Skip to search

Gateway

networking.istio.io / v1

apiVersion: networking.istio.io/v1 kind: Gateway metadata: name: example
View raw schema
spec object
Configuration affecting edge load balancer. See more details at: https://istio.io/docs/reference/config/networking/gateway.html
selector object
One or more labels that indicate a specific set of pods/VMs on which this gateway configuration should be applied.
servers []object
A list of server specifications.
bind string
The ip or the Unix domain socket to which the listener should be bound to.
defaultEndpoint string
hosts []string required
One or more hosts exposed by this gateway.
name string
An optional name of the server, when set must be unique across all servers.
port object required
The Port on which the proxy should listen for incoming connections.
name string required
Label assigned to the port.
number integer required
A valid non-negative integer port number.
minimum: 0
maximum: 4.294967295e+09
protocol string required
The protocol exposed on the port.
targetPort integer
minimum: 0
maximum: 4.294967295e+09
tls object
Set of TLS related options that govern the server's behavior.
caCertCredentialName string
For mutual TLS, the name of the secret or the configmap that holds CA certificates.
caCertificates string
REQUIRED if mode is `MUTUAL` or `OPTIONAL_MUTUAL`.
caCrl string
OPTIONAL: The path to the file containing the certificate revocation list (CRL) to use in verifying a presented client side certificate.
cipherSuites []string
Optional: If specified, only support the specified cipher list.
credentialName string
For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates.
credentialNames []string
Same as CredentialName but for multiple certificates.
minItems: 1
maxItems: 2
httpsRedirect boolean
If set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.
maxProtocolVersion string
Optional: Maximum TLS protocol version. Valid Options: TLS_AUTO, TLSV1_0, TLSV1_1, TLSV1_2, TLSV1_3
enum: TLS_AUTO, TLSV1_0, TLSV1_1, TLSV1_2, TLSV1_3
minProtocolVersion string
Optional: Minimum TLS protocol version. Valid Options: TLS_AUTO, TLSV1_0, TLSV1_1, TLSV1_2, TLSV1_3
enum: TLS_AUTO, TLSV1_0, TLSV1_1, TLSV1_2, TLSV1_3
mode string
Optional: Indicates whether connections to this port should be secured using TLS. Valid Options: PASSTHROUGH, SIMPLE, MUTUAL, AUTO_PASSTHROUGH, ISTIO_MUTUAL, OPTIONAL_MUTUAL
enum: PASSTHROUGH, SIMPLE, MUTUAL, AUTO_PASSTHROUGH, ISTIO_MUTUAL, OPTIONAL_MUTUAL
privateKey string
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
serverCertificate string
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
subjectAltNames []string
A list of alternate names to verify the subject identity in the certificate presented by the client.
tlsCertificates []object
Only one of `server_certificate`, `private_key` or `credential_name` or `credential_names` or `tls_certificates` should be specified.
minItems: 1
maxItems: 2
caCertificates string
privateKey string
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
serverCertificate string
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
verifyCertificateHash []string
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates.
verifyCertificateSpki []string
An optional list of base64-encoded SHA-256 hashes of the SPKIs of authorized client certificates.
status object
conditions []object
Current service state of the resource.
lastProbeTime string
Last time we probed the condition.
format: date-time
lastTransitionTime string
Last time the condition transitioned from one status to another.
format: date-time
message string
Human-readable message indicating details about last transition.
observedGeneration string | integer
Resource Generation to which the Condition refers.
reason string
Unique, one-word, CamelCase reason for the condition's last transition.
status string
Status is the status of the condition.
type string
Type is the type of the condition.
observedGeneration string | integer
validationMessages []object
Includes any errors or warnings detected by Istio's analyzers.
documentationUrl string
A url pointing to the Istio documentation for this specific error type.
level string
Represents how severe a message is. Valid Options: UNKNOWN, ERROR, WARNING, INFO
enum: UNKNOWN, ERROR, WARNING, INFO
type object
code string
A 7 character code matching `^IST[0-9]{4}$` intended to uniquely identify the message type.
name string
A human-readable name for the message type.

No matches. Try .spec.selector for an exact path