ServersTransport
traefik.io / v1alpha1
apiVersion: traefik.io/v1alpha1
kind: ServersTransport
metadata:
name: example
apiVersion
string
APIVersion defines the versioned schema of this representation of an object.
Servers should convert recognized schemas to the latest internal value, and
may reject unrecognized values.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
kind
string
Kind is a string value representing the REST resource this object represents.
Servers may infer this from the endpoint the client submits requests to.
Cannot be updated.
In CamelCase.
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
metadata
object required
spec object required
ServersTransportSpec defines the desired state of a ServersTransport.
certificatesSecrets
[]string
CertificatesSecrets defines a list of secret storing client certificates for mTLS.
cipherSuites
[]string
CipherSuites defines the cipher suites to use when contacting backend servers.
disableHTTP2
boolean
DisableHTTP2 disables HTTP/2 for connections with backend servers.
forwardingTimeouts object
ForwardingTimeouts defines the timeouts for requests forwarded to the backend servers.
dialTimeout
string | integer
DialTimeout is the amount of time to wait until a connection to a backend server can be established.
string pattern:
^([0-9]+(ns|us|µs|ms|s|m|h)?)+$
idleConnTimeout
string | integer
IdleConnTimeout is the maximum period for which an idle HTTP keep-alive connection will remain open before closing itself.
string pattern:
^([0-9]+(ns|us|µs|ms|s|m|h)?)+$
pingTimeout
string | integer
PingTimeout is the timeout after which the HTTP/2 connection will be closed if a response to ping is not received.
string pattern:
^([0-9]+(ns|us|µs|ms|s|m|h)?)+$
readIdleTimeout
string | integer
ReadIdleTimeout is the timeout after which a health check using ping frame will be carried out if no frame is received on the HTTP/2 connection.
string pattern:
^([0-9]+(ns|us|µs|ms|s|m|h)?)+$
responseHeaderTimeout
string | integer
ResponseHeaderTimeout is the amount of time to wait for a server's response headers after fully writing the request (including its body, if any).
string pattern:
^([0-9]+(ns|us|µs|ms|s|m|h)?)+$
insecureSkipVerify
boolean
InsecureSkipVerify disables SSL certificate verification.
maxIdleConnsPerHost
integer
MaxIdleConnsPerHost controls the maximum idle (keep-alive) to keep per-host.
minimum:
-1
maxVersion
string
MaxVersion defines the maximum TLS version to use when contacting backend servers.
minVersion
string
MinVersion defines the minimum TLS version to use when contacting backend servers.
peerCertSANs []object
PeerCertSANs defines the peer cert Subject Alternative Names used to match against SAN during the peer certificate verification.
type
string
SANType is the type of the Subject Alternative Name.
value
string
peerCertURI
string
PeerCertURI defines the peer cert URI used to match against SAN URI during the peer certificate verification.
Deprecated: PeerCertURI is deprecated, please use the PeerCertSANs option instead.
rootCAs []object
RootCAs defines a list of CA certificate Secrets or ConfigMaps used to validate server certificates.
configMap
string
ConfigMap defines the name of a ConfigMap that holds a CA certificate.
The referenced ConfigMap must contain a certificate under either a tls.ca or a ca.crt key.
secret
string
Secret defines the name of a Secret that holds a CA certificate.
The referenced Secret must contain a certificate under either a tls.ca or a ca.crt key.
rootCAsSecrets
[]string
RootCAsSecrets defines a list of CA secret used to validate self-signed certificate.
Deprecated: RootCAsSecrets is deprecated, please use the RootCAs option instead.
serverName
string
ServerName defines the server name used to contact the server.
spiffe object
Spiffe defines the SPIFFE configuration.
ids
[]string
IDs defines the allowed SPIFFE IDs (takes precedence over the SPIFFE TrustDomain).
trustDomain
string
TrustDomain defines the allowed SPIFFE trust domain.
No matches. Try .spec.certificatesSecrets for an exact path