Skip to search

Gateway

networking.istio.io / v1

apiVersion: networking.istio.io/v1 kind: Gateway metadata: name: example
View raw schema
spec object
Configuration affecting edge load balancer. See more details at: https://istio.io/docs/reference/config/networking/gateway.html
selector object
One or more labels that indicate a specific set of pods/VMs on which this gateway configuration should be applied.
servers []object
A list of server specifications.
bind string
The ip or the Unix domain socket to which the listener should be bound to.
defaultEndpoint string
hosts []string required
One or more hosts exposed by this gateway.
name string
An optional name of the server, when set must be unique across all servers.
port object required
The Port on which the proxy should listen for incoming connections.
name string required
Label assigned to the port.
number integer required
A valid non-negative integer port number.
minimum: 0
maximum: 4.294967295e+09
protocol string required
The protocol exposed on the port.
targetPort integer
minimum: 0
maximum: 4.294967295e+09
tls object
Set of TLS related options that govern the server's behavior.
caCertificates string
REQUIRED if mode is `MUTUAL` or `OPTIONAL_MUTUAL`.
caCrl string
OPTIONAL: The path to the file containing the certificate revocation list (CRL) to use in verifying a presented client side certificate.
cipherSuites []string
Optional: If specified, only support the specified cipher list.
credentialName string
For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates.
httpsRedirect boolean
If set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.
maxProtocolVersion string
Optional: Maximum TLS protocol version. Valid Options: TLS_AUTO, TLSV1_0, TLSV1_1, TLSV1_2, TLSV1_3
enum: TLS_AUTO, TLSV1_0, TLSV1_1, TLSV1_2, TLSV1_3
minProtocolVersion string
Optional: Minimum TLS protocol version. Valid Options: TLS_AUTO, TLSV1_0, TLSV1_1, TLSV1_2, TLSV1_3
enum: TLS_AUTO, TLSV1_0, TLSV1_1, TLSV1_2, TLSV1_3
mode string
Optional: Indicates whether connections to this port should be secured using TLS. Valid Options: PASSTHROUGH, SIMPLE, MUTUAL, AUTO_PASSTHROUGH, ISTIO_MUTUAL, OPTIONAL_MUTUAL
enum: PASSTHROUGH, SIMPLE, MUTUAL, AUTO_PASSTHROUGH, ISTIO_MUTUAL, OPTIONAL_MUTUAL
privateKey string
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
serverCertificate string
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
subjectAltNames []string
A list of alternate names to verify the subject identity in the certificate presented by the client.
verifyCertificateHash []string
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates.
verifyCertificateSpki []string
An optional list of base64-encoded SHA-256 hashes of the SPKIs of authorized client certificates.
status object

No matches. Try .spec.selector for an exact path