.                               whether the LB's children are directly the pods IPs
  2446.                               or if the only child is the Kubernetes Service clusterIP.
  2447.                               The Kubernetes Service itself does load-balance to the
  2448.                               pods. By default, NativeLB is false.
  2449.                             type: boolean
  2450.                           passHostHeader:
  2451.                             description: PassHostHeader defines whether the client
  2452.                               Host header is forwarded to the upstream Kubernetes
  2453.                               Service. By default, passHostHeader is true.
  2454.                             type: boolean
  2455.                           port:
  2456.                             anyOf:
  2457.                             - type: integer
  2458.                             - type: string
  2459.                             description: Port defines the port of a Kubernetes Service.
  2460.                               This can be a reference to a named port.
  2461.                             x-kubernetes-int-or-string: true
  2462.                           responseForwarding:
  2463.                             description: ResponseForwarding defines how Traefik forwards
  2464.                               the response from the upstream Kubernetes Service to
  2465.                               the client.
  2466.                             properties:
  2467.                               flushInterval:
  2468.                                 description: 'FlushInterval defines the interval,
  2469.                                   in milliseconds, in between flushes to the client
  2470.                                   while copying the response body. A negative value
  2471.                                   means to flush immediately after each write to the
  2472.                                   client. This configuration is ignored when ReverseProxy
  2473.                                   recognizes a response as a streaming response; for
  2474.                                   such responses, writes are flushed to the client
  2475.                                   immediately. Default: 100ms'
  2476.                                 type: string
  2477.                             type: object
  2478.                           scheme:
  2479.                             description: Scheme defines the scheme to use for the
  2480.                               request to the upstream Kubernetes Service. It defaults
  2481.                               to https when Kubernetes Service port is 443, http otherwise.
  2482.                             type: string
  2483.                           serversTransport:
  2484.                             description: ServersTransport defines the name of ServersTransport
  2485.                               resource to use. It allows to configure the transport
  2486.                               between Traefik and your servers. Can only be used on
  2487.                               a Kubernetes Service.
  2488.                             type: string
  2489.                           sticky:
  2490.                             description: 'Sticky defines the sticky sessions configuration.
  2491.                               More info: https://doc.traefik.io/traefik/v2.10/routing/services/#sticky-sessions'
  2492.                             properties:
  2493.                               cookie:
  2494.                                 description: Cookie defines the sticky cookie configuration.
  2495.                                 properties:
  2496.                                   httpOnly:
  2497.                                     description: HTTPOnly defines whether the cookie
  2498.                                       can be accessed by client-side APIs, such as
  2499.                                       JavaScript.
  2500.                                     type: boolean
  2501.                                   name:
  2502.                                     description: Name defines the Cookie name.
  2503.                                     type: string
  2504.                                   sameSite:
  2505.                                     description: 'SameSite defines the same site policy.
  2506.                                       More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  2507.                                     type: string
  2508.                                   secure:
  2509.                                     description: Secure defines whether the cookie
  2510.                                       can only be transmitted over an encrypted connection
  2511.                                       (i.e. HTTPS).
  2512.                                     type: boolean
  2513.                                 type: object
  2514.                             type: object
  2515.                           strategy:
  2516.                             description: Strategy defines the load balancing strategy
  2517.                               between the servers. RoundRobin is the only supported
  2518.                               value at the moment.
  2519.                             type: string
  2520.                           weight:
  2521.                             description: Weight defines the weight and should only
  2522.                               be specified when Name references a TraefikService object
  2523.                               (and to be precise, one that embeds a Weighted Round
  2524.                               Robin).
  2525.                             type: integer
  2526.                         required:
  2527.                         - name
  2528.                         type: object
  2529.                       type: array
  2530.                   required:
  2531.                   - kind
  2532.                   - match
  2533.                   type: object
  2534.                 type: array
  2535.               tls:
  2536.                 description: 'TLS defines the TLS configuration. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#tls'
  2537.                 properties:
  2538.                   certResolver:
  2539.                     description: 'CertResolver defines the name of the certificate
  2540.                       resolver to use. Cert resolvers have to be configured in the
  2541.                       static configuration. More info: https://doc.traefik.io/traefik/v2.10/https/acme/#certificate-resolvers'
  2542.                     type: string
  2543.                   domains:
  2544.                     description: 'Domains defines the list of domains that will be
  2545.                       used to issue certificates. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#domains'
  2546.                     items:
  2547.                       description: Domain holds a domain name with SANs.
  2548.                       properties:
  2549.                         main:
  2550.                           description: Main defines the main domain name.
  2551.                           type: string
  2552.                         sans:
  2553.                           description: SANs defines the subject alternative domain
  2554.                             names.
  2555.                           items:
  2556.                             type: string
  2557.                           type: array
  2558.                       type: object
  2559.                     type: array
  2560.                   options:
  2561.                     description: 'Options defines the reference to a TLSOption, that
  2562.                       specifies the parameters of the TLS connection. If not defined,
  2563.                       the `default` TLSOption is used. More info: https://doc.traefik.io/traefik/v2.10/https/tls/#tls-options'
  2564.                     properties:
  2565.                       name:
  2566.                         description: 'Name defines the name of the referenced TLSOption.
  2567.                           More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-tlsoption'
  2568.                         type: string
  2569.                       namespace:
  2570.                         description: 'Namespace defines the namespace of the referenced
  2571.                           TLSOption. More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-tlsoption'
  2572.                         type: string
  2573.                     required:
  2574.                     - name
  2575.                     type: object
  2576.                   secretName:
  2577.                     description: SecretName is the name of the referenced Kubernetes
  2578.                       Secret to specify the certificate details.
  2579.                     type: string
  2580.                   store:
  2581.                     description: Store defines the reference to the TLSStore, that
  2582.                       will be used to store certificates. Please note that only `default`
  2583.                       TLSStore can be used.
  2584.                     properties:
  2585.                       name:
  2586.                         description: 'Name defines the name of the referenced TLSStore.
  2587.                           More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-tlsstore'
  2588.                         type: string
  2589.                       namespace:
  2590.                         description: 'Namespace defines the namespace of the referenced
  2591.                           TLSStore. More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-tlsstore'
  2592.                         type: string
  2593.                     required:
  2594.                     - name
  2595.                     type: object
  2596.                 type: object
  2597.             required:
  2598.             - routes
  2599.             type: object
  2600.         required:
  2601.         - metadata
  2602.         - spec
  2603.         type: object
  2604.     served: true
  2605.     storage: true
  2606. status:
  2607.   acceptedNames:
  2608.     kind: ""
  2609.     plural: ""
  2610.   conditions: []
  2611.   storedVersions: []
  2613. ---
  2614. apiVersion: apiextensions.k8s.io/v1
  2615. kind: CustomResourceDefinition
  2616. metadata:
  2617.   annotations:
  2618.     controller-gen.kubebuilder.io/version: v0.6.2
  2619.   creationTimestamp: null
  2620.   name: ingressroutetcps.traefik.containo.us
  2621. spec:
  2622.   group: traefik.containo.us
  2623.   names:
  2624.     kind: IngressRouteTCP
  2625.     listKind: IngressRouteTCPList
  2626.     plural: ingressroutetcps
  2627.     singular: ingressroutetcp
  2628.   scope: Namespaced
  2629.   versions:
  2630.   - name: v1alpha1
  2631.     schema:
  2632.       openAPIV3Schema:
  2633.         description: IngressRouteTCP is the CRD implementation of a Traefik TCP Router.
  2634.         properties:
  2635.           apiVersion:
  2636.             description: 'APIVersion defines the versioned schema of this representation
  2637.               of an object. Servers should convert recognized schemas to the latest
  2638.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  2639.             type: string
  2640.           kind:
  2641.             description: 'Kind is a string value representing the REST resource this
  2642.               object represents. Servers may infer this from the endpoint the client
  2643.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  2644.             type: string
  2645.           metadata:
  2646.             type: object
  2647.           spec:
  2648.             description: IngressRouteTCPSpec defines the desired state of IngressRouteTCP.
  2649.             properties:
  2650.               entryPoints:
  2651.                 description: 'EntryPoints defines the list of entry point names to
  2652.                   bind to. Entry points have to be configured in the static configuration.
  2653.                   More info: https://doc.traefik.io/traefik/v2.10/routing/entrypoints/
  2654.                   Default: all.'
  2655.                 items:
  2656.                   type: string
  2657.                 type: array
  2658.               routes:
  2659.                 description: Routes defines the list of routes.
  2660.                 items:
  2661.                   description: RouteTCP holds the TCP route configuration.
  2662.                   properties:
  2663.                     match:
  2664.                       description: 'Match defines the router''s rule. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#rule_1'
  2665.                       type: string
  2666.                     middlewares:
  2667.                       description: Middlewares defines the list of references to MiddlewareTCP
  2668.                         resources.
  2669.                       items:
  2670.                         description: ObjectReference is a generic reference to a Traefik
  2671.                           resource.
  2672.                         properties:
  2673.                           name:
  2674.                             description: Name defines the name of the referenced Traefik
  2675.                               resource.
  2676.                             type: string
  2677.                           namespace:
  2678.                             description: Namespace defines the namespace of the referenced
  2679.                               Traefik resource.
  2680.                             type: string
  2681.                         required:
  2682.                         - name
  2683.                         type: object
  2684.                       type: array
  2685.                     priority:
  2686.                       description: 'Priority defines the router''s priority. More
  2687.                         info: https://doc.traefik.io/traefik/v2.10/routing/routers/#priority_1'
  2688.                       type: integer
  2689.                     services:
  2690.                       description: Services defines the list of TCP services.
  2691.                       items:
  2692.                         description: ServiceTCP defines an upstream TCP service to
  2693.                           proxy traffic to.
  2694.                         properties:
  2695.                           name:
  2696.                             description: Name defines the name of the referenced Kubernetes
  2697.                               Service.
  2698.                             type: string
  2699.                           namespace:
  2700.                             description: Namespace defines the namespace of the referenced
  2701.                               Kubernetes Service.
  2702.                             type: string
  2703.                           nativeLB:
  2704.                             description: NativeLB controls, when creating the load-balancer,
  2705.                               whether the LB's children are directly the pods IPs
  2706.                               or if the only child is the Kubernetes Service clusterIP.
  2707.                               The Kubernetes Service itself does load-balance to the
  2708.                               pods. By default, NativeLB is false.
  2709.                             type: boolean
  2710.                           port:
  2711.                             anyOf:
  2712.                             - type: integer
  2713.                             - type: string
  2714.                             description: Port defines the port of a Kubernetes Service.
  2715.                               This can be a reference to a named port.
  2716.                             x-kubernetes-int-or-string: true
  2717.                           proxyProtocol:
  2718.                             description: 'ProxyProtocol defines the PROXY protocol
  2719.                               configuration. More info: https://doc.traefik.io/traefik/v2.10/routing/services/#proxy-protocol'
  2720.                             properties:
  2721.                               version:
  2722.                                 description: Version defines the PROXY Protocol version
  2723.                                   to use.
  2724.                                 type: integer
  2725.                             type: object
  2726.                           terminationDelay:
  2727.                             description: TerminationDelay defines the deadline that
  2728.                               the proxy sets, after one of its connected peers indicates
  2729.                               it has closed the writing capability of its connection,
  2730.                               to close the reading capability as well, hence fully
  2731.                               terminating the connection. It is a duration in milliseconds,
  2732.                               defaulting to 100. A negative value means an infinite
  2733.                               deadline (i.e. the reading capability is never closed).
  2734.                             type: integer
  2735.                           weight:
  2736.                             description: Weight defines the weight used when balancing
  2737.                               requests between multiple Kubernetes Service.
  2738.                             type: integer
  2739.                         required:
  2740.                         - name
  2741.                         - port
  2742.                         type: object
  2743.                       type: array
  2744.                   required:
  2745.                   - match
  2746.                   type: object
  2747.                 type: array
  2748.               tls:
  2749.                 description: 'TLS defines the TLS configuration on a layer 4 / TCP
  2750.                   Route. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#tls_1'
  2751.                 properties:
  2752.                   certResolver:
  2753.                     description: 'CertResolver defines the name of the certificate
  2754.                       resolver to use. Cert resolvers have to be configured in the
  2755.                       static configuration. More info: https://doc.traefik.io/traefik/v2.10/https/acme/#certificate-resolvers'
  2756.                     type: string
  2757.                   domains:
  2758.                     description: 'Domains defines the list of domains that will be
  2759.                       used to issue certificates. More info: https://doc.traefik.io/traefik/v2.10/routing/routers/#domains'
  2760.                     items:
  2761.                       description: Domain holds a domain name with SANs.
  2762.                       properties:
  2763.                         main:
  2764.                           description: Main defines the main domain name.
  2765.                           type: string
  2766.                         sans:
  2767.                           description: SANs defines the subject alternative domain
  2768.                             names.
  2769.                           items:
  2770.                             type: string
  2771.                           type: array
  2772.                       type: object
  2773.                     type: array
  2774.                   options:
  2775.                     description: 'Options defines the reference to a TLSOption, that
  2776.                       specifies the parameters of the TLS connection. If not defined,
  2777.                       the `default` TLSOption is used. More info: https://doc.traefik.io/traefik/v2.10/https/tls/#tls-options'
  2778.                     properties:
  2779.                       name:
  2780.                         description: Name defines the name of the referenced Traefik
  2781.                           resource.
  2782.                         type: string
  2783.                       namespace:
  2784.                         description: Namespace defines the namespace of the referenced
  2785.                           Traefik resource.
  2786.                         type: string
  2787.                     required:
  2788.                     - name
  2789.                     type: object
  2790.                   passthrough:
  2791.                     description: Passthrough defines whether a TLS router will terminate
  2792.                       the TLS connection.
  2793.                     type: boolean
  2794.                   secretName:
  2795.                     description: SecretName is the name of the referenced Kubernetes
  2796.                       Secret to specify the certificate details.
  2797.                     type: string
  2798.                   store:
  2799.                     description: Store defines the reference to the TLSStore, that
  2800.                       will be used to store certificates. Please note that only `default`
  2801.                       TLSStore can be used.
  2802.                     properties:
  2803.                       name:
  2804.                         description: Name defines the name of the referenced Traefik
  2805.                           resource.
  2806.                         type: string
  2807.                       namespace:
  2808.                         description: Namespace defines the namespace of the referenced
  2809.                           Traefik resource.
  2810.                         type: string
  2811.                     required:
  2812.                     - name
  2813.                     type: object
  2814.                 type: object
  2815.             required:
  2816.             - routes
  2817.             type: object
  2818.         required:
  2819.         - metadata
  2820.         - spec
  2821.         type: object
  2822.     served: true
  2823.     storage: true
  2824. status:
  2825.   acceptedNames:
  2826.     kind: ""
  2827.     plural: ""
  2828.   conditions: []
  2829.   storedVersions: []
  2831. ---
  2832. apiVersion: apiextensions.k8s.io/v1
  2833. kind: CustomResourceDefinition
  2834. metadata:
  2835.   annotations:
  2836.     controller-gen.kubebuilder.io/version: v0.6.2
  2837.   creationTimestamp: null
  2838.   name: ingressrouteudps.traefik.containo.us
  2839. spec:
  2840.   group: traefik.containo.us
  2841.   names:
  2842.     kind: IngressRouteUDP
  2843.     listKind: IngressRouteUDPList
  2844.     plural: ingressrouteudps
  2845.     singular: ingressrouteudp
  2846.   scope: Namespaced
  2847.   versions:
  2848.   - name: v1alpha1
  2849.     schema:
  2850.       openAPIV3Schema:
  2851.         description: IngressRouteUDP is a CRD implementation of a Traefik UDP Router.
  2852.         properties:
  2853.           apiVersion:
  2854.             description: 'APIVersion defines the versioned schema of this representation
  2855.               of an object. Servers should convert recognized schemas to the latest
  2856.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  2857.             type: string
  2858.           kind:
  2859.             description: 'Kind is a string value representing the REST resource this
  2860.               object represents. Servers may infer this from the endpoint the client
  2861.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  2862.             type: string
  2863.           metadata:
  2864.             type: object
  2865.           spec:
  2866.             description: IngressRouteUDPSpec defines the desired state of a IngressRouteUDP.
  2867.             properties:
  2868.               entryPoints:
  2869.                 description: 'EntryPoints defines the list of entry point names to
  2870.                   bind to. Entry points have to be configured in the static configuration.
  2871.                   More info: https://doc.traefik.io/traefik/v2.10/routing/entrypoints/
  2872.                   Default: all.'
  2873.                 items:
  2874.                   type: string
  2875.                 type: array
  2876.               routes:
  2877.                 description: Routes defines the list of routes.
  2878.                 items:
  2879.                   description: RouteUDP holds the UDP route configuration.
  2880.                   properties:
  2881.                     services:
  2882.                       description: Services defines the list of UDP services.
  2883.                       items:
  2884.                         description: ServiceUDP defines an upstream UDP service to
  2885.                           proxy traffic to.
  2886.                         properties:
  2887.                           name:
  2888.                             description: Name defines the name of the referenced Kubernetes
  2889.                               Service.
  2890.                             type: string
  2891.                           namespace:
  2892.                             description: Namespace defines the namespace of the referenced
  2893.                               Kubernetes Service.
  2894.                             type: string
  2895.                           nativeLB:
  2896.                             description: NativeLB controls, when creating the load-balancer,
  2897.                               whether the LB's children are directly the pods IPs
  2898.                               or if the only child is the Kubernetes Service clusterIP.
  2899.                               The Kubernetes Service itself does load-balance to the
  2900.                               pods. By default, NativeLB is false.
  2901.                             type: boolean
  2902.                           port:
  2903.                             anyOf:
  2904.                             - type: integer
  2905.                             - type: string
  2906.                             description: Port defines the port of a Kubernetes Service.
  2907.                               This can be a reference to a named port.
  2908.                             x-kubernetes-int-or-string: true
  2909.                           weight:
  2910.                             description: Weight defines the weight used when balancing
  2911.                               requests between multiple Kubernetes Service.
  2912.                             type: integer
  2913.                         required:
  2914.                         - name
  2915.                         - port
  2916.                         type: object
  2917.                       type: array
  2918.                   type: object
  2919.                 type: array
  2920.             required:
  2921.             - routes
  2922.             type: object
  2923.         required:
  2924.         - metadata
  2925.         - spec
  2926.         type: object
  2927.     served: true
  2928.     storage: true
  2929. status:
  2930.   acceptedNames:
  2931.     kind: ""
  2932.     plural: ""
  2933.   conditions: []
  2934.   storedVersions: []
  2936. ---
  2937. apiVersion: apiextensions.k8s.io/v1
  2938. kind: CustomResourceDefinition
  2939. metadata:
  2940.   annotations:
  2941.     controller-gen.kubebuilder.io/version: v0.6.2
  2942.   creationTimestamp: null
  2943.   name: middlewares.traefik.containo.us
  2944. spec:
  2945.   group: traefik.containo.us
  2946.   names:
  2947.     kind: Middleware
  2948.     listKind: MiddlewareList
  2949.     plural: middlewares
  2950.     singular: middleware
  2951.   scope: Namespaced
  2952.   versions:
  2953.   - name: v1alpha1
  2954.     schema:
  2955.       openAPIV3Schema:
  2956.         description: 'Middleware is the CRD implementation of a Traefik Middleware.
  2957.           More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/overview/'
  2958.         properties:
  2959.           apiVersion:
  2960.             description: 'APIVersion defines the versioned schema of this representation
  2961.               of an object. Servers should convert recognized schemas to the latest
  2962.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  2963.             type: string
  2964.           kind:
  2965.             description: 'Kind is a string value representing the REST resource this
  2966.               object represents. Servers may infer this from the endpoint the client
  2967.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  2968.             type: string
  2969.           metadata:
  2970.             type: object
  2971.           spec:
  2972.             description: MiddlewareSpec defines the desired state of a Middleware.
  2973.             properties:
  2974.               addPrefix:
  2975.                 description: 'AddPrefix holds the add prefix middleware configuration.
  2976.                   This middleware updates the path of a request before forwarding
  2977.                   it. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/addprefix/'
  2978.                 properties:
  2979.                   prefix:
  2980.                     description: Prefix is the string to add before the current path
  2981.                       in the requested URL. It should include a leading slash (/).
  2982.                     type: string
  2983.                 type: object
  2984.               basicAuth:
  2985.                 description: 'BasicAuth holds the basic auth middleware configuration.
  2986.                   This middleware restricts access to your services to known users.
  2987.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/basicauth/'
  2988.                 properties:
  2989.                   headerField:
  2990.                     description: 'HeaderField defines a header field to store the
  2991.                       authenticated user. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/basicauth/#headerfield'
  2992.                     type: string
  2993.                   realm:
  2994.                     description: 'Realm allows the protected resources on a server
  2995.                       to be partitioned into a set of protection spaces, each with
  2996.                       its own authentication scheme. Default: traefik.'
  2997.                     type: string
  2998.                   removeHeader:
  2999.                     description: 'RemoveHeader sets the removeHeader option to true
  3000.                       to remove the authorization header before forwarding the request
  3001.                       to your service. Default: false.'
  3002.                     type: boolean
  3003.                   secret:
  3004.                     description: Secret is the name of the referenced Kubernetes Secret
  3005.                       containing user credentials.
  3006.                     type: string
  3007.                 type: object
  3008.               buffering:
  3009.                 description: 'Buffering holds the buffering middleware configuration.
  3010.                   This middleware retries or limits the size of requests that can
  3011.                   be forwarded to backends. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/buffering/#maxrequestbodybytes'
  3012.                 properties:
  3013.                   maxRequestBodyBytes:
  3014.                     description: 'MaxRequestBodyBytes defines the maximum allowed
  3015.                       body size for the request (in bytes). If the request exceeds
  3016.                       the allowed size, it is not forwarded to the service, and the
  3017.                       client gets a 413 (Request Entity Too Large) response. Default:
  3018.                       0 (no maximum).'
  3019.                     format: int64
  3020.                     type: integer
  3021.                   maxResponseBodyBytes:
  3022.                     description: 'MaxResponseBodyBytes defines the maximum allowed
  3023.                       response size from the service (in bytes). If the response exceeds
  3024.                       the allowed size, it is not forwarded to the client. The client
  3025.                       gets a 500 (Internal Server Error) response instead. Default:
  3026.                       0 (no maximum).'
  3027.                     format: int64
  3028.                     type: integer
  3029.                   memRequestBodyBytes:
  3030.                     description: 'MemRequestBodyBytes defines the threshold (in bytes)
  3031.                       from which the request will be buffered on disk instead of in
  3032.                       memory. Default: 1048576 (1Mi).'
  3033.                     format: int64
  3034.                     type: integer
  3035.                   memResponseBodyBytes:
  3036.                     description: 'MemResponseBodyBytes defines the threshold (in bytes)
  3037.                       from which the response will be buffered on disk instead of
  3038.                       in memory. Default: 1048576 (1Mi).'
  3039.                     format: int64
  3040.                     type: integer
  3041.                   retryExpression:
  3042.                     description: 'RetryExpression defines the retry conditions. It
  3043.                       is a logical combination of functions with operators AND (&&)
  3044.                       and OR (||). More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/buffering/#retryexpression'
  3045.                     type: string
  3046.                 type: object
  3047.               chain:
  3048.                 description: 'Chain holds the configuration of the chain middleware.
  3049.                   This middleware enables to define reusable combinations of other
  3050.                   pieces of middleware. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/chain/'
  3051.                 properties:
  3052.                   middlewares:
  3053.                     description: Middlewares is the list of MiddlewareRef which composes
  3054.                       the chain.
  3055.                     items:
  3056.                       description: MiddlewareRef is a reference to a Middleware resource.
  3057.                       properties:
  3058.                         name:
  3059.                           description: Name defines the name of the referenced Middleware
  3060.                             resource.
  3061.                           type: string
  3062.                         namespace:
  3063.                           description: Namespace defines the namespace of the referenced
  3064.                             Middleware resource.
  3065.                           type: string
  3066.                       required:
  3067.                       - name
  3068.                       type: object
  3069.                     type: array
  3070.                 type: object
  3071.               circuitBreaker:
  3072.                 description: CircuitBreaker holds the circuit breaker configuration.
  3073.                 properties:
  3074.                   checkPeriod:
  3075.                     anyOf:
  3076.                     - type: integer
  3077.                     - type: string
  3078.                     description: CheckPeriod is the interval between successive checks
  3079.                       of the circuit breaker condition (when in standby state).
  3080.                     x-kubernetes-int-or-string: true
  3081.                   expression:
  3082.                     description: Expression is the condition that triggers the tripped
  3083.                       state.
  3084.                     type: string
  3085.                   fallbackDuration:
  3086.                     anyOf:
  3087.                     - type: integer
  3088.                     - type: string
  3089.                     description: FallbackDuration is the duration for which the circuit
  3090.                       breaker will wait before trying to recover (from a tripped state).
  3091.                     x-kubernetes-int-or-string: true
  3092.                   recoveryDuration:
  3093.                     anyOf:
  3094.                     - type: integer
  3095.                     - type: string
  3096.                     description: RecoveryDuration is the duration for which the circuit
  3097.                       breaker will try to recover (as soon as it is in recovering
  3098.                       state).
  3099.                     x-kubernetes-int-or-string: true
  3100.                 type: object
  3101.               compress:
  3102.                 description: 'Compress holds the compress middleware configuration.
  3103.                   This middleware compresses responses before sending them to the
  3104.                   client, using gzip compression. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/compress/'
  3105.                 properties:
  3106.                   excludedContentTypes:
  3107.                     description: ExcludedContentTypes defines the list of content
  3108.                       types to compare the Content-Type header of the incoming requests
  3109.                       and responses before compressing.
  3110.                     items:
  3111.                       type: string
  3112.                     type: array
  3113.                   minResponseBodyBytes:
  3114.                     description: 'MinResponseBodyBytes defines the minimum amount
  3115.                       of bytes a response body must have to be compressed. Default:
  3116.                       1024.'
  3117.                     type: integer
  3118.                 type: object
  3119.               contentType:
  3120.                 description: ContentType holds the content-type middleware configuration.
  3121.                   This middleware exists to enable the correct behavior until at least
  3122.                   the default one can be changed in a future version.
  3123.                 properties:
  3124.                   autoDetect:
  3125.                     description: AutoDetect specifies whether to let the `Content-Type`
  3126.                       header, if it has not been set by the backend, be automatically
  3127.                       set to a value derived from the contents of the response. As
  3128.                       a proxy, the default behavior should be to leave the header
  3129.                       alone, regardless of what the backend did with it. However,
  3130.                       the historic default was to always auto-detect and set the header
  3131.                       if it was nil, and it is going to be kept that way in order
  3132.                       to support users currently relying on it.
  3133.                     type: boolean
  3134.                 type: object
  3135.               digestAuth:
  3136.                 description: 'DigestAuth holds the digest auth middleware configuration.
  3137.                   This middleware restricts access to your services to known users.
  3138.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/digestauth/'
  3139.                 properties:
  3140.                   headerField:
  3141.                     description: 'HeaderField defines a header field to store the
  3142.                       authenticated user. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/basicauth/#headerfield'
  3143.                     type: string
  3144.                   realm:
  3145.                     description: 'Realm allows the protected resources on a server
  3146.                       to be partitioned into a set of protection spaces, each with
  3147.                       its own authentication scheme. Default: traefik.'
  3148.                     type: string
  3149.                   removeHeader:
  3150.                     description: RemoveHeader defines whether to remove the authorization
  3151.                       header before forwarding the request to the backend.
  3152.                     type: boolean
  3153.                   secret:
  3154.                     description: Secret is the name of the referenced Kubernetes Secret
  3155.                       containing user credentials.
  3156.                     type: string
  3157.                 type: object
  3158.               errors:
  3159.                 description: 'ErrorPage holds the custom error middleware configuration.
  3160.                   This middleware returns a custom page in lieu of the default, according
  3161.                   to configured ranges of HTTP Status codes. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/errorpages/'
  3162.                 properties:
  3163.                   query:
  3164.                     description: Query defines the URL for the error page (hosted
  3165.                       by service). The {status} variable can be used in order to insert
  3166.                       the status code in the URL.
  3167.                     type: string
  3168.                   service:
  3169.                     description: 'Service defines the reference to a Kubernetes Service
  3170.                       that will serve the error page. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/errorpages/#service'
  3171.                     properties:
  3172.                       kind:
  3173.                         description: Kind defines the kind of the Service.
  3174.                         enum:
  3175.                         - Service
  3176.                         - TraefikService
  3177.                         type: string
  3178.                       name:
  3179.                         description: Name defines the name of the referenced Kubernetes
  3180.                           Service or TraefikService. The differentiation between the
  3181.                           two is specified in the Kind field.
  3182.                         type: string
  3183.                       namespace:
  3184.                         description: Namespace defines the namespace of the referenced
  3185.                           Kubernetes Service or TraefikService.
  3186.                         type: string
  3187.                       nativeLB:
  3188.                         description: NativeLB controls, when creating the load-balancer,
  3189.                           whether the LB's children are directly the pods IPs or if
  3190.                           the only child is the Kubernetes Service clusterIP. The
  3191.                           Kubernetes Service itself does load-balance to the pods.
  3192.                           By default, NativeLB is false.
  3193.                         type: boolean
  3194.                       passHostHeader:
  3195.                         description: PassHostHeader defines whether the client Host
  3196.                           header is forwarded to the upstream Kubernetes Service.
  3197.                           By default, passHostHeader is true.
  3198.                         type: boolean
  3199.                       port:
  3200.                         anyOf:
  3201.                         - type: integer
  3202.                         - type: string
  3203.                         description: Port defines the port of a Kubernetes Service.
  3204.                           This can be a reference to a named port.
  3205.                         x-kubernetes-int-or-string: true
  3206.                       responseForwarding:
  3207.                         description: ResponseForwarding defines how Traefik forwards
  3208.                           the response from the upstream Kubernetes Service to the
  3209.                           client.
  3210.                         properties:
  3211.                           flushInterval:
  3212.                             description: 'FlushInterval defines the interval, in milliseconds,
  3213.                               in between flushes to the client while copying the response
  3214.                               body. A negative value means to flush immediately after
  3215.                               each write to the client. This configuration is ignored
  3216.                               when ReverseProxy recognizes a response as a streaming
  3217.                               response; for such responses, writes are flushed to
  3218.                               the client immediately. Default: 100ms'
  3219.                             type: string
  3220.                         type: object
  3221.                       scheme:
  3222.                         description: Scheme defines the scheme to use for the request
  3223.                           to the upstream Kubernetes Service. It defaults to https
  3224.                           when Kubernetes Service port is 443, http otherwise.
  3225.                         type: string
  3226.                       serversTransport:
  3227.                         description: ServersTransport defines the name of ServersTransport
  3228.                           resource to use. It allows to configure the transport between
  3229.                           Traefik and your servers. Can only be used on a Kubernetes
  3230.                           Service.
  3231.                         type: string
  3232.                       sticky:
  3233.                         description: 'Sticky defines the sticky sessions configuration.
  3234.                           More info: https://doc.traefik.io/traefik/v2.10/routing/services/#sticky-sessions'
  3235.                         properties:
  3236.                           cookie:
  3237.                             description: Cookie defines the sticky cookie configuration.
  3238.                             properties:
  3239.                               httpOnly:
  3240.                                 description: HTTPOnly defines whether the cookie can
  3241.                                   be accessed by client-side APIs, such as JavaScript.
  3242.                                 type: boolean
  3243.                               name:
  3244.                                 description: Name defines the Cookie name.
  3245.                                 type: string
  3246.                               sameSite:
  3247.                                 description: 'SameSite defines the same site policy.
  3248.                                   More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  3249.                                 type: string
  3250.                               secure:
  3251.                                 description: Secure defines whether the cookie can
  3252.                                   only be transmitted over an encrypted connection
  3253.                                   (i.e. HTTPS).
  3254.                                 type: boolean
  3255.                             type: object
  3256.                         type: object
  3257.                       strategy:
  3258.                         description: Strategy defines the load balancing strategy
  3259.                           between the servers. RoundRobin is the only supported value
  3260.                           at the moment.
  3261.                         type: string
  3262.                       weight:
  3263.                         description: Weight defines the weight and should only be
  3264.                           specified when Name references a TraefikService object (and
  3265.                           to be precise, one that embeds a Weighted Round Robin).
  3266.                         type: integer
  3267.                     required:
  3268.                     - name
  3269.                     type: object
  3270.                   status:
  3271.                     description: Status defines which status or range of statuses
  3272.                       should result in an error page. It can be either a status code
  3273.                       as a number (500), as multiple comma-separated numbers (500,502),
  3274.                       as ranges by separating two codes with a dash (500-599), or
  3275.                       a combination of the two (404,418,500-599).
  3276.                     items:
  3277.                       type: string
  3278.                     type: array
  3279.                 type: object
  3280.               forwardAuth:
  3281.                 description: 'ForwardAuth holds the forward auth middleware configuration.
  3282.                   This middleware delegates the request authentication to a Service.
  3283.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/forwardauth/'
  3284.                 properties:
  3285.                   address:
  3286.                     description: Address defines the authentication server address.
  3287.                     type: string
  3288.                   authRequestHeaders:
  3289.                     description: AuthRequestHeaders defines the list of the headers
  3290.                       to copy from the request to the authentication server. If not
  3291.                       set or empty then all request headers are passed.
  3292.                     items:
  3293.                       type: string
  3294.                     type: array
  3295.                   authResponseHeaders:
  3296.                     description: AuthResponseHeaders defines the list of headers to
  3297.                       copy from the authentication server response and set on forwarded
  3298.                       request, replacing any existing conflicting headers.
  3299.                     items:
  3300.                       type: string
  3301.                     type: array
  3302.                   authResponseHeadersRegex:
  3303.                     description: 'AuthResponseHeadersRegex defines the regex to match
  3304.                       headers to copy from the authentication server response and
  3305.                       set on forwarded request, after stripping all headers that match
  3306.                       the regex. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/forwardauth/#authresponseheadersregex'
  3307.                     type: string
  3308.                   tls:
  3309.                     description: TLS defines the configuration used to secure the
  3310.                       connection to the authentication server.
  3311.                     properties:
  3312.                       caOptional:
  3313.                         type: boolean
  3314.                       caSecret:
  3315.                         description: CASecret is the name of the referenced Kubernetes
  3316.                           Secret containing the CA to validate the server certificate.
  3317.                           The CA certificate is extracted from key `tls.ca` or `ca.crt`.
  3318.                         type: string
  3319.                       certSecret:
  3320.                         description: CertSecret is the name of the referenced Kubernetes
  3321.                           Secret containing the client certificate. The client certificate
  3322.                           is extracted from the keys `tls.crt` and `tls.key`.
  3323.                         type: string
  3324.                       insecureSkipVerify:
  3325.                         description: InsecureSkipVerify defines whether the server
  3326.                           certificates should be validated.
  3327.                         type: boolean
  3328.                     type: object
  3329.                   trustForwardHeader:
  3330.                     description: 'TrustForwardHeader defines whether to trust (ie:
  3331.                       forward) all X-Forwarded-* headers.'
  3332.                     type: boolean
  3333.                 type: object
  3334.               headers:
  3335.                 description: 'Headers holds the headers middleware configuration.
  3336.                   This middleware manages the requests and responses headers. More
  3337.                   info: https://doc.traefik.io/traefik/v2.10/middlewares/http/headers/#customrequestheaders'
  3338.                 properties:
  3339.                   accessControlAllowCredentials:
  3340.                     description: AccessControlAllowCredentials defines whether the
  3341.                       request can include user credentials.
  3342.                     type: boolean
  3343.                   accessControlAllowHeaders:
  3344.                     description: AccessControlAllowHeaders defines the Access-Control-Request-Headers
  3345.                       values sent in preflight response.
  3346.                     items:
  3347.                       type: string
  3348.                     type: array
  3349.                   accessControlAllowMethods:
  3350.                     description: AccessControlAllowMethods defines the Access-Control-Request-Method
  3351.                       values sent in preflight response.
  3352.                     items:
  3353.                       type: string
  3354.                     type: array
  3355.                   accessControlAllowOriginList:
  3356.                     description: AccessControlAllowOriginList is a list of allowable
  3357.                       origins. Can also be a wildcard origin "*".
  3358.                     items:
  3359.                       type: string
  3360.                     type: array
  3361.                   accessControlAllowOriginListRegex:
  3362.                     description: AccessControlAllowOriginListRegex is a list of allowable
  3363.                       origins written following the Regular Expression syntax (https://golang.org/pkg/regexp/).
  3364.                     items:
  3365.                       type: string
  3366.                     type: array
  3367.                   accessControlExposeHeaders:
  3368.                     description: AccessControlExposeHeaders defines the Access-Control-Expose-Headers
  3369.                       values sent in preflight response.
  3370.                     items:
  3371.                       type: string
  3372.                     type: array
  3373.                   accessControlMaxAge:
  3374.                     description: AccessControlMaxAge defines the time that a preflight
  3375.                       request may be cached.
  3376.                     format: int64
  3377.                     type: integer
  3378.                   addVaryHeader:
  3379.                     description: AddVaryHeader defines whether the Vary header is
  3380.                       automatically added/updated when the AccessControlAllowOriginList
  3381.                       is set.
  3382.                     type: boolean
  3383.                   allowedHosts:
  3384.                     description: AllowedHosts defines the fully qualified list of
  3385.                       allowed domain names.
  3386.                     items:
  3387.                       type: string
  3388.                     type: array
  3389.                   browserXssFilter:
  3390.                     description: BrowserXSSFilter defines whether to add the X-XSS-Protection
  3391.                       header with the value 1; mode=block.
  3392.                     type: boolean
  3393.                   contentSecurityPolicy:
  3394.                     description: ContentSecurityPolicy defines the Content-Security-Policy
  3395.                       header value.
  3396.                     type: string
  3397.                   contentTypeNosniff:
  3398.                     description: ContentTypeNosniff defines whether to add the X-Content-Type-Options
  3399.                       header with the nosniff value.
  3400.                     type: boolean
  3401.                   customBrowserXSSValue:
  3402.                     description: CustomBrowserXSSValue defines the X-XSS-Protection
  3403.                       header value. This overrides the BrowserXssFilter option.
  3404.                     type: string
  3405.                   customFrameOptionsValue:
  3406.                     description: CustomFrameOptionsValue defines the X-Frame-Options
  3407.                       header value. This overrides the FrameDeny option.
  3408.                     type: string
  3409.                   customRequestHeaders:
  3410.                     additionalProperties:
  3411.                       type: string
  3412.                     description: CustomRequestHeaders defines the header names and
  3413.                       values to apply to the request.
  3414.                     type: object
  3415.                   customResponseHeaders:
  3416.                     additionalProperties:
  3417.                       type: string
  3418.                     description: CustomResponseHeaders defines the header names and
  3419.                       values to apply to the response.
  3420.                     type: object
  3421.                   featurePolicy:
  3422.                     description: 'Deprecated: use PermissionsPolicy instead.'
  3423.                     type: string
  3424.                   forceSTSHeader:
  3425.                     description: ForceSTSHeader defines whether to add the STS header
  3426.                       even when the connection is HTTP.
  3427.                     type: boolean
  3428.                   frameDeny:
  3429.                     description: FrameDeny defines whether to add the X-Frame-Options
  3430.                       header with the DENY value.
  3431.                     type: boolean
  3432.                   hostsProxyHeaders:
  3433.                     description: HostsProxyHeaders defines the header keys that may
  3434.                       hold a proxied hostname value for the request.
  3435.                     items:
  3436.                       type: string
  3437.                     type: array
  3438.                   isDevelopment:
  3439.                     description: IsDevelopment defines whether to mitigate the unwanted
  3440.                       effects of the AllowedHosts, SSL, and STS options when developing.
  3441.                       Usually testing takes place using HTTP, not HTTPS, and on localhost,
  3442.                       not your production domain. If you would like your development
  3443.                       environment to mimic production with complete Host blocking,
  3444.                       SSL redirects, and STS headers, leave this as false.
  3445.                     type: boolean
  3446.                   permissionsPolicy:
  3447.                     description: PermissionsPolicy defines the Permissions-Policy
  3448.                       header value. This allows sites to control browser features.
  3449.                     type: string
  3450.                   publicKey:
  3451.                     description: PublicKey is the public key that implements HPKP
  3452.                       to prevent MITM attacks with forged certificates.
  3453.                     type: string
  3454.                   referrerPolicy:
  3455.                     description: ReferrerPolicy defines the Referrer-Policy header
  3456.                       value. This allows sites to control whether browsers forward
  3457.                       the Referer header to other sites.
  3458.                     type: string
  3459.                   sslForceHost:
  3460.                     description: 'Deprecated: use RedirectRegex instead.'
  3461.                     type: boolean
  3462.                   sslHost:
  3463.                     description: 'Deprecated: use RedirectRegex instead.'
  3464.                     type: string
  3465.                   sslProxyHeaders:
  3466.                     additionalProperties:
  3467.                       type: string
  3468.                     description: 'SSLProxyHeaders defines the header keys with associated
  3469.                       values that would indicate a valid HTTPS request. It can be
  3470.                       useful when using other proxies (example: "X-Forwarded-Proto":
  3471.                       "https").'
  3472.                     type: object
  3473.                   sslRedirect:
  3474.                     description: 'Deprecated: use EntryPoint redirection or RedirectScheme
  3475.                       instead.'
  3476.                     type: boolean
  3477.                   sslTemporaryRedirect:
  3478.                     description: 'Deprecated: use EntryPoint redirection or RedirectScheme
  3479.                       instead.'
  3480.                     type: boolean
  3481.                   stsIncludeSubdomains:
  3482.                     description: STSIncludeSubdomains defines whether the includeSubDomains
  3483.                       directive is appended to the Strict-Transport-Security header.
  3484.                     type: boolean
  3485.                   stsPreload:
  3486.                     description: STSPreload defines whether the preload flag is appended
  3487.                       to the Strict-Transport-Security header.
  3488.                     type: boolean
  3489.                   stsSeconds:
  3490.                     description: STSSeconds defines the max-age of the Strict-Transport-Security
  3491.                       header. If set to 0, the header is not set.
  3492.                     format: int64
  3493.                     type: integer
  3494.                 type: object
  3495.               inFlightReq:
  3496.                 description: 'InFlightReq holds the in-flight request middleware configuration.
  3497.                   This middleware limits the number of requests being processed and
  3498.                   served concurrently. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/inflightreq/'
  3499.                 properties:
  3500.                   amount:
  3501.                     description: Amount defines the maximum amount of allowed simultaneous
  3502.                       in-flight request. The middleware responds with HTTP 429 Too
  3503.                       Many Requests if there are already amount requests in progress
  3504.                       (based on the same sourceCriterion strategy).
  3505.                     format: int64
  3506.                     type: integer
  3507.                   sourceCriterion:
  3508.                     description: 'SourceCriterion defines what criterion is used to
  3509.                       group requests as originating from a common source. If several
  3510.                       strategies are defined at the same time, an error will be raised.
  3511.                       If none are set, the default is to use the requestHost. More
  3512.                       info: https://doc.traefik.io/traefik/v2.10/middlewares/http/inflightreq/#sourcecriterion'
  3513.                     properties:
  3514.                       ipStrategy:
  3515.                         description: 'IPStrategy holds the IP strategy configuration
  3516.                           used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/ipwhitelist/#ipstrategy'
  3517.                         properties:
  3518.                           depth:
  3519.                             description: Depth tells Traefik to use the X-Forwarded-For
  3520.                               header and take the IP located at the depth position
  3521.                               (starting from the right).
  3522.                             type: integer
  3523.                           excludedIPs:
  3524.                             description: ExcludedIPs configures Traefik to scan the
  3525.                               X-Forwarded-For header and select the first IP not in
  3526.                               the list.
  3527.                             items:
  3528.                               type: string
  3529.                             type: array
  3530.                         type: object
  3531.                       requestHeaderName:
  3532.                         description: RequestHeaderName defines the name of the header
  3533.                           used to group incoming requests.
  3534.                         type: string
  3535.                       requestHost:
  3536.                         description: RequestHost defines whether to consider the request
  3537.                           Host as the source.
  3538.                         type: boolean
  3539.                     type: object
  3540.                 type: object
  3541.               ipWhiteList:
  3542.                 description: 'IPWhiteList holds the IP whitelist middleware configuration.
  3543.                   This middleware accepts / refuses requests based on the client IP.
  3544.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/ipwhitelist/'
  3545.                 properties:
  3546.                   ipStrategy:
  3547.                     description: 'IPStrategy holds the IP strategy configuration used
  3548.                       by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/ipwhitelist/#ipstrategy'
  3549.                     properties:
  3550.                       depth:
  3551.                         description: Depth tells Traefik to use the X-Forwarded-For
  3552.                           header and take the IP located at the depth position (starting
  3553.                           from the right).
  3554.                         type: integer
  3555.                       excludedIPs:
  3556.                         description: ExcludedIPs configures Traefik to scan the X-Forwarded-For
  3557.                           header and select the first IP not in the list.
  3558.                         items:
  3559.                           type: string
  3560.                         type: array
  3561.                     type: object
  3562.                   sourceRange:
  3563.                     description: SourceRange defines the set of allowed IPs (or ranges
  3564.                       of allowed IPs by using CIDR notation).
  3565.                     items:
  3566.                       type: string
  3567.                     type: array
  3568.                 type: object
  3569.               passTLSClientCert:
  3570.                 description: 'PassTLSClientCert holds the pass TLS client cert middleware
  3571.                   configuration. This middleware adds the selected data from the passed
  3572.                   client TLS certificate to a header. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/passtlsclientcert/'
  3573.                 properties:
  3574.                   info:
  3575.                     description: Info selects the specific client certificate details
  3576.                       you want to add to the X-Forwarded-Tls-Client-Cert-Info header.
  3577.                     properties:
  3578.                       issuer:
  3579.                         description: Issuer defines the client certificate issuer
  3580.                           details to add to the X-Forwarded-Tls-Client-Cert-Info header.
  3581.                         properties:
  3582.                           commonName:
  3583.                             description: CommonName defines whether to add the organizationalUnit
  3584.                               information into the issuer.
  3585.                             type: boolean
  3586.                           country:
  3587.                             description: Country defines whether to add the country
  3588.                               information into the issuer.
  3589.                             type: boolean
  3590.                           domainComponent:
  3591.                             description: DomainComponent defines whether to add the
  3592.                               domainComponent information into the issuer.
  3593.                             type: boolean
  3594.                           locality:
  3595.                             description: Locality defines whether to add the locality
  3596.                               information into the issuer.
  3597.                             type: boolean
  3598.                           organization:
  3599.                             description: Organization defines whether to add the organization
  3600.                               information into the issuer.
  3601.                             type: boolean
  3602.                           province:
  3603.                             description: Province defines whether to add the province
  3604.                               information into the issuer.
  3605.                             type: boolean
  3606.                           serialNumber:
  3607.                             description: SerialNumber defines whether to add the serialNumber
  3608.                               information into the issuer.
  3609.                             type: boolean
  3610.                         type: object
  3611.                       notAfter:
  3612.                         description: NotAfter defines whether to add the Not After
  3613.                           information from the Validity part.
  3614.                         type: boolean
  3615.                       notBefore:
  3616.                         description: NotBefore defines whether to add the Not Before
  3617.                           information from the Validity part.
  3618.                         type: boolean
  3619.                       sans:
  3620.                         description: Sans defines whether to add the Subject Alternative
  3621.                           Name information from the Subject Alternative Name part.
  3622.                         type: boolean
  3623.                       serialNumber:
  3624.                         description: SerialNumber defines whether to add the client
  3625.                           serialNumber information.
  3626.                         type: boolean
  3627.                       subject:
  3628.                         description: Subject defines the client certificate subject
  3629.                           details to add to the X-Forwarded-Tls-Client-Cert-Info header.
  3630.                         properties:
  3631.                           commonName:
  3632.                             description: CommonName defines whether to add the organizationalUnit
  3633.                               information into the subject.
  3634.                             type: boolean
  3635.                           country:
  3636.                             description: Country defines whether to add the country
  3637.                               information into the subject.
  3638.                             type: boolean
  3639.                           domainComponent:
  3640.                             description: DomainComponent defines whether to add the
  3641.                               domainComponent information into the subject.
  3642.                             type: boolean
  3643.                           locality:
  3644.                             description: Locality defines whether to add the locality
  3645.                               information into the subject.
  3646.                             type: boolean
  3647.                           organization:
  3648.                             description: Organization defines whether to add the organization
  3649.                               information into the subject.
  3650.                             type: boolean
  3651.                           organizationalUnit:
  3652.                             description: OrganizationalUnit defines whether to add
  3653.                               the organizationalUnit information into the subject.
  3654.                             type: boolean
  3655.                           province:
  3656.                             description: Province defines whether to add the province
  3657.                               information into the subject.
  3658.                             type: boolean
  3659.                           serialNumber:
  3660.                             description: SerialNumber defines whether to add the serialNumber
  3661.                               information into the subject.
  3662.                             type: boolean
  3663.                         type: object
  3664.                     type: object
  3665.                   pem:
  3666.                     description: PEM sets the X-Forwarded-Tls-Client-Cert header with
  3667.                       the certificate.
  3668.                     type: boolean
  3669.                 type: object
  3670.               plugin:
  3671.                 additionalProperties:
  3672.                   x-kubernetes-preserve-unknown-fields: true
  3673.                 description: 'Plugin defines the middleware plugin configuration.
  3674.                   More info: https://doc.traefik.io/traefik/plugins/'
  3675.                 type: object
  3676.               rateLimit:
  3677.                 description: 'RateLimit holds the rate limit configuration. This middleware
  3678.                   ensures that services will receive a fair amount of requests, and
  3679.                   allows one to define what fair is. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/ratelimit/'
  3680.                 properties:
  3681.                   average:
  3682.                     description: Average is the maximum rate, by default in requests/s,
  3683.                       allowed for the given source. It defaults to 0, which means
  3684.                       no rate limiting. The rate is actually defined by dividing Average
  3685.                       by Period. So for a rate below 1req/s, one needs to define a
  3686.                       Period larger than a second.
  3687.                     format: int64
  3688.                     type: integer
  3689.                   burst:
  3690.                     description: Burst is the maximum number of requests allowed to
  3691.                       arrive in the same arbitrarily small period of time. It defaults
  3692.                       to 1.
  3693.                     format: int64
  3694.                     type: integer
  3695.                   period:
  3696.                     anyOf:
  3697.                     - type: integer
  3698.                     - type: string
  3699.                     description: 'Period, in combination with Average, defines the
  3700.                       actual maximum rate, such as: r = Average / Period. It defaults
  3701.                       to a second.'
  3702.                     x-kubernetes-int-or-string: true
  3703.                   sourceCriterion:
  3704.                     description: SourceCriterion defines what criterion is used to
  3705.                       group requests as originating from a common source. If several
  3706.                       strategies are defined at the same time, an error will be raised.
  3707.                       If none are set, the default is to use the request's remote
  3708.                       address field (as an ipStrategy).
  3709.                     properties:
  3710.                       ipStrategy:
  3711.                         description: 'IPStrategy holds the IP strategy configuration
  3712.                           used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/ipwhitelist/#ipstrategy'
  3713.                         properties:
  3714.                           depth:
  3715.                             description: Depth tells Traefik to use the X-Forwarded-For
  3716.                               header and take the IP located at the depth position
  3717.                               (starting from the right).
  3718.                             type: integer
  3719.                           excludedIPs:
  3720.                             description: ExcludedIPs configures Traefik to scan the
  3721.                               X-Forwarded-For header and select the first IP not in
  3722.                               the list.
  3723.                             items:
  3724.                               type: string
  3725.                             type: array
  3726.                         type: object
  3727.                       requestHeaderName:
  3728.                         description: RequestHeaderName defines the name of the header
  3729.                           used to group incoming requests.
  3730.                         type: string
  3731.                       requestHost:
  3732.                         description: RequestHost defines whether to consider the request
  3733.                           Host as the source.
  3734.                         type: boolean
  3735.                     type: object
  3736.                 type: object
  3737.               redirectRegex:
  3738.                 description: 'RedirectRegex holds the redirect regex middleware configuration.
  3739.                   This middleware redirects a request using regex matching and replacement.
  3740.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/redirectregex/#regex'
  3741.                 properties:
  3742.                   permanent:
  3743.                     description: Permanent defines whether the redirection is permanent
  3744.                       (301).
  3745.                     type: boolean
  3746.                   regex:
  3747.                     description: Regex defines the regex used to match and capture
  3748.                       elements from the request URL.
  3749.                     type: string
  3750.                   replacement:
  3751.                     description: Replacement defines how to modify the URL to have
  3752.                       the new target URL.
  3753.                     type: string
  3754.                 type: object
  3755.               redirectScheme:
  3756.                 description: 'RedirectScheme holds the redirect scheme middleware
  3757.                   configuration. This middleware redirects requests from a scheme/port
  3758.                   to another. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/redirectscheme/'
  3759.                 properties:
  3760.                   permanent:
  3761.                     description: Permanent defines whether the redirection is permanent
  3762.                       (301).
  3763.                     type: boolean
  3764.                   port:
  3765.                     description: Port defines the port of the new URL.
  3766.                     type: string
  3767.                   scheme:
  3768.                     description: Scheme defines the scheme of the new URL.
  3769.                     type: string
  3770.                 type: object
  3771.               replacePath:
  3772.                 description: 'ReplacePath holds the replace path middleware configuration.
  3773.                   This middleware replaces the path of the request URL and store the
  3774.                   original path in an X-Replaced-Path header. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/replacepath/'
  3775.                 properties:
  3776.                   path:
  3777.                     description: Path defines the path to use as replacement in the
  3778.                       request URL.
  3779.                     type: string
  3780.                 type: object
  3781.               replacePathRegex:
  3782.                 description: 'ReplacePathRegex holds the replace path regex middleware
  3783.                   configuration. This middleware replaces the path of a URL using
  3784.                   regex matching and replacement. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/replacepathregex/'
  3785.                 properties:
  3786.                   regex:
  3787.                     description: Regex defines the regular expression used to match
  3788.                       and capture the path from the request URL.
  3789.                     type: string
  3790.                   replacement:
  3791.                     description: Replacement defines the replacement path format,
  3792.                       which can include captured variables.
  3793.                     type: string
  3794.                 type: object
  3795.               retry:
  3796.                 description: 'Retry holds the retry middleware configuration. This
  3797.                   middleware reissues requests a given number of times to a backend
  3798.                   server if that server does not reply. As soon as the server answers,
  3799.                   the middleware stops retrying, regardless of the response status.
  3800.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/retry/'
  3801.                 properties:
  3802.                   attempts:
  3803.                     description: Attempts defines how many times the request should
  3804.                       be retried.
  3805.                     type: integer
  3806.                   initialInterval:
  3807.                     anyOf:
  3808.                     - type: integer
  3809.                     - type: string
  3810.                     description: InitialInterval defines the first wait time in the
  3811.                       exponential backoff series. The maximum interval is calculated
  3812.                       as twice the initialInterval. If unspecified, requests will
  3813.                       be retried immediately. The value of initialInterval should
  3814.                       be provided in seconds or as a valid duration format, see https://pkg.go.dev/time#ParseDuration.
  3815.                     x-kubernetes-int-or-string: true
  3816.                 type: object
  3817.               stripPrefix:
  3818.                 description: 'StripPrefix holds the strip prefix middleware configuration.
  3819.                   This middleware removes the specified prefixes from the URL path.
  3820.                   More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/stripprefix/'
  3821.                 properties:
  3822.                   forceSlash:
  3823.                     description: 'ForceSlash ensures that the resulting stripped path
  3824.                       is not the empty string, by replacing it with / when necessary.
  3825.                       Default: true.'
  3826.                     type: boolean
  3827.                   prefixes:
  3828.                     description: Prefixes defines the prefixes to strip from the request
  3829.                       URL.
  3830.                     items:
  3831.                       type: string
  3832.                     type: array
  3833.                 type: object
  3834.               stripPrefixRegex:
  3835.                 description: 'StripPrefixRegex holds the strip prefix regex middleware
  3836.                   configuration. This middleware removes the matching prefixes from
  3837.                   the URL path. More info: https://doc.traefik.io/traefik/v2.10/middlewares/http/stripprefixregex/'
  3838.                 properties:
  3839.                   regex:
  3840.                     description: Regex defines the regular expression to match the
  3841.                       path prefix from the request URL.
  3842.                     items:
  3843.                       type: string
  3844.                     type: array
  3845.                 type: object
  3846.             type: object
  3847.         required:
  3848.         - metadata
  3849.         - spec
  3850.         type: object
  3851.     served: true
  3852.     storage: true
  3853. status:
  3854.   acceptedNames:
  3855.     kind: ""
  3856.     plural: ""
  3857.   conditions: []
  3858.   storedVersions: []
  3860. ---
  3861. apiVersion: apiextensions.k8s.io/v1
  3862. kind: CustomResourceDefinition
  3863. metadata:
  3864.   annotations:
  3865.     controller-gen.kubebuilder.io/version: v0.6.2
  3866.   creationTimestamp: null
  3867.   name: middlewaretcps.traefik.containo.us
  3868. spec:
  3869.   group: traefik.containo.us
  3870.   names:
  3871.     kind: MiddlewareTCP
  3872.     listKind: MiddlewareTCPList
  3873.     plural: middlewaretcps
  3874.     singular: middlewaretcp
  3875.   scope: Namespaced
  3876.   versions:
  3877.   - name: v1alpha1
  3878.     schema:
  3879.       openAPIV3Schema:
  3880.         description: 'MiddlewareTCP is the CRD implementation of a Traefik TCP middleware.
  3881.           More info: https://doc.traefik.io/traefik/v2.10/middlewares/overview/'
  3882.         properties:
  3883.           apiVersion:
  3884.             description: 'APIVersion defines the versioned schema of this representation
  3885.               of an object. Servers should convert recognized schemas to the latest
  3886.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  3887.             type: string
  3888.           kind:
  3889.             description: 'Kind is a string value representing the REST resource this
  3890.               object represents. Servers may infer this from the endpoint the client
  3891.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  3892.             type: string
  3893.           metadata:
  3894.             type: object
  3895.           spec:
  3896.             description: MiddlewareTCPSpec defines the desired state of a MiddlewareTCP.
  3897.             properties:
  3898.               inFlightConn:
  3899.                 description: InFlightConn defines the InFlightConn middleware configuration.
  3900.                 properties:
  3901.                   amount:
  3902.                     description: Amount defines the maximum amount of allowed simultaneous
  3903.                       connections. The middleware closes the connection if there are
  3904.                       already amount connections opened.
  3905.                     format: int64
  3906.                     type: integer
  3907.                 type: object
  3908.               ipWhiteList:
  3909.                 description: IPWhiteList defines the IPWhiteList middleware configuration.
  3910.                 properties:
  3911.                   sourceRange:
  3912.                     description: SourceRange defines the allowed IPs (or ranges of
  3913.                       allowed IPs by using CIDR notation).
  3914.                     items:
  3915.                       type: string
  3916.                     type: array
  3917.                 type: object
  3918.             type: object
  3919.         required:
  3920.         - metadata
  3921.         - spec
  3922.         type: object
  3923.     served: true
  3924.     storage: true
  3925. status:
  3926.   acceptedNames:
  3927.     kind: ""
  3928.     plural: ""
  3929.   conditions: []
  3930.   storedVersions: []
  3932. ---
  3933. apiVersion: apiextensions.k8s.io/v1
  3934. kind: CustomResourceDefinition
  3935. metadata:
  3936.   annotations:
  3937.     controller-gen.kubebuilder.io/version: v0.6.2
  3938.   creationTimestamp: null
  3939.   name: serverstransports.traefik.containo.us
  3940. spec:
  3941.   group: traefik.containo.us
  3942.   names:
  3943.     kind: ServersTransport
  3944.     listKind: ServersTransportList
  3945.     plural: serverstransports
  3946.     singular: serverstransport
  3947.   scope: Namespaced
  3948.   versions:
  3949.   - name: v1alpha1
  3950.     schema:
  3951.       openAPIV3Schema:
  3952.         description: 'ServersTransport is the CRD implementation of a ServersTransport.
  3953.           If no serversTransport is specified, the [email protected] will be used.
  3954.           The [email protected] serversTransport is created from the static configuration.
  3955.           More info: https://doc.traefik.io/traefik/v2.10/routing/services/#serverstransport_1'
  3956.         properties:
  3957.           apiVersion:
  3958.             description: 'APIVersion defines the versioned schema of this representation
  3959.               of an object. Servers should convert recognized schemas to the latest
  3960.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  3961.             type: string
  3962.           kind:
  3963.             description: 'Kind is a string value representing the REST resource this
  3964.               object represents. Servers may infer this from the endpoint the client
  3965.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  3966.             type: string
  3967.           metadata:
  3968.             type: object
  3969.           spec:
  3970.             description: ServersTransportSpec defines the desired state of a ServersTransport.
  3971.             properties:
  3972.               certificatesSecrets:
  3973.                 description: CertificatesSecrets defines a list of secret storing
  3974.                   client certificates for mTLS.
  3975.                 items:
  3976.                   type: string
  3977.                 type: array
  3978.               disableHTTP2:
  3979.                 description: DisableHTTP2 disables HTTP/2 for connections with backend
  3980.                   servers.
  3981.                 type: boolean
  3982.               forwardingTimeouts:
  3983.                 description: ForwardingTimeouts defines the timeouts for requests
  3984.                   forwarded to the backend servers.
  3985.                 properties:
  3986.                   dialTimeout:
  3987.                     anyOf:
  3988.                     - type: integer
  3989.                     - type: string
  3990.                     description: DialTimeout is the amount of time to wait until a
  3991.                       connection to a backend server can be established.
  3992.                     x-kubernetes-int-or-string: true
  3993.                   idleConnTimeout:
  3994.                     anyOf:
  3995.                     - type: integer
  3996.                     - type: string
  3997.                     description: IdleConnTimeout is the maximum period for which an
  3998.                       idle HTTP keep-alive connection will remain open before closing
  3999.                       itself.
  4000.                     x-kubernetes-int-or-string: true
  4001.                   pingTimeout:
  4002.                     anyOf:
  4003.                     - type: integer
  4004.                     - type: string
  4005.                     description: PingTimeout is the timeout after which the HTTP/2
  4006.                       connection will be closed if a response to ping is not received.
  4007.                     x-kubernetes-int-or-string: true
  4008.                   readIdleTimeout:
  4009.                     anyOf:
  4010.                     - type: integer
  4011.                     - type: string
  4012.                     description: ReadIdleTimeout is the timeout after which a health
  4013.                       check using ping frame will be carried out if no frame is received
  4014.                       on the HTTP/2 connection.
  4015.                     x-kubernetes-int-or-string: true
  4016.                   responseHeaderTimeout:
  4017.                     anyOf:
  4018.                     - type: integer
  4019.                     - type: string
  4020.                     description: ResponseHeaderTimeout is the amount of time to wait
  4021.                       for a server's response headers after fully writing the request
  4022.                       (including its body, if any).
  4023.                     x-kubernetes-int-or-string: true
  4024.                 type: object
  4025.               insecureSkipVerify:
  4026.                 description: InsecureSkipVerify disables SSL certificate verification.
  4027.                 type: boolean
  4028.               maxIdleConnsPerHost:
  4029.                 description: MaxIdleConnsPerHost controls the maximum idle (keep-alive)
  4030.                   to keep per-host.
  4031.                 type: integer
  4032.               peerCertURI:
  4033.                 description: PeerCertURI defines the peer cert URI used to match against
  4034.                   SAN URI during the peer certificate verification.
  4035.                 type: string
  4036.               rootCAsSecrets:
  4037.                 description: RootCAsSecrets defines a list of CA secret used to validate
  4038.                   self-signed certificate.
  4039.                 items:
  4040.                   type: string
  4041.                 type: array
  4042.               serverName:
  4043.                 description: ServerName defines the server name used to contact the
  4044.                   server.
  4045.                 type: string
  4046.             type: object
  4047.         required:
  4048.         - metadata
  4049.         - spec
  4050.         type: object
  4051.     served: true
  4052.     storage: true
  4053. status:
  4054.   acceptedNames:
  4055.     kind: ""
  4056.     plural: ""
  4057.   conditions: []
  4058.   storedVersions: []
  4060. ---
  4061. apiVersion: apiextensions.k8s.io/v1
  4062. kind: CustomResourceDefinition
  4063. metadata:
  4064.   annotations:
  4065.     controller-gen.kubebuilder.io/version: v0.6.2
  4066.   creationTimestamp: null
  4067.   name: tlsoptions.traefik.containo.us
  4068. spec:
  4069.   group: traefik.containo.us
  4070.   names:
  4071.     kind: TLSOption
  4072.     listKind: TLSOptionList
  4073.     plural: tlsoptions
  4074.     singular: tlsoption
  4075.   scope: Namespaced
  4076.   versions:
  4077.   - name: v1alpha1
  4078.     schema:
  4079.       openAPIV3Schema:
  4080.         description: 'TLSOption is the CRD implementation of a Traefik TLS Option,
  4081.           allowing to configure some parameters of the TLS connection. More info:
  4082.           https://doc.traefik.io/traefik/v2.10/https/tls/#tls-options'
  4083.         properties:
  4084.           apiVersion:
  4085.             description: 'APIVersion defines the versioned schema of this representation
  4086.               of an object. Servers should convert recognized schemas to the latest
  4087.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  4088.             type: string
  4089.           kind:
  4090.             description: 'Kind is a string value representing the REST resource this
  4091.               object represents. Servers may infer this from the endpoint the client
  4092.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  4093.             type: string
  4094.           metadata:
  4095.             type: object
  4096.           spec:
  4097.             description: TLSOptionSpec defines the desired state of a TLSOption.
  4098.             properties:
  4099.               alpnProtocols:
  4100.                 description: 'ALPNProtocols defines the list of supported application
  4101.                   level protocols for the TLS handshake, in order of preference. More
  4102.                   info: https://doc.traefik.io/traefik/v2.10/https/tls/#alpn-protocols'
  4103.                 items:
  4104.                   type: string
  4105.                 type: array
  4106.               cipherSuites:
  4107.                 description: 'CipherSuites defines the list of supported cipher suites
  4108.                   for TLS versions up to TLS 1.2. More info: https://doc.traefik.io/traefik/v2.10/https/tls/#cipher-suites'
  4109.                 items:
  4110.                   type: string
  4111.                 type: array
  4112.               clientAuth:
  4113.                 description: ClientAuth defines the server's policy for TLS Client
  4114.                   Authentication.
  4115.                 properties:
  4116.                   clientAuthType:
  4117.                     description: ClientAuthType defines the client authentication
  4118.                       type to apply.
  4119.                     enum:
  4120.                     - NoClientCert
  4121.                     - RequestClientCert
  4122.                     - RequireAnyClientCert
  4123.                     - VerifyClientCertIfGiven
  4124.                     - RequireAndVerifyClientCert
  4125.                     type: string
  4126.                   secretNames:
  4127.                     description: SecretNames defines the names of the referenced Kubernetes
  4128.                       Secret storing certificate details.
  4129.                     items:
  4130.                       type: string
  4131.                     type: array
  4132.                 type: object
  4133.               curvePreferences:
  4134.                 description: 'CurvePreferences defines the preferred elliptic curves
  4135.                   in a specific order. More info: https://doc.traefik.io/traefik/v2.10/https/tls/#curve-preferences'
  4136.                 items:
  4137.                   type: string
  4138.                 type: array
  4139.               maxVersion:
  4140.                 description: 'MaxVersion defines the maximum TLS version that Traefik
  4141.                   will accept. Possible values: VersionTLS10, VersionTLS11, VersionTLS12,
  4142.                   VersionTLS13. Default: None.'
  4143.                 type: string
  4144.               minVersion:
  4145.                 description: 'MinVersion defines the minimum TLS version that Traefik
  4146.                   will accept. Possible values: VersionTLS10, VersionTLS11, VersionTLS12,
  4147.                   VersionTLS13. Default: VersionTLS10.'
  4148.                 type: string
  4149.               preferServerCipherSuites:
  4150.                 description: 'PreferServerCipherSuites defines whether the server
  4151.                   chooses a cipher suite among his own instead of among the client''s.
  4152.                   It is enabled automatically when minVersion or maxVersion is set.
  4153.                   Deprecated: https://github.com/golang/go/issues/45430'
  4154.                 type: boolean
  4155.               sniStrict:
  4156.                 description: SniStrict defines whether Traefik allows connections
  4157.                   from clients connections that do not specify a server_name extension.
  4158.                 type: boolean
  4159.             type: object
  4160.         required:
  4161.         - metadata
  4162.         - spec
  4163.         type: object
  4164.     served: true
  4165.     storage: true
  4166. status:
  4167.   acceptedNames:
  4168.     kind: ""
  4169.     plural: ""
  4170.   conditions: []
  4171.   storedVersions: []
  4173. ---
  4174. apiVersion: apiextensions.k8s.io/v1
  4175. kind: CustomResourceDefinition
  4176. metadata:
  4177.   annotations:
  4178.     controller-gen.kubebuilder.io/version: v0.6.2
  4179.   creationTimestamp: null
  4180.   name: tlsstores.traefik.containo.us
  4181. spec:
  4182.   group: traefik.containo.us
  4183.   names:
  4184.     kind: TLSStore
  4185.     listKind: TLSStoreList
  4186.     plural: tlsstores
  4187.     singular: tlsstore
  4188.   scope: Namespaced
  4189.   versions:
  4190.   - name: v1alpha1
  4191.     schema:
  4192.       openAPIV3Schema:
  4193.         description: 'TLSStore is the CRD implementation of a Traefik TLS Store. For
  4194.           the time being, only the TLSStore named default is supported. This means
  4195.           that you cannot have two stores that are named default in different Kubernetes
  4196.           namespaces. More info: https://doc.traefik.io/traefik/v2.10/https/tls/#certificates-stores'
  4197.         properties:
  4198.           apiVersion:
  4199.             description: 'APIVersion defines the versioned schema of this representation
  4200.               of an object. Servers should convert recognized schemas to the latest
  4201.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  4202.             type: string
  4203.           kind:
  4204.             description: 'Kind is a string value representing the REST resource this
  4205.               object represents. Servers may infer this from the endpoint the client
  4206.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  4207.             type: string
  4208.           metadata:
  4209.             type: object
  4210.           spec:
  4211.             description: TLSStoreSpec defines the desired state of a TLSStore.
  4212.             properties:
  4213.               certificates:
  4214.                 description: Certificates is a list of secret names, each secret holding
  4215.                   a key/certificate pair to add to the store.
  4216.                 items:
  4217.                   description: Certificate holds a secret name for the TLSStore resource.
  4218.                   properties:
  4219.                     secretName:
  4220.                       description: SecretName is the name of the referenced Kubernetes
  4221.                         Secret to specify the certificate details.
  4222.                       type: string
  4223.                   required:
  4224.                   - secretName
  4225.                   type: object
  4226.                 type: array
  4227.               defaultCertificate:
  4228.                 description: DefaultCertificate defines the default certificate configuration.
  4229.                 properties:
  4230.                   secretName:
  4231.                     description: SecretName is the name of the referenced Kubernetes
  4232.                       Secret to specify the certificate details.
  4233.                     type: string
  4234.                 required:
  4235.                 - secretName
  4236.                 type: object
  4237.               defaultGeneratedCert:
  4238.                 description: DefaultGeneratedCert defines the default generated certificate
  4239.                   configuration.
  4240.                 properties:
  4241.                   domain:
  4242.                     description: Domain is the domain definition for the DefaultCertificate.
  4243.                     properties:
  4244.                       main:
  4245.                         description: Main defines the main domain name.
  4246.                         type: string
  4247.                       sans:
  4248.                         description: SANs defines the subject alternative domain names.
  4249.                         items:
  4250.                           type: string
  4251.                         type: array
  4252.                     type: object
  4253.                   resolver:
  4254.                     description: Resolver is the name of the resolver that will be
  4255.                       used to issue the DefaultCertificate.
  4256.                     type: string
  4257.                 type: object
  4258.             type: object
  4259.         required:
  4260.         - metadata
  4261.         - spec
  4262.         type: object
  4263.     served: true
  4264.     storage: true
  4265. status:
  4266.   acceptedNames:
  4267.     kind: ""
  4268.     plural: ""
  4269.   conditions: []
  4270.   storedVersions: []
  4272. ---
  4273. apiVersion: apiextensions.k8s.io/v1
  4274. kind: CustomResourceDefinition
  4275. metadata:
  4276.   annotations:
  4277.     controller-gen.kubebuilder.io/version: v0.6.2
  4278.   creationTimestamp: null
  4279.   name: traefikservices.traefik.containo.us
  4280. spec:
  4281.   group: traefik.containo.us
  4282.   names:
  4283.     kind: TraefikService
  4284.     listKind: TraefikServiceList
  4285.     plural: traefikservices
  4286.     singular: traefikservice
  4287.   scope: Namespaced
  4288.   versions:
  4289.   - name: v1alpha1
  4290.     schema:
  4291.       openAPIV3Schema:
  4292.         description: 'TraefikService is the CRD implementation of a Traefik Service.
  4293.           TraefikService object allows to: - Apply weight to Services on load-balancing
  4294.           - Mirror traffic on services More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#kind-traefikservice'
  4295.         properties:
  4296.           apiVersion:
  4297.             description: 'APIVersion defines the versioned schema of this representation
  4298.               of an object. Servers should convert recognized schemas to the latest
  4299.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  4300.             type: string
  4301.           kind:
  4302.             description: 'Kind is a string value representing the REST resource this
  4303.               object represents. Servers may infer this from the endpoint the client
  4304.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  4305.             type: string
  4306.           metadata:
  4307.             type: object
  4308.           spec:
  4309.             description: TraefikServiceSpec defines the desired state of a TraefikService.
  4310.             properties:
  4311.               mirroring:
  4312.                 description: Mirroring defines the Mirroring service configuration.
  4313.                 properties:
  4314.                   kind:
  4315.                     description: Kind defines the kind of the Service.
  4316.                     enum:
  4317.                     - Service
  4318.                     - TraefikService
  4319.                     type: string
  4320.                   maxBodySize:
  4321.                     description: MaxBodySize defines the maximum size allowed for
  4322.                       the body of the request. If the body is larger, the request
  4323.                       is not mirrored. Default value is -1, which means unlimited
  4324.                       size.
  4325.                     format: int64
  4326.                     type: integer
  4327.                   mirrors:
  4328.                     description: Mirrors defines the list of mirrors where Traefik
  4329.                       will duplicate the traffic.
  4330.                     items:
  4331.                       description: MirrorService holds the mirror configuration.
  4332.                       properties:
  4333.                         kind:
  4334.                           description: Kind defines the kind of the Service.
  4335.                           enum:
  4336.                           - Service
  4337.                           - TraefikService
  4338.                           type: string
  4339.                         name:
  4340.                           description: Name defines the name of the referenced Kubernetes
  4341.                             Service or TraefikService. The differentiation between
  4342.                             the two is specified in the Kind field.
  4343.                           type: string
  4344.                         namespace:
  4345.                           description: Namespace defines the namespace of the referenced
  4346.                             Kubernetes Service or TraefikService.
  4347.                           type: string
  4348.                         nativeLB:
  4349.                           description: NativeLB controls, when creating the load-balancer,
  4350.                             whether the LB's children are directly the pods IPs or
  4351.                             if the only child is the Kubernetes Service clusterIP.
  4352.                             The Kubernetes Service itself does load-balance to the
  4353.                             pods. By default, NativeLB is false.
  4354.                           type: boolean
  4355.                         passHostHeader:
  4356.                           description: PassHostHeader defines whether the client Host
  4357.                             header is forwarded to the upstream Kubernetes Service.
  4358.                             By default, passHostHeader is true.
  4359.                           type: boolean
  4360.                         percent:
  4361.                           description: 'Percent defines the part of the traffic to
  4362.                             mirror. Supported values: 0 to 100.'
  4363.                           type: integer
  4364.                         port:
  4365.                           anyOf:
  4366.                           - type: integer
  4367.                           - type: string
  4368.                           description: Port defines the port of a Kubernetes Service.
  4369.                             This can be a reference to a named port.
  4370.                           x-kubernetes-int-or-string: true
  4371.                         responseForwarding:
  4372.                           description: ResponseForwarding defines how Traefik forwards
  4373.                             the response from the upstream Kubernetes Service to the
  4374.                             client.
  4375.                           properties:
  4376.                             flushInterval:
  4377.                               description: 'FlushInterval defines the interval, in
  4378.                                 milliseconds, in between flushes to the client while
  4379.                                 copying the response body. A negative value means
  4380.                                 to flush immediately after each write to the client.
  4381.                                 This configuration is ignored when ReverseProxy recognizes
  4382.                                 a response as a streaming response; for such responses,
  4383.                                 writes are flushed to the client immediately. Default:
  4384.                                 100ms'
  4385.                               type: string
  4386.                           type: object
  4387.                         scheme:
  4388.                           description: Scheme defines the scheme to use for the request
  4389.                             to the upstream Kubernetes Service. It defaults to https
  4390.                             when Kubernetes Service port is 443, http otherwise.
  4391.                           type: string
  4392.                         serversTransport:
  4393.                           description: ServersTransport defines the name of ServersTransport
  4394.                             resource to use. It allows to configure the transport
  4395.                             between Traefik and your servers. Can only be used on
  4396.                             a Kubernetes Service.
  4397.                           type: string
  4398.                         sticky:
  4399.                           description: 'Sticky defines the sticky sessions configuration.
  4400.                             More info: https://doc.traefik.io/traefik/v2.10/routing/services/#sticky-sessions'
  4401.                           properties:
  4402.                             cookie:
  4403.                               description: Cookie defines the sticky cookie configuration.
  4404.                               properties:
  4405.                                 httpOnly:
  4406.                                   description: HTTPOnly defines whether the cookie
  4407.                                     can be accessed by client-side APIs, such as JavaScript.
  4408.                                   type: boolean
  4409.                                 name:
  4410.                                   description: Name defines the Cookie name.
  4411.                                   type: string
  4412.                                 sameSite:
  4413.                                   description: 'SameSite defines the same site policy.
  4414.                                     More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  4415.                                   type: string
  4416.                                 secure:
  4417.                                   description: Secure defines whether the cookie can
  4418.                                     only be transmitted over an encrypted connection
  4419.                                     (i.e. HTTPS).
  4420.                                   type: boolean
  4421.                               type: object
  4422.                           type: object
  4423.                         strategy:
  4424.                           description: Strategy defines the load balancing strategy
  4425.                             between the servers. RoundRobin is the only supported
  4426.                             value at the moment.
  4427.                           type: string
  4428.                         weight:
  4429.                           description: Weight defines the weight and should only be
  4430.                             specified when Name references a TraefikService object
  4431.                             (and to be precise, one that embeds a Weighted Round Robin).
  4432.                           type: integer
  4433.                       required:
  4434.                       - name
  4435.                       type: object
  4436.                     type: array
  4437.                   name:
  4438.                     description: Name defines the name of the referenced Kubernetes
  4439.                       Service or TraefikService. The differentiation between the two
  4440.                       is specified in the Kind field.
  4441.                     type: string
  4442.                   namespace:
  4443.                     description: Namespace defines the namespace of the referenced
  4444.                       Kubernetes Service or TraefikService.
  4445.                     type: string
  4446.                   nativeLB:
  4447.                     description: NativeLB controls, when creating the load-balancer,
  4448.                       whether the LB's children are directly the pods IPs or if the
  4449.                       only child is the Kubernetes Service clusterIP. The Kubernetes
  4450.                       Service itself does load-balance to the pods. By default, NativeLB
  4451.                       is false.
  4452.                     type: boolean
  4453.                   passHostHeader:
  4454.                     description: PassHostHeader defines whether the client Host header
  4455.                       is forwarded to the upstream Kubernetes Service. By default,
  4456.                       passHostHeader is true.
  4457.                     type: boolean
  4458.                   port:
  4459.                     anyOf:
  4460.                     - type: integer
  4461.                     - type: string
  4462.                     description: Port defines the port of a Kubernetes Service. This
  4463.                       can be a reference to a named port.
  4464.                     x-kubernetes-int-or-string: true
  4465.                   responseForwarding:
  4466.                     description: ResponseForwarding defines how Traefik forwards the
  4467.                       response from the upstream Kubernetes Service to the client.
  4468.                     properties:
  4469.                       flushInterval:
  4470.                         description: 'FlushInterval defines the interval, in milliseconds,
  4471.                           in between flushes to the client while copying the response
  4472.                           body. A negative value means to flush immediately after
  4473.                           each write to the client. This configuration is ignored
  4474.                           when ReverseProxy recognizes a response as a streaming response;
  4475.                           for such responses, writes are flushed to the client immediately.
  4476.                           Default: 100ms'
  4477.                         type: string
  4478.                     type: object
  4479.                   scheme:
  4480.                     description: Scheme defines the scheme to use for the request
  4481.                       to the upstream Kubernetes Service. It defaults to https when
  4482.                       Kubernetes Service port is 443, http otherwise.
  4483.                     type: string
  4484.                   serversTransport:
  4485.                     description: ServersTransport defines the name of ServersTransport
  4486.                       resource to use. It allows to configure the transport between
  4487.                       Traefik and your servers. Can only be used on a Kubernetes Service.
  4488.                     type: string
  4489.                   sticky:
  4490.                     description: 'Sticky defines the sticky sessions configuration.
  4491.                       More info: https://doc.traefik.io/traefik/v2.10/routing/services/#sticky-sessions'
  4492.                     properties:
  4493.                       cookie:
  4494.                         description: Cookie defines the sticky cookie configuration.
  4495.                         properties:
  4496.                           httpOnly:
  4497.                             description: HTTPOnly defines whether the cookie can be
  4498.                               accessed by client-side APIs, such as JavaScript.
  4499.                             type: boolean
  4500.                           name:
  4501.                             description: Name defines the Cookie name.
  4502.                             type: string
  4503.                           sameSite:
  4504.                             description: 'SameSite defines the same site policy. More
  4505.                               info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  4506.                             type: string
  4507.                           secure:
  4508.                             description: Secure defines whether the cookie can only
  4509.                               be transmitted over an encrypted connection (i.e. HTTPS).
  4510.                             type: boolean
  4511.                         type: object
  4512.                     type: object
  4513.                   strategy:
  4514.                     description: Strategy defines the load balancing strategy between
  4515.                       the servers. RoundRobin is the only supported value at the moment.
  4516.                     type: string
  4517.                   weight:
  4518.                     description: Weight defines the weight and should only be specified
  4519.                       when Name references a TraefikService object (and to be precise,
  4520.                       one that embeds a Weighted Round Robin).
  4521.                     type: integer
  4522.                 required:
  4523.                 - name
  4524.                 type: object
  4525.               weighted:
  4526.                 description: Weighted defines the Weighted Round Robin configuration.
  4527.                 properties:
  4528.                   services:
  4529.                     description: Services defines the list of Kubernetes Service and/or
  4530.                       TraefikService to load-balance, with weight.
  4531.                     items:
  4532.                       description: Service defines an upstream HTTP service to proxy
  4533.                         traffic to.
  4534.                       properties:
  4535.                         kind:
  4536.                           description: Kind defines the kind of the Service.
  4537.                           enum:
  4538.                           - Service
  4539.                           - TraefikService
  4540.                           type: string
  4541.                         name:
  4542.                           description: Name defines the name of the referenced Kubernetes
  4543.                             Service or TraefikService. The differentiation between
  4544.                             the two is specified in the Kind field.
  4545.                           type: string
  4546.                         namespace:
  4547.                           description: Namespace defines the namespace of the referenced
  4548.                             Kubernetes Service or TraefikService.
  4549.                           type: string
  4550.                         nativeLB:
  4551.                           description: NativeLB controls, when creating the load-balancer,
  4552.                             whether the LB's children are directly the pods IPs or
  4553.                             if the only child is the Kubernetes Service clusterIP.
  4554.                             The Kubernetes Service itself does load-balance to the
  4555.                             pods. By default, NativeLB is false.
  4556.                           type: boolean
  4557.                         passHostHeader:
  4558.                           description: PassHostHeader defines whether the client Host
  4559.                             header is forwarded to the upstream Kubernetes Service.
  4560.                             By default, passHostHeader is true.
  4561.                           type: boolean
  4562.                         port:
  4563.                           anyOf:
  4564.                           - type: integer
  4565.                           - type: string
  4566.                           description: Port defines the port of a Kubernetes Service.
  4567.                             This can be a reference to a named port.
  4568.                           x-kubernetes-int-or-string: true
  4569.                         responseForwarding:
  4570.                           description: ResponseForwarding defines how Traefik forwards
  4571.                             the response from the upstream Kubernetes Service to the
  4572.                             client.
  4573.                           properties:
  4574.                             flushInterval:
  4575.                               description: 'FlushInterval defines the interval, in
  4576.                                 milliseconds, in between flushes to the client while
  4577.                                 copying the response body. A negative value means
  4578.                                 to flush immediately after each write to the client.
  4579.                                 This configuration is ignored when ReverseProxy recognizes
  4580.                                 a response as a streaming response; for such responses,
  4581.                                 writes are flushed to the client immediately. Default:
  4582.                                 100ms'
  4583.                               type: string
  4584.                           type: object
  4585.                         scheme:
  4586.                           description: Scheme defines the scheme to use for the request
  4587.                             to the upstream Kubernetes Service. It defaults to https
  4588.                             when Kubernetes Service port is 443, http otherwise.
  4589.                           type: string
  4590.                         serversTransport:
  4591.                           description: ServersTransport defines the name of ServersTransport
  4592.                             resource to use. It allows to configure the transport
  4593.                             between Traefik and your servers. Can only be used on
  4594.                             a Kubernetes Service.
  4595.                           type: string
  4596.                         sticky:
  4597.                           description: 'Sticky defines the sticky sessions configuration.
  4598.                             More info: https://doc.traefik.io/traefik/v2.10/routing/services/#sticky-sessions'
  4599.                           properties:
  4600.                             cookie:
  4601.                               description: Cookie defines the sticky cookie configuration.
  4602.                               properties:
  4603.                                 httpOnly:
  4604.                                   description: HTTPOnly defines whether the cookie
  4605.                                     can be accessed by client-side APIs, such as JavaScript.
  4606.                                   type: boolean
  4607.                                 name:
  4608.                                   description: Name defines the Cookie name.
  4609.                                   type: string
  4610.                                 sameSite:
  4611.                                   description: 'SameSite defines the same site policy.
  4612.                                     More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  4613.                                   type: string
  4614.                                 secure:
  4615.                                   description: Secure defines whether the cookie can
  4616.                                     only be transmitted over an encrypted connection
  4617.                                     (i.e. HTTPS).
  4618.                                   type: boolean
  4619.                               type: object
  4620.                           type: object
  4621.                         strategy:
  4622.                           description: Strategy defines the load balancing strategy
  4623.                             between the servers. RoundRobin is the only supported
  4624.                             value at the moment.
  4625.                           type: string
  4626.                         weight:
  4627.                           description: Weight defines the weight and should only be
  4628.                             specified when Name references a TraefikService object
  4629.                             (and to be precise, one that embeds a Weighted Round Robin).
  4630.                           type: integer
  4631.                       required:
  4632.                       - name
  4633.                       type: object
  4634.                     type: array
  4635.                   sticky:
  4636.                     description: 'Sticky defines whether sticky sessions are enabled.
  4637.                       More info: https://doc.traefik.io/traefik/v2.10/routing/providers/kubernetes-crd/#stickiness-and-load-balancing'
  4638.                     properties:
  4639.                       cookie:
  4640.                         description: Cookie defines the sticky cookie configuration.
  4641.                         properties:
  4642.                           httpOnly:
  4643.                             description: HTTPOnly defines whether the cookie can be
  4644.                               accessed by client-side APIs, such as JavaScript.
  4645.                             type: boolean
  4646.                           name:
  4647.                             description: Name defines the Cookie name.
  4648.                             type: string
  4649.                           sameSite:
  4650.                             description: 'SameSite defines the same site policy. More
  4651.                               info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  4652.                             type: string
  4653.                           secure:
  4654.                             description: Secure defines whether the cookie can only
  4655.                               be transmitted over an encrypted connection (i.e. HTTPS).
  4656.                             type: boolean
  4657.                         type: object
  4658.                     type: object
  4659.                 type: object
  4660.             type: object
  4661.         required:
  4662.         - metadata
  4663.         - spec
  4664.         type: object
  4665.     served: true
  4666.     storage: true
  4667. status:
  4668.   acceptedNames:
  4669.     kind: ""
  4670.     plural: ""
  4671.   conditions: []
  4672.   storedVersions: []

apiextensions.k8s.io/v1beta1 (Deprecated)

apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: ingressroutes.traefik.io

spec:
  group: traefik.io
  version: v1alpha1
  names:
    kind: IngressRoute
    plural: ingressroutes
    singular: ingressroute
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: middlewares.traefik.io

spec:
  group: traefik.io
  version: v1alpha1
  names:
    kind: Middleware
    plural: middlewares
    singular: middleware
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: middlewaretcps.traefik.io

spec:
  group: traefik.io
  version: v1alpha1
  names:
    kind: MiddlewareTCP
    plural: middlewaretcps
    singular: middlewaretcp
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: ingressroutetcps.traefik.io

spec:
  group: traefik.io
  version: v1alpha1
  names:
    kind: IngressRouteTCP
    plural: ingressroutetcps
    singular: ingressroutetcp
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: ingressrouteudps.traefik.io

spec:
  group: traefik.io
  version: v1alpha1
  names:
    kind: IngressRouteUDP
    plural: ingressrouteudps
    singular: ingressrouteudp
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: tlsoptions.traefik.io

spec:
  group: traefik.io
  version: v1alpha1
  names:
    kind: TLSOption
    plural: tlsoptions
    singular: tlsoption
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: tlsstores.traefik.io

spec:
  group: traefik.io
  version: v1alpha1
  names:
    kind: TLSStore
    plural: tlsstores
    singular: tlsstore
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: traefikservices.traefik.io

spec:
  group: traefik.io
  version: v1alpha1
  names:
    kind: TraefikService
    plural: traefikservices
    singular: traefikservice
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: serverstransports.traefik.io

spec:
  group: traefik.io
  version: v1alpha1
  names:
    kind: ServersTransport
    plural: serverstransports
    singular: serverstransport
  scope: Namespaced

Resources

apiVersion: traefik.io/v1alpha1
kind: TraefikService
metadata:
  name: wrr2
  namespace: default

spec:
  weighted:
    services:
      - name: s1
        weight: 1
        port: 80
        # Optional, as it is the default value
        kind: Service
      - name: s3
        weight: 1
        port: 80

---
apiVersion: traefik.io/v1alpha1
kind: TraefikService
metadata:
  name: wrr1
  namespace: default

spec:
  weighted:
    services:
      - name: wrr2
        kind: TraefikService
        weight: 1
      - name: s3
        weight: 1
        port: 80

---
apiVersion: traefik.io/v1alpha1
kind: TraefikService
metadata:
  name: mirror1
  namespace: default

spec:
  mirroring:
    name: s1
    port: 80
    mirrors:
      - name: s3
        percent: 20
        port: 80
      - name: mirror2
        kind: TraefikService
        percent: 20

---
apiVersion: traefik.io/v1alpha1
kind: TraefikService
metadata:
  name: mirror2
  namespace: default

spec:
  mirroring:
    name: wrr2
    kind: TraefikService
    # Optional
    maxBodySize: 2000000000
    mirrors:
      - name: s2
        # Optional, as it is the default value
        kind: Service
        percent: 20
        port: 80

---
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
  name: ingressroute

spec:
  entryPoints:
    - web
    - websecure
  routes:
    - match: Host(`example.net`) && PathPrefix(`/bar`)
      kind: Rule
      priority: 12
      # defining several services is possible and allowed, but for now the servers of
      # all the services (for a given route) get merged altogether under the same
      # load-balancing strategy.
      services:
        - name: s1
          port: 80
          # strategy defines the load balancing strategy between the servers. It defaults
          # to Round Robin, and for now only Round Robin is supported anyway.
          strategy: RoundRobin
        - name: s2
          port: 433
          serversTransport: mytransport
    - match: PathPrefix(`/misc`)
      kind: Rule
      services:
        - name: s3
          port: 80
      middlewares:
        - name: stripprefix
        - name: addprefix
    - match: PathPrefix(`/misc`)
      kind: Rule
      services:
        - name: s3
          # Optional, as it is the default value
          kind: Service
          port: 8443
          # scheme allow to override the scheme for the service. (ex: https or h2c)
          scheme: https
    - match: PathPrefix(`/lb`)
      kind: Rule
      services:
        - name: wrr1
          kind: TraefikService
    - match: PathPrefix(`/mirrored`)
      kind: Rule
      services:
        - name: mirror1
          kind: TraefikService
  # use an empty tls object for TLS with Let's Encrypt
  tls:
    secretName: supersecret
    options:
      name: my-tls-option
      namespace: default

---
apiVersion: traefik.io/v1alpha1
kind: IngressRouteTCP
metadata:
  name: ingressroutetcp.crd
  namespace: default

spec:
  entryPoints:
    - footcp
  routes:
    - match: HostSNI(`example.com`)
      services:
        - name: whoamitcp
          port: 8080
      middlewares:
        - name: ipwhitelist
  tls:
    secretName: foosecret
    passthrough: false
    options:
      name: my-tls-option
      namespace: default

---
apiVersion: traefik.io/v1alpha1
kind: IngressRouteUDP
metadata:
  name: ingressrouteudp.crd
  namespace: default

spec:
  entryPoints:
    - footcp
  routes:
    - services:
        - name: whoamiudp
          port: 8080

---
apiVersion: traefik.io/v1alpha1
kind: TLSOption
metadata:
  name: tlsoption
  namespace: default

spec:
  minVersion: foobar
  maxVersion: foobar
  cipherSuites:
    - foobar
    - foobar
  curvePreferences:
    - foobar
    - foobar
  clientAuth:
    secretNames:
      - foobar
      - foobar
    clientAuthType: RequireAndVerifyClientCert
  sniStrict: true
  preferServerCipherSuites: true
  alpnProtocols:
    - foobar
    - foobar

---
apiVersion: traefik.io/v1alpha1
kind: ServersTransport
metadata:
  name: mytransport
  namespace: default

spec:
  serverName: foobar
  insecureSkipVerify: true
  rootCAsSecrets:
    - foobar
    - foobar
  certificatesSecrets:
    - foobar
    - foobar
  maxIdleConnsPerHost: 1
  forwardingTimeouts:
    dialTimeout: 42s
    responseHeaderTimeout: 42s
    idleConnTimeout: 42s
  disableHTTP2: true

RBAC

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: traefik-ingress-controller

rules:
  - apiGroups:
      - ""
    resources:
      - services
      - endpoints
      - secrets
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - extensions
      - networking.k8s.io
    resources:
      - ingresses
      - ingressclasses
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - extensions
      - networking.k8s.io
    resources:
      - ingresses/status
    verbs:
      - update
  - apiGroups:
      - traefik.io
      - traefik.containo.us
    resources:
      - middlewares
      - middlewaretcps
      - ingressroutes
      - traefikservices
      - ingressroutetcps
      - ingressrouteudps
      - tlsoptions
      - tlsstores
      - serverstransports
    verbs:
      - get
      - list
      - watch

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: traefik-ingress-controller

roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: traefik-ingress-controller
subjects:
  - kind: ServiceAccount
    name: traefik-ingress-controller
    namespace: default