Kubernetes Configuration Reference

Dynamic configuration with Kubernetes Custom Resource

Deprecated apiextensions.k8s.io/v1beta1 CRD

The apiextensions.k8s.io/v1beta1 CustomResourceDefinition is deprecated in Kubernetes v1.16+ and will be removed in v1.22+.

For Kubernetes v1.16+, please use the Traefik apiextensions.k8s.io/v1 CRDs instead.

Definitions

apiextensions.k8s.io/v1 (Kubernetes v1.16+)

  2. ---
  3. apiVersion: apiextensions.k8s.io/v1
  4. kind: CustomResourceDefinition
  5. metadata:
  6.   annotations:
  7.     controller-gen.kubebuilder.io/version: v0.6.2
  8.   creationTimestamp: null
  9.   name: ingressroutes.traefik.containo.us
  10. spec:
  11.   group: traefik.containo.us
  12.   names:
  13.     kind: IngressRoute
  14.     listKind: IngressRouteList
  15.     plural: ingressroutes
  16.     singular: ingressroute
  17.   scope: Namespaced
  18.   versions:
  19.   - name: v1alpha1
  20.     schema:
  21.       openAPIV3Schema:
  22.         description: IngressRoute is the CRD implementation of a Traefik HTTP Router.
  23.         properties:
  24.           apiVersion:
  25.             description: 'APIVersion defines the versioned schema of this representation
  26.               of an object. Servers should convert recognized schemas to the latest
  27.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  28.             type: string
  29.           kind:
  30.             description: 'Kind is a string value representing the REST resource this
  31.               object represents. Servers may infer this from the endpoint the client
  32.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  33.             type: string
  34.           metadata:
  35.             type: object
  36.           spec:
  37.             description: IngressRouteSpec defines the desired state of IngressRoute.
  38.             properties:
  39.               entryPoints:
  40.                 description: 'EntryPoints defines the list of entry point names to
  41.                   bind to. Entry points have to be configured in the static configuration.
  42.                   More info: https://doc.traefik.io/traefik/v2.9/routing/entrypoints/
  43.                   Default: all.'
  44.                 items:
  45.                   type: string
  46.                 type: array
  47.               routes:
  48.                 description: Routes defines the list of routes.
  49.                 items:
  50.                   description: Route holds the HTTP route configuration.
  51.                   properties:
  52.                     kind:
  53.                       description: Kind defines the kind of the route. Rule is the
  54.                         only supported kind.
  55.                       enum:
  56.                       - Rule
  57.                       type: string
  58.                     match:
  59.                       description: 'Match defines the router''s rule. More info: https://doc.traefik.io/traefik/v2.9/routing/routers/#rule'
  60.                       type: string
  61.                     middlewares:
  62.                       description: 'Middlewares defines the list of references to
  63.                         Middleware resources. More info: https://doc.traefik.io/traefik/v2.9/routing/providers/kubernetes-crd/#kind-middleware'
  64.                       items:
  65.                         description: MiddlewareRef is a reference to a Middleware
  66.                           resource.
  67.                         properties:
  68.                           name:
  69.                             description: Name defines the name of the referenced Middleware
  70.                               resource.
  71.                             type: string
  72.                           namespace:
  73.                             description: Namespace defines the namespace of the referenced
  74.                               Middleware resource.
  75.                             type: string
  76.                         required:
  77.                         - name
  78.                         type: object
  79.                       type: array
  80.                     priority:
  81.                       description: 'Priority defines the router''s priority. More
  82.                         info: https://doc.traefik.io/traefik/v2.9/routing/routers/#priority'
  83.                       type: integer
  84.                     services:
  85.                       description: Services defines the list of Service. It can contain
  86.                         any combination of TraefikService and/or reference to a Kubernetes
  87.                         Service.
  88.                       items:
  89.                         description: Service defines an upstream HTTP service to proxy
  90.                           traffic to.
  91.                         properties:
  92.                           kind:
  93.                             description: Kind defines the kind of the Service.
  94.                             enum:
  95.                             - Service
  96.                             - TraefikService
  97.                             type: string
  98.                           name:
  99.                             description: Name defines the name of the referenced Kubernetes
  100.                               Service or TraefikService. The differentiation between
  101.                               the two is specified in the Kind field.
  102.                             type: string
  103.                           namespace:
  104.                             description: Namespace defines the namespace of the referenced
  105.                               Kubernetes Service or TraefikService.
  106.                             type: string
  107.                           passHostHeader:
  108.                             description: PassHostHeader defines whether the client
  109.                               Host header is forwarded to the upstream Kubernetes
  110.                               Service. By default, passHostHeader is true.
  111.                             type: boolean
  112.                           port:
  113.                             anyOf:
  114.                             - type: integer
  115.                             - type: string
  116.                             description: Port defines the port of a Kubernetes Service.
  117.                               This can be a reference to a named port.
  118.                             x-kubernetes-int-or-string: true
  119.                           responseForwarding:
  120.                             description: ResponseForwarding defines how Traefik forwards
  121.                               the response from the upstream Kubernetes Service to
  122.                               the client.
  123.                             properties:
  124.                               flushInterval:
  125.                                 description: 'FlushInterval defines the interval,
  126.                                   in milliseconds, in between flushes to the client
  127.                                   while copying the response body. A negative value
  128.                                   means to flush immediately after each write to the
  129.                                   client. This configuration is ignored when ReverseProxy
  130.                                   recognizes a response as a streaming response; for
  131.                                   such responses, writes are flushed to the client
  132.                                   immediately. Default: 100ms'
  133.                                 type: string
  134.                             type: object
  135.                           scheme:
  136.                             description: Scheme defines the scheme to use for the
  137.                               request to the upstream Kubernetes Service. It defaults
  138.                               to https when Kubernetes Service port is 443, http otherwise.
  139.                             type: string
  140.                           serversTransport:
  141.                             description: ServersTransport defines the name of ServersTransport
  142.                               resource to use. It allows to configure the transport
  143.                               between Traefik and your servers. Can only be used on
  144.                               a Kubernetes Service.
  145.                             type: string
  146.                           sticky:
  147.                             description: 'Sticky defines the sticky sessions configuration.
  148.                               More info: https://doc.traefik.io/traefik/v2.9/routing/services/#sticky-sessions'
  149.                             properties:
  150.                               cookie:
  151.                                 description: Cookie defines the sticky cookie configuration.
  152.                                 properties:
  153.                                   httpOnly:
  154.                                     description: HTTPOnly defines whether the cookie
  155.                                       can be accessed by client-side APIs, such as
  156.                                       JavaScript.
  157.                                     type: boolean
  158.                                   name:
  159.                                     description: Name defines the Cookie name.
  160.                                     type: string
  161.                                   sameSite:
  162.                                     description: 'SameSite defines the same site policy.
  163.                                       More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  164.                                     type: string
  165.                                   secure:
  166.                                     description: Secure defines whether the cookie
  167.                                       can only be transmitted over an encrypted connection
  168.                                       (i.e. HTTPS).
  169.                                     type: boolean
  170.                                 type: object
  171.                             type: object
  172.                           strategy:
  173.                             description: Strategy defines the load balancing strategy
  174.                               between the servers. RoundRobin is the only supported
  175.                               value at the moment.
  176.                             type: string
  177.                           weight:
  178.                             description: Weight defines the weight and should only
  179.                               be specified when Name references a TraefikService object
  180.                               (and to be precise, one that embeds a Weighted Round
  181.                               Robin).
  182.                             type: integer
  183.                         required:
  184.                         - name
  185.                         type: object
  186.                       type: array
  187.                   required:
  188.                   - kind
  189.                   - match
  190.                   type: object
  191.                 type: array
  192.               tls:
  193.                 description: 'TLS defines the TLS configuration. More info: https://doc.traefik.io/traefik/v2.9/routing/routers/#tls'
  194.                 properties:
  195.                   certResolver:
  196.                     description: 'CertResolver defines the name of the certificate
  197.                       resolver to use. Cert resolvers have to be configured in the
  198.                       static configuration. More info: https://doc.traefik.io/traefik/v2.9/https/acme/#certificate-resolvers'
  199.                     type: string
  200.                   domains:
  201.                     description: 'Domains defines the list of domains that will be
  202.                       used to issue certificates. More info: https://doc.traefik.io/traefik/v2.9/routing/routers/#domains'
  203.                     items:
  204.                       description: Domain holds a domain name with SANs.
  205.                       properties:
  206.                         main:
  207.                           description: Main defines the main domain name.
  208.                           type: string
  209.                         sans:
  210.                           description: SANs defines the subject alternative domain
  211.                             names.
  212.                           items:
  213.                             type: string
  214.                           type: array
  215.                       type: object
  216.                     type: array
  217.                   options:
  218.                     description: 'Options defines the reference to a TLSOption, that
  219.                       specifies the parameters of the TLS connection. If not defined,
  220.                       the `default` TLSOption is used. More info: https://doc.traefik.io/traefik/v2.9/https/tls/#tls-options'
  221.                     properties:
  222.                       name:
  223.                         description: 'Name defines the name of the referenced TLSOption.
  224.                           More info: https://doc.traefik.io/traefik/v2.9/routing/providers/kubernetes-crd/#kind-tlsoption'
  225.                         type: string
  226.                       namespace:
  227.                         description: 'Namespace defines the namespace of the referenced
  228.                           TLSOption. More info: https://doc.traefik.io/traefik/v2.9/routing/providers/kubernetes-crd/#kind-tlsoption'
  229.                         type: string
  230.                     required:
  231.                     - name
  232.                     type: object
  233.                   secretName:
  234.                     description: SecretName is the name of the referenced Kubernetes
  235.                       Secret to specify the certificate details.
  236.                     type: string
  237.                   store:
  238.                     description: Store defines the reference to the TLSStore, that
  239.                       will be used to store certificates. Please note that only `default`
  240.                       TLSStore can be used.
  241.                     properties:
  242.                       name:
  243.                         description: 'Name defines the name of the referenced TLSStore.
  244.                           More info: https://doc.traefik.io/traefik/v2.9/routing/providers/kubernetes-crd/#kind-tlsstore'
  245.                         type: string
  246.                       namespace:
  247.                         description: 'Namespace defines the namespace of the referenced
  248.                           TLSStore. More info: https://doc.traefik.io/traefik/v2.9/routing/providers/kubernetes-crd/#kind-tlsstore'
  249.                         type: string
  250.                     required:
  251.                     - name
  252.                     type: object
  253.                 type: object
  254.             required:
  255.             - routes
  256.             type: object
  257.         required:
  258.         - metadata
  259.         - spec
  260.         type: object
  261.     served: true
  262.     storage: true
  263. status:
  264.   acceptedNames:
  265.     kind: ""
  266.     plural: ""
  267.   conditions: []
  268.   storedVersions: []
  270. ---
  271. apiVersion: apiextensions.k8s.io/v1
  272. kind: CustomResourceDefinition
  273. metadata:
  274.   annotations:
  275.     controller-gen.kubebuilder.io/version: v0.6.2
  276.   creationTimestamp: null
  277.   name: ingressroutetcps.traefik.containo.us
  278. spec:
  279.   group: traefik.containo.us
  280.   names:
  281.     kind: IngressRouteTCP
  282.     listKind: IngressRouteTCPList
  283.     plural: ingressroutetcps
  284.     singular: ingressroutetcp
  285.   scope: Namespaced
  286.   versions:
  287.   - name: v1alpha1
  288.     schema:
  289.       openAPIV3Schema:
  290.         description: IngressRouteTCP is the CRD implementation of a Traefik TCP Router.
  291.         properties:
  292.           apiVersion:
  293.             description: 'APIVersion defines the versioned schema of this representation
  294.               of an object. Servers should convert recognized schemas to the latest
  295.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  296.             type: string
  297.           kind:
  298.             description: 'Kind is a string value representing the REST resource this
  299.               object represents. Servers may infer this from the endpoint the client
  300.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  301.             type: string
  302.           metadata:
  303.             type: object
  304.           spec:
  305.             description: IngressRouteTCPSpec defines the desired state of IngressRouteTCP.
  306.             properties:
  307.               entryPoints:
  308.                 description: 'EntryPoints defines the list of entry point names to
  309.                   bind to. Entry points have to be configured in the static configuration.
  310.                   More info: https://doc.traefik.io/traefik/v2.9/routing/entrypoints/
  311.                   Default: all.'
  312.                 items:
  313.                   type: string
  314.                 type: array
  315.               routes:
  316.                 description: Routes defines the list of routes.
  317.                 items:
  318.                   description: RouteTCP holds the TCP route configuration.
  319.                   properties:
  320.                     match:
  321.                       description: 'Match defines the router''s rule. More info: https://doc.traefik.io/traefik/v2.9/routing/routers/#rule_1'
  322.                       type: string
  323.                     middlewares:
  324.                       description: Middlewares defines the list of references to MiddlewareTCP
  325.                         resources.
  326.                       items:
  327.                         description: ObjectReference is a generic reference to a Traefik
  328.                           resource.
  329.                         properties:
  330.                           name:
  331.                             description: Name defines the name of the referenced Traefik
  332.                               resource.
  333.                             type: string
  334.                           namespace:
  335.                             description: Namespace defines the namespace of the referenced
  336.                               Traefik resource.
  337.                             type: string
  338.                         required:
  339.                         - name
  340.                         type: object
  341.                       type: array
  342.                     priority:
  343.                       description: 'Priority defines the router''s priority. More
  344.                         info: https://doc.traefik.io/traefik/v2.9/routing/routers/#priority_1'
  345.                       type: integer
  346.                     services:
  347.                       description: Services defines the list of TCP services.
  348.                       items:
  349.                         description: ServiceTCP defines an upstream TCP service to
  350.                           proxy traffic to.
  351.                         properties:
  352.                           name:
  353.                             description: Name defines the name of the referenced Kubernetes
  354.                               Service.
  355.                             type: string
  356.                           namespace:
  357.                             description: Namespace defines the namespace of the referenced
  358.                               Kubernetes Service.
  359.                             type: string
  360.                           port:
  361.                             anyOf:
  362.                             - type: integer
  363.                             - type: string
  364.                             description: Port defines the port of a Kubernetes Service.
  365.                               This can be a reference to a named port.
  366.                             x-kubernetes-int-or-string: true
  367.                           proxyProtocol:
  368.                             description: 'ProxyProtocol defines the PROXY protocol
  369.                               configuration. More info: https://doc.traefik.io/traefik/v2.9/routing/services/#proxy-protocol'
  370.                             properties:
  371.                               version:
  372.                                 description: Version defines the PROXY Protocol version
  373.                                   to use.
  374.                                 type: integer
  375.                             type: object
  376.                           terminationDelay:
  377.                             description: TerminationDelay defines the deadline that
  378.                               the proxy sets, after one of its connected peers indicates
  379.                               it has closed the writing capability of its connection,
  380.                               to close the reading capability as well, hence fully
  381.                               terminating the connection. It is a duration in milliseconds,
  382.                               defaulting to 100. A negative value means an infinite
  383.                               deadline (i.e. the reading capability is never closed).
  384.                             type: integer
  385.                           weight:
  386.                             description: Weight defines the weight used when balancing
  387.                               requests between multiple Kubernetes Service.
  388.                             type: integer
  389.                         required:
  390.                         - name
  391.                         - port
  392.                         type: object
  393.                       type: array
  394.                   required:
  395.                   - match
  396.                   type: object
  397.                 type: array
  398.               tls:
  399.                 description: 'TLS defines the TLS configuration on a layer 4 / TCP
  400.                   Route. More info: https://doc.traefik.io/traefik/v2.9/routing/routers/#tls_1'
  401.                 properties:
  402.                   certResolver:
  403.                     description: 'CertResolver defines the name of the certificate
  404.                       resolver to use. Cert resolvers have to be configured in the
  405.                       static configuration. More info: https://doc.traefik.io/traefik/v2.9/https/acme/#certificate-resolvers'
  406.                     type: string
  407.                   domains:
  408.                     description: 'Domains defines the list of domains that will be
  409.                       used to issue certificates. More info: https://doc.traefik.io/traefik/v2.9/routing/routers/#domains'
  410.                     items:
  411.                       description: Domain holds a domain name with SANs.
  412.                       properties:
  413.                         main:
  414.                           description: Main defines the main domain name.
  415.                           type: string
  416.                         sans:
  417.                           description: SANs defines the subject alternative domain
  418.                             names.
  419.                           items:
  420.                             type: string
  421.                           type: array
  422.                       type: object
  423.                     type: array
  424.                   options:
  425.                     description: 'Options defines the reference to a TLSOption, that
  426.                       specifies the parameters of the TLS connection. If not defined,
  427.                       the `default` TLSOption is used. More info: https://doc.traefik.io/traefik/v2.9/https/tls/#tls-options'
  428.                     properties:
  429.                       name:
  430.                         description: Name defines the name of the referenced Traefik
  431.                           resource.
  432.                         type: string
  433.                       namespace:
  434.                         description: Namespace defines the namespace of the referenced
  435.                           Traefik resource.
  436.                         type: string
  437.                     required:
  438.                     - name
  439.                     type: object
  440.                   passthrough:
  441.                     description: Passthrough defines whether a TLS router will terminate
  442.                       the TLS connection.
  443.                     type: boolean
  444.                   secretName:
  445.                     description: SecretName is the name of the referenced Kubernetes
  446.                       Secret to specify the certificate details.
  447.                     type: string
  448.                   store:
  449.                     description: Store defines the reference to the TLSStore, that
  450.                       will be used to store certificates. Please note that only `default`
  451.                       TLSStore can be used.
  452.                     properties:
  453.                       name:
  454.                         description: Name defines the name of the referenced Traefik
  455.                           resource.
  456.                         type: string
  457.                       namespace:
  458.                         description: Namespace defines the namespace of the referenced
  459.                           Traefik resource.
  460.                         type: string
  461.                     required:
  462.                     - name
  463.                     type: object
  464.                 type: object
  465.             required:
  466.             - routes
  467.             type: object
  468.         required:
  469.         - metadata
  470.         - spec
  471.         type: object
  472.     served: true
  473.     storage: true
  474. status:
  475.   acceptedNames:
  476.     kind: ""
  477.     plural: ""
  478.   conditions: []
  479.   storedVersions: []
  481. ---
  482. apiVersion: apiextensions.k8s.io/v1
  483. kind: CustomResourceDefinition
  484. metadata:
  485.   annotations:
  486.     controller-gen.kubebuilder.io/version: v0.6.2
  487.   creationTimestamp: null
  488.   name: ingressrouteudps.traefik.containo.us
  489. spec:
  490.   group: traefik.containo.us
  491.   names:
  492.     kind: IngressRouteUDP
  493.     listKind: IngressRouteUDPList
  494.     plural: ingressrouteudps
  495.     singular: ingressrouteudp
  496.   scope: Namespaced
  497.   versions:
  498.   - name: v1alpha1
  499.     schema:
  500.       openAPIV3Schema:
  501.         description: IngressRouteUDP is a CRD implementation of a Traefik UDP Router.
  502.         properties:
  503.           apiVersion:
  504.             description: 'APIVersion defines the versioned schema of this representation
  505.               of an object. Servers should convert recognized schemas to the latest
  506.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  507.             type: string
  508.           kind:
  509.             description: 'Kind is a string value representing the REST resource this
  510.               object represents. Servers may infer this from the endpoint the client
  511.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  512.             type: string
  513.           metadata:
  514.             type: object
  515.           spec:
  516.             description: IngressRouteUDPSpec defines the desired state of a IngressRouteUDP.
  517.             properties:
  518.               entryPoints:
  519.                 description: 'EntryPoints defines the list of entry point names to
  520.                   bind to. Entry points have to be configured in the static configuration.
  521.                   More info: https://doc.traefik.io/traefik/v2.9/routing/entrypoints/
  522.                   Default: all.'
  523.                 items:
  524.                   type: string
  525.                 type: array
  526.               routes:
  527.                 description: Routes defines the list of routes.
  528.                 items:
  529.                   description: RouteUDP holds the UDP route configuration.
  530.                   properties:
  531.                     services:
  532.                       description: Services defines the list of UDP services.
  533.                       items:
  534.                         description: ServiceUDP defines an upstream UDP service to
  535.                           proxy traffic to.
  536.                         properties:
  537.                           name:
  538.                             description: Name defines the name of the referenced Kubernetes
  539.                               Service.
  540.                             type: string
  541.                           namespace:
  542.                             description: Namespace defines the namespace of the referenced
  543.                               Kubernetes Service.
  544.                             type: string
  545.                           port:
  546.                             anyOf:
  547.                             - type: integer
  548.                             - type: string
  549.                             description: Port defines the port of a Kubernetes Service.
  550.                               This can be a reference to a named port.
  551.                             x-kubernetes-int-or-string: true
  552.                           weight:
  553.                             description: Weight defines the weight used when balancing
  554.                               requests between multiple Kubernetes Service.
  555.                             type: integer
  556.                         required:
  557.                         - name
  558.                         - port
  559.                         type: object
  560.                       type: array
  561.                   type: object
  562.                 type: array
  563.             required:
  564.             - routes
  565.             type: object
  566.         required:
  567.         - metadata
  568.         - spec
  569.         type: object
  570.     served: true
  571.     storage: true
  572. status:
  573.   acceptedNames:
  574.     kind: ""
  575.     plural: ""
  576.   conditions: []
  577.   storedVersions: []
  579. ---
  580. apiVersion: apiextensions.k8s.io/v1
  581. kind: CustomResourceDefinition
  582. metadata:
  583.   annotations:
  584.     controller-gen.kubebuilder.io/version: v0.6.2
  585.   creationTimestamp: null
  586.   name: middlewares.traefik.containo.us
  587. spec:
  588.   group: traefik.containo.us
  589.   names:
  590.     kind: Middleware
  591.     listKind: MiddlewareList
  592.     plural: middlewares
  593.     singular: middleware
  594.   scope: Namespaced
  595.   versions:
  596.   - name: v1alpha1
  597.     schema:
  598.       openAPIV3Schema:
  599.         description: 'Middleware is the CRD implementation of a Traefik Middleware.
  600.           More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/overview/'
  601.         properties:
  602.           apiVersion:
  603.             description: 'APIVersion defines the versioned schema of this representation
  604.               of an object. Servers should convert recognized schemas to the latest
  605.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  606.             type: string
  607.           kind:
  608.             description: 'Kind is a string value representing the REST resource this
  609.               object represents. Servers may infer this from the endpoint the client
  610.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  611.             type: string
  612.           metadata:
  613.             type: object
  614.           spec:
  615.             description: MiddlewareSpec defines the desired state of a Middleware.
  616.             properties:
  617.               addPrefix:
  618.                 description: 'AddPrefix holds the add prefix middleware configuration.
  619.                   This middleware updates the path of a request before forwarding
  620.                   it. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/addprefix/'
  621.                 properties:
  622.                   prefix:
  623.                     description: Prefix is the string to add before the current path
  624.                       in the requested URL. It should include a leading slash (/).
  625.                     type: string
  626.                 type: object
  627.               basicAuth:
  628.                 description: 'BasicAuth holds the basic auth middleware configuration.
  629.                   This middleware restricts access to your services to known users.
  630.                   More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/basicauth/'
  631.                 properties:
  632.                   headerField:
  633.                     description: 'HeaderField defines a header field to store the
  634.                       authenticated user. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/basicauth/#headerfield'
  635.                     type: string
  636.                   realm:
  637.                     description: 'Realm allows the protected resources on a server
  638.                       to be partitioned into a set of protection spaces, each with
  639.                       its own authentication scheme. Default: traefik.'
  640.                     type: string
  641.                   removeHeader:
  642.                     description: 'RemoveHeader sets the removeHeader option to true
  643.                       to remove the authorization header before forwarding the request
  644.                       to your service. Default: false.'
  645.                     type: boolean
  646.                   secret:
  647.                     description: Secret is the name of the referenced Kubernetes Secret
  648.                       containing user credentials.
  649.                     type: string
  650.                 type: object
  651.               buffering:
  652.                 description: 'Buffering holds the buffering middleware configuration.
  653.                   This middleware retries or limits the size of requests that can
  654.                   be forwarded to backends. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/buffering/#maxrequestbodybytes'
  655.                 properties:
  656.                   maxRequestBodyBytes:
  657.                     description: 'MaxRequestBodyBytes defines the maximum allowed
  658.                       body size for the request (in bytes). If the request exceeds
  659.                       the allowed size, it is not forwarded to the service, and the
  660.                       client gets a 413 (Request Entity Too Large) response. Default:
  661.                       0 (no maximum).'
  662.                     format: int64
  663.                     type: integer
  664.                   maxResponseBodyBytes:
  665.                     description: 'MaxResponseBodyBytes defines the maximum allowed
  666.                       response size from the service (in bytes). If the response exceeds
  667.                       the allowed size, it is not forwarded to the client. The client
  668.                       gets a 500 (Internal Server Error) response instead. Default:
  669.                       0 (no maximum).'
  670.                     format: int64
  671.                     type: integer
  672.                   memRequestBodyBytes:
  673.                     description: 'MemRequestBodyBytes defines the threshold (in bytes)
  674.                       from which the request will be buffered on disk instead of in
  675.                       memory. Default: 1048576 (1Mi).'
  676.                     format: int64
  677.                     type: integer
  678.                   memResponseBodyBytes:
  679.                     description: 'MemResponseBodyBytes defines the threshold (in bytes)
  680.                       from which the response will be buffered on disk instead of
  681.                       in memory. Default: 1048576 (1Mi).'
  682.                     format: int64
  683.                     type: integer
  684.                   retryExpression:
  685.                     description: 'RetryExpression defines the retry conditions. It
  686.                       is a logical combination of functions with operators AND (&&)
  687.                       and OR (||). More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/buffering/#retryexpression'
  688.                     type: string
  689.                 type: object
  690.               chain:
  691.                 description: 'Chain holds the configuration of the chain middleware.
  692.                   This middleware enables to define reusable combinations of other
  693.                   pieces of middleware. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/chain/'
  694.                 properties:
  695.                   middlewares:
  696.                     description: Middlewares is the list of MiddlewareRef which composes
  697.                       the chain.
  698.                     items:
  699.                       description: MiddlewareRef is a reference to a Middleware resource.
  700.                       properties:
  701.                         name:
  702.                           description: Name defines the name of the referenced Middleware
  703.                             resource.
  704.                           type: string
  705.                         namespace:
  706.                           description: Namespace defines the namespace of the referenced
  707.                             Middleware resource.
  708.                           type: string
  709.                       required:
  710.                       - name
  711.                       type: object
  712.                     type: array
  713.                 type: object
  714.               circuitBreaker:
  715.                 description: CircuitBreaker holds the circuit breaker configuration.
  716.                 properties:
  717.                   checkPeriod:
  718.                     anyOf:
  719.                     - type: integer
  720.                     - type: string
  721.                     description: CheckPeriod is the interval between successive checks
  722.                       of the circuit breaker condition (when in standby state).
  723.                     x-kubernetes-int-or-string: true
  724.                   expression:
  725.                     description: Expression is the condition that triggers the tripped
  726.                       state.
  727.                     type: string
  728.                   fallbackDuration:
  729.                     anyOf:
  730.                     - type: integer
  731.                     - type: string
  732.                     description: FallbackDuration is the duration for which the circuit
  733.                       breaker will wait before trying to recover (from a tripped state).
  734.                     x-kubernetes-int-or-string: true
  735.                   recoveryDuration:
  736.                     anyOf:
  737.                     - type: integer
  738.                     - type: string
  739.                     description: RecoveryDuration is the duration for which the circuit
  740.                       breaker will try to recover (as soon as it is in recovering
  741.                       state).
  742.                     x-kubernetes-int-or-string: true
  743.                 type: object
  744.               compress:
  745.                 description: 'Compress holds the compress middleware configuration.
  746.                   This middleware compresses responses before sending them to the
  747.                   client, using gzip compression. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/compress/'
  748.                 properties:
  749.                   excludedContentTypes:
  750.                     description: ExcludedContentTypes defines the list of content
  751.                       types to compare the Content-Type header of the incoming requests
  752.                       and responses before compressing.
  753.                     items:
  754.                       type: string
  755.                     type: array
  756.                   minResponseBodyBytes:
  757.                     description: 'MinResponseBodyBytes defines the minimum amount
  758.                       of bytes a response body must have to be compressed. Default:
  759.                       1024.'
  760.                     type: integer
  761.                 type: object
  762.               contentType:
  763.                 description: ContentType holds the content-type middleware configuration.
  764.                   This middleware exists to enable the correct behavior until at least
  765.                   the default one can be changed in a future version.
  766.                 properties:
  767.                   autoDetect:
  768.                     description: AutoDetect specifies whether to let the `Content-Type`
  769.                       header, if it has not been set by the backend, be automatically
  770.                       set to a value derived from the contents of the response. As
  771.                       a proxy, the default behavior should be to leave the header
  772.                       alone, regardless of what the backend did with it. However,
  773.                       the historic default was to always auto-detect and set the header
  774.                       if it was nil, and it is going to be kept that way in order
  775.                       to support users currently relying on it.
  776.                     type: boolean
  777.                 type: object
  778.               digestAuth:
  779.                 description: 'DigestAuth holds the digest auth middleware configuration.
  780.                   This middleware restricts access to your services to known users.
  781.                   More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/digestauth/'
  782.                 properties:
  783.                   headerField:
  784.                     description: 'HeaderField defines a header field to store the
  785.                       authenticated user. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/basicauth/#headerfield'
  786.                     type: string
  787.                   realm:
  788.                     description: 'Realm allows the protected resources on a server
  789.                       to be partitioned into a set of protection spaces, each with
  790.                       its own authentication scheme. Default: traefik.'
  791.                     type: string
  792.                   removeHeader:
  793.                     description: RemoveHeader defines whether to remove the authorization
  794.                       header before forwarding the request to the backend.
  795.                     type: boolean
  796.                   secret:
  797.                     description: Secret is the name of the referenced Kubernetes Secret
  798.                       containing user credentials.
  799.                     type: string
  800.                 type: object
  801.               errors:
  802.                 description: 'ErrorPage holds the custom error middleware configuration.
  803.                   This middleware returns a custom page in lieu of the default, according
  804.                   to configured ranges of HTTP Status codes. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/errorpages/'
  805.                 properties:
  806.                   query:
  807.                     description: Query defines the URL for the error page (hosted
  808.                       by service). The {status} variable can be used in order to insert
  809.                       the status code in the URL.
  810.                     type: string
  811.                   service:
  812.                     description: 'Service defines the reference to a Kubernetes Service
  813.                       that will serve the error page. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/errorpages/#service'
  814.                     properties:
  815.                       kind:
  816.                         description: Kind defines the kind of the Service.
  817.                         enum:
  818.                         - Service
  819.                         - TraefikService
  820.                         type: string
  821.                       name:
  822.                         description: Name defines the name of the referenced Kubernetes
  823.                           Service or TraefikService. The differentiation between the
  824.                           two is specified in the Kind field.
  825.                         type: string
  826.                       namespace:
  827.                         description: Namespace defines the namespace of the referenced
  828.                           Kubernetes Service or TraefikService.
  829.                         type: string
  830.                       passHostHeader:
  831.                         description: PassHostHeader defines whether the client Host
  832.                           header is forwarded to the upstream Kubernetes Service.
  833.                           By default, passHostHeader is true.
  834.                         type: boolean
  835.                       port:
  836.                         anyOf:
  837.                         - type: integer
  838.                         - type: string
  839.                         description: Port defines the port of a Kubernetes Service.
  840.                           This can be a reference to a named port.
  841.                         x-kubernetes-int-or-string: true
  842.                       responseForwarding:
  843.                         description: ResponseForwarding defines how Traefik forwards
  844.                           the response from the upstream Kubernetes Service to the
  845.                           client.
  846.                         properties:
  847.                           flushInterval:
  848.                             description: 'FlushInterval defines the interval, in milliseconds,
  849.                               in between flushes to the client while copying the response
  850.                               body. A negative value means to flush immediately after
  851.                               each write to the client. This configuration is ignored
  852.                               when ReverseProxy recognizes a response as a streaming
  853.                               response; for such responses, writes are flushed to
  854.                               the client immediately. Default: 100ms'
  855.                             type: string
  856.                         type: object
  857.                       scheme:
  858.                         description: Scheme defines the scheme to use for the request
  859.                           to the upstream Kubernetes Service. It defaults to https
  860.                           when Kubernetes Service port is 443, http otherwise.
  861.                         type: string
  862.                       serversTransport:
  863.                         description: ServersTransport defines the name of ServersTransport
  864.                           resource to use. It allows to configure the transport between
  865.                           Traefik and your servers. Can only be used on a Kubernetes
  866.                           Service.
  867.                         type: string
  868.                       sticky:
  869.                         description: 'Sticky defines the sticky sessions configuration.
  870.                           More info: https://doc.traefik.io/traefik/v2.9/routing/services/#sticky-sessions'
  871.                         properties:
  872.                           cookie:
  873.                             description: Cookie defines the sticky cookie configuration.
  874.                             properties:
  875.                               httpOnly:
  876.                                 description: HTTPOnly defines whether the cookie can
  877.                                   be accessed by client-side APIs, such as JavaScript.
  878.                                 type: boolean
  879.                               name:
  880.                                 description: Name defines the Cookie name.
  881.                                 type: string
  882.                               sameSite:
  883.                                 description: 'SameSite defines the same site policy.
  884.                                   More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  885.                                 type: string
  886.                               secure:
  887.                                 description: Secure defines whether the cookie can
  888.                                   only be transmitted over an encrypted connection
  889.                                   (i.e. HTTPS).
  890.                                 type: boolean
  891.                             type: object
  892.                         type: object
  893.                       strategy:
  894.                         description: Strategy defines the load balancing strategy
  895.                           between the servers. RoundRobin is the only supported value
  896.                           at the moment.
  897.                         type: string
  898.                       weight:
  899.                         description: Weight defines the weight and should only be
  900.                           specified when Name references a TraefikService object (and
  901.                           to be precise, one that embeds a Weighted Round Robin).
  902.                         type: integer
  903.                     required:
  904.                     - name
  905.                     type: object
  906.                   status:
  907.                     description: Status defines which status or range of statuses
  908.                       should result in an error page. It can be either a status code
  909.                       as a number (500), as multiple comma-separated numbers (500,502),
  910.                       as ranges by separating two codes with a dash (500-599), or
  911.                       a combination of the two (404,418,500-599).
  912.                     items:
  913.                       type: string
  914.                     type: array
  915.                 type: object
  916.               forwardAuth:
  917.                 description: 'ForwardAuth holds the forward auth middleware configuration.
  918.                   This middleware delegates the request authentication to a Service.
  919.                   More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/forwardauth/'
  920.                 properties:
  921.                   address:
  922.                     description: Address defines the authentication server address.
  923.                     type: string
  924.                   authRequestHeaders:
  925.                     description: AuthRequestHeaders defines the list of the headers
  926.                       to copy from the request to the authentication server. If not
  927.                       set or empty then all request headers are passed.
  928.                     items:
  929.                       type: string
  930.                     type: array
  931.                   authResponseHeaders:
  932.                     description: AuthResponseHeaders defines the list of headers to
  933.                       copy from the authentication server response and set on forwarded
  934.                       request, replacing any existing conflicting headers.
  935.                     items:
  936.                       type: string
  937.                     type: array
  938.                   authResponseHeadersRegex:
  939.                     description: 'AuthResponseHeadersRegex defines the regex to match
  940.                       headers to copy from the authentication server response and
  941.                       set on forwarded request, after stripping all headers that match
  942.                       the regex. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/forwardauth/#authresponseheadersregex'
  943.                     type: string
  944.                   tls:
  945.                     description: TLS defines the configuration used to secure the
  946.                       connection to the authentication server.
  947.                     properties:
  948.                       caOptional:
  949.                         type: boolean
  950.                       caSecret:
  951.                         description: CASecret is the name of the referenced Kubernetes
  952.                           Secret containing the CA to validate the server certificate.
  953.                           The CA certificate is extracted from key `tls.ca` or `ca.crt`.
  954.                         type: string
  955.                       certSecret:
  956.                         description: CertSecret is the name of the referenced Kubernetes
  957.                           Secret containing the client certificate. The client certificate
  958.                           is extracted from the keys `tls.crt` and `tls.key`.
  959.                         type: string
  960.                       insecureSkipVerify:
  961.                         description: InsecureSkipVerify defines whether the server
  962.                           certificates should be validated.
  963.                         type: boolean
  964.                     type: object
  965.                   trustForwardHeader:
  966.                     description: 'TrustForwardHeader defines whether to trust (ie:
  967.                       forward) all X-Forwarded-* headers.'
  968.                     type: boolean
  969.                 type: object
  970.               headers:
  971.                 description: 'Headers holds the headers middleware configuration.
  972.                   This middleware manages the requests and responses headers. More
  973.                   info: https://doc.traefik.io/traefik/v2.9/middlewares/http/headers/#customrequestheaders'
  974.                 properties:
  975.                   accessControlAllowCredentials:
  976.                     description: AccessControlAllowCredentials defines whether the
  977.                       request can include user credentials.
  978.                     type: boolean
  979.                   accessControlAllowHeaders:
  980.                     description: AccessControlAllowHeaders defines the Access-Control-Request-Headers
  981.                       values sent in preflight response.
  982.                     items:
  983.                       type: string
  984.                     type: array
  985.                   accessControlAllowMethods:
  986.                     description: AccessControlAllowMethods defines the Access-Control-Request-Method
  987.                       values sent in preflight response.
  988.                     items:
  989.                       type: string
  990.                     type: array
  991.                   accessControlAllowOriginList:
  992.                     description: AccessControlAllowOriginList is a list of allowable
  993.                       origins. Can also be a wildcard origin "*".
  994.                     items:
  995.                       type: string
  996.                     type: array
  997.                   accessControlAllowOriginListRegex:
  998.                     description: AccessControlAllowOriginListRegex is a list of allowable
  999.                       origins written following the Regular Expression syntax (https://golang.org/pkg/regexp/).
  1000.                     items:
  1001.                       type: string
  1002.                     type: array
  1003.                   accessControlExposeHeaders:
  1004.                     description: AccessControlExposeHeaders defines the Access-Control-Expose-Headers
  1005.                       values sent in preflight response.
  1006.                     items:
  1007.                       type: string
  1008.                     type: array
  1009.                   accessControlMaxAge:
  1010.                     description: AccessControlMaxAge defines the time that a preflight
  1011.                       request may be cached.
  1012.                     format: int64
  1013.                     type: integer
  1014.                   addVaryHeader:
  1015.                     description: AddVaryHeader defines whether the Vary header is
  1016.                       automatically added/updated when the AccessControlAllowOriginList
  1017.                       is set.
  1018.                     type: boolean
  1019.                   allowedHosts:
  1020.                     description: AllowedHosts defines the fully qualified list of
  1021.                       allowed domain names.
  1022.                     items:
  1023.                       type: string
  1024.                     type: array
  1025.                   browserXssFilter:
  1026.                     description: BrowserXSSFilter defines whether to add the X-XSS-Protection
  1027.                       header with the value 1; mode=block.
  1028.                     type: boolean
  1029.                   contentSecurityPolicy:
  1030.                     description: ContentSecurityPolicy defines the Content-Security-Policy
  1031.                       header value.
  1032.                     type: string
  1033.                   contentTypeNosniff:
  1034.                     description: ContentTypeNosniff defines whether to add the X-Content-Type-Options
  1035.                       header with the nosniff value.
  1036.                     type: boolean
  1037.                   customBrowserXSSValue:
  1038.                     description: CustomBrowserXSSValue defines the X-XSS-Protection
  1039.                       header value. This overrides the BrowserXssFilter option.
  1040.                     type: string
  1041.                   customFrameOptionsValue:
  1042.                     description: CustomFrameOptionsValue defines the X-Frame-Options
  1043.                       header value. This overrides the FrameDeny option.
  1044.                     type: string
  1045.                   customRequestHeaders:
  1046.                     additionalProperties:
  1047.                       type: string
  1048.                     description: CustomRequestHeaders defines the header names and
  1049.                       values to apply to the request.
  1050.                     type: object
  1051.                   customResponseHeaders:
  1052.                     additionalProperties:
  1053.                       type: string
  1054.                     description: CustomResponseHeaders defines the header names and
  1055.                       values to apply to the response.
  1056.                     type: object
  1057.                   featurePolicy:
  1058.                     description: 'Deprecated: use PermissionsPolicy instead.'
  1059.                     type: string
  1060.                   forceSTSHeader:
  1061.                     description: ForceSTSHeader defines whether to add the STS header
  1062.                       even when the connection is HTTP.
  1063.                     type: boolean
  1064.                   frameDeny:
  1065.                     description: FrameDeny defines whether to add the X-Frame-Options
  1066.                       header with the DENY value.
  1067.                     type: boolean
  1068.                   hostsProxyHeaders:
  1069.                     description: HostsProxyHeaders defines the header keys that may
  1070.                       hold a proxied hostname value for the request.
  1071.                     items:
  1072.                       type: string
  1073.                     type: array
  1074.                   isDevelopment:
  1075.                     description: IsDevelopment defines whether to mitigate the unwanted
  1076.                       effects of the AllowedHosts, SSL, and STS options when developing.
  1077.                       Usually testing takes place using HTTP, not HTTPS, and on localhost,
  1078.                       not your production domain. If you would like your development
  1079.                       environment to mimic production with complete Host blocking,
  1080.                       SSL redirects, and STS headers, leave this as false.
  1081.                     type: boolean
  1082.                   permissionsPolicy:
  1083.                     description: PermissionsPolicy defines the Permissions-Policy
  1084.                       header value. This allows sites to control browser features.
  1085.                     type: string
  1086.                   publicKey:
  1087.                     description: PublicKey is the public key that implements HPKP
  1088.                       to prevent MITM attacks with forged certificates.
  1089.                     type: string
  1090.                   referrerPolicy:
  1091.                     description: ReferrerPolicy defines the Referrer-Policy header
  1092.                       value. This allows sites to control whether browsers forward
  1093.                       the Referer header to other sites.
  1094.                     type: string
  1095.                   sslForceHost:
  1096.                     description: 'Deprecated: use RedirectRegex instead.'
  1097.                     type: boolean
  1098.                   sslHost:
  1099.                     description: 'Deprecated: use RedirectRegex instead.'
  1100.                     type: string
  1101.                   sslProxyHeaders:
  1102.                     additionalProperties:
  1103.                       type: string
  1104.                     description: 'SSLProxyHeaders defines the header keys with associated
  1105.                       values that would indicate a valid HTTPS request. It can be
  1106.                       useful when using other proxies (example: "X-Forwarded-Proto":
  1107.                       "https").'
  1108.                     type: object
  1109.                   sslRedirect:
  1110.                     description: 'Deprecated: use EntryPoint redirection or RedirectScheme
  1111.                       instead.'
  1112.                     type: boolean
  1113.                   sslTemporaryRedirect:
  1114.                     description: 'Deprecated: use EntryPoint redirection or RedirectScheme
  1115.                       instead.'
  1116.                     type: boolean
  1117.                   stsIncludeSubdomains:
  1118.                     description: STSIncludeSubdomains defines whether the includeSubDomains
  1119.                       directive is appended to the Strict-Transport-Security header.
  1120.                     type: boolean
  1121.                   stsPreload:
  1122.                     description: STSPreload defines whether the preload flag is appended
  1123.                       to the Strict-Transport-Security header.
  1124.                     type: boolean
  1125.                   stsSeconds:
  1126.                     description: STSSeconds defines the max-age of the Strict-Transport-Security
  1127.                       header. If set to 0, the header is not set.
  1128.                     format: int64
  1129.                     type: integer
  1130.                 type: object
  1131.               inFlightReq:
  1132.                 description: 'InFlightReq holds the in-flight request middleware configuration.
  1133.                   This middleware limits the number of requests being processed and
  1134.                   served concurrently. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/inflightreq/'
  1135.                 properties:
  1136.                   amount:
  1137.                     description: Amount defines the maximum amount of allowed simultaneous
  1138.                       in-flight request. The middleware responds with HTTP 429 Too
  1139.                       Many Requests if there are already amount requests in progress
  1140.                       (based on the same sourceCriterion strategy).
  1141.                     format: int64
  1142.                     type: integer
  1143.                   sourceCriterion:
  1144.                     description: 'SourceCriterion defines what criterion is used to
  1145.                       group requests as originating from a common source. If several
  1146.                       strategies are defined at the same time, an error will be raised.
  1147.                       If none are set, the default is to use the requestHost. More
  1148.                       info: https://doc.traefik.io/traefik/v2.9/middlewares/http/inflightreq/#sourcecriterion'
  1149.                     properties:
  1150.                       ipStrategy:
  1151.                         description: 'IPStrategy holds the IP strategy configuration
  1152.                           used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
  1153.                         properties:
  1154.                           depth:
  1155.                             description: Depth tells Traefik to use the X-Forwarded-For
  1156.                               header and take the IP located at the depth position
  1157.                               (starting from the right).
  1158.                             type: integer
  1159.                           excludedIPs:
  1160.                             description: ExcludedIPs configures Traefik to scan the
  1161.                               X-Forwarded-For header and select the first IP not in
  1162.                               the list.
  1163.                             items:
  1164.                               type: string
  1165.                             type: array
  1166.                         type: object
  1167.                       requestHeaderName:
  1168.                         description: RequestHeaderName defines the name of the header
  1169.                           used to group incoming requests.
  1170.                         type: string
  1171.                       requestHost:
  1172.                         description: RequestHost defines whether to consider the request
  1173.                           Host as the source.
  1174.                         type: boolean
  1175.                     type: object
  1176.                 type: object
  1177.               ipWhiteList:
  1178.                 description: 'IPWhiteList holds the IP whitelist middleware configuration.
  1179.                   This middleware accepts / refuses requests based on the client IP.
  1180.                   More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/'
  1181.                 properties:
  1182.                   ipStrategy:
  1183.                     description: 'IPStrategy holds the IP strategy configuration used
  1184.                       by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
  1185.                     properties:
  1186.                       depth:
  1187.                         description: Depth tells Traefik to use the X-Forwarded-For
  1188.                           header and take the IP located at the depth position (starting
  1189.                           from the right).
  1190.                         type: integer
  1191.                       excludedIPs:
  1192.                         description: ExcludedIPs configures Traefik to scan the X-Forwarded-For
  1193.                           header and select the first IP not in the list.
  1194.                         items:
  1195.                           type: string
  1196.                         type: array
  1197.                     type: object
  1198.                   sourceRange:
  1199.                     description: SourceRange defines the set of allowed IPs (or ranges
  1200.                       of allowed IPs by using CIDR notation).
  1201.                     items:
  1202.                       type: string
  1203.                     type: array
  1204.                 type: object
  1205.               passTLSClientCert:
  1206.                 description: 'PassTLSClientCert holds the pass TLS client cert middleware
  1207.                   configuration. This middleware adds the selected data from the passed
  1208.                   client TLS certificate to a header. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/passtlsclientcert/'
  1209.                 properties:
  1210.                   info:
  1211.                     description: Info selects the specific client certificate details
  1212.                       you want to add to the X-Forwarded-Tls-Client-Cert-Info header.
  1213.                     properties:
  1214.                       issuer:
  1215.                         description: Issuer defines the client certificate issuer
  1216.                           details to add to the X-Forwarded-Tls-Client-Cert-Info header.
  1217.                         properties:
  1218.                           commonName:
  1219.                             description: CommonName defines whether to add the organizationalUnit
  1220.                               information into the issuer.
  1221.                             type: boolean
  1222.                           country:
  1223.                             description: Country defines whether to add the country
  1224.                               information into the issuer.
  1225.                             type: boolean
  1226.                           domainComponent:
  1227.                             description: DomainComponent defines whether to add the
  1228.                               domainComponent information into the issuer.
  1229.                             type: boolean
  1230.                           locality:
  1231.                             description: Locality defines whether to add the locality
  1232.                               information into the issuer.
  1233.                             type: boolean
  1234.                           organization:
  1235.                             description: Organization defines whether to add the organization
  1236.                               information into the issuer.
  1237.                             type: boolean
  1238.                           province:
  1239.                             description: Province defines whether to add the province
  1240.                               information into the issuer.
  1241.                             type: boolean
  1242.                           serialNumber:
  1243.                             description: SerialNumber defines whether to add the serialNumber
  1244.                               information into the issuer.
  1245.                             type: boolean
  1246.                         type: object
  1247.                       notAfter:
  1248.                         description: NotAfter defines whether to add the Not After
  1249.                           information from the Validity part.
  1250.                         type: boolean
  1251.                       notBefore:
  1252.                         description: NotBefore defines whether to add the Not Before
  1253.                           information from the Validity part.
  1254.                         type: boolean
  1255.                       sans:
  1256.                         description: Sans defines whether to add the Subject Alternative
  1257.                           Name information from the Subject Alternative Name part.
  1258.                         type: boolean
  1259.                       serialNumber:
  1260.                         description: SerialNumber defines whether to add the client
  1261.                           serialNumber information.
  1262.                         type: boolean
  1263.                       subject:
  1264.                         description: Subject defines the client certificate subject
  1265.                           details to add to the X-Forwarded-Tls-Client-Cert-Info header.
  1266.                         properties:
  1267.                           commonName:
  1268.                             description: CommonName defines whether to add the organizationalUnit
  1269.                               information into the subject.
  1270.                             type: boolean
  1271.                           country:
  1272.                             description: Country defines whether to add the country
  1273.                               information into the subject.
  1274.                             type: boolean
  1275.                           domainComponent:
  1276.                             description: DomainComponent defines whether to add the
  1277.                               domainComponent information into the subject.
  1278.                             type: boolean
  1279.                           locality:
  1280.                             description: Locality defines whether to add the locality
  1281.                               information into the subject.
  1282.                             type: boolean
  1283.                           organization:
  1284.                             description: Organization defines whether to add the organization
  1285.                               information into the subject.
  1286.                             type: boolean
  1287.                           organizationalUnit:
  1288.                             description: OrganizationalUnit defines whether to add
  1289.                               the organizationalUnit information into the subject.
  1290.                             type: boolean
  1291.                           province:
  1292.                             description: Province defines whether to add the province
  1293.                               information into the subject.
  1294.                             type: boolean
  1295.                           serialNumber:
  1296.                             description: SerialNumber defines whether to add the serialNumber
  1297.                               information into the subject.
  1298.                             type: boolean
  1299.                         type: object
  1300.                     type: object
  1301.                   pem:
  1302.                     description: PEM sets the X-Forwarded-Tls-Client-Cert header with
  1303.                       the certificate.
  1304.                     type: boolean
  1305.                 type: object
  1306.               plugin:
  1307.                 additionalProperties:
  1308.                   x-kubernetes-preserve-unknown-fields: true
  1309.                 description: 'Plugin defines the middleware plugin configuration.
  1310.                   More info: https://doc.traefik.io/traefik/plugins/'
  1311.                 type: object
  1312.               rateLimit:
  1313.                 description: 'RateLimit holds the rate limit configuration. This middleware
  1314.                   ensures that services will receive a fair amount of requests, and
  1315.                   allows one to define what fair is. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ratelimit/'
  1316.                 properties:
  1317.                   average:
  1318.                     description: Average is the maximum rate, by default in requests/s,
  1319.                       allowed for the given source. It defaults to 0, which means
  1320.                       no rate limiting. The rate is actually defined by dividing Average
  1321.                       by Period. So for a rate below 1req/s, one needs to define a
  1322.                       Period larger than a second.
  1323.                     format: int64
  1324.                     type: integer
  1325.                   burst:
  1326.                     description: Burst is the maximum number of requests allowed to
  1327.                       arrive in the same arbitrarily small period of time. It defaults
  1328.                       to 1.
  1329.                     format: int64
  1330.                     type: integer
  1331.                   period:
  1332.                     anyOf:
  1333.                     - type: integer
  1334.                     - type: string
  1335.                     description: 'Period, in combination with Average, defines the
  1336.                       actual maximum rate, such as: r = Average / Period. It defaults
  1337.                       to a second.'
  1338.                     x-kubernetes-int-or-string: true
  1339.                   sourceCriterion:
  1340.                     description: SourceCriterion defines what criterion is used to
  1341.                       group requests as originating from a common source. If several
  1342.                       strategies are defined at the same time, an error will be raised.
  1343.                       If none are set, the default is to use the request's remote
  1344.                       address field (as an ipStrategy).
  1345.                     properties:
  1346.                       ipStrategy:
  1347.                         description: 'IPStrategy holds the IP strategy configuration
  1348.                           used by Traefik to determine the client IP. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/ipwhitelist/#ipstrategy'
  1349.                         properties:
  1350.                           depth:
  1351.                             description: Depth tells Traefik to use the X-Forwarded-For
  1352.                               header and take the IP located at the depth position
  1353.                               (starting from the right).
  1354.                             type: integer
  1355.                           excludedIPs:
  1356.                             description: ExcludedIPs configures Traefik to scan the
  1357.                               X-Forwarded-For header and select the first IP not in
  1358.                               the list.
  1359.                             items:
  1360.                               type: string
  1361.                             type: array
  1362.                         type: object
  1363.                       requestHeaderName:
  1364.                         description: RequestHeaderName defines the name of the header
  1365.                           used to group incoming requests.
  1366.                         type: string
  1367.                       requestHost:
  1368.                         description: RequestHost defines whether to consider the request
  1369.                           Host as the source.
  1370.                         type: boolean
  1371.                     type: object
  1372.                 type: object
  1373.               redirectRegex:
  1374.                 description: 'RedirectRegex holds the redirect regex middleware configuration.
  1375.                   This middleware redirects a request using regex matching and replacement.
  1376.                   More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/redirectregex/#regex'
  1377.                 properties:
  1378.                   permanent:
  1379.                     description: Permanent defines whether the redirection is permanent
  1380.                       (301).
  1381.                     type: boolean
  1382.                   regex:
  1383.                     description: Regex defines the regex used to match and capture
  1384.                       elements from the request URL.
  1385.                     type: string
  1386.                   replacement:
  1387.                     description: Replacement defines how to modify the URL to have
  1388.                       the new target URL.
  1389.                     type: string
  1390.                 type: object
  1391.               redirectScheme:
  1392.                 description: 'RedirectScheme holds the redirect scheme middleware
  1393.                   configuration. This middleware redirects requests from a scheme/port
  1394.                   to another. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/redirectscheme/'
  1395.                 properties:
  1396.                   permanent:
  1397.                     description: Permanent defines whether the redirection is permanent
  1398.                       (301).
  1399.                     type: boolean
  1400.                   port:
  1401.                     description: Port defines the port of the new URL.
  1402.                     type: string
  1403.                   scheme:
  1404.                     description: Scheme defines the scheme of the new URL.
  1405.                     type: string
  1406.                 type: object
  1407.               replacePath:
  1408.                 description: 'ReplacePath holds the replace path middleware configuration.
  1409.                   This middleware replaces the path of the request URL and store the
  1410.                   original path in an X-Replaced-Path header. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/replacepath/'
  1411.                 properties:
  1412.                   path:
  1413.                     description: Path defines the path to use as replacement in the
  1414.                       request URL.
  1415.                     type: string
  1416.                 type: object
  1417.               replacePathRegex:
  1418.                 description: 'ReplacePathRegex holds the replace path regex middleware
  1419.                   configuration. This middleware replaces the path of a URL using
  1420.                   regex matching and replacement. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/replacepathregex/'
  1421.                 properties:
  1422.                   regex:
  1423.                     description: Regex defines the regular expression used to match
  1424.                       and capture the path from the request URL.
  1425.                     type: string
  1426.                   replacement:
  1427.                     description: Replacement defines the replacement path format,
  1428.                       which can include captured variables.
  1429.                     type: string
  1430.                 type: object
  1431.               retry:
  1432.                 description: 'Retry holds the retry middleware configuration. This
  1433.                   middleware reissues requests a given number of times to a backend
  1434.                   server if that server does not reply. As soon as the server answers,
  1435.                   the middleware stops retrying, regardless of the response status.
  1436.                   More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/retry/'
  1437.                 properties:
  1438.                   attempts:
  1439.                     description: Attempts defines how many times the request should
  1440.                       be retried.
  1441.                     type: integer
  1442.                   initialInterval:
  1443.                     anyOf:
  1444.                     - type: integer
  1445.                     - type: string
  1446.                     description: InitialInterval defines the first wait time in the
  1447.                       exponential backoff series. The maximum interval is calculated
  1448.                       as twice the initialInterval. If unspecified, requests will
  1449.                       be retried immediately. The value of initialInterval should
  1450.                       be provided in seconds or as a valid duration format, see https://pkg.go.dev/time#ParseDuration.
  1451.                     x-kubernetes-int-or-string: true
  1452.                 type: object
  1453.               stripPrefix:
  1454.                 description: 'StripPrefix holds the strip prefix middleware configuration.
  1455.                   This middleware removes the specified prefixes from the URL path.
  1456.                   More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/stripprefix/'
  1457.                 properties:
  1458.                   forceSlash:
  1459.                     description: 'ForceSlash ensures that the resulting stripped path
  1460.                       is not the empty string, by replacing it with / when necessary.
  1461.                       Default: true.'
  1462.                     type: boolean
  1463.                   prefixes:
  1464.                     description: Prefixes defines the prefixes to strip from the request
  1465.                       URL.
  1466.                     items:
  1467.                       type: string
  1468.                     type: array
  1469.                 type: object
  1470.               stripPrefixRegex:
  1471.                 description: 'StripPrefixRegex holds the strip prefix regex middleware
  1472.                   configuration. This middleware removes the matching prefixes from
  1473.                   the URL path. More info: https://doc.traefik.io/traefik/v2.9/middlewares/http/stripprefixregex/'
  1474.                 properties:
  1475.                   regex:
  1476.                     description: Regex defines the regular expression to match the
  1477.                       path prefix from the request URL.
  1478.                     items:
  1479.                       type: string
  1480.                     type: array
  1481.                 type: object
  1482.             type: object
  1483.         required:
  1484.         - metadata
  1485.         - spec
  1486.         type: object
  1487.     served: true
  1488.     storage: true
  1489. status:
  1490.   acceptedNames:
  1491.     kind: ""
  1492.     plural: ""
  1493.   conditions: []
  1494.   storedVersions: []
  1496. ---
  1497. apiVersion: apiextensions.k8s.io/v1
  1498. kind: CustomResourceDefinition
  1499. metadata:
  1500.   annotations:
  1501.     controller-gen.kubebuilder.io/version: v0.6.2
  1502.   creationTimestamp: null
  1503.   name: middlewaretcps.traefik.containo.us
  1504. spec:
  1505.   group: traefik.containo.us
  1506.   names:
  1507.     kind: MiddlewareTCP
  1508.     listKind: MiddlewareTCPList
  1509.     plural: middlewaretcps
  1510.     singular: middlewaretcp
  1511.   scope: Namespaced
  1512.   versions:
  1513.   - name: v1alpha1
  1514.     schema:
  1515.       openAPIV3Schema:
  1516.         description: 'MiddlewareTCP is the CRD implementation of a Traefik TCP middleware.
  1517.           More info: https://doc.traefik.io/traefik/v2.9/middlewares/overview/'
  1518.         properties:
  1519.           apiVersion:
  1520.             description: 'APIVersion defines the versioned schema of this representation
  1521.               of an object. Servers should convert recognized schemas to the latest
  1522.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  1523.             type: string
  1524.           kind:
  1525.             description: 'Kind is a string value representing the REST resource this
  1526.               object represents. Servers may infer this from the endpoint the client
  1527.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  1528.             type: string
  1529.           metadata:
  1530.             type: object
  1531.           spec:
  1532.             description: MiddlewareTCPSpec defines the desired state of a MiddlewareTCP.
  1533.             properties:
  1534.               inFlightConn:
  1535.                 description: InFlightConn defines the InFlightConn middleware configuration.
  1536.                 properties:
  1537.                   amount:
  1538.                     description: Amount defines the maximum amount of allowed simultaneous
  1539.                       connections. The middleware closes the connection if there are
  1540.                       already amount connections opened.
  1541.                     format: int64
  1542.                     type: integer
  1543.                 type: object
  1544.               ipWhiteList:
  1545.                 description: IPWhiteList defines the IPWhiteList middleware configuration.
  1546.                 properties:
  1547.                   sourceRange:
  1548.                     description: SourceRange defines the allowed IPs (or ranges of
  1549.                       allowed IPs by using CIDR notation).
  1550.                     items:
  1551.                       type: string
  1552.                     type: array
  1553.                 type: object
  1554.             type: object
  1555.         required:
  1556.         - metadata
  1557.         - spec
  1558.         type: object
  1559.     served: true
  1560.     storage: true
  1561. status:
  1562.   acceptedNames:
  1563.     kind: ""
  1564.     plural: ""
  1565.   conditions: []
  1566.   storedVersions: []
  1568. ---
  1569. apiVersion: apiextensions.k8s.io/v1
  1570. kind: CustomResourceDefinition
  1571. metadata:
  1572.   annotations:
  1573.     controller-gen.kubebuilder.io/version: v0.6.2
  1574.   creationTimestamp: null
  1575.   name: serverstransports.traefik.containo.us
  1576. spec:
  1577.   group: traefik.containo.us
  1578.   names:
  1579.     kind: ServersTransport
  1580.     listKind: ServersTransportList
  1581.     plural: serverstransports
  1582.     singular: serverstransport
  1583.   scope: Namespaced
  1584.   versions:
  1585.   - name: v1alpha1
  1586.     schema:
  1587.       openAPIV3Schema:
  1588.         description: 'ServersTransport is the CRD implementation of a ServersTransport.
  1589.           If no serversTransport is specified, the [email protected] will be used.
  1590.           The [email protected] serversTransport is created from the static configuration.
  1591.           More info: https://doc.traefik.io/traefik/v2.9/routing/services/#serverstransport_1'
  1592.         properties:
  1593.           apiVersion:
  1594.             description: 'APIVersion defines the versioned schema of this representation
  1595.               of an object. Servers should convert recognized schemas to the latest
  1596.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  1597.             type: string
  1598.           kind:
  1599.             description: 'Kind is a string value representing the REST resource this
  1600.               object represents. Servers may infer this from the endpoint the client
  1601.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  1602.             type: string
  1603.           metadata:
  1604.             type: object
  1605.           spec:
  1606.             description: ServersTransportSpec defines the desired state of a ServersTransport.
  1607.             properties:
  1608.               certificatesSecrets:
  1609.                 description: CertificatesSecrets defines a list of secret storing
  1610.                   client certificates for mTLS.
  1611.                 items:
  1612.                   type: string
  1613.                 type: array
  1614.               disableHTTP2:
  1615.                 description: DisableHTTP2 disables HTTP/2 for connections with backend
  1616.                   servers.
  1617.                 type: boolean
  1618.               forwardingTimeouts:
  1619.                 description: ForwardingTimeouts defines the timeouts for requests
  1620.                   forwarded to the backend servers.
  1621.                 properties:
  1622.                   dialTimeout:
  1623.                     anyOf:
  1624.                     - type: integer
  1625.                     - type: string
  1626.                     description: DialTimeout is the amount of time to wait until a
  1627.                       connection to a backend server can be established.
  1628.                     x-kubernetes-int-or-string: true
  1629.                   idleConnTimeout:
  1630.                     anyOf:
  1631.                     - type: integer
  1632.                     - type: string
  1633.                     description: IdleConnTimeout is the maximum period for which an
  1634.                       idle HTTP keep-alive connection will remain open before closing
  1635.                       itself.
  1636.                     x-kubernetes-int-or-string: true
  1637.                   pingTimeout:
  1638.                     anyOf:
  1639.                     - type: integer
  1640.                     - type: string
  1641.                     description: PingTimeout is the timeout after which the HTTP/2
  1642.                       connection will be closed if a response to ping is not received.
  1643.                     x-kubernetes-int-or-string: true
  1644.                   readIdleTimeout:
  1645.                     anyOf:
  1646.                     - type: integer
  1647.                     - type: string
  1648.                     description: ReadIdleTimeout is the timeout after which a health
  1649.                       check using ping frame will be carried out if no frame is received
  1650.                       on the HTTP/2 connection.
  1651.                     x-kubernetes-int-or-string: true
  1652.                   responseHeaderTimeout:
  1653.                     anyOf:
  1654.                     - type: integer
  1655.                     - type: string
  1656.                     description: ResponseHeaderTimeout is the amount of time to wait
  1657.                       for a server's response headers after fully writing the request
  1658.                       (including its body, if any).
  1659.                     x-kubernetes-int-or-string: true
  1660.                 type: object
  1661.               insecureSkipVerify:
  1662.                 description: InsecureSkipVerify disables SSL certificate verification.
  1663.                 type: boolean
  1664.               maxIdleConnsPerHost:
  1665.                 description: MaxIdleConnsPerHost controls the maximum idle (keep-alive)
  1666.                   to keep per-host.
  1667.                 type: integer
  1668.               peerCertURI:
  1669.                 description: PeerCertURI defines the peer cert URI used to match against
  1670.                   SAN URI during the peer certificate verification.
  1671.                 type: string
  1672.               rootCAsSecrets:
  1673.                 description: RootCAsSecrets defines a list of CA secret used to validate
  1674.                   self-signed certificate.
  1675.                 items:
  1676.                   type: string
  1677.                 type: array
  1678.               serverName:
  1679.                 description: ServerName defines the server name used to contact the
  1680.                   server.
  1681.                 type: string
  1682.             type: object
  1683.         required:
  1684.         - metadata
  1685.         - spec
  1686.         type: object
  1687.     served: true
  1688.     storage: true
  1689. status:
  1690.   acceptedNames:
  1691.     kind: ""
  1692.     plural: ""
  1693.   conditions: []
  1694.   storedVersions: []
  1696. ---
  1697. apiVersion: apiextensions.k8s.io/v1
  1698. kind: CustomResourceDefinition
  1699. metadata:
  1700.   annotations:
  1701.     controller-gen.kubebuilder.io/version: v0.6.2
  1702.   creationTimestamp: null
  1703.   name: tlsoptions.traefik.containo.us
  1704. spec:
  1705.   group: traefik.containo.us
  1706.   names:
  1707.     kind: TLSOption
  1708.     listKind: TLSOptionList
  1709.     plural: tlsoptions
  1710.     singular: tlsoption
  1711.   scope: Namespaced
  1712.   versions:
  1713.   - name: v1alpha1
  1714.     schema:
  1715.       openAPIV3Schema:
  1716.         description: 'TLSOption is the CRD implementation of a Traefik TLS Option,
  1717.           allowing to configure some parameters of the TLS connection. More info:
  1718.           https://doc.traefik.io/traefik/v2.9/https/tls/#tls-options'
  1719.         properties:
  1720.           apiVersion:
  1721.             description: 'APIVersion defines the versioned schema of this representation
  1722.               of an object. Servers should convert recognized schemas to the latest
  1723.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  1724.             type: string
  1725.           kind:
  1726.             description: 'Kind is a string value representing the REST resource this
  1727.               object represents. Servers may infer this from the endpoint the client
  1728.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  1729.             type: string
  1730.           metadata:
  1731.             type: object
  1732.           spec:
  1733.             description: TLSOptionSpec defines the desired state of a TLSOption.
  1734.             properties:
  1735.               alpnProtocols:
  1736.                 description: 'ALPNProtocols defines the list of supported application
  1737.                   level protocols for the TLS handshake, in order of preference. More
  1738.                   info: https://doc.traefik.io/traefik/v2.9/https/tls/#alpn-protocols'
  1739.                 items:
  1740.                   type: string
  1741.                 type: array
  1742.               cipherSuites:
  1743.                 description: 'CipherSuites defines the list of supported cipher suites
  1744.                   for TLS versions up to TLS 1.2. More info: https://doc.traefik.io/traefik/v2.9/https/tls/#cipher-suites'
  1745.                 items:
  1746.                   type: string
  1747.                 type: array
  1748.               clientAuth:
  1749.                 description: ClientAuth defines the server's policy for TLS Client
  1750.                   Authentication.
  1751.                 properties:
  1752.                   clientAuthType:
  1753.                     description: ClientAuthType defines the client authentication
  1754.                       type to apply.
  1755.                     enum:
  1756.                     - NoClientCert
  1757.                     - RequestClientCert
  1758.                     - RequireAnyClientCert
  1759.                     - VerifyClientCertIfGiven
  1760.                     - RequireAndVerifyClientCert
  1761.                     type: string
  1762.                   secretNames:
  1763.                     description: SecretNames defines the names of the referenced Kubernetes
  1764.                       Secret storing certificate details.
  1765.                     items:
  1766.                       type: string
  1767.                     type: array
  1768.                 type: object
  1769.               curvePreferences:
  1770.                 description: 'CurvePreferences defines the preferred elliptic curves
  1771.                   in a specific order. More info: https://doc.traefik.io/traefik/v2.9/https/tls/#curve-preferences'
  1772.                 items:
  1773.                   type: string
  1774.                 type: array
  1775.               maxVersion:
  1776.                 description: 'MaxVersion defines the maximum TLS version that Traefik
  1777.                   will accept. Possible values: VersionTLS10, VersionTLS11, VersionTLS12,
  1778.                   VersionTLS13. Default: None.'
  1779.                 type: string
  1780.               minVersion:
  1781.                 description: 'MinVersion defines the minimum TLS version that Traefik
  1782.                   will accept. Possible values: VersionTLS10, VersionTLS11, VersionTLS12,
  1783.                   VersionTLS13. Default: VersionTLS10.'
  1784.                 type: string
  1785.               preferServerCipherSuites:
  1786.                 description: 'PreferServerCipherSuites defines whether the server
  1787.                   chooses a cipher suite among his own instead of among the client''s.
  1788.                   It is enabled automatically when minVersion or maxVersion is set.
  1789.                   Deprecated: https://github.com/golang/go/issues/45430'
  1790.                 type: boolean
  1791.               sniStrict:
  1792.                 description: SniStrict defines whether Traefik allows connections
  1793.                   from clients connections that do not specify a server_name extension.
  1794.                 type: boolean
  1795.             type: object
  1796.         required:
  1797.         - metadata
  1798.         - spec
  1799.         type: object
  1800.     served: true
  1801.     storage: true
  1802. status:
  1803.   acceptedNames:
  1804.     kind: ""
  1805.     plural: ""
  1806.   conditions: []
  1807.   storedVersions: []
  1809. ---
  1810. apiVersion: apiextensions.k8s.io/v1
  1811. kind: CustomResourceDefinition
  1812. metadata:
  1813.   annotations:
  1814.     controller-gen.kubebuilder.io/version: v0.6.2
  1815.   creationTimestamp: null
  1816.   name: tlsstores.traefik.containo.us
  1817. spec:
  1818.   group: traefik.containo.us
  1819.   names:
  1820.     kind: TLSStore
  1821.     listKind: TLSStoreList
  1822.     plural: tlsstores
  1823.     singular: tlsstore
  1824.   scope: Namespaced
  1825.   versions:
  1826.   - name: v1alpha1
  1827.     schema:
  1828.       openAPIV3Schema:
  1829.         description: 'TLSStore is the CRD implementation of a Traefik TLS Store. For
  1830.           the time being, only the TLSStore named default is supported. This means
  1831.           that you cannot have two stores that are named default in different Kubernetes
  1832.           namespaces. More info: https://doc.traefik.io/traefik/v2.9/https/tls/#certificates-stores'
  1833.         properties:
  1834.           apiVersion:
  1835.             description: 'APIVersion defines the versioned schema of this representation
  1836.               of an object. Servers should convert recognized schemas to the latest
  1837.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  1838.             type: string
  1839.           kind:
  1840.             description: 'Kind is a string value representing the REST resource this
  1841.               object represents. Servers may infer this from the endpoint the client
  1842.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  1843.             type: string
  1844.           metadata:
  1845.             type: object
  1846.           spec:
  1847.             description: TLSStoreSpec defines the desired state of a TLSStore.
  1848.             properties:
  1849.               certificates:
  1850.                 description: Certificates is a list of secret names, each secret holding
  1851.                   a key/certificate pair to add to the store.
  1852.                 items:
  1853.                   description: Certificate holds a secret name for the TLSStore resource.
  1854.                   properties:
  1855.                     secretName:
  1856.                       description: SecretName is the name of the referenced Kubernetes
  1857.                         Secret to specify the certificate details.
  1858.                       type: string
  1859.                   required:
  1860.                   - secretName
  1861.                   type: object
  1862.                 type: array
  1863.               defaultCertificate:
  1864.                 description: DefaultCertificate defines the default certificate configuration.
  1865.                 properties:
  1866.                   secretName:
  1867.                     description: SecretName is the name of the referenced Kubernetes
  1868.                       Secret to specify the certificate details.
  1869.                     type: string
  1870.                 required:
  1871.                 - secretName
  1872.                 type: object
  1873.               defaultGeneratedCert:
  1874.                 description: DefaultGeneratedCert defines the default generated certificate
  1875.                   configuration.
  1876.                 properties:
  1877.                   domain:
  1878.                     description: Domain is the domain definition for the DefaultCertificate.
  1879.                     properties:
  1880.                       main:
  1881.                         description: Main defines the main domain name.
  1882.                         type: string
  1883.                       sans:
  1884.                         description: SANs defines the subject alternative domain names.
  1885.                         items:
  1886.                           type: string
  1887.                         type: array
  1888.                     type: object
  1889.                   resolver:
  1890.                     description: Resolver is the name of the resolver that will be
  1891.                       used to issue the DefaultCertificate.
  1892.                     type: string
  1893.                 type: object
  1894.             type: object
  1895.         required:
  1896.         - metadata
  1897.         - spec
  1898.         type: object
  1899.     served: true
  1900.     storage: true
  1901. status:
  1902.   acceptedNames:
  1903.     kind: ""
  1904.     plural: ""
  1905.   conditions: []
  1906.   storedVersions: []
  1908. ---
  1909. apiVersion: apiextensions.k8s.io/v1
  1910. kind: CustomResourceDefinition
  1911. metadata:
  1912.   annotations:
  1913.     controller-gen.kubebuilder.io/version: v0.6.2
  1914.   creationTimestamp: null
  1915.   name: traefikservices.traefik.containo.us
  1916. spec:
  1917.   group: traefik.containo.us
  1918.   names:
  1919.     kind: TraefikService
  1920.     listKind: TraefikServiceList
  1921.     plural: traefikservices
  1922.     singular: traefikservice
  1923.   scope: Namespaced
  1924.   versions:
  1925.   - name: v1alpha1
  1926.     schema:
  1927.       openAPIV3Schema:
  1928.         description: 'TraefikService is the CRD implementation of a Traefik Service.
  1929.           TraefikService object allows to: - Apply weight to Services on load-balancing
  1930.           - Mirror traffic on services More info: https://doc.traefik.io/traefik/v2.9/routing/providers/kubernetes-crd/#kind-traefikservice'
  1931.         properties:
  1932.           apiVersion:
  1933.             description: 'APIVersion defines the versioned schema of this representation
  1934.               of an object. Servers should convert recognized schemas to the latest
  1935.               internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
  1936.             type: string
  1937.           kind:
  1938.             description: 'Kind is a string value representing the REST resource this
  1939.               object represents. Servers may infer this from the endpoint the client
  1940.               submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
  1941.             type: string
  1942.           metadata:
  1943.             type: object
  1944.           spec:
  1945.             description: TraefikServiceSpec defines the desired state of a TraefikService.
  1946.             properties:
  1947.               mirroring:
  1948.                 description: Mirroring defines the Mirroring service configuration.
  1949.                 properties:
  1950.                   kind:
  1951.                     description: Kind defines the kind of the Service.
  1952.                     enum:
  1953.                     - Service
  1954.                     - TraefikService
  1955.                     type: string
  1956.                   maxBodySize:
  1957.                     description: MaxBodySize defines the maximum size allowed for
  1958.                       the body of the request. If the body is larger, the request
  1959.                       is not mirrored. Default value is -1, which means unlimited
  1960.                       size.
  1961.                     format: int64
  1962.                     type: integer
  1963.                   mirrors:
  1964.                     description: Mirrors defines the list of mirrors where Traefik
  1965.                       will duplicate the traffic.
  1966.                     items:
  1967.                       description: MirrorService holds the mirror configuration.
  1968.                       properties:
  1969.                         kind:
  1970.                           description: Kind defines the kind of the Service.
  1971.                           enum:
  1972.                           - Service
  1973.                           - TraefikService
  1974.                           type: string
  1975.                         name:
  1976.                           description: Name defines the name of the referenced Kubernetes
  1977.                             Service or TraefikService. The differentiation between
  1978.                             the two is specified in the Kind field.
  1979.                           type: string
  1980.                         namespace:
  1981.                           description: Namespace defines the namespace of the referenced
  1982.                             Kubernetes Service or TraefikService.
  1983.                           type: string
  1984.                         passHostHeader:
  1985.                           description: PassHostHeader defines whether the client Host
  1986.                             header is forwarded to the upstream Kubernetes Service.
  1987.                             By default, passHostHeader is true.
  1988.                           type: boolean
  1989.                         percent:
  1990.                           description: 'Percent defines the part of the traffic to
  1991.                             mirror. Supported values: 0 to 100.'
  1992.                           type: integer
  1993.                         port:
  1994.                           anyOf:
  1995.                           - type: integer
  1996.                           - type: string
  1997.                           description: Port defines the port of a Kubernetes Service.
  1998.                             This can be a reference to a named port.
  1999.                           x-kubernetes-int-or-string: true
  2000.                         responseForwarding:
  2001.                           description: ResponseForwarding defines how Traefik forwards
  2002.                             the response from the upstream Kubernetes Service to the
  2003.                             client.
  2004.                           properties:
  2005.                             flushInterval:
  2006.                               description: 'FlushInterval defines the interval, in
  2007.                                 milliseconds, in between flushes to the client while
  2008.                                 copying the response body. A negative value means
  2009.                                 to flush immediately after each write to the client.
  2010.                                 This configuration is ignored when ReverseProxy recognizes
  2011.                                 a response as a streaming response; for such responses,
  2012.                                 writes are flushed to the client immediately. Default:
  2013.                                 100ms'
  2014.                               type: string
  2015.                           type: object
  2016.                         scheme:
  2017.                           description: Scheme defines the scheme to use for the request
  2018.                             to the upstream Kubernetes Service. It defaults to https
  2019.                             when Kubernetes Service port is 443, http otherwise.
  2020.                           type: string
  2021.                         serversTransport:
  2022.                           description: ServersTransport defines the name of ServersTransport
  2023.                             resource to use. It allows to configure the transport
  2024.                             between Traefik and your servers. Can only be used on
  2025.                             a Kubernetes Service.
  2026.                           type: string
  2027.                         sticky:
  2028.                           description: 'Sticky defines the sticky sessions configuration.
  2029.                             More info: https://doc.traefik.io/traefik/v2.9/routing/services/#sticky-sessions'
  2030.                           properties:
  2031.                             cookie:
  2032.                               description: Cookie defines the sticky cookie configuration.
  2033.                               properties:
  2034.                                 httpOnly:
  2035.                                   description: HTTPOnly defines whether the cookie
  2036.                                     can be accessed by client-side APIs, such as JavaScript.
  2037.                                   type: boolean
  2038.                                 name:
  2039.                                   description: Name defines the Cookie name.
  2040.                                   type: string
  2041.                                 sameSite:
  2042.                                   description: 'SameSite defines the same site policy.
  2043.                                     More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  2044.                                   type: string
  2045.                                 secure:
  2046.                                   description: Secure defines whether the cookie can
  2047.                                     only be transmitted over an encrypted connection
  2048.                                     (i.e. HTTPS).
  2049.                                   type: boolean
  2050.                               type: object
  2051.                           type: object
  2052.                         strategy:
  2053.                           description: Strategy defines the load balancing strategy
  2054.                             between the servers. RoundRobin is the only supported
  2055.                             value at the moment.
  2056.                           type: string
  2057.                         weight:
  2058.                           description: Weight defines the weight and should only be
  2059.                             specified when Name references a TraefikService object
  2060.                             (and to be precise, one that embeds a Weighted Round Robin).
  2061.                           type: integer
  2062.                       required:
  2063.                       - name
  2064.                       type: object
  2065.                     type: array
  2066.                   name:
  2067.                     description: Name defines the name of the referenced Kubernetes
  2068.                       Service or TraefikService. The differentiation between the two
  2069.                       is specified in the Kind field.
  2070.                     type: string
  2071.                   namespace:
  2072.                     description: Namespace defines the namespace of the referenced
  2073.                       Kubernetes Service or TraefikService.
  2074.                     type: string
  2075.                   passHostHeader:
  2076.                     description: PassHostHeader defines whether the client Host header
  2077.                       is forwarded to the upstream Kubernetes Service. By default,
  2078.                       passHostHeader is true.
  2079.                     type: boolean
  2080.                   port:
  2081.                     anyOf:
  2082.                     - type: integer
  2083.                     - type: string
  2084.                     description: Port defines the port of a Kubernetes Service. This
  2085.                       can be a reference to a named port.
  2086.                     x-kubernetes-int-or-string: true
  2087.                   responseForwarding:
  2088.                     description: ResponseForwarding defines how Traefik forwards the
  2089.                       response from the upstream Kubernetes Service to the client.
  2090.                     properties:
  2091.                       flushInterval:
  2092.                         description: 'FlushInterval defines the interval, in milliseconds,
  2093.                           in between flushes to the client while copying the response
  2094.                           body. A negative value means to flush immediately after
  2095.                           each write to the client. This configuration is ignored
  2096.                           when ReverseProxy recognizes a response as a streaming response;
  2097.                           for such responses, writes are flushed to the client immediately.
  2098.                           Default: 100ms'
  2099.                         type: string
  2100.                     type: object
  2101.                   scheme:
  2102.                     description: Scheme defines the scheme to use for the request
  2103.                       to the upstream Kubernetes Service. It defaults to https when
  2104.                       Kubernetes Service port is 443, http otherwise.
  2105.                     type: string
  2106.                   serversTransport:
  2107.                     description: ServersTransport defines the name of ServersTransport
  2108.                       resource to use. It allows to configure the transport between
  2109.                       Traefik and your servers. Can only be used on a Kubernetes Service.
  2110.                     type: string
  2111.                   sticky:
  2112.                     description: 'Sticky defines the sticky sessions configuration.
  2113.                       More info: https://doc.traefik.io/traefik/v2.9/routing/services/#sticky-sessions'
  2114.                     properties:
  2115.                       cookie:
  2116.                         description: Cookie defines the sticky cookie configuration.
  2117.                         properties:
  2118.                           httpOnly:
  2119.                             description: HTTPOnly defines whether the cookie can be
  2120.                               accessed by client-side APIs, such as JavaScript.
  2121.                             type: boolean
  2122.                           name:
  2123.                             description: Name defines the Cookie name.
  2124.                             type: string
  2125.                           sameSite:
  2126.                             description: 'SameSite defines the same site policy. More
  2127.                               info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  2128.                             type: string
  2129.                           secure:
  2130.                             description: Secure defines whether the cookie can only
  2131.                               be transmitted over an encrypted connection (i.e. HTTPS).
  2132.                             type: boolean
  2133.                         type: object
  2134.                     type: object
  2135.                   strategy:
  2136.                     description: Strategy defines the load balancing strategy between
  2137.                       the servers. RoundRobin is the only supported value at the moment.
  2138.                     type: string
  2139.                   weight:
  2140.                     description: Weight defines the weight and should only be specified
  2141.                       when Name references a TraefikService object (and to be precise,
  2142.                       one that embeds a Weighted Round Robin).
  2143.                     type: integer
  2144.                 required:
  2145.                 - name
  2146.                 type: object
  2147.               weighted:
  2148.                 description: Weighted defines the Weighted Round Robin configuration.
  2149.                 properties:
  2150.                   services:
  2151.                     description: Services defines the list of Kubernetes Service and/or
  2152.                       TraefikService to load-balance, with weight.
  2153.                     items:
  2154.                       description: Service defines an upstream HTTP service to proxy
  2155.                         traffic to.
  2156.                       properties:
  2157.                         kind:
  2158.                           description: Kind defines the kind of the Service.
  2159.                           enum:
  2160.                           - Service
  2161.                           - TraefikService
  2162.                           type: string
  2163.                         name:
  2164.                           description: Name defines the name of the referenced Kubernetes
  2165.                             Service or TraefikService. The differentiation between
  2166.                             the two is specified in the Kind field.
  2167.                           type: string
  2168.                         namespace:
  2169.                           description: Namespace defines the namespace of the referenced
  2170.                             Kubernetes Service or TraefikService.
  2171.                           type: string
  2172.                         passHostHeader:
  2173.                           description: PassHostHeader defines whether the client Host
  2174.                             header is forwarded to the upstream Kubernetes Service.
  2175.                             By default, passHostHeader is true.
  2176.                           type: boolean
  2177.                         port:
  2178.                           anyOf:
  2179.                           - type: integer
  2180.                           - type: string
  2181.                           description: Port defines the port of a Kubernetes Service.
  2182.                             This can be a reference to a named port.
  2183.                           x-kubernetes-int-or-string: true
  2184.                         responseForwarding:
  2185.                           description: ResponseForwarding defines how Traefik forwards
  2186.                             the response from the upstream Kubernetes Service to the
  2187.                             client.
  2188.                           properties:
  2189.                             flushInterval:
  2190.                               description: 'FlushInterval defines the interval, in
  2191.                                 milliseconds, in between flushes to the client while
  2192.                                 copying the response body. A negative value means
  2193.                                 to flush immediately after each write to the client.
  2194.                                 This configuration is ignored when ReverseProxy recognizes
  2195.                                 a response as a streaming response; for such responses,
  2196.                                 writes are flushed to the client immediately. Default:
  2197.                                 100ms'
  2198.                               type: string
  2199.                           type: object
  2200.                         scheme:
  2201.                           description: Scheme defines the scheme to use for the request
  2202.                             to the upstream Kubernetes Service. It defaults to https
  2203.                             when Kubernetes Service port is 443, http otherwise.
  2204.                           type: string
  2205.                         serversTransport:
  2206.                           description: ServersTransport defines the name of ServersTransport
  2207.                             resource to use. It allows to configure the transport
  2208.                             between Traefik and your servers. Can only be used on
  2209.                             a Kubernetes Service.
  2210.                           type: string
  2211.                         sticky:
  2212.                           description: 'Sticky defines the sticky sessions configuration.
  2213.                             More info: https://doc.traefik.io/traefik/v2.9/routing/services/#sticky-sessions'
  2214.                           properties:
  2215.                             cookie:
  2216.                               description: Cookie defines the sticky cookie configuration.
  2217.                               properties:
  2218.                                 httpOnly:
  2219.                                   description: HTTPOnly defines whether the cookie
  2220.                                     can be accessed by client-side APIs, such as JavaScript.
  2221.                                   type: boolean
  2222.                                 name:
  2223.                                   description: Name defines the Cookie name.
  2224.                                   type: string
  2225.                                 sameSite:
  2226.                                   description: 'SameSite defines the same site policy.
  2227.                                     More info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  2228.                                   type: string
  2229.                                 secure:
  2230.                                   description: Secure defines whether the cookie can
  2231.                                     only be transmitted over an encrypted connection
  2232.                                     (i.e. HTTPS).
  2233.                                   type: boolean
  2234.                               type: object
  2235.                           type: object
  2236.                         strategy:
  2237.                           description: Strategy defines the load balancing strategy
  2238.                             between the servers. RoundRobin is the only supported
  2239.                             value at the moment.
  2240.                           type: string
  2241.                         weight:
  2242.                           description: Weight defines the weight and should only be
  2243.                             specified when Name references a TraefikService object
  2244.                             (and to be precise, one that embeds a Weighted Round Robin).
  2245.                           type: integer
  2246.                       required:
  2247.                       - name
  2248.                       type: object
  2249.                     type: array
  2250.                   sticky:
  2251.                     description: 'Sticky defines whether sticky sessions are enabled.
  2252.                       More info: https://doc.traefik.io/traefik/v2.9/routing/providers/kubernetes-crd/#stickiness-and-load-balancing'
  2253.                     properties:
  2254.                       cookie:
  2255.                         description: Cookie defines the sticky cookie configuration.
  2256.                         properties:
  2257.                           httpOnly:
  2258.                             description: HTTPOnly defines whether the cookie can be
  2259.                               accessed by client-side APIs, such as JavaScript.
  2260.                             type: boolean
  2261.                           name:
  2262.                             description: Name defines the Cookie name.
  2263.                             type: string
  2264.                           sameSite:
  2265.                             description: 'SameSite defines the same site policy. More
  2266.                               info: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite'
  2267.                             type: string
  2268.                           secure:
  2269.                             description: Secure defines whether the cookie can only
  2270.                               be transmitted over an encrypted connection (i.e. HTTPS).
  2271.                             type: boolean
  2272.                         type: object
  2273.                     type: object
  2274.                 type: object
  2275.             type: object
  2276.         required:
  2277.         - metadata
  2278.         - spec
  2279.         type: object
  2280.     served: true
  2281.     storage: true
  2282. status:
  2283.   acceptedNames:
  2284.     kind: ""
  2285.     plural: ""
  2286.   conditions: []
  2287.   storedVersions: []

apiextensions.k8s.io/v1beta1 (Deprecated)

apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: ingressroutes.traefik.containo.us

spec:
  group: traefik.containo.us
  version: v1alpha1
  names:
    kind: IngressRoute
    plural: ingressroutes
    singular: ingressroute
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: middlewares.traefik.containo.us

spec:
  group: traefik.containo.us
  version: v1alpha1
  names:
    kind: Middleware
    plural: middlewares
    singular: middleware
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: middlewaretcps.traefik.containo.us

spec:
  group: traefik.containo.us
  version: v1alpha1
  names:
    kind: MiddlewareTCP
    plural: middlewaretcps
    singular: middlewaretcp
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: ingressroutetcps.traefik.containo.us

spec:
  group: traefik.containo.us
  version: v1alpha1
  names:
    kind: IngressRouteTCP
    plural: ingressroutetcps
    singular: ingressroutetcp
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: ingressrouteudps.traefik.containo.us

spec:
  group: traefik.containo.us
  version: v1alpha1
  names:
    kind: IngressRouteUDP
    plural: ingressrouteudps
    singular: ingressrouteudp
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: tlsoptions.traefik.containo.us

spec:
  group: traefik.containo.us
  version: v1alpha1
  names:
    kind: TLSOption
    plural: tlsoptions
    singular: tlsoption
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: tlsstores.traefik.containo.us

spec:
  group: traefik.containo.us
  version: v1alpha1
  names:
    kind: TLSStore
    plural: tlsstores
    singular: tlsstore
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: traefikservices.traefik.containo.us

spec:
  group: traefik.containo.us
  version: v1alpha1
  names:
    kind: TraefikService
    plural: traefikservices
    singular: traefikservice
  scope: Namespaced

---
apiVersion: apiextensions.k8s.io/v1beta1
kind: CustomResourceDefinition
metadata:
  name: serverstransports.traefik.containo.us

spec:
  group: traefik.containo.us
  version: v1alpha1
  names:
    kind: ServersTransport
    plural: serverstransports
    singular: serverstransport
  scope: Namespaced

Resources

apiVersion: traefik.containo.us/v1alpha1
kind: TraefikService
metadata:
  name: wrr2
  namespace: default

spec:
  weighted:
    services:
      - name: s1
        weight: 1
        port: 80
        # Optional, as it is the default value
        kind: Service
      - name: s3
        weight: 1
        port: 80

---
apiVersion: traefik.containo.us/v1alpha1
kind: TraefikService
metadata:
  name: wrr1
  namespace: default

spec:
  weighted:
    services:
      - name: wrr2
        kind: TraefikService
        weight: 1
      - name: s3
        weight: 1
        port: 80

---
apiVersion: traefik.containo.us/v1alpha1
kind: TraefikService
metadata:
  name: mirror1
  namespace: default

spec:
  mirroring:
    name: s1
    port: 80
    mirrors:
      - name: s3
        percent: 20
        port: 80
      - name: mirror2
        kind: TraefikService
        percent: 20

---
apiVersion: traefik.containo.us/v1alpha1
kind: TraefikService
metadata:
  name: mirror2
  namespace: default

spec:
  mirroring:
    name: wrr2
    kind: TraefikService
    # Optional
    maxBodySize: 2000000000
    mirrors:
      - name: s2
        # Optional, as it is the default value
        kind: Service
        percent: 20
        port: 80

---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: ingressroute

spec:
  entryPoints:
    - web
    - websecure
  routes:
    - match: Host(`example.net`) && PathPrefix(`/bar`)
      kind: Rule
      priority: 12
      # defining several services is possible and allowed, but for now the servers of
      # all the services (for a given route) get merged altogether under the same
      # load-balancing strategy.
      services:
        - name: s1
          port: 80
          # strategy defines the load balancing strategy between the servers. It defaults
          # to Round Robin, and for now only Round Robin is supported anyway.
          strategy: RoundRobin
        - name: s2
          port: 433
          serversTransport: mytransport
    - match: PathPrefix(`/misc`)
      kind: Rule
      services:
        - name: s3
          port: 80
      middlewares:
        - name: stripprefix
        - name: addprefix
    - match: PathPrefix(`/misc`)
      kind: Rule
      services:
        - name: s3
          # Optional, as it is the default value
          kind: Service
          port: 8443
          # scheme allow to override the scheme for the service. (ex: https or h2c)
          scheme: https
    - match: PathPrefix(`/lb`)
      kind: Rule
      services:
        - name: wrr1
          kind: TraefikService
    - match: PathPrefix(`/mirrored`)
      kind: Rule
      services:
        - name: mirror1
          kind: TraefikService
  # use an empty tls object for TLS with Let's Encrypt
  tls:
    secretName: supersecret
    options:
      name: my-tls-option
      namespace: default

---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRouteTCP
metadata:
  name: ingressroutetcp.crd
  namespace: default

spec:
  entryPoints:
    - footcp
  routes:
    - match: HostSNI(`example.com`)
      services:
        - name: whoamitcp
          port: 8080
      middlewares:
        - name: ipwhitelist
  tls:
    secretName: foosecret
    passthrough: false
    options:
      name: my-tls-option
      namespace: default

---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRouteUDP
metadata:
  name: ingressrouteudp.crd
  namespace: default

spec:
  entryPoints:
    - footcp
  routes:
    - services:
        - name: whoamiudp
          port: 8080

---
apiVersion: traefik.containo.us/v1alpha1
kind: TLSOption
metadata:
  name: tlsoption
  namespace: default

spec:
  minVersion: foobar
  maxVersion: foobar
  cipherSuites:
    - foobar
    - foobar
  curvePreferences:
    - foobar
    - foobar
  clientAuth:
    secretNames:
      - foobar
      - foobar
    clientAuthType: RequireAndVerifyClientCert
  sniStrict: true
  preferServerCipherSuites: true
  alpnProtocols:
    - foobar
    - foobar

---
apiVersion: traefik.containo.us/v1alpha1
kind: ServersTransport
metadata:
  name: mytransport
  namespace: default

spec:
  serverName: foobar
  insecureSkipVerify: true
  rootCAsSecrets:
    - foobar
    - foobar
  certificatesSecrets:
    - foobar
    - foobar
  maxIdleConnsPerHost: 1
  forwardingTimeouts:
    dialTimeout: 42s
    responseHeaderTimeout: 42s
    idleConnTimeout: 42s
  disableHTTP2: true

RBAC

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: traefik-ingress-controller

rules:
  - apiGroups:
      - ""
    resources:
      - services
      - endpoints
      - secrets
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - extensions
      - networking.k8s.io
    resources:
      - ingresses
      - ingressclasses
    verbs:
      - get
      - list
      - watch
  - apiGroups:
      - extensions
      - networking.k8s.io
    resources:
      - ingresses/status
    verbs:
      - update
  - apiGroups:
      - traefik.containo.us
    resources:
      - middlewares
      - middlewaretcps
      - ingressroutes
      - traefikservices
      - ingressroutetcps
      - ingressrouteudps
      - tlsoptions
      - tlsstores
      - serverstransports
    verbs:
      - get
      - list
      - watch

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: traefik-ingress-controller

roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: traefik-ingress-controller
subjects:
  - kind: ServiceAccount
    name: traefik-ingress-controller
    namespace: default