Kubernetes Configuration Reference

Dynamic configuration with Kubernetes Gateway provider.

Definitions

  2. ---
  3. apiVersion: apiextensions.k8s.io/v1
  4. kind: CustomResourceDefinition
  5. metadata:
  6.   annotations:
  7.     controller-gen.kubebuilder.io/version: v0.5.0
  8.   creationTimestamp: null
  9.   name: gatewayclasses.networking.x-k8s.io
  10. spec:
  11.   group: networking.x-k8s.io
  12.   names:
  13.     categories:
  14.     - gateway-api
  15.     kind: GatewayClass
  16.     listKind: GatewayClassList
  17.     plural: gatewayclasses
  18.     shortNames:
  19.     - gc
  20.     singular: gatewayclass
  21.   scope: Cluster
  22.   versions:
  23.   - additionalPrinterColumns:
  24.     - jsonPath: .spec.controller
  25.       name: Controller
  26.       type: string
  27.     - jsonPath: .metadata.creationTimestamp
  28.       name: Age
  29.       type: date
  30.     name: v1alpha1
  31.     schema:
  32.       openAPIV3Schema:
  33.         description: "GatewayClass describes a class of Gateways available to the
  34.           user for creating Gateway resources. \n GatewayClass is a Cluster level
  35.           resource."
  36.         properties:
  37.           apiVersion:
  38.             description: 'APIVersion defines the versioned schema of this representation
  39.               of an object. Servers should convert recognized schemas to the latest
  40.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  41.             type: string
  42.           kind:
  43.             description: 'Kind is a string value representing the REST resource this
  44.               object represents. Servers may infer this from the endpoint the client
  45.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  46.             type: string
  47.           metadata:
  48.             type: object
  49.           spec:
  50.             description: Spec defines the desired state of GatewayClass.
  51.             properties:
  52.               controller:
  53.                 description: "Controller is a domain/path string that indicates the
  54.                   controller that is managing Gateways of this class. \n Example:
  55.                   \"acme.io/gateway-controller\". \n This field is not mutable and
  56.                   cannot be empty. \n The format of this field is DOMAIN \"/\" PATH,
  57.                   where DOMAIN and PATH are valid Kubernetes names (https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names).
  58.                   \n Support: Core"
  59.                 maxLength: 253
  60.                 type: string
  61.               parametersRef:
  62.                 description: "ParametersRef is a reference to a resource that contains
  63.                   the configuration parameters corresponding to the GatewayClass.
  64.                   This is optional if the controller does not require any additional
  65.                   configuration. \n ParametersRef can reference a standard Kubernetes
  66.                   resource, i.e. ConfigMap, or an implementation-specific custom resource.
  67.                   The resource can be cluster-scoped or namespace-scoped. \n If the
  68.                   referent cannot be found, the GatewayClass's \"InvalidParameters\"
  69.                   status condition will be true. \n Support: Custom"
  70.                 properties:
  71.                   group:
  72.                     description: Group is the group of the referent.
  73.                     maxLength: 253
  74.                     minLength: 1
  75.                     type: string
  76.                   kind:
  77.                     description: Kind is kind of the referent.
  78.                     maxLength: 253
  79.                     minLength: 1
  80.                     type: string
  81.                   name:
  82.                     description: Name is the name of the referent.
  83.                     maxLength: 253
  84.                     minLength: 1
  85.                     type: string
  86.                   namespace:
  87.                     description: Namespace is the namespace of the referent. This
  88.                       field is required when scope is set to "Namespace" and ignored
  89.                       when scope is set to "Cluster".
  90.                     maxLength: 253
  91.                     minLength: 1
  92.                     type: string
  93.                   scope:
  94.                     default: Cluster
  95.                     description: Scope represents if the referent is a Cluster or
  96.                       Namespace scoped resource. This may be set to "Cluster" or "Namespace".
  97.                     enum:
  98.                     - Cluster
  99.                     - Namespace
  100.                     type: string
  101.                 required:
  102.                 - group
  103.                 - kind
  104.                 - name
  105.                 type: object
  106.             required:
  107.             - controller
  108.             type: object
  109.           status:
  110.             default:
  111.               conditions:
  112.               - lastTransitionTime: "1970-01-01T00:00:00Z"
  113.                 message: Waiting for controller
  114.                 reason: Waiting
  115.                 status: "False"
  116.                 type: Admitted
  117.             description: Status defines the current state of GatewayClass.
  118.             properties:
  119.               conditions:
  120.                 default:
  121.                 - lastTransitionTime: "1970-01-01T00:00:00Z"
  122.                   message: Waiting for controller
  123.                   reason: Waiting
  124.                   status: "False"
  125.                   type: Admitted
  126.                 description: "Conditions is the current status from the controller
  127.                   for this GatewayClass. \n Controllers should prefer to publish conditions
  128.                   using values of GatewayClassConditionType for the type of each Condition."
  129.                 items:
  130.                   description: "Condition contains details for one aspect of the current
  131.                     state of this API Resource. --- This struct is intended for direct
  132.                     use as an array at the field path .status.conditions.  For example,
  133.                     type FooStatus struct{     // Represents the observations of a
  134.                     foo's current state.     // Known .status.conditions.type are:
  135.                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
  136.                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
  137.                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
  138.                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
  139.                     \n     // other fields }"
  140.                   properties:
  141.                     lastTransitionTime:
  142.                       description: lastTransitionTime is the last time the condition
  143.                         transitioned from one status to another. This should be when
  144.                         the underlying condition changed.  If that is not known, then
  145.                         using the time when the API field changed is acceptable.
  146.                       format: date-time
  147.                       type: string
  148.                     message:
  149.                       description: message is a human readable message indicating
  150.                         details about the transition. This may be an empty string.
  151.                       maxLength: 32768
  152.                       type: string
  153.                     observedGeneration:
  154.                       description: observedGeneration represents the .metadata.generation
  155.                         that the condition was set based upon. For instance, if .metadata.generation
  156.                         is currently 12, but the .status.conditions[x].observedGeneration
  157.                         is 9, the condition is out of date with respect to the current
  158.                         state of the instance.
  159.                       format: int64
  160.                       minimum: 0
  161.                       type: integer
  162.                     reason:
  163.                       description: reason contains a programmatic identifier indicating
  164.                         the reason for the condition's last transition. Producers
  165.                         of specific condition types may define expected values and
  166.                         meanings for this field, and whether the values are considered
  167.                         a guaranteed API. The value should be a CamelCase string.
  168.                         This field may not be empty.
  169.                       maxLength: 1024
  170.                       minLength: 1
  171.                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
  172.                       type: string
  173.                     status:
  174.                       description: status of the condition, one of True, False, Unknown.
  175.                       enum:
  176.                       - "True"
  177.                       - "False"
  178.                       - Unknown
  179.                       type: string
  180.                     type:
  181.                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
  182.                         --- Many .condition.type values are consistent across resources
  183.                         like Available, but because arbitrary conditions can be useful
  184.                         (see .node.status.conditions), the ability to deconflict is
  185.                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
  186.                       maxLength: 316
  187.                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
  188.                       type: string
  189.                   required:
  190.                   - lastTransitionTime
  191.                   - message
  192.                   - reason
  193.                   - status
  194.                   - type
  195.                   type: object
  196.                 maxItems: 8
  197.                 type: array
  198.                 x-kubernetes-list-map-keys:
  199.                 - type
  200.                 x-kubernetes-list-type: map
  201.             type: object
  202.         type: object
  203.     served: true
  204.     storage: true
  205.     subresources:
  206.       status: {}
  207. status:
  208.   acceptedNames:
  209.     kind: ""
  210.     plural: ""
  211.   conditions: []
  212.   storedVersions: []
  214. ---
  215. apiVersion: apiextensions.k8s.io/v1
  216. kind: CustomResourceDefinition
  217. metadata:
  218.   annotations:
  219.     controller-gen.kubebuilder.io/version: v0.5.0
  220.   creationTimestamp: null
  221.   name: gateways.networking.x-k8s.io
  222. spec:
  223.   group: networking.x-k8s.io
  224.   names:
  225.     categories:
  226.     - gateway-api
  227.     kind: Gateway
  228.     listKind: GatewayList
  229.     plural: gateways
  230.     shortNames:
  231.     - gtw
  232.     singular: gateway
  233.   scope: Namespaced
  234.   versions:
  235.   - additionalPrinterColumns:
  236.     - jsonPath: .spec.gatewayClassName
  237.       name: Class
  238.       type: string
  239.     - jsonPath: .metadata.creationTimestamp
  240.       name: Age
  241.       type: date
  242.     name: v1alpha1
  243.     schema:
  244.       openAPIV3Schema:
  245.         description: "Gateway represents an instantiation of a service-traffic handling
  246.           infrastructure by binding Listeners to a set of IP addresses. \n Implementations
  247.           should add the `gateway-exists-finalizer.networking.x-k8s.io` finalizer
  248.           on the associated GatewayClass whenever Gateway(s) is running. This ensures
  249.           that a GatewayClass associated with a Gateway(s) is not deleted while in
  250.           use."
  251.         properties:
  252.           apiVersion:
  253.             description: 'APIVersion defines the versioned schema of this representation
  254.               of an object. Servers should convert recognized schemas to the latest
  255.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  256.             type: string
  257.           kind:
  258.             description: 'Kind is a string value representing the REST resource this
  259.               object represents. Servers may infer this from the endpoint the client
  260.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  261.             type: string
  262.           metadata:
  263.             type: object
  264.           spec:
  265.             description: Spec defines the desired state of Gateway.
  266.             properties:
  267.               addresses:
  268.                 description: "Addresses requested for this gateway. This is optional
  269.                   and behavior can depend on the GatewayClass. If a value is set in
  270.                   the spec and the requested address is invalid, the GatewayClass
  271.                   MUST indicate this in the associated entry in GatewayStatus.Addresses.
  272.                   \n If no Addresses are specified, the GatewayClass may schedule
  273.                   the Gateway in an implementation-defined manner, assigning an appropriate
  274.                   set of Addresses. \n The GatewayClass MUST bind all Listeners to
  275.                   every GatewayAddress that it assigns to the Gateway. \n Support:
  276.                   Core"
  277.                 items:
  278.                   description: GatewayAddress describes an address that can be bound
  279.                     to a Gateway.
  280.                   properties:
  281.                     type:
  282.                       default: IPAddress
  283.                       description: "Type of the address. \n Support: Extended"
  284.                       enum:
  285.                       - IPAddress
  286.                       - NamedAddress
  287.                       type: string
  288.                     value:
  289.                       description: "Value of the address. The validity of the values
  290.                         will depend on the type and support by the controller. \n
  291.                         Examples: `1.2.3.4`, `128::1`, `my-ip-address`."
  292.                       maxLength: 253
  293.                       minLength: 1
  294.                       type: string
  295.                   required:
  296.                   - value
  297.                   type: object
  298.                 maxItems: 16
  299.                 type: array
  300.               gatewayClassName:
  301.                 description: GatewayClassName used for this Gateway. This is the name
  302.                   of a GatewayClass resource.
  303.                 maxLength: 253
  304.                 minLength: 1
  305.                 type: string
  306.               listeners:
  307.                 description: "Listeners associated with this Gateway. Listeners define
  308.                   logical endpoints that are bound on this Gateway's addresses. At
  309.                   least one Listener MUST be specified. \n An implementation MAY group
  310.                   Listeners by Port and then collapse each group of Listeners into
  311.                   a single Listener if the implementation determines that the Listeners
  312.                   in the group are \"compatible\". An implementation MAY also group
  313.                   together and collapse compatible Listeners belonging to different
  314.                   Gateways. \n For example, an implementation might consider Listeners
  315.                   to be compatible with each other if all of the following conditions
  316.                   are met: \n 1. Either each Listener within the group specifies the
  317.                   \"HTTP\"    Protocol or each Listener within the group specifies
  318.                   either    the \"HTTPS\" or \"TLS\" Protocol. \n 2. Each Listener
  319.                   within the group specifies a Hostname that is unique    within the
  320.                   group. \n 3. As a special case, one Listener within a group may
  321.                   omit Hostname,    in which case this Listener matches when no other
  322.                   Listener    matches. \n If the implementation does collapse compatible
  323.                   Listeners, the hostname provided in the incoming client request
  324.                   MUST be matched to a Listener to find the correct set of Routes.
  325.                   The incoming hostname MUST be matched using the Hostname field for
  326.                   each Listener in order of most to least specific. That is, exact
  327.                   matches must be processed before wildcard matches. \n If this field
  328.                   specifies multiple Listeners that have the same Port value but are
  329.                   not compatible, the implementation must raise a \"Conflicted\" condition
  330.                   in the Listener status. \n Support: Core"
  331.                 items:
  332.                   description: Listener embodies the concept of a logical endpoint
  333.                     where a Gateway can accept network connections. Each listener
  334.                     in a Gateway must have a unique combination of Hostname, Port,
  335.                     and Protocol. This will be enforced by a validating webhook.
  336.                   properties:
  337.                     hostname:
  338.                       description: "Hostname specifies the virtual hostname to match
  339.                         for protocol types that define this concept. When unspecified,
  340.                         \"\", or `*`, all hostnames are matched. This field can be
  341.                         omitted for protocols that don't require hostname based matching.
  342.                         \n Hostname is the fully qualified domain name of a network
  343.                         host, as defined by RFC 3986. Note the following deviations
  344.                         from the \"host\" part of the URI as defined in the RFC: \n
  345.                         1. IP literals are not allowed. 2. The `:` delimiter is not
  346.                         respected because ports are not allowed. \n Hostname can be
  347.                         \"precise\" which is a domain name without the terminating
  348.                         dot of a network host (e.g. \"foo.example.com\") or \"wildcard\",
  349.                         which is a domain name prefixed with a single wildcard label
  350.                         (e.g. `*.example.com`). The wildcard character `*` must appear
  351.                         by itself as the first DNS label and matches only a single
  352.                         label. \n Support: Core"
  353.                       maxLength: 253
  354.                       minLength: 1
  355.                       type: string
  356.                     port:
  357.                       description: "Port is the network port. Multiple listeners may
  358.                         use the same port, subject to the Listener compatibility rules.
  359.                         \n Support: Core"
  360.                       format: int32
  361.                       maximum: 65535
  362.                       minimum: 1
  363.                       type: integer
  364.                     protocol:
  365.                       description: "Protocol specifies the network protocol this listener
  366.                         expects to receive. The GatewayClass MUST apply the Hostname
  367.                         match appropriately for each protocol: \n * For the \"TLS\"
  368.                         protocol, the Hostname match MUST be   applied to the [SNI](https://tools.ietf.org/html/rfc6066#section-3)
  369.                         \  server name offered by the client. * For the \"HTTP\" protocol,
  370.                         the Hostname match MUST be   applied to the host portion of
  371.                         the   [effective request URI](https://tools.ietf.org/html/rfc7230#section-5.5)
  372.                         \  or the [:authority pseudo-header](https://tools.ietf.org/html/rfc7540#section-8.1.2.3)
  373.                         * For the \"HTTPS\" protocol, the Hostname match MUST be   applied
  374.                         at both the TLS and HTTP protocol layers. \n Support: Core"
  375.                       type: string
  376.                     routes:
  377.                       description: "Routes specifies a schema for associating routes
  378.                         with the Listener using selectors. A Route is a resource capable
  379.                         of servicing a request and allows a cluster operator to expose
  380.                         a cluster resource (i.e. Service) by externally-reachable
  381.                         URL, load-balance traffic and terminate SSL/TLS.  Typically,
  382.                         a route is a \"HTTPRoute\" or \"TCPRoute\" in group \"networking.x-k8s.io\",
  383.                         however, an implementation may support other types of resources.
  384.                         \n The Routes selector MUST select a set of objects that are
  385.                         compatible with the application protocol specified in the
  386.                         Protocol field. \n Although a client request may technically
  387.                         match multiple route rules, only one rule may ultimately receive
  388.                         the request. Matching precedence MUST be determined in order
  389.                         of the following criteria: \n * The most specific match. For
  390.                         example, the most specific HTTPRoute match   is determined
  391.                         by the longest matching combination of hostname and path.
  392.                         * The oldest Route based on creation timestamp. For example,
  393.                         a Route with   a creation timestamp of \"2020-09-08 01:02:03\"
  394.                         is given precedence over   a Route with a creation timestamp
  395.                         of \"2020-09-08 01:02:04\". * If everything else is equivalent,
  396.                         the Route appearing first in   alphabetical order (namespace/name)
  397.                         should be given precedence. For   example, foo/bar is given
  398.                         precedence over foo/baz. \n All valid portions of a Route
  399.                         selected by this field should be supported. Invalid portions
  400.                         of a Route can be ignored (sometimes that will mean the full
  401.                         Route). If a portion of a Route transitions from valid to
  402.                         invalid, support for that portion of the Route should be dropped
  403.                         to ensure consistency. For example, even if a filter specified
  404.                         by a Route is invalid, the rest of the Route should still
  405.                         be supported. \n Support: Core"
  406.                       properties:
  407.                         group:
  408.                           default: networking.x-k8s.io
  409.                           description: "Group is the group of the route resource to
  410.                             select. Omitting the value or specifying the empty string
  411.                             indicates the networking.x-k8s.io API group. For example,
  412.                             use the following to select an HTTPRoute: \n routes:   kind:
  413.                             HTTPRoute \n Otherwise, if an alternative API group is
  414.                             desired, specify the desired group: \n routes:   group:
  415.                             acme.io   kind: FooRoute \n Support: Core"
  416.                           maxLength: 253
  417.                           minLength: 1
  418.                           type: string
  419.                         kind:
  420.                           description: "Kind is the kind of the route resource to
  421.                             select. \n Kind MUST correspond to kinds of routes that
  422.                             are compatible with the application protocol specified
  423.                             in the Listener's Protocol field. \n If an implementation
  424.                             does not support or recognize this resource type, it SHOULD
  425.                             set the \"ResolvedRefs\" condition to false for this listener
  426.                             with the \"InvalidRoutesRef\" reason. \n Support: Core"
  427.                           type: string
  428.                         namespaces:
  429.                           default:
  430.                             from: Same
  431.                           description: "Namespaces indicates in which namespaces Routes
  432.                             should be selected for this Gateway. This is restricted
  433.                             to the namespace of this Gateway by default. \n Support:
  434.                             Core"
  435.                           properties:
  436.                             from:
  437.                               default: Same
  438.                               description: "From indicates where Routes will be selected
  439.                                 for this Gateway. Possible values are: * All: Routes
  440.                                 in all namespaces may be used by this Gateway. * Selector:
  441.                                 Routes in namespaces selected by the selector may
  442.                                 be used by   this Gateway. * Same: Only Routes in
  443.                                 the same namespace may be used by this Gateway. \n
  444.                                 Support: Core"
  445.                               enum:
  446.                               - All
  447.                               - Selector
  448.                               - Same
  449.                               type: string
  450.                             selector:
  451.                               description: "Selector must be specified when From is
  452.                                 set to \"Selector\". In that case, only Routes in
  453.                                 Namespaces matching this Selector will be selected
  454.                                 by this Gateway. This field is ignored for other values
  455.                                 of \"From\". \n Support: Core"
  456.                               properties:
  457.                                 matchExpressions:
  458.                                   description: matchExpressions is a list of label
  459.                                     selector requirements. The requirements are ANDed.
  460.                                   items:
  461.                                     description: A label selector requirement is a
  462.                                       selector that contains values, a key, and an
  463.                                       operator that relates the key and values.
  464.                                     properties:
  465.                                       key:
  466.                                         description: key is the label key that the
  467.                                           selector applies to.
  468.                                         type: string
  469.                                       operator:
  470.                                         description: operator represents a key's relationship
  471.                                           to a set of values. Valid operators are
  472.                                           In, NotIn, Exists and DoesNotExist.
  473.                                         type: string
  474.                                       values:
  475.                                         description: values is an array of string
  476.                                           values. If the operator is In or NotIn,
  477.                                           the values array must be non-empty. If the
  478.                                           operator is Exists or DoesNotExist, the
  479.                                           values array must be empty. This array is
  480.                                           replaced during a strategic merge patch.
  481.                                         items:
  482.                                           type: string
  483.                                         type: array
  484.                                     required:
  485.                                     - key
  486.                                     - operator
  487.                                     type: object
  488.                                   type: array
  489.                                 matchLabels:
  490.                                   additionalProperties:
  491.                                     type: string
  492.                                   description: matchLabels is a map of {key,value}
  493.                                     pairs. A single {key,value} in the matchLabels
  494.                                     map is equivalent to an element of matchExpressions,
  495.                                     whose key field is "key", the operator is "In",
  496.                                     and the values array contains only "value". The
  497.                                     requirements are ANDed.
  498.                                   type: object
  499.                               type: object
  500.                           type: object
  501.                         selector:
  502.                           description: "Selector specifies a set of route labels used
  503.                             for selecting routes to associate with the Gateway. If
  504.                             this Selector is defined, only routes matching the Selector
  505.                             are associated with the Gateway. An empty Selector matches
  506.                             all routes. \n Support: Core"
  507.                           properties:
  508.                             matchExpressions:
  509.                               description: matchExpressions is a list of label selector
  510.                                 requirements. The requirements are ANDed.
  511.                               items:
  512.                                 description: A label selector requirement is a selector
  513.                                   that contains values, a key, and an operator that
  514.                                   relates the key and values.
  515.                                 properties:
  516.                                   key:
  517.                                     description: key is the label key that the selector
  518.                                       applies to.
  519.                                     type: string
  520.                                   operator:
  521.                                     description: operator represents a key's relationship
  522.                                       to a set of values. Valid operators are In,
  523.                                       NotIn, Exists and DoesNotExist.
  524.                                     type: string
  525.                                   values:
  526.                                     description: values is an array of string values.
  527.                                       If the operator is In or NotIn, the values array
  528.                                       must be non-empty. If the operator is Exists
  529.                                       or DoesNotExist, the values array must be empty.
  530.                                       This array is replaced during a strategic merge
  531.                                       patch.
  532.                                     items:
  533.                                       type: string
  534.                                     type: array
  535.                                 required:
  536.                                 - key
  537.                                 - operator
  538.                                 type: object
  539.                               type: array
  540.                             matchLabels:
  541.                               additionalProperties:
  542.                                 type: string
  543.                               description: matchLabels is a map of {key,value} pairs.
  544.                                 A single {key,value} in the matchLabels map is equivalent
  545.                                 to an element of matchExpressions, whose key field
  546.                                 is "key", the operator is "In", and the values array
  547.                                 contains only "value". The requirements are ANDed.
  548.                               type: object
  549.                           type: object
  550.                       required:
  551.                       - kind
  552.                       type: object
  553.                     tls:
  554.                       description: "TLS is the TLS configuration for the Listener.
  555.                         This field is required if the Protocol field is \"HTTPS\"
  556.                         or \"TLS\" and ignored otherwise. \n The association of SNIs
  557.                         to Certificate defined in GatewayTLSConfig is defined based
  558.                         on the Hostname field for this listener. \n The GatewayClass
  559.                         MUST use the longest matching SNI out of all available certificates
  560.                         for any TLS handshake. \n Support: Core"
  561.                       properties:
  562.                         certificateRef:
  563.                           description: "CertificateRef is a reference to a Kubernetes
  564.                             object that contains a TLS certificate and private key.
  565.                             This certificate is used to establish a TLS handshake
  566.                             for requests that match the hostname of the associated
  567.                             listener. The referenced object MUST reside in the same
  568.                             namespace as Gateway. \n This field is required when mode
  569.                             is set to \"Terminate\" (default) and optional otherwise.
  570.                             \n CertificateRef can reference a standard Kubernetes
  571.                             resource, i.e. Secret, or an implementation-specific custom
  572.                             resource. \n Support: Core (Kubernetes Secrets) \n Support:
  573.                             Implementation-specific (Other resource types)"
  574.                           properties:
  575.                             group:
  576.                               description: Group is the group of the referent.
  577.                               maxLength: 253
  578.                               minLength: 1
  579.                               type: string
  580.                             kind:
  581.                               description: Kind is kind of the referent.
  582.                               maxLength: 253
  583.                               minLength: 1
  584.                               type: string
  585.                             name:
  586.                               description: Name is the name of the referent.
  587.                               maxLength: 253
  588.                               minLength: 1
  589.                               type: string
  590.                           required:
  591.                           - group
  592.                           - kind
  593.                           - name
  594.                           type: object
  595.                         mode:
  596.                           default: Terminate
  597.                           description: "Mode defines the TLS behavior for the TLS
  598.                             session initiated by the client. There are two possible
  599.                             modes: - Terminate: The TLS session between the downstream
  600.                             client   and the Gateway is terminated at the Gateway.
  601.                             This mode requires   certificateRef to be set. - Passthrough:
  602.                             The TLS session is NOT terminated by the Gateway. This
  603.                             \  implies that the Gateway can't decipher the TLS stream
  604.                             except for   the ClientHello message of the TLS protocol.
  605.                             \  CertificateRef field is ignored in this mode. \n Support:
  606.                             Core"
  607.                           enum:
  608.                           - Terminate
  609.                           - Passthrough
  610.                           type: string
  611.                         options:
  612.                           additionalProperties:
  613.                             type: string
  614.                           description: "Options are a list of key/value pairs to give
  615.                             extended options to the provider. \n There variation among
  616.                             providers as to how ciphersuites are expressed. If there
  617.                             is a common subset for expressing ciphers then it will
  618.                             make sense to loft that as a core API construct. \n Support:
  619.                             Implementation-specific"
  620.                           type: object
  621.                         routeOverride:
  622.                           default:
  623.                             certificate: Deny
  624.                           description: "RouteOverride dictates if TLS settings can
  625.                             be configured via Routes or not. \n CertificateRef must
  626.                             be defined even if `routeOverride.certificate` is set
  627.                             to 'Allow' as it will be used as the default certificate
  628.                             for the listener. \n Support: Core"
  629.                           properties:
  630.                             certificate:
  631.                               default: Deny
  632.                               description: "Certificate dictates if TLS certificates
  633.                                 can be configured via Routes. If set to 'Allow', a
  634.                                 TLS certificate for a hostname defined in a Route
  635.                                 takes precedence over the certificate defined in Gateway.
  636.                                 \n Support: Core"
  637.                               enum:
  638.                               - Allow
  639.                               - Deny
  640.                               type: string
  641.                           type: object
  642.                       type: object
  643.                   required:
  644.                   - port
  645.                   - protocol
  646.                   - routes
  647.                   type: object
  648.                 maxItems: 64
  649.                 minItems: 1
  650.                 type: array
  651.             required:
  652.             - gatewayClassName
  653.             - listeners
  654.             type: object
  655.           status:
  656.             default:
  657.               conditions:
  658.               - lastTransitionTime: "1970-01-01T00:00:00Z"
  659.                 message: Waiting for controller
  660.                 reason: NotReconciled
  661.                 status: "False"
  662.                 type: Scheduled
  663.             description: Status defines the current state of Gateway.
  664.             properties:
  665.               addresses:
  666.                 description: "Addresses lists the IP addresses that have actually
  667.                   been bound to the Gateway. These addresses may differ from the addresses
  668.                   in the Spec, e.g. if the Gateway automatically assigns an address
  669.                   from a reserved pool. \n These addresses should all be of type \"IPAddress\"."
  670.                 items:
  671.                   description: GatewayAddress describes an address that can be bound
  672.                     to a Gateway.
  673.                   properties:
  674.                     type:
  675.                       default: IPAddress
  676.                       description: "Type of the address. \n Support: Extended"
  677.                       enum:
  678.                       - IPAddress
  679.                       - NamedAddress
  680.                       type: string
  681.                     value:
  682.                       description: "Value of the address. The validity of the values
  683.                         will depend on the type and support by the controller. \n
  684.                         Examples: `1.2.3.4`, `128::1`, `my-ip-address`."
  685.                       maxLength: 253
  686.                       minLength: 1
  687.                       type: string
  688.                   required:
  689.                   - value
  690.                   type: object
  691.                 maxItems: 16
  692.                 type: array
  693.               conditions:
  694.                 default:
  695.                 - lastTransitionTime: "1970-01-01T00:00:00Z"
  696.                   message: Waiting for controller
  697.                   reason: NotReconciled
  698.                   status: "False"
  699.                   type: Scheduled
  700.                 description: "Conditions describe the current conditions of the Gateway.
  701.                   \n Implementations should prefer to express Gateway conditions using
  702.                   the `GatewayConditionType` and `GatewayConditionReason` constants
  703.                   so that operators and tools can converge on a common vocabulary
  704.                   to describe Gateway state. \n Known condition types are: \n * \"Scheduled\"
  705.                   * \"Ready\""
  706.                 items:
  707.                   description: "Condition contains details for one aspect of the current
  708.                     state of this API Resource. --- This struct is intended for direct
  709.                     use as an array at the field path .status.conditions.  For example,
  710.                     type FooStatus struct{     // Represents the observations of a
  711.                     foo's current state.     // Known .status.conditions.type are:
  712.                     \"Available\", \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
  713.                     \    // +patchStrategy=merge     // +listType=map     // +listMapKey=type
  714.                     \    Conditions []metav1.Condition `json:\"conditions,omitempty\"
  715.                     patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
  716.                     \n     // other fields }"
  717.                   properties:
  718.                     lastTransitionTime:
  719.                       description: lastTransitionTime is the last time the condition
  720.                         transitioned from one status to another. This should be when
  721.                         the underlying condition changed.  If that is not known, then
  722.                         using the time when the API field changed is acceptable.
  723.                       format: date-time
  724.                       type: string
  725.                     message:
  726.                       description: message is a human readable message indicating
  727.                         details about the transition. This may be an empty string.
  728.                       maxLength: 32768
  729.                       type: string
  730.                     observedGeneration:
  731.                       description: observedGeneration represents the .metadata.generation
  732.                         that the condition was set based upon. For instance, if .metadata.generation
  733.                         is currently 12, but the .status.conditions[x].observedGeneration
  734.                         is 9, the condition is out of date with respect to the current
  735.                         state of the instance.
  736.                       format: int64
  737.                       minimum: 0
  738.                       type: integer
  739.                     reason:
  740.                       description: reason contains a programmatic identifier indicating
  741.                         the reason for the condition's last transition. Producers
  742.                         of specific condition types may define expected values and
  743.                         meanings for this field, and whether the values are considered
  744.                         a guaranteed API. The value should be a CamelCase string.
  745.                         This field may not be empty.
  746.                       maxLength: 1024
  747.                       minLength: 1
  748.                       pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
  749.                       type: string
  750.                     status:
  751.                       description: status of the condition, one of True, False, Unknown.
  752.                       enum:
  753.                       - "True"
  754.                       - "False"
  755.                       - Unknown
  756.                       type: string
  757.                     type:
  758.                       description: type of condition in CamelCase or in foo.example.com/CamelCase.
  759.                         --- Many .condition.type values are consistent across resources
  760.                         like Available, but because arbitrary conditions can be useful
  761.                         (see .node.status.conditions), the ability to deconflict is
  762.                         important. The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
  763.                       maxLength: 316
  764.                       pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
  765.                       type: string
  766.                   required:
  767.                   - lastTransitionTime
  768.                   - message
  769.                   - reason
  770.                   - status
  771.                   - type
  772.                   type: object
  773.                 maxItems: 8
  774.                 type: array
  775.                 x-kubernetes-list-map-keys:
  776.                 - type
  777.                 x-kubernetes-list-type: map
  778.               listeners:
  779.                 description: Listeners provide status for each unique listener port
  780.                   defined in the Spec.
  781.                 items:
  782.                   description: ListenerStatus is the status associated with a Listener.
  783.                   properties:
  784.                     conditions:
  785.                       description: Conditions describe the current condition of this
  786.                         listener.
  787.                       items:
  788.                         description: "Condition contains details for one aspect of
  789.                           the current state of this API Resource. --- This struct
  790.                           is intended for direct use as an array at the field path
  791.                           .status.conditions.  For example, type FooStatus struct{
  792.                           \    // Represents the observations of a foo's current state.
  793.                           \    // Known .status.conditions.type are: \"Available\",
  794.                           \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
  795.                           \    // +patchStrategy=merge     // +listType=map     //
  796.                           +listMapKey=type     Conditions []metav1.Condition `json:\"conditions,omitempty\"
  797.                           patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
  798.                           \n     // other fields }"
  799.                         properties:
  800.                           lastTransitionTime:
  801.                             description: lastTransitionTime is the last time the condition
  802.                               transitioned from one status to another. This should
  803.                               be when the underlying condition changed.  If that is
  804.                               not known, then using the time when the API field changed
  805.                               is acceptable.
  806.                             format: date-time
  807.                             type: string
  808.                           message:
  809.                             description: message is a human readable message indicating
  810.                               details about the transition. This may be an empty string.
  811.                             maxLength: 32768
  812.                             type: string
  813.                           observedGeneration:
  814.                             description: observedGeneration represents the .metadata.generation
  815.                               that the condition was set based upon. For instance,
  816.                               if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
  817.                               is 9, the condition is out of date with respect to the
  818.                               current state of the instance.
  819.                             format: int64
  820.                             minimum: 0
  821.                             type: integer
  822.                           reason:
  823.                             description: reason contains a programmatic identifier
  824.                               indicating the reason for the condition's last transition.
  825.                               Producers of specific condition types may define expected
  826.                               values and meanings for this field, and whether the
  827.                               values are considered a guaranteed API. The value should
  828.                               be a CamelCase string. This field may not be empty.
  829.                             maxLength: 1024
  830.                             minLength: 1
  831.                             pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
  832.                             type: string
  833.                           status:
  834.                             description: status of the condition, one of True, False,
  835.                               Unknown.
  836.                             enum:
  837.                             - "True"
  838.                             - "False"
  839.                             - Unknown
  840.                             type: string
  841.                           type:
  842.                             description: type of condition in CamelCase or in foo.example.com/CamelCase.
  843.                               --- Many .condition.type values are consistent across
  844.                               resources like Available, but because arbitrary conditions
  845.                               can be useful (see .node.status.conditions), the ability
  846.                               to deconflict is important. The regex it matches is
  847.                               (dns1123SubdomainFmt/)?(qualifiedNameFmt)
  848.                             maxLength: 316
  849.                             pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
  850.                             type: string
  851.                         required:
  852.                         - lastTransitionTime
  853.                         - message
  854.                         - reason
  855.                         - status
  856.                         - type
  857.                         type: object
  858.                       maxItems: 8
  859.                       type: array
  860.                       x-kubernetes-list-map-keys:
  861.                       - type
  862.                       x-kubernetes-list-type: map
  863.                     hostname:
  864.                       description: Hostname is the Listener hostname value for which
  865.                         this message is reporting the status.
  866.                       maxLength: 253
  867.                       minLength: 1
  868.                       type: string
  869.                     port:
  870.                       description: Port is the unique Listener port value for which
  871.                         this message is reporting the status.
  872.                       format: int32
  873.                       maximum: 65535
  874.                       minimum: 1
  875.                       type: integer
  876.                     protocol:
  877.                       description: Protocol is the Listener protocol value for which
  878.                         this message is reporting the status.
  879.                       type: string
  880.                   required:
  881.                   - conditions
  882.                   - port
  883.                   - protocol
  884.                   type: object
  885.                 maxItems: 64
  886.                 type: array
  887.                 x-kubernetes-list-map-keys:
  888.                 - port
  889.                 x-kubernetes-list-type: map
  890.             type: object
  891.         type: object
  892.     served: true
  893.     storage: true
  894.     subresources:
  895.       status: {}
  896. status:
  897.   acceptedNames:
  898.     kind: ""
  899.     plural: ""
  900.   conditions: []
  901.   storedVersions: []
  903. ---
  904. apiVersion: apiextensions.k8s.io/v1
  905. kind: CustomResourceDefinition
  906. metadata:
  907.   annotations:
  908.     controller-gen.kubebuilder.io/version: v0.5.0
  909.   creationTimestamp: null
  910.   name: httproutes.networking.x-k8s.io
  911. spec:
  912.   group: networking.x-k8s.io
  913.   names:
  914.     categories:
  915.     - gateway-api
  916.     kind: HTTPRoute
  917.     listKind: HTTPRouteList
  918.     plural: httproutes
  919.     singular: httproute
  920.   scope: Namespaced
  921.   versions:
  922.   - additionalPrinterColumns:
  923.     - jsonPath: .spec.hostnames
  924.       name: Hostnames
  925.       type: string
  926.     - jsonPath: .metadata.creationTimestamp
  927.       name: Age
  928.       type: date
  929.     name: v1alpha1
  930.     schema:
  931.       openAPIV3Schema:
  932.         description: HTTPRoute is the Schema for the HTTPRoute resource.
  933.         properties:
  934.           apiVersion:
  935.             description: 'APIVersion defines the versioned schema of this representation
  936.               of an object. Servers should convert recognized schemas to the latest
  937.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  938.             type: string
  939.           kind:
  940.             description: 'Kind is a string value representing the REST resource this
  941.               object represents. Servers may infer this from the endpoint the client
  942.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  943.             type: string
  944.           metadata:
  945.             type: object
  946.           spec:
  947.             description: Spec defines the desired state of HTTPRoute.
  948.             properties:
  949.               gateways:
  950.                 default:
  951.                   allow: SameNamespace
  952.                 description: Gateways defines which Gateways can use this Route.
  953.                 properties:
  954.                   allow:
  955.                     default: SameNamespace
  956.                     description: 'Allow indicates which Gateways will be allowed to
  957.                       use this route. Possible values are: * All: Gateways in any
  958.                       namespace can use this route. * FromList: Only Gateways specified
  959.                       in GatewayRefs may use this route. * SameNamespace: Only Gateways
  960.                       in the same namespace may use this route.'
  961.                     enum:
  962.                     - All
  963.                     - FromList
  964.                     - SameNamespace
  965.                     type: string
  966.                   gatewayRefs:
  967.                     description: GatewayRefs must be specified when Allow is set to
  968.                       "FromList". In that case, only Gateways referenced in this list
  969.                       will be allowed to use this route. This field is ignored for
  970.                       other values of "Allow".
  971.                     items:
  972.                       description: GatewayReference identifies a Gateway in a specified
  973.                         namespace.
  974.                       properties:
  975.                         name:
  976.                           description: Name is the name of the referent.
  977.                           maxLength: 253
  978.                           minLength: 1
  979.                           type: string
  980.                         namespace:
  981.                           description: Namespace is the namespace of the referent.
  982.                           maxLength: 253
  983.                           minLength: 1
  984.                           type: string
  985.                       required:
  986.                       - name
  987.                       - namespace
  988.                       type: object
  989.                     type: array
  990.                 type: object
  991.               hostnames:
  992.                 description: "Hostnames defines a set of hostname that should match
  993.                   against the HTTP Host header to select a HTTPRoute to process the
  994.                   request. Hostname is the fully qualified domain name of a network
  995.                   host, as defined by RFC 3986. Note the following deviations from
  996.                   the \"host\" part of the URI as defined in the RFC: \n 1. IPs are
  997.                   not allowed. 2. The `:` delimiter is not respected because ports
  998.                   are not allowed. \n Incoming requests are matched against the hostnames
  999.                   before the HTTPRoute rules. If no hostname is specified, traffic
  1000.                   is routed based on the HTTPRouteRules. \n Hostname can be \"precise\"
  1001.                   which is a domain name without the terminating dot of a network
  1002.                   host (e.g. \"foo.example.com\") or \"wildcard\", which is a domain
  1003.                   name prefixed with a single wildcard label (e.g. `*.example.com`).
  1004.                   The wildcard character `*` must appear by itself as the first DNS
  1005.                   label and matches only a single label. You cannot have a wildcard
  1006.                   label by itself (e.g. Host == `*`). Requests will be matched against
  1007.                   the Host field in the following order: \n 1. If Host is precise,
  1008.                   the request matches this rule if    the HTTP Host header is equal
  1009.                   to Host. 2. If Host is a wildcard, then the request matches this
  1010.                   rule if    the HTTP Host header is to equal to the suffix    (removing
  1011.                   the first label) of the wildcard rule. \n Support: Core"
  1012.                 items:
  1013.                   description: Hostname is used to specify a hostname that should
  1014.                     be matched.
  1015.                   maxLength: 253
  1016.                   minLength: 1
  1017.                   type: string
  1018.                 maxItems: 16
  1019.                 type: array
  1020.               rules:
  1021.                 default:
  1022.                 - matches:
  1023.                   - path:
  1024.                       type: Prefix
  1025.                       value: /
  1026.                 description: Rules are a list of HTTP matchers, filters and actions.
  1027.                 items:
  1028.                   description: HTTPRouteRule defines semantics for matching an HTTP
  1029.                     request based on conditions, optionally executing additional processing
  1030.                     steps, and forwarding the request to an API object.
  1031.                   properties:
  1032.                     filters:
  1033.                       description: "Filters define the filters that are applied to
  1034.                         requests that match this rule. \n The effects of ordering
  1035.                         of multiple behaviors are currently unspecified. This can
  1036.                         change in the future based on feedback during the alpha stage.
  1037.                         \n Conformance-levels at this level are defined based on the
  1038.                         type of filter: \n - ALL core filters MUST be supported by
  1039.                         all implementations. - Implementers are encouraged to support
  1040.                         extended filters. - Implementation-specific custom filters
  1041.                         have no API guarantees across   implementations. \n Specifying
  1042.                         a core filter multiple times has unspecified or custom conformance.
  1043.                         \n Support: Core"
  1044.                       items:
  1045.                         description: 'HTTPRouteFilter defines additional processing
  1046.                           steps that must be completed during the request or response
  1047.                           lifecycle. HTTPRouteFilters are meant as an extension point
  1048.                           to express additional processing that may be done in Gateway
  1049.                           implementations. Some examples include request or response
  1050.                           modification, implementing authentication strategies, rate-limiting,
  1051.                           and traffic shaping. API guarantee/conformance is defined
  1052.                           based on the type of the filter. TODO(hbagdi): re-render
  1053.                           CRDs once controller-tools supports union tags: - https://github.com/kubernetes-sigs/controller-tools/pull/298
  1054.                           - https://github.com/kubernetes-sigs/controller-tools/issues/461'
  1055.                         properties:
  1056.                           extensionRef:
  1057.                             description: "ExtensionRef is an optional, implementation-specific
  1058.                               extension to the \"filter\" behavior.  For example,
  1059.                               resource \"myroutefilter\" in group \"networking.acme.io\").
  1060.                               ExtensionRef MUST NOT be used for core and extended
  1061.                               filters. \n Support: Implementation-specific"
  1062.                             properties:
  1063.                               group:
  1064.                                 description: Group is the group of the referent.
  1065.                                 maxLength: 253
  1066.                                 minLength: 1
  1067.                                 type: string
  1068.                               kind:
  1069.                                 description: Kind is kind of the referent.
  1070.                                 maxLength: 253
  1071.                                 minLength: 1
  1072.                                 type: string
  1073.                               name:
  1074.                                 description: Name is the name of the referent.
  1075.                                 maxLength: 253
  1076.                                 minLength: 1
  1077.                                 type: string
  1078.                             required:
  1079.                             - group
  1080.                             - kind
  1081.                             - name
  1082.                             type: object
  1083.                           requestHeaderModifier:
  1084.                             description: "RequestHeaderModifier defines a schema for
  1085.                               a filter that modifies request headers. \n Support:
  1086.                               Core"
  1087.                             properties:
  1088.                               add:
  1089.                                 additionalProperties:
  1090.                                   type: string
  1091.                                 description: "Add adds the given header (name, value)
  1092.                                   to the request before the action. It appends to
  1093.                                   any existing values associated with the header name.
  1094.                                   \n Input:   GET /foo HTTP/1.1   my-header: foo \n
  1095.                                   Config:   add: {\"my-header\": \"bar\"} \n Output:
  1096.                                   \  GET /foo HTTP/1.1   my-header: foo   my-header:
  1097.                                   bar \n Support: Extended"
  1098.                                 type: object
  1099.                               remove:
  1100.                                 description: "Remove the given header(s) from the
  1101.                                   HTTP request before the action. The value of RemoveHeader
  1102.                                   is a list of HTTP header names. Note that the header
  1103.                                   names are case-insensitive [RFC-2616 4.2]. \n Input:
  1104.                                   \  GET /foo HTTP/1.1   my-header1: foo   my-header2:
  1105.                                   bar   my-header3: baz \n Config:   remove: [\"my-header1\",
  1106.                                   \"my-header3\"] \n Output:   GET /foo HTTP/1.1   my-header2:
  1107.                                   bar \n Support: Extended"
  1108.                                 items:
  1109.                                   type: string
  1110.                                 maxItems: 16
  1111.                                 type: array
  1112.                               set:
  1113.                                 additionalProperties:
  1114.                                   type: string
  1115.                                 description: "Set overwrites the request with the
  1116.                                   given header (name, value) before the action. \n
  1117.                                   Input:   GET /foo HTTP/1.1   my-header: foo \n Config:
  1118.                                   \  set: {\"my-header\": \"bar\"} \n Output:   GET
  1119.                                   /foo HTTP/1.1   my-header: bar \n Support: Extended"
  1120.                                 type: object
  1121.                             type: object
  1122.                           requestMirror:
  1123.                             description: "RequestMirror defines a schema for a filter
  1124.                               that mirrors requests. \n Support: Extended"
  1125.                             properties:
  1126.                               backendRef:
  1127.                                 description: "BackendRef is a local object reference
  1128.                                   to mirror matched requests to. If both BackendRef
  1129.                                   and ServiceName are specified, ServiceName will
  1130.                                   be given precedence. \n If the referent cannot be
  1131.                                   found, the rule is not included in the route. The
  1132.                                   controller should raise the \"ResolvedRefs\" condition
  1133.                                   on the Gateway with the \"DegradedRoutes\" reason.
  1134.                                   The gateway status for this route should be updated
  1135.                                   with a condition that describes the error more specifically.
  1136.                                   \n Support: Custom"
  1137.                                 properties:
  1138.                                   group:
  1139.                                     description: Group is the group of the referent.
  1140.                                     maxLength: 253
  1141.                                     minLength: 1
  1142.                                     type: string
  1143.                                   kind:
  1144.                                     description: Kind is kind of the referent.
  1145.                                     maxLength: 253
  1146.                                     minLength: 1
  1147.                                     type: string
  1148.                                   name:
  1149.                                     description: Name is the name of the referent.
  1150.                                     maxLength: 253
  1151.                                     minLength: 1
  1152.                                     type: string
  1153.                                 required:
  1154.                                 - group
  1155.                                 - kind
  1156.                                 - name
  1157.                                 type: object
  1158.                               port:
  1159.                                 description: "Port specifies the destination port
  1160.                                   number to use for the backend referenced by the
  1161.                                   ServiceName or BackendRef field. \n If unspecified,
  1162.                                   the destination port in the request is used when
  1163.                                   forwarding to a backendRef or serviceName."
  1164.                                 format: int32
  1165.                                 maximum: 65535
  1166.                                 minimum: 1
  1167.                                 type: integer
  1168.                               serviceName:
  1169.                                 description: "ServiceName refers to the name of the
  1170.                                   Service to mirror matched requests to. When specified,
  1171.                                   this takes the place of BackendRef. If both BackendRef
  1172.                                   and ServiceName are specified, ServiceName will
  1173.                                   be given precedence. \n If the referent cannot be
  1174.                                   found, the rule is not included in the route. The
  1175.                                   controller should raise the \"ResolvedRefs\" condition
  1176.                                   on the Gateway with the \"DegradedRoutes\" reason.
  1177.                                   The gateway status for this route should be updated
  1178.                                   with a condition that describes the error more specifically.
  1179.                                   \n Support: Core"
  1180.                                 maxLength: 253
  1181.                                 type: string
  1182.                             type: object
  1183.                           type:
  1184.                             description: "Type identifies the type of filter to apply.
  1185.                               As with other API fields, types are classified into
  1186.                               three conformance levels: \n - Core: Filter types and
  1187.                               their corresponding configuration defined by   \"Support:
  1188.                               Core\" in this package, e.g. \"RequestHeaderModifier\".
  1189.                               All   implementations must support core filters. \n
  1190.                               - Extended: Filter types and their corresponding configuration
  1191.                               defined by   \"Support: Extended\" in this package,
  1192.                               e.g. \"RequestMirror\". Implementers   are encouraged
  1193.                               to support extended filters. \n - Custom: Filters that
  1194.                               are defined and supported by specific vendors.   In
  1195.                               the future, filters showing convergence in behavior
  1196.                               across multiple   implementations will be considered
  1197.                               for inclusion in extended or core   conformance levels.
  1198.                               Filter-specific configuration for such filters   is
  1199.                               specified using the ExtensionRef field. `Type` should
  1200.                               be set to   \"ExtensionRef\" for custom filters. \n
  1201.                               Implementers are encouraged to define custom implementation
  1202.                               types to extend the core API with implementation-specific
  1203.                               behavior."
  1204.                             enum:
  1205.                             - RequestHeaderModifier
  1206.                             - RequestMirror
  1207.                             - ExtensionRef
  1208.                             type: string
  1209.                         required:
  1210.                         - type
  1211.                         type: object
  1212.                       maxItems: 16
  1213.                       type: array
  1214.                     forwardTo:
  1215.                       description: ForwardTo defines the backend(s) where matching
  1216.                         requests should be sent. If unspecified, the rule performs
  1217.                         no forwarding. If unspecified and no filters are specified
  1218.                         that would result in a response being sent, a 503 error code
  1219.                         is returned.
  1220.                       items:
  1221.                         description: HTTPRouteForwardTo defines how a HTTPRoute should
  1222.                           forward a request.
  1223.                         properties:
  1224.                           backendRef:
  1225.                             description: "BackendRef is a reference to a backend to
  1226.                               forward matched requests to. If both BackendRef and
  1227.                               ServiceName are specified, ServiceName will be given
  1228.                               precedence. \n If the referent cannot be found, the
  1229.                               route must be dropped from the Gateway. The controller
  1230.                               should raise the \"ResolvedRefs\" condition on the Gateway
  1231.                               with the \"DegradedRoutes\" reason. The gateway status
  1232.                               for this route should be updated with a condition that
  1233.                               describes the error more specifically. \n Support: Custom"
  1234.                             properties:
  1235.                               group:
  1236.                                 description: Group is the group of the referent.
  1237.                                 maxLength: 253
  1238.                                 minLength: 1
  1239.                                 type: string
  1240.                               kind:
  1241.                                 description: Kind is kind of the referent.
  1242.                                 maxLength: 253
  1243.                                 minLength: 1
  1244.                                 type: string
  1245.                               name:
  1246.                                 description: Name is the name of the referent.
  1247.                                 maxLength: 253
  1248.                                 minLength: 1
  1249.                                 type: string
  1250.                             required:
  1251.                             - group
  1252.                             - kind
  1253.                             - name
  1254.                             type: object
  1255.                           filters:
  1256.                             description: "Filters defined at this-level should be
  1257.                               executed if and only if the request is being forwarded
  1258.                               to the backend defined here. \n Support: Custom (For
  1259.                               broader support of filters, use the Filters field in
  1260.                               HTTPRouteRule.)"
  1261.                             items:
  1262.                               description: 'HTTPRouteFilter defines additional processing
  1263.                                 steps that must be completed during the request or
  1264.                                 response lifecycle. HTTPRouteFilters are meant as
  1265.                                 an extension point to express additional processing
  1266.                                 that may be done in Gateway implementations. Some
  1267.                                 examples include request or response modification,
  1268.                                 implementing authentication strategies, rate-limiting,
  1269.                                 and traffic shaping. API guarantee/conformance is
  1270.                                 defined based on the type of the filter. TODO(hbagdi):
  1271.                                 re-render CRDs once controller-tools supports union
  1272.                                 tags: - https://github.com/kubernetes-sigs/controller-tools/pull/298
  1273.                                 - https://github.com/kubernetes-sigs/controller-tools/issues/461'
  1274.                               properties:
  1275.                                 extensionRef:
  1276.                                   description: "ExtensionRef is an optional, implementation-specific
  1277.                                     extension to the \"filter\" behavior.  For example,
  1278.                                     resource \"myroutefilter\" in group \"networking.acme.io\").
  1279.                                     ExtensionRef MUST NOT be used for core and extended
  1280.                                     filters. \n Support: Implementation-specific"
  1281.                                   properties:
  1282.                                     group:
  1283.                                       description: Group is the group of the referent.
  1284.                                       maxLength: 253
  1285.                                       minLength: 1
  1286.                                       type: string
  1287.                                     kind:
  1288.                                       description: Kind is kind of the referent.
  1289.                                       maxLength: 253
  1290.                                       minLength: 1
  1291.                                       type: string
  1292.                                     name:
  1293.                                       description: Name is the name of the referent.
  1294.                                       maxLength: 253
  1295.                                       minLength: 1
  1296.                                       type: string
  1297.                                   required:
  1298.                                   - group
  1299.                                   - kind
  1300.                                   - name
  1301.                                   type: object
  1302.                                 requestHeaderModifier:
  1303.                                   description: "RequestHeaderModifier defines a schema
  1304.                                     for a filter that modifies request headers. \n
  1305.                                     Support: Core"
  1306.                                   properties:
  1307.                                     add:
  1308.                                       additionalProperties:
  1309.                                         type: string
  1310.                                       description: "Add adds the given header (name,
  1311.                                         value) to the request before the action. It
  1312.                                         appends to any existing values associated
  1313.                                         with the header name. \n Input:   GET /foo
  1314.                                         HTTP/1.1   my-header: foo \n Config:   add:
  1315.                                         {\"my-header\": \"bar\"} \n Output:   GET
  1316.                                         /foo HTTP/1.1   my-header: foo   my-header:
  1317.                                         bar \n Support: Extended"
  1318.                                       type: object
  1319.                                     remove:
  1320.                                       description: "Remove the given header(s) from
  1321.                                         the HTTP request before the action. The value
  1322.                                         of RemoveHeader is a list of HTTP header names.
  1323.                                         Note that the header names are case-insensitive
  1324.                                         [RFC-2616 4.2]. \n Input:   GET /foo HTTP/1.1
  1325.                                         \  my-header1: foo   my-header2: bar   my-header3:
  1326.                                         baz \n Config:   remove: [\"my-header1\",
  1327.                                         \"my-header3\"] \n Output:   GET /foo HTTP/1.1
  1328.                                         \  my-header2: bar \n Support: Extended"
  1329.                                       items:
  1330.                                         type: string
  1331.                                       maxItems: 16
  1332.                                       type: array
  1333.                                     set:
  1334.                                       additionalProperties:
  1335.                                         type: string
  1336.                                       description: "Set overwrites the request with
  1337.                                         the given header (name, value) before the
  1338.                                         action. \n Input:   GET /foo HTTP/1.1   my-header:
  1339.                                         foo \n Config:   set: {\"my-header\": \"bar\"}
  1340.                                         \n Output:   GET /foo HTTP/1.1   my-header:
  1341.                                         bar \n Support: Extended"
  1342.                                       type: object
  1343.                                   type: object
  1344.                                 requestMirror:
  1345.                                   description: "RequestMirror defines a schema for
  1346.                                     a filter that mirrors requests. \n Support: Extended"
  1347.                                   properties:
  1348.                                     backendRef:
  1349.                                       description: "BackendRef is a local object reference
  1350.                                         to mirror matched requests to. If both BackendRef
  1351.                                         and ServiceName are specified, ServiceName
  1352.                                         will be given precedence. \n If the referent
  1353.                                         cannot be found, the rule is not included
  1354.                                         in the route. The controller should raise
  1355.                                         the \"ResolvedRefs\" condition on the Gateway
  1356.                                         with the \"DegradedRoutes\" reason. The gateway
  1357.                                         status for this route should be updated with
  1358.                                         a condition that describes the error more
  1359.                                         specifically. \n Support: Custom"
  1360.                                       properties:
  1361.                                         group:
  1362.                                           description: Group is the group of the referent.
  1363.                                           maxLength: 253
  1364.                                           minLength: 1
  1365.                                           type: string
  1366.                                         kind:
  1367.                                           description: Kind is kind of the referent.
  1368.                                           maxLength: 253
  1369.                                           minLength: 1
  1370.                                           type: string
  1371.                                         name:
  1372.                                           description: Name is the name of the referent.
  1373.                                           maxLength: 253
  1374.                                           minLength: 1
  1375.                                           type: string
  1376.                                       required:
  1377.                                       - group
  1378.                                       - kind
  1379.                                       - name
  1380.                                       type: object
  1381.                                     port:
  1382.                                       description: "Port specifies the destination
  1383.                                         port number to use for the backend referenced
  1384.                                         by the ServiceName or BackendRef field. \n
  1385.                                         If unspecified, the destination port in the
  1386.                                         request is used when forwarding to a backendRef
  1387.                                         or serviceName."
  1388.                                       format: int32
  1389.                                       maximum: 65535
  1390.                                       minimum: 1
  1391.                                       type: integer
  1392.                                     serviceName:
  1393.                                       description: "ServiceName refers to the name
  1394.                                         of the Service to mirror matched requests
  1395.                                         to. When specified, this takes the place of
  1396.                                         BackendRef. If both BackendRef and ServiceName
  1397.                                         are specified, ServiceName will be given precedence.
  1398.                                         \n If the referent cannot be found, the rule
  1399.                                         is not included in the route. The controller
  1400.                                         should raise the \"ResolvedRefs\" condition
  1401.                                         on the Gateway with the \"DegradedRoutes\"
  1402.                                         reason. The gateway status for this route
  1403.                                         should be updated with a condition that describes
  1404.                                         the error more specifically. \n Support: Core"
  1405.                                       maxLength: 253
  1406.                                       type: string
  1407.                                   type: object
  1408.                                 type:
  1409.                                   description: "Type identifies the type of filter
  1410.                                     to apply. As with other API fields, types are
  1411.                                     classified into three conformance levels: \n -
  1412.                                     Core: Filter types and their corresponding configuration
  1413.                                     defined by   \"Support: Core\" in this package,
  1414.                                     e.g. \"RequestHeaderModifier\". All   implementations
  1415.                                     must support core filters. \n - Extended: Filter
  1416.                                     types and their corresponding configuration defined
  1417.                                     by   \"Support: Extended\" in this package, e.g.
  1418.                                     \"RequestMirror\". Implementers   are encouraged
  1419.                                     to support extended filters. \n - Custom: Filters
  1420.                                     that are defined and supported by specific vendors.
  1421.                                     \  In the future, filters showing convergence
  1422.                                     in behavior across multiple   implementations
  1423.                                     will be considered for inclusion in extended or
  1424.                                     core   conformance levels. Filter-specific configuration
  1425.                                     for such filters   is specified using the ExtensionRef
  1426.                                     field. `Type` should be set to   \"ExtensionRef\"
  1427.                                     for custom filters. \n Implementers are encouraged
  1428.                                     to define custom implementation types to extend
  1429.                                     the core API with implementation-specific behavior."
  1430.                                   enum:
  1431.                                   - RequestHeaderModifier
  1432.                                   - RequestMirror
  1433.                                   - ExtensionRef
  1434.                                   type: string
  1435.                               required:
  1436.                               - type
  1437.                               type: object
  1438.                             maxItems: 16
  1439.                             type: array
  1440.                           port:
  1441.                             description: "Port specifies the destination port number
  1442.                               to use for the backend referenced by the ServiceName
  1443.                               or BackendRef field. If unspecified, the destination
  1444.                               port in the request is used when forwarding to a backendRef
  1445.                               or serviceName. \n Support: Core"
  1446.                             format: int32
  1447.                             maximum: 65535
  1448.                             minimum: 1
  1449.                             type: integer
  1450.                           serviceName:
  1451.                             description: "ServiceName refers to the name of the Service
  1452.                               to forward matched requests to. When specified, this
  1453.                               takes the place of BackendRef. If both BackendRef and
  1454.                               ServiceName are specified, ServiceName will be given
  1455.                               precedence. \n If the referent cannot be found, the
  1456.                               route must be dropped from the Gateway. The controller
  1457.                               should raise the \"ResolvedRefs\" condition on the Gateway
  1458.                               with the \"DegradedRoutes\" reason. The gateway status
  1459.                               for this route should be updated with a condition that
  1460.                               describes the error more specifically. \n The protocol
  1461.                               to use should be specified with the AppProtocol field
  1462.                               on Service resources. This field was introduced in Kubernetes
  1463.                               1.18. If using an earlier version of Kubernetes, a `networking.x-k8s.io/app-protocol`
  1464.                               annotation on the BackendPolicy resource may be used
  1465.                               to define the protocol. If the AppProtocol field is
  1466.                               available, this annotation should not be used. The AppProtocol
  1467.                               field, when populated, takes precedence over the annotation
  1468.                               in the BackendPolicy resource. For custom backends,
  1469.                               it is encouraged to add a semantically-equivalent field
  1470.                               in the Custom Resource Definition. \n Support: Core"
  1471.                             maxLength: 253
  1472.                             type: string
  1473.                           weight:
  1474.                             default: 1
  1475.                             description: "Weight specifies the proportion of HTTP
  1476.                               requests forwarded to the backend referenced by the
  1477.                               ServiceName or BackendRef field. This is computed as
  1478.                               weight/(sum of all weights in this ForwardTo list).
  1479.                               For non-zero values, there may be some epsilon from
  1480.                               the exact proportion defined here depending on the precision
  1481.                               an implementation supports. Weight is not a percentage
  1482.                               and the sum of weights does not need to equal 100. \n
  1483.                               If only one backend is specified and it has a weight
  1484.                               greater than 0, 100% of the traffic is forwarded to
  1485.                               that backend. If weight is set to 0, no traffic should
  1486.                               be forwarded for this entry. If unspecified, weight
  1487.                               defaults to 1. \n Support: Core"
  1488.                             format: int32
  1489.                             maximum: 1000000
  1490.                             minimum: 0
  1491.                             type: integer
  1492.                         type: object
  1493.                       maxItems: 16
  1494.                       type: array
  1495.                     matches:
  1496.                       default:
  1497.                       - path:
  1498.                           type: Prefix
  1499.                           value: /
  1500.                       description: "Matches define conditions used for matching the
  1501.                         rule against incoming HTTP requests. Each match is independent,
  1502.                         i.e. this rule will be matched if **any** one of the matches
  1503.                         is satisfied. \n For example, take the following matches configuration:
  1504.                         \n ``` matches: - path:     value: \"/foo\"   headers:     values:
  1505.                         \      version: \"2\" - path:     value: \"/v2/foo\" ``` \n
  1506.                         For a request to match against this rule, a request should
  1507.                         satisfy EITHER of the two conditions: \n - path prefixed with
  1508.                         `/foo` AND contains the header `version: \"2\"` - path prefix
  1509.                         of `/v2/foo` \n See the documentation for HTTPRouteMatch on
  1510.                         how to specify multiple match conditions that should be ANDed
  1511.                         together. \n If no matches are specified, the default is a
  1512.                         prefix path match on \"/\", which has the effect of matching
  1513.                         every HTTP request. \n Each client request MUST map to a maximum
  1514.                         of one route rule. If a request matches multiple rules, matching
  1515.                         precedence MUST be determined in order of the following criteria,
  1516.                         continuing on ties: \n * The longest matching hostname. *
  1517.                         The longest matching path. * The largest number of header
  1518.                         matches. \n If ties still exist across multiple Routes, matching
  1519.                         precedence MUST be determined in order of the following criteria,
  1520.                         continuing on ties: \n * The oldest Route based on creation
  1521.                         timestamp. For example, a Route with   a creation timestamp
  1522.                         of \"2020-09-08 01:02:03\" is given precedence over   a Route
  1523.                         with a creation timestamp of \"2020-09-08 01:02:04\". * The
  1524.                         Route appearing first in alphabetical order by   \"<namespace>/<name>\".
  1525.                         For example, foo/bar is given precedence over   foo/baz. \n
  1526.                         If ties still exist within the Route that has been given precedence,
  1527.                         matching precedence MUST be granted to the first matching
  1528.                         rule meeting the above criteria."
  1529.                       items:
  1530.                         description: "HTTPRouteMatch defines the predicate used to
  1531.                           match requests to a given action. Multiple match types are
  1532.                           ANDed together, i.e. the match will evaluate to true only
  1533.                           if all conditions are satisfied. \n For example, the match
  1534.                           below will match a HTTP request only if its path starts
  1535.                           with `/foo` AND it contains the `version: \"1\"` header:
  1536.                           \n ``` match:   path:     value: \"/foo\"   headers:     values:
  1537.                           \      version: \"1\" ```"
  1538.                         properties:
  1539.                           extensionRef:
  1540.                             description: "ExtensionRef is an optional, implementation-specific
  1541.                               extension to the \"match\" behavior. For example, resource
  1542.                               \"myroutematcher\" in group \"networking.acme.io\".
  1543.                               If the referent cannot be found, the rule is not included
  1544.                               in the route. The controller should raise the \"ResolvedRefs\"
  1545.                               condition on the Gateway with the \"DegradedRoutes\"
  1546.                               reason. The gateway status for this route should be
  1547.                               updated with a condition that describes the error more
  1548.                               specifically. \n Support: Custom"
  1549.                             properties:
  1550.                               group:
  1551.                                 description: Group is the group of the referent.
  1552.                                 maxLength: 253
  1553.                                 minLength: 1
  1554.                                 type: string
  1555.                               kind:
  1556.                                 description: Kind is kind of the referent.
  1557.                                 maxLength: 253
  1558.                                 minLength: 1
  1559.                                 type: string
  1560.                               name:
  1561.                                 description: Name is the name of the referent.
  1562.                                 maxLength: 253
  1563.                                 minLength: 1
  1564.                                 type: string
  1565.                             required:
  1566.                             - group
  1567.                             - kind
  1568.                             - name
  1569.                             type: object
  1570.                           headers:
  1571.                             description: Headers specifies a HTTP request header matcher.
  1572.                             properties:
  1573.                               type:
  1574.                                 default: Exact
  1575.                                 description: "Type specifies how to match against
  1576.                                   the value of the header. \n Support: Core (Exact)
  1577.                                   \n Support: Custom (RegularExpression, ImplementationSpecific)
  1578.                                   \n Since RegularExpression PathType has custom conformance,
  1579.                                   implementations can support POSIX, PCRE or any other
  1580.                                   dialects of regular expressions. Please read the
  1581.                                   implementation's documentation to determine the
  1582.                                   supported dialect. \n HTTP Header name matching
  1583.                                   MUST be case-insensitive (RFC 2616 - section 4.2)."
  1584.                                 enum:
  1585.                                 - Exact
  1586.                                 - RegularExpression
  1587.                                 - ImplementationSpecific
  1588.                                 type: string
  1589.                               values:
  1590.                                 additionalProperties:
  1591.                                   type: string
  1592.                                 description: "Values is a map of HTTP Headers to be
  1593.                                   matched. It MUST contain at least one entry. \n
  1594.                                   The HTTP header field name to match is the map key,
  1595.                                   and the value of the HTTP header is the map value.
  1596.                                   HTTP header field name matching MUST be case-insensitive.
  1597.                                   \n Multiple match values are ANDed together, meaning,
  1598.                                   a request must match all the specified headers to
  1599.                                   select the route."
  1600.                                 type: object
  1601.                             required:
  1602.                             - values
  1603.                             type: object
  1604.                           path:
  1605.                             default:
  1606.                               type: Prefix
  1607.                               value: /
  1608.                             description: Path specifies a HTTP request path matcher.
  1609.                               If this field is not specified, a default prefix match
  1610.                               on the "/" path is provided.
  1611.                             properties:
  1612.                               type:
  1613.                                 default: Prefix
  1614.                                 description: "Type specifies how to match against
  1615.                                   the path Value. \n Support: Core (Exact, Prefix)
  1616.                                   \n Support: Custom (RegularExpression, ImplementationSpecific)
  1617.                                   \n Since RegularExpression PathType has custom conformance,
  1618.                                   implementations can support POSIX, PCRE or any other
  1619.                                   dialects of regular expressions. Please read the
  1620.                                   implementation's documentation to determine the
  1621.                                   supported dialect."
  1622.                                 enum:
  1623.                                 - Exact
  1624.                                 - Prefix
  1625.                                 - RegularExpression
  1626.                                 - ImplementationSpecific
  1627.                                 type: string
  1628.                               value:
  1629.                                 default: /
  1630.                                 description: Value of the HTTP path to match against.
  1631.                                 type: string
  1632.                             type: object
  1633.                           queryParams:
  1634.                             description: QueryParams specifies a HTTP query parameter
  1635.                               matcher.
  1636.                             properties:
  1637.                               type:
  1638.                                 default: Exact
  1639.                                 description: "Type specifies how to match against
  1640.                                   the value of the query parameter. \n Support: Extended
  1641.                                   (Exact) \n Support: Custom (RegularExpression, ImplementationSpecific)
  1642.                                   \n Since RegularExpression QueryParamMatchType has
  1643.                                   custom conformance, implementations can support
  1644.                                   POSIX, PCRE or any other dialects of regular expressions.
  1645.                                   Please read the implementation's documentation to
  1646.                                   determine the supported dialect."
  1647.                                 enum:
  1648.                                 - Exact
  1649.                                 - RegularExpression
  1650.                                 - ImplementationSpecific
  1651.                                 type: string
  1652.                               values:
  1653.                                 additionalProperties:
  1654.                                   type: string
  1655.                                 description: "Values is a map of HTTP query parameters
  1656.                                   to be matched. It MUST contain at least one entry.
  1657.                                   \n The query parameter name to match is the map
  1658.                                   key, and the value of the query parameter is the
  1659.                                   map value. \n Multiple match values are ANDed together,
  1660.                                   meaning, a request must match all the specified
  1661.                                   query parameters to select the route. \n HTTP query
  1662.                                   parameter matching MUST be case-sensitive for both
  1663.                                   keys and values. (See https://tools.ietf.org/html/rfc7230#section-2.7.3).
  1664.                                   \n Note that the query parameter key MUST always
  1665.                                   be an exact match by string comparison."
  1666.                                 type: object
  1667.                             required:
  1668.                             - values
  1669.                             type: object
  1670.                         type: object
  1671.                       maxItems: 8
  1672.                       type: array
  1673.                   type: object
  1674.                 maxItems: 16
  1675.                 type: array
  1676.               tls:
  1677.                 description: "TLS defines the TLS certificate to use for Hostnames
  1678.                   defined in this Route. This configuration only takes effect if the
  1679.                   AllowRouteOverride field is set to true in the associated Gateway
  1680.                   resource. \n Collisions can happen if multiple HTTPRoutes define
  1681.                   a TLS certificate for the same hostname. In such a case, conflict
  1682.                   resolution guiding principles apply, specifically, if hostnames
  1683.                   are same and two different certificates are specified then the certificate
  1684.                   in the oldest resource wins. \n Please note that HTTP Route-selection
  1685.                   takes place after the TLS Handshake (ClientHello). Due to this,
  1686.                   TLS certificate defined here will take precedence even if the request
  1687.                   has the potential to match multiple routes (in case multiple HTTPRoutes
  1688.                   share the same hostname). \n Support: Core"
  1689.                 properties:
  1690.                   certificateRef:
  1691.                     description: "CertificateRef is a reference to a Kubernetes object
  1692.                       that contains a TLS certificate and private key. This certificate
  1693.                       is used to establish a TLS handshake for requests that match
  1694.                       the hostname of the associated HTTPRoute. The referenced object
  1695.                       MUST reside in the same namespace as HTTPRoute. \n This field
  1696.                       is required when the TLS configuration mode of the associated
  1697.                       Gateway listener is set to \"Passthrough\". \n CertificateRef
  1698.                       can reference a standard Kubernetes resource, i.e. Secret, or
  1699.                       an implementation-specific custom resource. \n Support: Core
  1700.                       (Kubernetes Secrets) \n Support: Implementation-specific (Other
  1701.                       resource types)"
  1702.                     properties:
  1703.                       group:
  1704.                         description: Group is the group of the referent.
  1705.                         maxLength: 253
  1706.                         minLength: 1
  1707.                         type: string
  1708.                       kind:
  1709.                         description: Kind is kind of the referent.
  1710.                         maxLength: 253
  1711.                         minLength: 1
  1712.                         type: string
  1713.                       name:
  1714.                         description: Name is the name of the referent.
  1715.                         maxLength: 253
  1716.                         minLength: 1
  1717.                         type: string
  1718.                     required:
  1719.                     - group
  1720.                     - kind
  1721.                     - name
  1722.                     type: object
  1723.                 required:
  1724.                 - certificateRef
  1725.                 type: object
  1726.             type: object
  1727.           status:
  1728.             description: Status defines the current state of HTTPRoute.
  1729.             properties:
  1730.               gateways:
  1731.                 description: "Gateways is a list of Gateways that are associated with
  1732.                   the route, and the status of the route with respect to each Gateway.
  1733.                   When a Gateway selects this route, the controller that manages the
  1734.                   Gateway must add an entry to this list when the controller first
  1735.                   sees the route and should update the entry as appropriate when the
  1736.                   route is modified. \n A maximum of 100 Gateways will be represented
  1737.                   in this list. If this list is full, there may be additional Gateways
  1738.                   using this Route that are not included in the list. An empty list
  1739.                   means the route has not been admitted by any Gateway."
  1740.                 items:
  1741.                   description: RouteGatewayStatus describes the status of a route
  1742.                     with respect to an associated Gateway.
  1743.                   properties:
  1744.                     conditions:
  1745.                       description: Conditions describes the status of the route with
  1746.                         respect to the Gateway. The "Admitted" condition must always
  1747.                         be specified by controllers to indicate whether the route
  1748.                         has been admitted or rejected by the Gateway, and why. Note
  1749.                         that the route's availability is also subject to the Gateway's
  1750.                         own status conditions and listener status.
  1751.                       items:
  1752.                         description: "Condition contains details for one aspect of
  1753.                           the current state of this API Resource. --- This struct
  1754.                           is intended for direct use as an array at the field path
  1755.                           .status.conditions.  For example, type FooStatus struct{
  1756.                           \    // Represents the observations of a foo's current state.
  1757.                           \    // Known .status.conditions.type are: \"Available\",
  1758.                           \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
  1759.                           \    // +patchStrategy=merge     // +listType=map     //
  1760.                           +listMapKey=type     Conditions []metav1.Condition `json:\"conditions,omitempty\"
  1761.                           patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
  1762.                           \n     // other fields }"
  1763.                         properties:
  1764.                           lastTransitionTime:
  1765.                             description: lastTransitionTime is the last time the condition
  1766.                               transitioned from one status to another. This should
  1767.                               be when the underlying condition changed.  If that is
  1768.                               not known, then using the time when the API field changed
  1769.                               is acceptable.
  1770.                             format: date-time
  1771.                             type: string
  1772.                           message:
  1773.                             description: message is a human readable message indicating
  1774.                               details about the transition. This may be an empty string.
  1775.                             maxLength: 32768
  1776.                             type: string
  1777.                           observedGeneration:
  1778.                             description: observedGeneration represents the .metadata.generation
  1779.                               that the condition was set based upon. For instance,
  1780.                               if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
  1781.                               is 9, the condition is out of date with respect to the
  1782.                               current state of the instance.
  1783.                             format: int64
  1784.                             minimum: 0
  1785.                             type: integer
  1786.                           reason:
  1787.                             description: reason contains a programmatic identifier
  1788.                               indicating the reason for the condition's last transition.
  1789.                               Producers of specific condition types may define expected
  1790.                               values and meanings for this field, and whether the
  1791.                               values are considered a guaranteed API. The value should
  1792.                               be a CamelCase string. This field may not be empty.
  1793.                             maxLength: 1024
  1794.                             minLength: 1
  1795.                             pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
  1796.                             type: string
  1797.                           status:
  1798.                             description: status of the condition, one of True, False,
  1799.                               Unknown.
  1800.                             enum:
  1801.                             - "True"
  1802.                             - "False"
  1803.                             - Unknown
  1804.                             type: string
  1805.                           type:
  1806.                             description: type of condition in CamelCase or in foo.example.com/CamelCase.
  1807.                               --- Many .condition.type values are consistent across
  1808.                               resources like Available, but because arbitrary conditions
  1809.                               can be useful (see .node.status.conditions), the ability
  1810.                               to deconflict is important. The regex it matches is
  1811.                               (dns1123SubdomainFmt/)?(qualifiedNameFmt)
  1812.                             maxLength: 316
  1813.                             pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
  1814.                             type: string
  1815.                         required:
  1816.                         - lastTransitionTime
  1817.                         - message
  1818.                         - reason
  1819.                         - status
  1820.                         - type
  1821.                         type: object
  1822.                       maxItems: 8
  1823.                       type: array
  1824.                       x-kubernetes-list-map-keys:
  1825.                       - type
  1826.                       x-kubernetes-list-type: map
  1827.                     gatewayRef:
  1828.                       description: GatewayRef is a reference to a Gateway object that
  1829.                         is associated with the route.
  1830.                       properties:
  1831.                         controller:
  1832.                           description: "Controller is a domain/path string that indicates
  1833.                             the controller implementing the Gateway. This corresponds
  1834.                             with the controller field on GatewayClass. \n Example:
  1835.                             \"acme.io/gateway-controller\". \n The format of this
  1836.                             field is DOMAIN \"/\" PATH, where DOMAIN and PATH are
  1837.                             valid Kubernetes names (https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names)."
  1838.                           maxLength: 253
  1839.                           type: string
  1840.                         name:
  1841.                           description: Name is the name of the referent.
  1842.                           maxLength: 253
  1843.                           minLength: 1
  1844.                           type: string
  1845.                         namespace:
  1846.                           description: Namespace is the namespace of the referent.
  1847.                           maxLength: 253
  1848.                           minLength: 1
  1849.                           type: string
  1850.                       required:
  1851.                       - name
  1852.                       - namespace
  1853.                       type: object
  1854.                   required:
  1855.                   - gatewayRef
  1856.                   type: object
  1857.                 maxItems: 100
  1858.                 type: array
  1859.             required:
  1860.             - gateways
  1861.             type: object
  1862.         type: object
  1863.     served: true
  1864.     storage: true
  1865.     subresources:
  1866.       status: {}
  1867. status:
  1868.   acceptedNames:
  1869.     kind: ""
  1870.     plural: ""
  1871.   conditions: []
  1872.   storedVersions: []
  1874. ---
  1875. apiVersion: apiextensions.k8s.io/v1
  1876. kind: CustomResourceDefinition
  1877. metadata:
  1878.   annotations:
  1879.     controller-gen.kubebuilder.io/version: v0.5.0
  1880.   creationTimestamp: null
  1881.   name: tcproutes.networking.x-k8s.io
  1882. spec:
  1883.   group: networking.x-k8s.io
  1884.   names:
  1885.     categories:
  1886.     - gateway-api
  1887.     kind: TCPRoute
  1888.     listKind: TCPRouteList
  1889.     plural: tcproutes
  1890.     singular: tcproute
  1891.   scope: Namespaced
  1892.   versions:
  1893.   - additionalPrinterColumns:
  1894.     - jsonPath: .metadata.creationTimestamp
  1895.       name: Age
  1896.       type: date
  1897.     name: v1alpha1
  1898.     schema:
  1899.       openAPIV3Schema:
  1900.         description: TCPRoute is the Schema for the TCPRoute resource.
  1901.         properties:
  1902.           apiVersion:
  1903.             description: 'APIVersion defines the versioned schema of this representation
  1904.               of an object. Servers should convert recognized schemas to the latest
  1905.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  1906.             type: string
  1907.           kind:
  1908.             description: 'Kind is a string value representing the REST resource this
  1909.               object represents. Servers may infer this from the endpoint the client
  1910.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  1911.             type: string
  1912.           metadata:
  1913.             type: object
  1914.           spec:
  1915.             description: Spec defines the desired state of TCPRoute.
  1916.             properties:
  1917.               gateways:
  1918.                 default:
  1919.                   allow: SameNamespace
  1920.                 description: Gateways defines which Gateways can use this Route.
  1921.                 properties:
  1922.                   allow:
  1923.                     default: SameNamespace
  1924.                     description: 'Allow indicates which Gateways will be allowed to
  1925.                       use this route. Possible values are: * All: Gateways in any
  1926.                       namespace can use this route. * FromList: Only Gateways specified
  1927.                       in GatewayRefs may use this route. * SameNamespace: Only Gateways
  1928.                       in the same namespace may use this route.'
  1929.                     enum:
  1930.                     - All
  1931.                     - FromList
  1932.                     - SameNamespace
  1933.                     type: string
  1934.                   gatewayRefs:
  1935.                     description: GatewayRefs must be specified when Allow is set to
  1936.                       "FromList". In that case, only Gateways referenced in this list
  1937.                       will be allowed to use this route. This field is ignored for
  1938.                       other values of "Allow".
  1939.                     items:
  1940.                       description: GatewayReference identifies a Gateway in a specified
  1941.                         namespace.
  1942.                       properties:
  1943.                         name:
  1944.                           description: Name is the name of the referent.
  1945.                           maxLength: 253
  1946.                           minLength: 1
  1947.                           type: string
  1948.                         namespace:
  1949.                           description: Namespace is the namespace of the referent.
  1950.                           maxLength: 253
  1951.                           minLength: 1
  1952.                           type: string
  1953.                       required:
  1954.                       - name
  1955.                       - namespace
  1956.                       type: object
  1957.                     type: array
  1958.                 type: object
  1959.               rules:
  1960.                 description: Rules are a list of TCP matchers and actions.
  1961.                 items:
  1962.                   description: TCPRouteRule is the configuration for a given rule.
  1963.                   properties:
  1964.                     forwardTo:
  1965.                       description: ForwardTo defines the backend(s) where matching
  1966.                         requests should be sent.
  1967.                       items:
  1968.                         description: RouteForwardTo defines how a Route should forward
  1969.                           a request.
  1970.                         properties:
  1971.                           backendRef:
  1972.                             description: "BackendRef is a reference to a backend to
  1973.                               forward matched requests to. If both BackendRef and
  1974.                               ServiceName are specified, ServiceName will be given
  1975.                               precedence. \n If the referent cannot be found, the
  1976.                               rule is not included in the route. The controller should
  1977.                               raise the \"ResolvedRefs\" condition on the Gateway
  1978.                               with the \"DegradedRoutes\" reason. The gateway status
  1979.                               for this route should be updated with a condition that
  1980.                               describes the error more specifically. \n Support: Custom"
  1981.                             properties:
  1982.                               group:
  1983.                                 description: Group is the group of the referent.
  1984.                                 maxLength: 253
  1985.                                 minLength: 1
  1986.                                 type: string
  1987.                               kind:
  1988.                                 description: Kind is kind of the referent.
  1989.                                 maxLength: 253
  1990.                                 minLength: 1
  1991.                                 type: string
  1992.                               name:
  1993.                                 description: Name is the name of the referent.
  1994.                                 maxLength: 253
  1995.                                 minLength: 1
  1996.                                 type: string
  1997.                             required:
  1998.                             - group
  1999.                             - kind
  2000.                             - name
  2001.                             type: object
  2002.                           port:
  2003.                             description: "Port specifies the destination port number
  2004.                               to use for the backend referenced by the ServiceName
  2005.                               or BackendRef field. If unspecified, the destination
  2006.                               port in the request is used when forwarding to a backendRef
  2007.                               or serviceName. \n Support: Core"
  2008.                             format: int32
  2009.                             maximum: 65535
  2010.                             minimum: 1
  2011.                             type: integer
  2012.                           serviceName:
  2013.                             description: "ServiceName refers to the name of the Service
  2014.                               to forward matched requests to. When specified, this
  2015.                               takes the place of BackendRef. If both BackendRef and
  2016.                               ServiceName are specified, ServiceName will be given
  2017.                               precedence. \n If the referent cannot be found, the
  2018.                               rule is not included in the route. The controller should
  2019.                               raise the \"ResolvedRefs\" condition on the Gateway
  2020.                               with the \"DegradedRoutes\" reason. The gateway status
  2021.                               for this route should be updated with a condition that
  2022.                               describes the error more specifically. \n The protocol
  2023.                               to use is defined using AppProtocol field (introduced
  2024.                               in Kubernetes 1.18) in the Service resource. In the
  2025.                               absence of the AppProtocol field a `networking.x-k8s.io/app-protocol`
  2026.                               annotation on the BackendPolicy resource may be used
  2027.                               to define the protocol. If the AppProtocol field is
  2028.                               available, this annotation should not be used. The AppProtocol
  2029.                               field, when populated, takes precedence over the annotation
  2030.                               in the BackendPolicy resource. For custom backends,
  2031.                               it is encouraged to add a semantically-equivalent field
  2032.                               in the Custom Resource Definition. \n Support: Core"
  2033.                             maxLength: 253
  2034.                             type: string
  2035.                           weight:
  2036.                             default: 1
  2037.                             description: "Weight specifies the proportion of HTTP
  2038.                               requests forwarded to the backend referenced by the
  2039.                               ServiceName or BackendRef field. This is computed as
  2040.                               weight/(sum of all weights in this ForwardTo list).
  2041.                               For non-zero values, there may be some epsilon from
  2042.                               the exact proportion defined here depending on the precision
  2043.                               an implementation supports. Weight is not a percentage
  2044.                               and the sum of weights does not need to equal 100. \n
  2045.                               If only one backend is specified and it has a weight
  2046.                               greater than 0, 100% of the traffic is forwarded to
  2047.                               that backend. If weight is set to 0, no traffic should
  2048.                               be forwarded for this entry. If unspecified, weight
  2049.                               defaults to 1. \n Support: Extended"
  2050.                             format: int32
  2051.                             maximum: 1000000
  2052.                             minimum: 0
  2053.                             type: integer
  2054.                         type: object
  2055.                       maxItems: 16
  2056.                       minItems: 1
  2057.                       type: array
  2058.                     matches:
  2059.                       description: "Matches define conditions used for matching the
  2060.                         rule against incoming TCP connections. Each match is independent,
  2061.                         i.e. this rule will be matched if **any** one of the matches
  2062.                         is satisfied. If unspecified (i.e. empty), this Rule will
  2063.                         match all requests for the associated Listener. \n Each client
  2064.                         request MUST map to a maximum of one route rule. If a request
  2065.                         matches multiple rules, matching precedence MUST be determined
  2066.                         in order of the following criteria, continuing on ties: \n
  2067.                         * The most specific match specified by ExtensionRef. Each
  2068.                         implementation   that supports ExtensionRef may have different
  2069.                         ways of determining the   specificity of the referenced extension.
  2070.                         \n If ties still exist across multiple Routes, matching precedence
  2071.                         MUST be determined in order of the following criteria, continuing
  2072.                         on ties: \n * The oldest Route based on creation timestamp.
  2073.                         For example, a Route with   a creation timestamp of \"2020-09-08
  2074.                         01:02:03\" is given precedence over   a Route with a creation
  2075.                         timestamp of \"2020-09-08 01:02:04\". * The Route appearing
  2076.                         first in alphabetical order by   \"<namespace>/<name>\". For
  2077.                         example, foo/bar is given precedence over   foo/baz. \n If
  2078.                         ties still exist within the Route that has been given precedence,
  2079.                         matching precedence MUST be granted to the first matching
  2080.                         rule meeting the above criteria."
  2081.                       items:
  2082.                         description: TCPRouteMatch defines the predicate used to match
  2083.                           connections to a given action.
  2084.                         properties:
  2085.                           extensionRef:
  2086.                             description: "ExtensionRef is an optional, implementation-specific
  2087.                               extension to the \"match\" behavior.  For example, resource
  2088.                               \"mytcproutematcher\" in group \"networking.acme.io\".
  2089.                               If the referent cannot be found, the rule is not included
  2090.                               in the route. The controller should raise the \"ResolvedRefs\"
  2091.                               condition on the Gateway with the \"DegradedRoutes\"
  2092.                               reason. The gateway status for this route should be
  2093.                               updated with a condition that describes the error more
  2094.                               specifically. \n Support: Custom"
  2095.                             properties:
  2096.                               group:
  2097.                                 description: Group is the group of the referent.
  2098.                                 maxLength: 253
  2099.                                 minLength: 1
  2100.                                 type: string
  2101.                               kind:
  2102.                                 description: Kind is kind of the referent.
  2103.                                 maxLength: 253
  2104.                                 minLength: 1
  2105.                                 type: string
  2106.                               name:
  2107.                                 description: Name is the name of the referent.
  2108.                                 maxLength: 253
  2109.                                 minLength: 1
  2110.                                 type: string
  2111.                             required:
  2112.                             - group
  2113.                             - kind
  2114.                             - name
  2115.                             type: object
  2116.                         type: object
  2117.                       maxItems: 8
  2118.                       type: array
  2119.                   required:
  2120.                   - forwardTo
  2121.                   type: object
  2122.                 maxItems: 16
  2123.                 minItems: 1
  2124.                 type: array
  2125.             required:
  2126.             - rules
  2127.             type: object
  2128.           status:
  2129.             description: Status defines the current state of TCPRoute.
  2130.             properties:
  2131.               gateways:
  2132.                 description: "Gateways is a list of Gateways that are associated with
  2133.                   the route, and the status of the route with respect to each Gateway.
  2134.                   When a Gateway selects this route, the controller that manages the
  2135.                   Gateway must add an entry to this list when the controller first
  2136.                   sees the route and should update the entry as appropriate when the
  2137.                   route is modified. \n A maximum of 100 Gateways will be represented
  2138.                   in this list. If this list is full, there may be additional Gateways
  2139.                   using this Route that are not included in the list. An empty list
  2140.                   means the route has not been admitted by any Gateway."
  2141.                 items:
  2142.                   description: RouteGatewayStatus describes the status of a route
  2143.                     with respect to an associated Gateway.
  2144.                   properties:
  2145.                     conditions:
  2146.                       description: Conditions describes the status of the route with
  2147.                         respect to the Gateway. The "Admitted" condition must always
  2148.                         be specified by controllers to indicate whether the route
  2149.                         has been admitted or rejected by the Gateway, and why. Note
  2150.                         that the route's availability is also subject to the Gateway's
  2151.                         own status conditions and listener status.
  2152.                       items:
  2153.                         description: "Condition contains details for one aspect of
  2154.                           the current state of this API Resource. --- This struct
  2155.                           is intended for direct use as an array at the field path
  2156.                           .status.conditions.  For example, type FooStatus struct{
  2157.                           \    // Represents the observations of a foo's current state.
  2158.                           \    // Known .status.conditions.type are: \"Available\",
  2159.                           \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
  2160.                           \    // +patchStrategy=merge     // +listType=map     //
  2161.                           +listMapKey=type     Conditions []metav1.Condition `json:\"conditions,omitempty\"
  2162.                           patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
  2163.                           \n     // other fields }"
  2164.                         properties:
  2165.                           lastTransitionTime:
  2166.                             description: lastTransitionTime is the last time the condition
  2167.                               transitioned from one status to another. This should
  2168.                               be when the underlying condition changed.  If that is
  2169.                               not known, then using the time when the API field changed
  2170.                               is acceptable.
  2171.                             format: date-time
  2172.                             type: string
  2173.                           message:
  2174.                             description: message is a human readable message indicating
  2175.                               details about the transition. This may be an empty string.
  2176.                             maxLength: 32768
  2177.                             type: string
  2178.                           observedGeneration:
  2179.                             description: observedGeneration represents the .metadata.generation
  2180.                               that the condition was set based upon. For instance,
  2181.                               if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
  2182.                               is 9, the condition is out of date with respect to the
  2183.                               current state of the instance.
  2184.                             format: int64
  2185.                             minimum: 0
  2186.                             type: integer
  2187.                           reason:
  2188.                             description: reason contains a programmatic identifier
  2189.                               indicating the reason for the condition's last transition.
  2190.                               Producers of specific condition types may define expected
  2191.                               values and meanings for this field, and whether the
  2192.                               values are considered a guaranteed API. The value should
  2193.                               be a CamelCase string. This field may not be empty.
  2194.                             maxLength: 1024
  2195.                             minLength: 1
  2196.                             pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
  2197.                             type: string
  2198.                           status:
  2199.                             description: status of the condition, one of True, False,
  2200.                               Unknown.
  2201.                             enum:
  2202.                             - "True"
  2203.                             - "False"
  2204.                             - Unknown
  2205.                             type: string
  2206.                           type:
  2207.                             description: type of condition in CamelCase or in foo.example.com/CamelCase.
  2208.                               --- Many .condition.type values are consistent across
  2209.                               resources like Available, but because arbitrary conditions
  2210.                               can be useful (see .node.status.conditions), the ability
  2211.                               to deconflict is important. The regex it matches is
  2212.                               (dns1123SubdomainFmt/)?(qualifiedNameFmt)
  2213.                             maxLength: 316
  2214.                             pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
  2215.                             type: string
  2216.                         required:
  2217.                         - lastTransitionTime
  2218.                         - message
  2219.                         - reason
  2220.                         - status
  2221.                         - type
  2222.                         type: object
  2223.                       maxItems: 8
  2224.                       type: array
  2225.                       x-kubernetes-list-map-keys:
  2226.                       - type
  2227.                       x-kubernetes-list-type: map
  2228.                     gatewayRef:
  2229.                       description: GatewayRef is a reference to a Gateway object that
  2230.                         is associated with the route.
  2231.                       properties:
  2232.                         controller:
  2233.                           description: "Controller is a domain/path string that indicates
  2234.                             the controller implementing the Gateway. This corresponds
  2235.                             with the controller field on GatewayClass. \n Example:
  2236.                             \"acme.io/gateway-controller\". \n The format of this
  2237.                             field is DOMAIN \"/\" PATH, where DOMAIN and PATH are
  2238.                             valid Kubernetes names (https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names)."
  2239.                           maxLength: 253
  2240.                           type: string
  2241.                         name:
  2242.                           description: Name is the name of the referent.
  2243.                           maxLength: 253
  2244.                           minLength: 1
  2245.                           type: string
  2246.                         namespace:
  2247.                           description: Namespace is the namespace of the referent.
  2248.                           maxLength: 253
  2249.                           minLength: 1
  2250.                           type: string
  2251.                       required:
  2252.                       - name
  2253.                       - namespace
  2254.                       type: object
  2255.                   required:
  2256.                   - gatewayRef
  2257.                   type: object
  2258.                 maxItems: 100
  2259.                 type: array
  2260.             required:
  2261.             - gateways
  2262.             type: object
  2263.         type: object
  2264.     served: true
  2265.     storage: true
  2266.     subresources:
  2267.       status: {}
  2268. status:
  2269.   acceptedNames:
  2270.     kind: ""
  2271.     plural: ""
  2272.   conditions: []
  2273.   storedVersions: []
  2275. ---
  2276. apiVersion: apiextensions.k8s.io/v1
  2277. kind: CustomResourceDefinition
  2278. metadata:
  2279.   annotations:
  2280.     controller-gen.kubebuilder.io/version: v0.5.0
  2281.   creationTimestamp: null
  2282.   name: tlsroutes.networking.x-k8s.io
  2283. spec:
  2284.   group: networking.x-k8s.io
  2285.   names:
  2286.     categories:
  2287.     - gateway-api
  2288.     kind: TLSRoute
  2289.     listKind: TLSRouteList
  2290.     plural: tlsroutes
  2291.     singular: tlsroute
  2292.   scope: Namespaced
  2293.   versions:
  2294.   - additionalPrinterColumns:
  2295.     - jsonPath: .metadata.creationTimestamp
  2296.       name: Age
  2297.       type: date
  2298.     name: v1alpha1
  2299.     schema:
  2300.       openAPIV3Schema:
  2301.         description: "The TLSRoute resource is similar to TCPRoute, but can be configured
  2302.           to match against TLS-specific metadata. This allows more flexibility in
  2303.           matching streams for a given TLS listener. \n If you need to forward traffic
  2304.           to a single target for a TLS listener, you could choose to use a TCPRoute
  2305.           with a TLS listener."
  2306.         properties:
  2307.           apiVersion:
  2308.             description: 'APIVersion defines the versioned schema of this representation
  2309.               of an object. Servers should convert recognized schemas to the latest
  2310.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  2311.             type: string
  2312.           kind:
  2313.             description: 'Kind is a string value representing the REST resource this
  2314.               object represents. Servers may infer this from the endpoint the client
  2315.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  2316.             type: string
  2317.           metadata:
  2318.             type: object
  2319.           spec:
  2320.             description: Spec defines the desired state of TLSRoute.
  2321.             properties:
  2322.               gateways:
  2323.                 default:
  2324.                   allow: SameNamespace
  2325.                 description: Gateways defines which Gateways can use this Route.
  2326.                 properties:
  2327.                   allow:
  2328.                     default: SameNamespace
  2329.                     description: 'Allow indicates which Gateways will be allowed to
  2330.                       use this route. Possible values are: * All: Gateways in any
  2331.                       namespace can use this route. * FromList: Only Gateways specified
  2332.                       in GatewayRefs may use this route. * SameNamespace: Only Gateways
  2333.                       in the same namespace may use this route.'
  2334.                     enum:
  2335.                     - All
  2336.                     - FromList
  2337.                     - SameNamespace
  2338.                     type: string
  2339.                   gatewayRefs:
  2340.                     description: GatewayRefs must be specified when Allow is set to
  2341.                       "FromList". In that case, only Gateways referenced in this list
  2342.                       will be allowed to use this route. This field is ignored for
  2343.                       other values of "Allow".
  2344.                     items:
  2345.                       description: GatewayReference identifies a Gateway in a specified
  2346.                         namespace.
  2347.                       properties:
  2348.                         name:
  2349.                           description: Name is the name of the referent.
  2350.                           maxLength: 253
  2351.                           minLength: 1
  2352.                           type: string
  2353.                         namespace:
  2354.                           description: Namespace is the namespace of the referent.
  2355.                           maxLength: 253
  2356.                           minLength: 1
  2357.                           type: string
  2358.                       required:
  2359.                       - name
  2360.                       - namespace
  2361.                       type: object
  2362.                     type: array
  2363.                 type: object
  2364.               rules:
  2365.                 description: Rules are a list of TLS matchers and actions.
  2366.                 items:
  2367.                   description: TLSRouteRule is the configuration for a given rule.
  2368.                   properties:
  2369.                     forwardTo:
  2370.                       description: ForwardTo defines the backend(s) where matching
  2371.                         requests should be sent.
  2372.                       items:
  2373.                         description: RouteForwardTo defines how a Route should forward
  2374.                           a request.
  2375.                         properties:
  2376.                           backendRef:
  2377.                             description: "BackendRef is a reference to a backend to
  2378.                               forward matched requests to. If both BackendRef and
  2379.                               ServiceName are specified, ServiceName will be given
  2380.                               precedence. \n If the referent cannot be found, the
  2381.                               rule is not included in the route. The controller should
  2382.                               raise the \"ResolvedRefs\" condition on the Gateway
  2383.                               with the \"DegradedRoutes\" reason. The gateway status
  2384.                               for this route should be updated with a condition that
  2385.                               describes the error more specifically. \n Support: Custom"
  2386.                             properties:
  2387.                               group:
  2388.                                 description: Group is the group of the referent.
  2389.                                 maxLength: 253
  2390.                                 minLength: 1
  2391.                                 type: string
  2392.                               kind:
  2393.                                 description: Kind is kind of the referent.
  2394.                                 maxLength: 253
  2395.                                 minLength: 1
  2396.                                 type: string
  2397.                               name:
  2398.                                 description: Name is the name of the referent.
  2399.                                 maxLength: 253
  2400.                                 minLength: 1
  2401.                                 type: string
  2402.                             required:
  2403.                             - group
  2404.                             - kind
  2405.                             - name
  2406.                             type: object
  2407.                           port:
  2408.                             description: "Port specifies the destination port number
  2409.                               to use for the backend referenced by the ServiceName
  2410.                               or BackendRef field. If unspecified, the destination
  2411.                               port in the request is used when forwarding to a backendRef
  2412.                               or serviceName. \n Support: Core"
  2413.                             format: int32
  2414.                             maximum: 65535
  2415.                             minimum: 1
  2416.                             type: integer
  2417.                           serviceName:
  2418.                             description: "ServiceName refers to the name of the Service
  2419.                               to forward matched requests to. When specified, this
  2420.                               takes the place of BackendRef. If both BackendRef and
  2421.                               ServiceName are specified, ServiceName will be given
  2422.                               precedence. \n If the referent cannot be found, the
  2423.                               rule is not included in the route. The controller should
  2424.                               raise the \"ResolvedRefs\" condition on the Gateway
  2425.                               with the \"DegradedRoutes\" reason. The gateway status
  2426.                               for this route should be updated with a condition that
  2427.                               describes the error more specifically. \n The protocol
  2428.                               to use is defined using AppProtocol field (introduced
  2429.                               in Kubernetes 1.18) in the Service resource. In the
  2430.                               absence of the AppProtocol field a `networking.x-k8s.io/app-protocol`
  2431.                               annotation on the BackendPolicy resource may be used
  2432.                               to define the protocol. If the AppProtocol field is
  2433.                               available, this annotation should not be used. The AppProtocol
  2434.                               field, when populated, takes precedence over the annotation
  2435.                               in the BackendPolicy resource. For custom backends,
  2436.                               it is encouraged to add a semantically-equivalent field
  2437.                               in the Custom Resource Definition. \n Support: Core"
  2438.                             maxLength: 253
  2439.                             type: string
  2440.                           weight:
  2441.                             default: 1
  2442.                             description: "Weight specifies the proportion of HTTP
  2443.                               requests forwarded to the backend referenced by the
  2444.                               ServiceName or BackendRef field. This is computed as
  2445.                               weight/(sum of all weights in this ForwardTo list).
  2446.                               For non-zero values, there may be some epsilon from
  2447.                               the exact proportion defined here depending on the precision
  2448.                               an implementation supports. Weight is not a percentage
  2449.                               and the sum of weights does not need to equal 100. \n
  2450.                               If only one backend is specified and it has a weight
  2451.                               greater than 0, 100% of the traffic is forwarded to
  2452.                               that backend. If weight is set to 0, no traffic should
  2453.                               be forwarded for this entry. If unspecified, weight
  2454.                               defaults to 1. \n Support: Extended"
  2455.                             format: int32
  2456.                             maximum: 1000000
  2457.                             minimum: 0
  2458.                             type: integer
  2459.                         type: object
  2460.                       maxItems: 16
  2461.                       minItems: 1
  2462.                       type: array
  2463.                     matches:
  2464.                       description: "Matches define conditions used for matching the
  2465.                         rule against incoming TLS connections. Each match is independent,
  2466.                         i.e. this rule will be matched if **any** one of the matches
  2467.                         is satisfied. If unspecified (i.e. empty), this Rule will
  2468.                         match all requests for the associated Listener. \n Each client
  2469.                         request MUST map to a maximum of one route rule. If a request
  2470.                         matches multiple rules, matching precedence MUST be determined
  2471.                         in order of the following criteria, continuing on ties: \n
  2472.                         * The longest matching SNI. * The longest matching precise
  2473.                         SNI (without a wildcard). This means that   \"b.example.com\"
  2474.                         should be given precedence over \"*.example.com\". * The most
  2475.                         specific match specified by ExtensionRef. Each implementation
  2476.                         \  that supports ExtensionRef may have different ways of determining
  2477.                         the   specificity of the referenced extension. \n If ties
  2478.                         still exist across multiple Routes, matching precedence MUST
  2479.                         be determined in order of the following criteria, continuing
  2480.                         on ties: \n * The oldest Route based on creation timestamp.
  2481.                         For example, a Route with   a creation timestamp of \"2020-09-08
  2482.                         01:02:03\" is given precedence over   a Route with a creation
  2483.                         timestamp of \"2020-09-08 01:02:04\". * The Route appearing
  2484.                         first in alphabetical order by   \"<namespace>/<name>\". For
  2485.                         example, foo/bar is given precedence over   foo/baz. \n If
  2486.                         ties still exist within the Route that has been given precedence,
  2487.                         matching precedence MUST be granted to the first matching
  2488.                         rule meeting the above criteria."
  2489.                       items:
  2490.                         description: TLSRouteMatch defines the predicate used to match
  2491.                           connections to a given action.
  2492.                         properties:
  2493.                           extensionRef:
  2494.                             description: "ExtensionRef is an optional, implementation-specific
  2495.                               extension to the \"match\" behavior.  For example, resource
  2496.                               \"mytlsroutematcher\" in group \"networking.acme.io\".
  2497.                               If the referent cannot be found, the rule is not included
  2498.                               in the route. The controller should raise the \"ResolvedRefs\"
  2499.                               condition on the Gateway with the \"DegradedRoutes\"
  2500.                               reason. The gateway status for this route should be
  2501.                               updated with a condition that describes the error more
  2502.                               specifically. \n Support: Custom"
  2503.                             properties:
  2504.                               group:
  2505.                                 description: Group is the group of the referent.
  2506.                                 maxLength: 253
  2507.                                 minLength: 1
  2508.                                 type: string
  2509.                               kind:
  2510.                                 description: Kind is kind of the referent.
  2511.                                 maxLength: 253
  2512.                                 minLength: 1
  2513.                                 type: string
  2514.                               name:
  2515.                                 description: Name is the name of the referent.
  2516.                                 maxLength: 253
  2517.                                 minLength: 1
  2518.                                 type: string
  2519.                             required:
  2520.                             - group
  2521.                             - kind
  2522.                             - name
  2523.                             type: object
  2524.                           snis:
  2525.                             description: "SNIs defines a set of SNI names that should
  2526.                               match against the SNI attribute of TLS ClientHello message
  2527.                               in TLS handshake. \n SNI can be \"precise\" which is
  2528.                               a domain name without the terminating dot of a network
  2529.                               host (e.g. \"foo.example.com\") or \"wildcard\", which
  2530.                               is a domain name prefixed with a single wildcard label
  2531.                               (e.g. `*.example.com`). The wildcard character `*` must
  2532.                               appear by itself as the first DNS label and matches
  2533.                               only a single label. You cannot have a wildcard label
  2534.                               by itself (e.g. Host == `*`). \n Requests will be matched
  2535.                               against the Host field in the following order: \n 1.
  2536.                               If SNI is precise, the request matches this rule if
  2537.                               the SNI in    ClientHello is equal to one of the defined
  2538.                               SNIs. 2. If SNI is a wildcard, then the request matches
  2539.                               this rule if the    SNI is to equal to the suffix (removing
  2540.                               the first label) of the    wildcard rule. 3. If SNIs
  2541.                               is unspecified, all requests associated with the gateway
  2542.                               TLS    listener will match. This can be used to define
  2543.                               a default backend    for a TLS listener. \n Support:
  2544.                               Core"
  2545.                             items:
  2546.                               description: Hostname is used to specify a hostname
  2547.                                 that should be matched.
  2548.                               maxLength: 253
  2549.                               minLength: 1
  2550.                               type: string
  2551.                             maxItems: 16
  2552.                             type: array
  2553.                         type: object
  2554.                       maxItems: 8
  2555.                       type: array
  2556.                   required:
  2557.                   - forwardTo
  2558.                   type: object
  2559.                 maxItems: 16
  2560.                 minItems: 1
  2561.                 type: array
  2562.             required:
  2563.             - rules
  2564.             type: object
  2565.           status:
  2566.             description: Status defines the current state of TLSRoute.
  2567.             properties:
  2568.               gateways:
  2569.                 description: "Gateways is a list of Gateways that are associated with
  2570.                   the route, and the status of the route with respect to each Gateway.
  2571.                   When a Gateway selects this route, the controller that manages the
  2572.                   Gateway must add an entry to this list when the controller first
  2573.                   sees the route and should update the entry as appropriate when the
  2574.                   route is modified. \n A maximum of 100 Gateways will be represented
  2575.                   in this list. If this list is full, there may be additional Gateways
  2576.                   using this Route that are not included in the list. An empty list
  2577.                   means the route has not been admitted by any Gateway."
  2578.                 items:
  2579.                   description: RouteGatewayStatus describes the status of a route
  2580.                     with respect to an associated Gateway.
  2581.                   properties:
  2582.                     conditions:
  2583.                       description: Conditions describes the status of the route with
  2584.                         respect to the Gateway. The "Admitted" condition must always
  2585.                         be specified by controllers to indicate whether the route
  2586.                         has been admitted or rejected by the Gateway, and why. Note
  2587.                         that the route's availability is also subject to the Gateway's
  2588.                         own status conditions and listener status.
  2589.                       items:
  2590.                         description: "Condition contains details for one aspect of
  2591.                           the current state of this API Resource. --- This struct
  2592.                           is intended for direct use as an array at the field path
  2593.                           .status.conditions.  For example, type FooStatus struct{
  2594.                           \    // Represents the observations of a foo's current state.
  2595.                           \    // Known .status.conditions.type are: \"Available\",
  2596.                           \"Progressing\", and \"Degraded\"     // +patchMergeKey=type
  2597.                           \    // +patchStrategy=merge     // +listType=map     //
  2598.                           +listMapKey=type     Conditions []metav1.Condition `json:\"conditions,omitempty\"
  2599.                           patchStrategy:\"merge\" patchMergeKey:\"type\" protobuf:\"bytes,1,rep,name=conditions\"`
  2600.                           \n     // other fields }"
  2601.                         properties:
  2602.                           lastTransitionTime:
  2603.                             description: lastTransitionTime is the last time the condition
  2604.                               transitioned from one status to another. This should
  2605.                               be when the underlying condition changed.  If that is
  2606.                               not known, then using the time when the API field changed
  2607.                               is acceptable.
  2608.                             format: date-time
  2609.                             type: string
  2610.                           message:
  2611.                             description: message is a human readable message indicating
  2612.                               details about the transition. This may be an empty string.
  2613.                             maxLength: 32768
  2614.                             type: string
  2615.                           observedGeneration:
  2616.                             description: observedGeneration represents the .metadata.generation
  2617.                               that the condition was set based upon. For instance,
  2618.                               if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration
  2619.                               is 9, the condition is out of date with respect to the
  2620.                               current state of the instance.
  2621.                             format: int64
  2622.                             minimum: 0
  2623.                             type: integer
  2624.                           reason:
  2625.                             description: reason contains a programmatic identifier
  2626.                               indicating the reason for the condition's last transition.
  2627.                               Producers of specific condition types may define expected
  2628.                               values and meanings for this field, and whether the
  2629.                               values are considered a guaranteed API. The value should
  2630.                               be a CamelCase string. This field may not be empty.
  2631.                             maxLength: 1024
  2632.                             minLength: 1
  2633.                             pattern: ^[A-Za-z]([A-Za-z0-9_,:]*[A-Za-z0-9_])?$
  2634.                             type: string
  2635.                           status:
  2636.                             description: status of the condition, one of True, False,
  2637.                               Unknown.
  2638.                             enum:
  2639.                             - "True"
  2640.                             - "False"
  2641.                             - Unknown
  2642.                             type: string
  2643.                           type:
  2644.                             description: type of condition in CamelCase or in foo.example.com/CamelCase.
  2645.                               --- Many .condition.type values are consistent across
  2646.                               resources like Available, but because arbitrary conditions
  2647.                               can be useful (see .node.status.conditions), the ability
  2648.                               to deconflict is important. The regex it matches is
  2649.                               (dns1123SubdomainFmt/)?(qualifiedNameFmt)
  2650.                             maxLength: 316
  2651.                             pattern: ^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$
  2652.                             type: string
  2653.                         required:
  2654.                         - lastTransitionTime
  2655.                         - message
  2656.                         - reason
  2657.                         - status
  2658.                         - type
  2659.                         type: object
  2660.                       maxItems: 8
  2661.                       type: array
  2662.                       x-kubernetes-list-map-keys:
  2663.                       - type
  2664.                       x-kubernetes-list-type: map
  2665.                     gatewayRef:
  2666.                       description: GatewayRef is a reference to a Gateway object that
  2667.                         is associated with the route.
  2668.                       properties:
  2669.                         controller:
  2670.                           description: "Controller is a domain/path string that indicates
  2671.                             the controller implementing the Gateway. This corresponds
  2672.                             with the controller field on GatewayClass. \n Example:
  2673.                             \"acme.io/gateway-controller\". \n The format of this
  2674.                             field is DOMAIN \"/\" PATH, where DOMAIN and PATH are
  2675.                             valid Kubernetes names (https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names)."
  2676.                           maxLength: 253
  2677.                           type: string
  2678.                         name:
  2679.                           description: Name is the name of the referent.
  2680.                           maxLength: 253
  2681.                           minLength: 1
  2682.                           type: string
  2683.                         namespace:
  2684.                           description: Namespace is the namespace of the referent.
  2685.                           maxLength: 253
  2686.                           minLength: 1
  2687.                           type: string
  2688.                       required:
  2689.                       - name
  2690.                       - namespace
  2691.                       type: object
  2692.                   required:
  2693.                   - gatewayRef
  2694.                   type: object
  2695.                 maxItems: 100
  2696.                 type: array
  2697.             required:
  2698.             - gateways
  2699.             type: object
  2700.         type: object
  2701.     served: true
  2702.     storage: true
  2703.     subresources:
  2704.       status: {}
  2705. status:
  2706.   acceptedNames:
  2707.     kind: ""
  2708.     plural: ""
  2709.   conditions: []
  2710.   storedVersions: []

Resources

---
kind: GatewayClass
apiVersion: networking.x-k8s.io/v1alpha1
metadata:
  name: my-gateway-class
spec:
  controller: traefik.io/gateway-controller

---
kind: Gateway
apiVersion: networking.x-k8s.io/v1alpha1
metadata:
  name: my-gateway
  namespace: default
spec:
  gatewayClassName: my-gateway-class
  listeners:  # Use GatewayClass defaults for listener definition.
    - protocol: HTTP
      port: 80
      routes:
        kind: HTTPRoute
        namespaces:
          from: Same
        selector:
          matchLabels:
            app: foo
     - protocol: HTTPS
       port: 443
       tls:
         certificateRef:
           group: "core"
           kind: "Secret"
           name: "mysecret"
       routes:
         kind: HTTPRoute
         selector:
           matchLabels:
             app: foo
    - protocol: TCP
      port: 9000
      routes:
        kind: TCPRoute
        namespaces:
          from: Same
        selector:
          matchLabels:
            app: footcp
    - protocol: TLS
      port: 9443
      hostname: example.com
      tls:
        certificateRef:
          group: "core"
          kind: "Secret"
          name: "mysecret"
      routes:
        kind: TLSRoute
        namespaces:
          from: Same
        selector:
          matchLabels:
            app: footls

---
kind: HTTPRoute
apiVersion: networking.x-k8s.io/v1alpha1
metadata:
  name: http-app-1
  namespace: default
  labels:
    app: foo
spec:
  hostnames:
    - "foo.com"
  rules:
    - matches:
        - path:
            type: Exact
            value: /bar
      forwardTo:
        - serviceName: whoami
          port: 80
          weight: 1
    - matches:
        - path:
            type: Prefix
            value: /foo
      forwardTo:
        - backendRef:
            group: traefik.containo.us
            kind: TraefikService
            name: myservice@file
          weight: 1
          port: 80

---
kind: TCPRoute
apiVersion: networking.x-k8s.io/v1alpha1
metadata:
  name: tcp-app-1
  namespace: default
  labels:
    app: footcp
spec:
  rules:
     - forwardTo:
        - serviceName: whoamitcp
          port: 9000
          weight: 1

---
kind: TLSRoute
apiVersion: networking.x-k8s.io/v1alpha1
metadata:
  name: tls-app-1
  namespace: default
  labels:
    app: footls
spec:
  rules:
    - forwardTo:
        - serviceName: whoamitcp
          port: 9000
          weight: 1

RBAC

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: gateway-role
rules:
  - apiGroups:
      - ""
    resources:
      - services
      - endpoints
      - secrets
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - networking.x-k8s.io
    resources:
      - gatewayclasses
      - gateways
      - httproutes
      - tcproutes
      - tlsroutes
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - networking.x-k8s.io
    resources:
      - gatewayclasses/status
      - gateways/status
      - httproutes/status
      - tcproutes/status
      - tlsroutes/status
    verbs:
      - update

---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: gateway-controller

roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: gateway-role
subjects:
  - kind: ServiceAccount
    name: traefik-controller
    namespace: default