このページは、まだ日本語ではご利用いただけません。翻訳中です。
Custom Resource Definitions API Reference
Packages
- configuration.konghq.com/v1
- configuration.konghq.com/v1alpha1
- configuration.konghq.com/v1beta1
- gateway-operator.konghq.com/v1alpha1
- gateway-operator.konghq.com/v1beta1
- konnect.konghq.com/v1alpha1
configuration.konghq.com/v1
Package v1 contains API Schema definitions for the konghq.com v1 API group.
KongConsumer
KongConsumer is the Schema for the kongconsumers API.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1 |
kind string
|
KongConsumer |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
username string
|
Username is a Kong cluster-unique username of the consumer. |
custom_id string
|
CustomID is a Kong cluster-unique existing ID for the consumer - useful for mapping Kong with users in your existing database. |
credentials string array
|
Credentials are references to secrets containing a credential to be provisioned in Kong. |
consumerGroups string array
|
ConsumerGroups are references to consumer groups (that consumer wants to be part of) provisioned in Kong. |
spec KongConsumerSpec
|
|
status KongConsumerStatus
|
Status represents the current status of the KongConsumer resource. |
KongPlugin
KongPlugin is the Schema for the kongplugins API.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1 |
kind string
|
KongPlugin |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
consumerRef string
|
ConsumerRef is a reference to a particular consumer. |
disabled boolean
|
Disabled set if the plugin is disabled or not. |
config JSON
|
Config contains the plugin configuration. It’s a list of keys and values required to configure the plugin. Please read the documentation of the plugin being configured to set values in here. For any plugin in Kong, anything that goes in the config JSON key in the Admin API request, goes into this property. Only one of config or configFrom may be used in a KongPlugin, not both at once. |
plugin string
|
PluginName is the name of the plugin to which to apply the config. |
run_on string
|
RunOn configures the plugin to run on the first or the second or both nodes in case of a service mesh deployment. |
protocols KongProtocol array
|
Protocols configures plugin to run on requests received on specific protocols. |
ordering PluginOrdering
|
Ordering overrides the normal plugin execution order. It’s only available on Kong Enterprise. <phase> is a request processing phase (for example, access or body_filter ) and <plugin> is the name of the plugin that will run before or after the KongPlugin. For example, a KongPlugin with plugin: rate-limiting and before.access: ["key-auth"] will create a rate limiting plugin that limits requests before they are authenticated. |
instance_name string
|
InstanceName is an optional custom name to identify an instance of the plugin. This is useful when running the same plugin in multiple contexts, for example, on multiple services. |
status KongPluginStatus
|
Status represents the current status of the KongPlugin resource. |
Types
In this section you will find types that the CRDs rely on.
KongConsumerSpec
KongConsumerSpec defines the specification of the KongConsumer.
Field | Description |
---|---|
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef is a reference to a ControlPlane this Consumer is associated with. |
tags Tags
|
Tags is an optional set of tags applied to the consumer. |
Appears in:
KongConsumerStatus
KongConsumerStatus represents the current status of the KongConsumer resource.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneRef
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the current conditions of the KongConsumer. Known condition types are: * “Programmed” |
Appears in:
KongPluginStatus
KongPluginStatus represents the current status of the KongPlugin resource.
Field | Description |
---|---|
conditions Condition array
|
Conditions describe the current conditions of the KongPluginStatus. Known condition types are: * “Programmed” |
Appears in:
KongProtocol
Underlying type: string
KongProtocol is a valid Kong protocol. This alias is necessary to deal with https://github.com/kubernetes-sigs/controller-tools/issues/342
Appears in:
configuration.konghq.com/v1alpha1
Package v1alpha1 contains API Schema definitions for the configuration.konghq.com v1alpha1 API group.
- KongCACertificate
- KongCertificate
- KongCredentialACL
- KongCredentialAPIKey
- KongCredentialBasicAuth
- KongCredentialHMAC
- KongCredentialJWT
- KongDataPlaneClientCertificate
- KongKey
- KongKeySet
- KongLicense
- KongPluginBinding
- KongRoute
- KongSNI
- KongService
- KongTarget
- KongUpstream
- KongVault
KongCACertificate
KongCACertificate is the schema for CACertificate API which defines a Kong CA Certificate.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongCACertificate |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongCACertificateSpec
|
|
status KongCACertificateStatus
|
KongCertificate
KongCertificate is the schema for Certificate API which defines a Kong Certificate.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongCertificate |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongCertificateSpec
|
|
status KongCertificateStatus
|
KongCredentialACL
KongCredentialACL is the schema for ACL credentials API which defines a ACL credential for consumers.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongCredentialACL |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongCredentialACLSpec
|
Spec contains the ACL credential specification. |
status KongCredentialACLStatus
|
Status contains the ACL credential status. |
KongCredentialAPIKey
KongCredentialAPIKey is the schema for API key credentials API which defines a API key credential for consumers.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongCredentialAPIKey |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongCredentialAPIKeySpec
|
Spec contains the API Key credential specification. |
status KongCredentialAPIKeyStatus
|
Status contains the API Key credential status. |
KongCredentialBasicAuth
KongCredentialBasicAuth is the schema for BasicAuth credentials API which defines a BasicAuth credential for consumers.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongCredentialBasicAuth |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongCredentialBasicAuthSpec
|
Spec contains the BasicAuth credential specification. |
status KongCredentialBasicAuthStatus
|
Status contains the BasicAuth credential status. |
KongCredentialHMAC
KongCredentialHMAC is the schema for HMAC credentials API which defines a HMAC credential for consumers.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongCredentialHMAC |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongCredentialHMACSpec
|
Spec contains the HMAC credential specification. |
status KongCredentialHMACStatus
|
Status contains the HMAC credential status. |
KongCredentialJWT
KongCredentialJWT is the schema for JWT credentials API which defines a JWT credential for consumers.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongCredentialJWT |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongCredentialJWTSpec
|
Spec contains the JWT credential specification. |
status KongCredentialJWTStatus
|
Status contains the JWT credential status. |
KongDataPlaneClientCertificate
KongDataPlaneClientCertificate is the schema for KongDataPlaneClientCertificate API which defines a KongDataPlaneClientCertificate entity.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongDataPlaneClientCertificate |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongDataPlaneClientCertificateSpec
|
|
status KongDataPlaneClientCertificateStatus
|
KongKey
KongKey is the schema for KongKey API which defines a KongKey entity.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongKey |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongKeySpec
|
|
status KongKeyStatus
|
KongKeySet
KongKeySet is the schema for KongKeySet API which defines a KongKeySet entity.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongKeySet |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongKeySetSpec
|
|
status KongKeySetStatus
|
KongLicense
KongLicense stores a Kong enterprise license to apply to managed Kong gateway instances.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongLicense |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
rawLicenseString string
|
RawLicenseString is a string with the raw content of the license. |
enabled boolean
|
Enabled is set to true to let controllers (like KIC or KGO) to reconcile it. Default value is true to apply the license by default. |
status KongLicenseStatus
|
Status is the status of the KongLicense being processed by controllers. |
KongPluginBinding
KongPluginBinding is the schema for Plugin Bindings API which defines a Kong Plugin Binding.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongPluginBinding |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongPluginBindingSpec
|
|
status KongPluginBindingStatus
|
KongRoute
KongRoute is the schema for Routes API which defines a Kong Route.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongRoute |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongRouteSpec
|
|
status KongRouteStatus
|
KongSNI
KongSNI is the schema for SNI API which defines a Kong SNI.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongSNI |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongSNISpec
|
|
status KongSNIStatus
|
KongService
KongService is the schema for Services API which defines a Kong Service.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongService |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongServiceSpec
|
|
status KongServiceStatus
|
KongTarget
KongTarget is the schema for Target API which defines a Kong Target attached to a Kong Upstream.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongTarget |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongTargetSpec
|
|
status KongTargetStatus
|
KongUpstream
KongUpstream is the schema for Upstream API which defines a Kong Upstream.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongUpstream |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongUpstreamSpec
|
|
status KongUpstreamStatus
|
KongVault
KongVault is the schema for kongvaults API which defines a custom Kong vault. A Kong vault is a storage to store sensitive data, where the values can be referenced in configuration of plugins. See: https://docs.konghq.com/gateway/latest/kong-enterprise/secrets-management/
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1alpha1 |
kind string
|
KongVault |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongVaultSpec
|
|
status KongVaultStatus
|
Types
In this section you will find types that the CRDs rely on.
ControlPlaneRef
ControlPlaneRef is the schema for the ControlPlaneRef type. It is used to reference a Control Plane entity.
Field | Description |
---|---|
type string
|
Type can be one of: - konnectID - konnectNamespacedRef - kic |
konnectID string
|
KonnectID is the schema for the KonnectID type. This field is required when the Type is konnectID. |
konnectNamespacedRef KonnectNamespacedRef
|
KonnectNamespacedRef is a reference to a Konnect Control Plane entity inside the cluster. It contains the name of the Konnect Control Plane. This field is required when the Type is konnectNamespacedRef. |
Appears in:
- KongCACertificateSpec
- KongCertificateSpec
- KongDataPlaneClientCertificateSpec
- KongKeySetSpec
- KongKeySpec
- KongPluginBindingSpec
- KongRouteSpec
- KongServiceSpec
- KongUpstreamSpec
- KongVaultSpec
ControllerReference
ControllerReference is a reference to a controller that reconciles the KongLicense.
Field | Description |
---|---|
group Group
|
Group is the group of referent. It should be empty if the referent is in “core” group (like pod). |
kind Kind
|
Kind is the kind of the referent. By default the nil kind means kind Pod. |
namespace Namespace
|
Namespace is the namespace of the referent. It should be empty if the referent is cluster scoped. |
name ObjectName
|
Name is the name of the referent. |
Appears in:
Group
Underlying type: string
Group refers to a Kubernetes Group. It must either be an empty string or a RFC 1123 subdomain.
Appears in:
KeySetNamespacedRef
KeySetNamespacedRef is the schema for the KeySetNamespacedRef type.
Field | Description |
---|---|
name string
|
Name is the name of the KeySet object. |
Appears in:
KeySetRef
KeySetRef is the schema for the KeySetRef type. It is used to reference a KeySet entity.
Field | Description |
---|---|
type KeySetRefType
|
Type defines type of the KeySet object reference. It can be one of: - konnectID - namespacedRef |
konnectID string
|
KonnectID is the schema for the KonnectID type. This field is required when the Type is konnectID. |
namespacedRef KeySetNamespacedRef
|
NamespacedRef is a reference to a KeySet entity inside the cluster. This field is required when the Type is namespacedRef. |
Appears in:
KeySetRefType
Underlying type: string
KeySetRefType is the enum type for the KeySetRef.
Appears in:
Kind
Underlying type: string
Kind refers to a Kubernetes kind.
Appears in:
KongCACertificateAPISpec
KongCACertificateAPISpec contains the API specification for the KongCACertificate.
Field | Description |
---|---|
cert string
|
Cert is the PEM-encoded CA certificate. |
tags Tags
|
Tags is an optional set of tags applied to the certificate. |
Appears in:
KongCACertificateSpec
KongCACertificateSpec contains the specification for the KongCACertificate.
Field | Description |
---|---|
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef references the Konnect Control Plane that this KongCACertificate should be created in. |
cert string
|
Cert is the PEM-encoded CA certificate. |
tags Tags
|
Tags is an optional set of tags applied to the certificate. |
Appears in:
KongCACertificateStatus
KongCACertificateStatus defines the observed state of KongCACertificate.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneRef
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongCertificateAPISpec
KongCertificateAPISpec contains the API specification for the KongCertificate.
Field | Description |
---|---|
cert string
|
Cert is the PEM-encoded certificate. |
cert_alt string
|
CertAlt is the PEM-encoded certificate. This should only be set if you have both RSA and ECDSA types of certificate available and would like Kong to prefer serving using ECDSA certs when client advertises support for it. |
key string
|
Key is the PEM-encoded private key. |
key_alt string
|
KeyAlt is the PEM-encoded private key. This should only be set if you have both RSA and ECDSA types of certificate available and would like Kong to prefer serving using ECDSA certs when client advertises support for it. |
tags Tags
|
Tags is an optional set of tags applied to the certificate. |
Appears in:
KongCertificateSpec
KongCertificateSpec contains the specification for the KongCertificate.
Field | Description |
---|---|
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef references the Konnect Control Plane that this KongCertificate should be created in. |
cert string
|
Cert is the PEM-encoded certificate. |
cert_alt string
|
CertAlt is the PEM-encoded certificate. This should only be set if you have both RSA and ECDSA types of certificate available and would like Kong to prefer serving using ECDSA certs when client advertises support for it. |
key string
|
Key is the PEM-encoded private key. |
key_alt string
|
KeyAlt is the PEM-encoded private key. This should only be set if you have both RSA and ECDSA types of certificate available and would like Kong to prefer serving using ECDSA certs when client advertises support for it. |
tags Tags
|
Tags is an optional set of tags applied to the certificate. |
Appears in:
KongCertificateStatus
KongCertificateStatus defines the observed state of KongCertificate.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneRef
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongCredentialACLAPISpec
KongCredentialACLAPISpec defines specification of an ACL credential.
Field | Description |
---|---|
group string
|
Group is the name for the ACL credential. |
tags Tags
|
Tags is a list of tags for the ACL credential. |
Appears in:
KongCredentialACLSpec
KongCredentialACLSpec defines specification of Kong ACL.
Field | Description |
---|---|
consumerRef LocalObjectReference
|
ConsumerRef is a reference to a Consumer this KongCredentialACL is associated with. |
group string
|
Group is the name for the ACL credential. |
tags Tags
|
Tags is a list of tags for the ACL credential. |
Appears in:
KongCredentialACLStatus
KongCredentialACLStatus represents the current status of the ACL credential resource.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneAndConsumerRefs
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongCredentialAPIKeyAPISpec
KongCredentialAPIKeyAPISpec defines specification of an API Key credential.
Field | Description |
---|---|
key string
|
Key is the key for the API Key credential. |
tags Tags
|
Tags is a list of tags for the API Key credential. |
Appears in:
KongCredentialAPIKeySpec
KongCredentialAPIKeySpec defines specification of a Kong Route.
Field | Description |
---|---|
consumerRef LocalObjectReference
|
ConsumerRef is a reference to a Consumer this KongCredentialAPIKey is associated with. |
key string
|
Key is the key for the API Key credential. |
tags Tags
|
Tags is a list of tags for the API Key credential. |
Appears in:
KongCredentialAPIKeyStatus
KongCredentialAPIKeyStatus represents the current status of the API Key credential resource.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneAndConsumerRefs
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongCredentialBasicAuthAPISpec
KongCredentialBasicAuthAPISpec defines specification of a BasicAuth credential.
Field | Description |
---|---|
password string
|
Password is the password for the BasicAuth credential. |
tags Tags
|
Tags is a list of tags for the BasicAuth credential. |
username string
|
Username is the username for the BasicAuth credential. |
Appears in:
KongCredentialBasicAuthSpec
KongCredentialBasicAuthSpec defines specification of a Kong Route.
Field | Description |
---|---|
consumerRef LocalObjectReference
|
ConsumerRef is a reference to a Consumer this CredentialBasicAuth is associated with. |
password string
|
Password is the password for the BasicAuth credential. |
tags Tags
|
Tags is a list of tags for the BasicAuth credential. |
username string
|
Username is the username for the BasicAuth credential. |
Appears in:
KongCredentialBasicAuthStatus
KongCredentialBasicAuthStatus represents the current status of the BasicAuth credential resource.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneAndConsumerRefs
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongCredentialHMACAPISpec
KongCredentialHMACAPISpec defines specification of an HMAC credential.
Field | Description |
---|---|
id string
|
ID is the unique identifier for the HMAC credential. |
secret string
|
Secret is the secret for the HMAC credential. |
tags Tags
|
Tags is a list of tags for the HMAC credential. |
username string
|
Username is the username for the HMAC credential. |
Appears in:
KongCredentialHMACSpec
KongCredentialHMACSpec defines specification of a Kong Route.
Field | Description |
---|---|
consumerRef LocalObjectReference
|
ConsumerRef is a reference to a Consumer this KongCredentialHMAC is associated with. |
id string
|
ID is the unique identifier for the HMAC credential. |
secret string
|
Secret is the secret for the HMAC credential. |
tags Tags
|
Tags is a list of tags for the HMAC credential. |
username string
|
Username is the username for the HMAC credential. |
Appears in:
KongCredentialHMACStatus
KongCredentialHMACStatus represents the current status of the HMAC credential resource.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneAndConsumerRefs
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongCredentialJWTAPISpec
KongCredentialJWTAPISpec defines specification of an JWT credential.
Field | Description |
---|---|
algorithm string
|
Algorithm is the algorithm used to sign the JWT token. |
id string
|
ID is the unique identifier for the JWT credential. |
key string
|
Key is the key for the JWT credential. |
rsa_public_key string
|
RSA PublicKey is the RSA public key for the JWT credential. |
secret string
|
Secret is the secret for the JWT credential. |
tags Tags
|
Tags is a list of tags for the JWT credential. |
Appears in:
KongCredentialJWTSpec
KongCredentialJWTSpec defines specification of a Kong Route.
Field | Description |
---|---|
consumerRef LocalObjectReference
|
ConsumerRef is a reference to a Consumer this KongCredentialJWT is associated with. |
algorithm string
|
Algorithm is the algorithm used to sign the JWT token. |
id string
|
ID is the unique identifier for the JWT credential. |
key string
|
Key is the key for the JWT credential. |
rsa_public_key string
|
RSA PublicKey is the RSA public key for the JWT credential. |
secret string
|
Secret is the secret for the JWT credential. |
tags Tags
|
Tags is a list of tags for the JWT credential. |
Appears in:
KongCredentialJWTStatus
KongCredentialJWTStatus represents the current status of the JWT credential resource.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneAndConsumerRefs
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongDataPlaneClientCertificateAPISpec
KongDataPlaneClientCertificateAPISpec defines the attributes of a Kong DP certificate.
Field | Description |
---|---|
cert string
|
Cert is the certificate in PEM format. Once the certificate gets programmed this field becomes immutable. |
Appears in:
KongDataPlaneClientCertificateSpec
KongDataPlaneClientCertificateSpec defines the spec for a KongDataPlaneClientCertificate.
Field | Description |
---|---|
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef is a reference to a Konnect ControlPlane this KongDataPlaneClientCertificate is associated with. |
cert string
|
Cert is the certificate in PEM format. Once the certificate gets programmed this field becomes immutable. |
Appears in:
KongDataPlaneClientCertificateStatus
KongDataPlaneClientCertificateStatus defines the status for a KongDataPlaneClientCertificate.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneRef
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongKeyAPISpec
KongKeyAPISpec defines the attributes of a Kong Key.
Field | Description |
---|---|
kid string
|
KID is a unique identifier for a key. When JWK is provided, KID has to match the KID in the JWK. |
name string
|
Name is an optional name to associate with the given key. |
jwk string
|
JWK is a JSON Web Key represented as a string. The JWK must contain a KID field that matches the KID in the KongKey. Either JWK or PEM must be set. |
pem PEMKeyPair
|
PEM is a keypair in PEM format. Either JWK or PEM must be set. |
tags Tags
|
Tags is an optional set of strings associated with the Key for grouping and filtering. |
Appears in:
KongKeySetAPISpec
KongKeySetAPISpec defines the attributes of a Kong KeySet.
Field | Description |
---|---|
name string
|
Name is a name of the KeySet. |
tags Tags
|
Tags is an optional set of strings associated with the KeySet for grouping and filtering. |
Appears in:
KongKeySetSpec
KongKeySetSpec defines the spec for a KongKeySet.
Field | Description |
---|---|
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef is a reference to a Konnect ControlPlane with which KongKeySet is associated. |
name string
|
Name is a name of the KeySet. |
tags Tags
|
Tags is an optional set of strings associated with the KeySet for grouping and filtering. |
Appears in:
KongKeySetStatus
KongKeySetStatus defines the status for a KongKeySet.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneRef
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongKeySpec
KongKeySpec defines the spec for a KongKey.
Field | Description |
---|---|
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef is a reference to a Konnect ControlPlane this KongKey is associated with. |
keySetRef KeySetRef
|
KeySetRef is a reference to a KongKeySet this KongKey is attached to. ControlPlane referenced by a KongKeySet must be the same as the ControlPlane referenced by the KongKey. |
kid string
|
KID is a unique identifier for a key. When JWK is provided, KID has to match the KID in the JWK. |
name string
|
Name is an optional name to associate with the given key. |
jwk string
|
JWK is a JSON Web Key represented as a string. The JWK must contain a KID field that matches the KID in the KongKey. Either JWK or PEM must be set. |
pem PEMKeyPair
|
PEM is a keypair in PEM format. Either JWK or PEM must be set. |
tags Tags
|
Tags is an optional set of strings associated with the Key for grouping and filtering. |
Appears in:
KongKeyStatus
KongKeyStatus defines the status for a KongKey.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneAndKeySetRef
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongLicenseControllerStatus
KongLicenseControllerStatus is the status of owning KongLicense being processed identified by the controllerName field.
Field | Description |
---|---|
controllerName string
|
ControllerName is an identifier of the controller to reconcile this KongLicense. Should be unique in the list of controller statuses. |
controllerRef ControllerReference
|
ControllerRef is the reference of the controller to reconcile this KongLicense. It is usually the name of (KIC/KGO) pod that reconciles it. |
conditions Condition array
|
Conditions describe the current conditions of the KongLicense on the controller. |
Appears in:
KongLicenseStatus
KongLicenseStatus stores the status of the KongLicense being processesed in each controller that reconciles it.
Field | Description |
---|---|
controllers KongLicenseControllerStatus array
|
Appears in:
KongObjectRef
KongObjectRef is a reference to another object representing a Kong entity with deterministic type.
TODO: https://github.com/Kong/kubernetes-configuration/issues/96
change other types to use the generic KongObjectRef
and move it to a common package to prevent possible import cycles.
Field | Description |
---|---|
name string
|
Name is the name of the entity. NOTE: the Required validation rule does not reject empty strings so we use MinLength to reject empty string here. |
Appears in:
KongPluginBindingSpec
KongPluginBindingSpec defines specification of a KongPluginBinding.
Field | Description |
---|---|
pluginRef PluginRef
|
PluginReference is a reference to the KongPlugin or KongClusterPlugin resource. |
targets KongPluginBindingTargets
|
Targets contains the targets references. It is possible to set multiple combinations of references, as described in https://docs.konghq.com/gateway/latest/key-concepts/plugins/#precedence The complete set of allowed combinations and their order of precedence for plugins configured to multiple entities is: 1. Consumer + route + service 2. Consumer group + service + route 3. Consumer + route 4. Consumer + service 5. Consumer group + route 6. Consumer group + service 7. Route + service 8. Consumer 9. Consumer group 10. Route 11. Service |
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef is a reference to a ControlPlane this KongPluginBinding is associated with. |
Appears in:
KongPluginBindingStatus
KongPluginBindingStatus represents the current status of the KongBinding resource.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneRef
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongPluginBindingTargets
KongPluginBindingTargets contains the targets references.
Field | Description |
---|---|
routeRef TargetRefWithGroupKind
|
RouteReference can be used to reference one of the following resouces: - networking.k8s.io/Ingress - gateway.networking.k8s.io/HTTPRoute - gateway.networking.k8s.io/GRPCRoute - configuration.konghq.com/KongRoute |
serviceRef TargetRefWithGroupKind
|
ServiceReference can be used to reference one of the following resouces: - core/Service or /Service - configuration.konghq.com/KongService |
consumerRef TargetRef
|
ConsumerReference is used to reference a configuration.konghq.com/Consumer resource. The group/kind is fixed, therefore the reference is performed only by name. |
consumerGroupRef TargetRef
|
ConsumerGroupReference is used to reference a configuration.konghq.com/ConsumerGroup resource. The group/kind is fixed, therefore the reference is performed only by name. |
Appears in:
KongRouteAPISpec
KongRouteAPISpec represents the configuration of a Route in Kong as defined by the Konnect API.
These fields are mostly copied from sdk-konnect-go but some modifications have been made
to make the code generation required for Kubernetes CRDs work.
Field | Description |
---|---|
destinations Destinations array
|
A list of IP destinations of incoming connections that match this Route when using stream routing. Each entry is an object with fields “ip” (optionally in CIDR range notation) and/or “port”. |
headers object (keys:string, values:string)
|
One or more lists of values indexed by header name that will cause this Route to match if present in the request. The Host header cannot be used with this attribute: hosts should be specified using the hosts attribute. When headers contains only one value and that value starts with the special prefix ~* , the value is interpreted as a regular expression. |
hosts string array
|
A list of domain names that match this Route. Note that the hosts value is case sensitive. |
https_redirect_status_code HTTPSRedirectStatusCode
|
The status code Kong responds with when all properties of a Route match except the protocol i.e. if the protocol of the request is HTTP instead of HTTPS . Location header is injected by Kong if the field is set to 301, 302, 307 or 308. Note: This config applies only if the Route is configured to only accept the https protocol. |
methods string array
|
A list of HTTP methods that match this Route. |
name string
|
The name of the Route. Route names must be unique, and they are case sensitive. For example, there can be two different Routes named “test” and “Test”. |
path_handling PathHandling
|
Controls how the Service path, Route path and requested path are combined when sending a request to the upstream. See above for a detailed description of each behavior. |
paths string array
|
A list of paths that match this Route. |
preserve_host boolean
|
When matching a Route via one of the hosts domain names, use the request Host header in the upstream request headers. If set to false , the upstream Host header will be that of the Service’s host . |
protocols RouteProtocols array
|
An array of the protocols this Route should allow. See KongRoute for a list of accepted protocols. When set to only "https" , HTTP requests are answered with an upgrade error. When set to only "http" , HTTPS requests are answered with an error. |
regex_priority integer
|
A number used to choose which route resolves a given request when several routes match it using regexes simultaneously. When two routes match the path and have the same regex_priority , the older one (lowest created_at ) is used. Note that the priority for non-regex routes is different (longer non-regex routes are matched before shorter ones). |
request_buffering boolean
|
Whether to enable request body buffering or not. With HTTP 1.1, it may make sense to turn this off on services that receive data with chunked transfer encoding. |
response_buffering boolean
|
Whether to enable response body buffering or not. With HTTP 1.1, it may make sense to turn this off on services that send data with chunked transfer encoding. |
snis string array
|
A list of SNIs that match this Route when using stream routing. |
sources Sources array
|
A list of IP sources of incoming connections that match this Route when using stream routing. Each entry is an object with fields “ip” (optionally in CIDR range notation) and/or “port”. |
strip_path boolean
|
When matching a Route via one of the paths , strip the matching prefix from the upstream request URL. |
tags Tags
|
An optional set of strings associated with the Route for grouping and filtering. |
Appears in:
KongRouteSpec
KongRouteSpec defines specification of a Kong Route.
Field | Description |
---|---|
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef is a reference to a ControlPlane this KongRoute is associated with. Route can either specify a ControlPlaneRef and be ‘serviceless’ route or specify a ServiceRef and be associated with a Service. |
serviceRef ServiceRef
|
ServiceRef is a reference to a Service this KongRoute is associated with. Route can either specify a ControlPlaneRef and be ‘serviceless’ route or specify a ServiceRef and be associated with a Service. |
destinations Destinations array
|
A list of IP destinations of incoming connections that match this Route when using stream routing. Each entry is an object with fields “ip” (optionally in CIDR range notation) and/or “port”. |
headers object (keys:string, values:string)
|
One or more lists of values indexed by header name that will cause this Route to match if present in the request. The Host header cannot be used with this attribute: hosts should be specified using the hosts attribute. When headers contains only one value and that value starts with the special prefix ~* , the value is interpreted as a regular expression. |
hosts string array
|
A list of domain names that match this Route. Note that the hosts value is case sensitive. |
https_redirect_status_code HTTPSRedirectStatusCode
|
The status code Kong responds with when all properties of a Route match except the protocol i.e. if the protocol of the request is HTTP instead of HTTPS . Location header is injected by Kong if the field is set to 301, 302, 307 or 308. Note: This config applies only if the Route is configured to only accept the https protocol. |
methods string array
|
A list of HTTP methods that match this Route. |
name string
|
The name of the Route. Route names must be unique, and they are case sensitive. For example, there can be two different Routes named “test” and “Test”. |
path_handling PathHandling
|
Controls how the Service path, Route path and requested path are combined when sending a request to the upstream. See above for a detailed description of each behavior. |
paths string array
|
A list of paths that match this Route. |
preserve_host boolean
|
When matching a Route via one of the hosts domain names, use the request Host header in the upstream request headers. If set to false , the upstream Host header will be that of the Service’s host . |
protocols RouteProtocols array
|
An array of the protocols this Route should allow. See KongRoute for a list of accepted protocols. When set to only "https" , HTTP requests are answered with an upgrade error. When set to only "http" , HTTPS requests are answered with an error. |
regex_priority integer
|
A number used to choose which route resolves a given request when several routes match it using regexes simultaneously. When two routes match the path and have the same regex_priority , the older one (lowest created_at ) is used. Note that the priority for non-regex routes is different (longer non-regex routes are matched before shorter ones). |
request_buffering boolean
|
Whether to enable request body buffering or not. With HTTP 1.1, it may make sense to turn this off on services that receive data with chunked transfer encoding. |
response_buffering boolean
|
Whether to enable response body buffering or not. With HTTP 1.1, it may make sense to turn this off on services that send data with chunked transfer encoding. |
snis string array
|
A list of SNIs that match this Route when using stream routing. |
sources Sources array
|
A list of IP sources of incoming connections that match this Route when using stream routing. Each entry is an object with fields “ip” (optionally in CIDR range notation) and/or “port”. |
strip_path boolean
|
When matching a Route via one of the paths , strip the matching prefix from the upstream request URL. |
tags Tags
|
An optional set of strings associated with the Route for grouping and filtering. |
Appears in:
KongRouteStatus
KongRouteStatus represents the current status of the Kong Route resource.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneAndServiceRefs
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongSNIAPISpec
KongSNIAPISpec defines specification of an SNI.
Field | Description |
---|---|
name string
|
Name is the name of the SNI. Required and must be a host or wildcard host. |
tags Tags
|
Tags is an optional set of strings associated with the SNI for grouping and filtering. |
Appears in:
KongSNISpec
KongSNISpec defines specification of a Kong SNI.
Field | Description |
---|---|
certificateRef KongObjectRef
|
CertificateRef is the reference to the certificate to which the KongSNI is attached. |
name string
|
Name is the name of the SNI. Required and must be a host or wildcard host. |
tags Tags
|
Tags is an optional set of strings associated with the SNI for grouping and filtering. |
Appears in:
KongSNIStatus
KongSNIStatus defines the status for a KongSNI.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneAndCertificateRefs
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongServiceAPISpec
KongServiceAPISpec defines specification of a Kong Service.
Field | Description |
---|---|
url string
|
Helper field to set protocol , host , port and path using a URL. This field is write-only and is not returned in responses. |
connect_timeout integer
|
The timeout in milliseconds for establishing a connection to the upstream server. |
enabled boolean
|
Whether the Service is active. If set to false , the proxy behavior will be as if any routes attached to it do not exist (404). Default: true . |
host string
|
The host of the upstream server. Note that the host value is case sensitive. |
name string
|
The Service name. |
path string
|
The path to be used in requests to the upstream server. |
port integer
|
The upstream server port. |
protocol Protocol
|
The protocol used to communicate with the upstream. |
read_timeout integer
|
The timeout in milliseconds between two successive read operations for transmitting a request to the upstream server. |
retries integer
|
The number of retries to execute upon failure to proxy. |
tags Tags
|
An optional set of strings associated with the Service for grouping and filtering. |
tls_verify boolean
|
Whether to enable verification of upstream server TLS certificate. If set to null , then the Nginx default is respected. |
tls_verify_depth integer
|
Maximum depth of chain while verifying Upstream server’s TLS certificate. If set to null , then the Nginx default is respected. |
write_timeout integer
|
The timeout in milliseconds between two successive write operations for transmitting a request to the upstream server. |
Appears in:
KongServiceSpec
KongServiceSpec defines specification of a Kong Route.
Field | Description |
---|---|
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef is a reference to a ControlPlane this KongService is associated with. |
url string
|
Helper field to set protocol , host , port and path using a URL. This field is write-only and is not returned in responses. |
connect_timeout integer
|
The timeout in milliseconds for establishing a connection to the upstream server. |
enabled boolean
|
Whether the Service is active. If set to false , the proxy behavior will be as if any routes attached to it do not exist (404). Default: true . |
host string
|
The host of the upstream server. Note that the host value is case sensitive. |
name string
|
The Service name. |
path string
|
The path to be used in requests to the upstream server. |
port integer
|
The upstream server port. |
protocol Protocol
|
The protocol used to communicate with the upstream. |
read_timeout integer
|
The timeout in milliseconds between two successive read operations for transmitting a request to the upstream server. |
retries integer
|
The number of retries to execute upon failure to proxy. |
tags Tags
|
An optional set of strings associated with the Service for grouping and filtering. |
tls_verify boolean
|
Whether to enable verification of upstream server TLS certificate. If set to null , then the Nginx default is respected. |
tls_verify_depth integer
|
Maximum depth of chain while verifying Upstream server’s TLS certificate. If set to null , then the Nginx default is respected. |
write_timeout integer
|
The timeout in milliseconds between two successive write operations for transmitting a request to the upstream server. |
Appears in:
KongServiceStatus
KongServiceStatus represents the current status of the Kong Service resource.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneRef
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongTargetAPISpec
KongTargetAPISpec are the attributes of the Kong Target itself.
Field | Description |
---|---|
target string
|
Target is the target address of the upstream. |
weight integer
|
Weight is the weight this target gets within the upstream loadbalancer. |
tags Tags
|
Tags is an optional set of strings associated with the Target for grouping and filtering. |
Appears in:
KongTargetSpec
KongTargetSpec defines the specification of a Kong Target. KongTargetSpec defines the desired state of KongTarget.
Field | Description |
---|---|
upstreamRef TargetRef
|
UpstreamRef is a reference to a KongUpstream this KongTarget is attached to. |
target string
|
Target is the target address of the upstream. |
weight integer
|
Weight is the weight this target gets within the upstream loadbalancer. |
tags Tags
|
Tags is an optional set of strings associated with the Target for grouping and filtering. |
Appears in:
KongTargetStatus
KongTargetStatus defines the observed state of KongTarget.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneAndUpstreamRefs
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongUpstreamAPISpec
KongUpstreamAPISpec defines specification of a Kong Upstream.
Field | Description |
---|---|
algorithm UpstreamAlgorithm
|
Which load balancing algorithm to use. |
client_certificate UpstreamClientCertificate
|
If set, the certificate to be used as client certificate while TLS handshaking to the upstream server. |
hash_fallback HashFallback
|
What to use as hashing input if the primary hash_on does not return a hash (eg. header is missing, or no Consumer identified). Not available if hash_on is set to cookie . |
hash_fallback_header string
|
The header name to take the value from as hash input. Only required when hash_fallback is set to header . |
hash_fallback_query_arg string
|
The name of the query string argument to take the value from as hash input. Only required when hash_fallback is set to query_arg . |
hash_fallback_uri_capture string
|
The name of the route URI capture to take the value from as hash input. Only required when hash_fallback is set to uri_capture . |
hash_on HashOn
|
What to use as hashing input. Using none results in a weighted-round-robin scheme with no hashing. |
hash_on_cookie string
|
The cookie name to take the value from as hash input. Only required when hash_on or hash_fallback is set to cookie . If the specified cookie is not in the request, Kong will generate a value and set the cookie in the response. |
hash_on_cookie_path string
|
The cookie path to set in the response headers. Only required when hash_on or hash_fallback is set to cookie . |
hash_on_header string
|
The header name to take the value from as hash input. Only required when hash_on is set to header . |
hash_on_query_arg string
|
The name of the query string argument to take the value from as hash input. Only required when hash_on is set to query_arg . |
hash_on_uri_capture string
|
The name of the route URI capture to take the value from as hash input. Only required when hash_on is set to uri_capture . |
healthchecks Healthchecks
|
|
host_header string
|
The hostname to be used as Host header when proxying requests through Kong. |
name string
|
This is a hostname, which must be equal to the host of a Service. |
slots integer
|
The number of slots in the load balancer algorithm. If algorithm is set to round-robin , this setting determines the maximum number of slots. If algorithm is set to consistent-hashing , this setting determines the actual number of slots in the algorithm. Accepts an integer in the range 10 -65536 . |
tags Tags
|
An optional set of strings associated with the Upstream for grouping and filtering. |
use_srv_name boolean
|
If set, the balancer will use SRV hostname(if DNS Answer has SRV record) as the proxy upstream Host . |
Appears in:
KongUpstreamSpec
KongUpstreamSpec defines specification of a Kong Upstream.
Field | Description |
---|---|
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef is a reference to a ControlPlane this KongUpstream is associated with. |
algorithm UpstreamAlgorithm
|
Which load balancing algorithm to use. |
client_certificate UpstreamClientCertificate
|
If set, the certificate to be used as client certificate while TLS handshaking to the upstream server. |
hash_fallback HashFallback
|
What to use as hashing input if the primary hash_on does not return a hash (eg. header is missing, or no Consumer identified). Not available if hash_on is set to cookie . |
hash_fallback_header string
|
The header name to take the value from as hash input. Only required when hash_fallback is set to header . |
hash_fallback_query_arg string
|
The name of the query string argument to take the value from as hash input. Only required when hash_fallback is set to query_arg . |
hash_fallback_uri_capture string
|
The name of the route URI capture to take the value from as hash input. Only required when hash_fallback is set to uri_capture . |
hash_on HashOn
|
What to use as hashing input. Using none results in a weighted-round-robin scheme with no hashing. |
hash_on_cookie string
|
The cookie name to take the value from as hash input. Only required when hash_on or hash_fallback is set to cookie . If the specified cookie is not in the request, Kong will generate a value and set the cookie in the response. |
hash_on_cookie_path string
|
The cookie path to set in the response headers. Only required when hash_on or hash_fallback is set to cookie . |
hash_on_header string
|
The header name to take the value from as hash input. Only required when hash_on is set to header . |
hash_on_query_arg string
|
The name of the query string argument to take the value from as hash input. Only required when hash_on is set to query_arg . |
hash_on_uri_capture string
|
The name of the route URI capture to take the value from as hash input. Only required when hash_on is set to uri_capture . |
healthchecks Healthchecks
|
|
host_header string
|
The hostname to be used as Host header when proxying requests through Kong. |
name string
|
This is a hostname, which must be equal to the host of a Service. |
slots integer
|
The number of slots in the load balancer algorithm. If algorithm is set to round-robin , this setting determines the maximum number of slots. If algorithm is set to consistent-hashing , this setting determines the actual number of slots in the algorithm. Accepts an integer in the range 10 -65536 . |
tags Tags
|
An optional set of strings associated with the Upstream for grouping and filtering. |
use_srv_name boolean
|
If set, the balancer will use SRV hostname(if DNS Answer has SRV record) as the proxy upstream Host . |
Appears in:
KongUpstreamStatus
KongUpstreamStatus represents the current status of the Kong Upstream resource.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneRef
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the status of the Konnect entity. |
Appears in:
KongVaultSpec
KongVaultSpec defines specification of a custom Kong vault.
Field | Description |
---|---|
backend string
|
Backend is the type of the backend storing the secrets in the vault. The supported backends of Kong is listed here: https://docs.konghq.com/gateway/latest/kong-enterprise/secrets-management/backends/ |
prefix string
|
Prefix is the prefix of vault URI for referencing values in the vault. It is immutable after created. |
description string
|
Description is the additional information about the vault. |
config JSON
|
Config is the configuration of the vault. Varies for different backends. |
tags Tags
|
Tags are the tags associated to the vault for grouping and filtering. |
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef is a reference to a Konnect ControlPlane this KongVault is associated with. |
Appears in:
KongVaultStatus
KongVaultStatus represents the current status of the KongVault resource.
Field | Description |
---|---|
konnect KonnectEntityStatusWithControlPlaneRef
|
Konnect contains the Konnect entity status. |
conditions Condition array
|
Conditions describe the current conditions of the KongVaultStatus. Known condition types are: * “Programmed” |
Appears in:
KonnectNamespacedRef
KonnectNamespacedRef is the schema for the KonnectNamespacedRef type.
Field | Description |
---|---|
name string
|
Name is the name of the Konnect Control Plane. |
namespace string
|
Namespace is the namespace where the Konnect Control Plane is in. Currently only cluster scoped resources (KongVault) are allowed to set konnectNamespacedRef.namespace . |
Appears in:
Namespace
Underlying type: string
Namespace refers to a Kubernetes namespace. It must be a RFC 1123 label.
Appears in:
NamespacedServiceRef
NamespacedServiceRef is a namespaced reference to a KongService.
NOTE: currently cross namespace references are not supported.
Field | Description |
---|---|
name string
|
Appears in:
ObjectName
Underlying type: string
ObjectName refers to the name of a Kubernetes object. Object names can have a variety of forms, including RFC1123 subdomains, RFC 1123 labels, or RFC 1035 labels.
Appears in:
PEMKeyPair
PEMKeyPair defines a keypair in PEM format.
Field | Description |
---|---|
private_key string
|
The private key in PEM format. |
public_key string
|
The public key in PEM format. |
Appears in:
PluginRef
PluginRef is a reference to a KongPlugin or KongClusterPlugin resource.
Field | Description |
---|---|
name string
|
Name is the name of the KongPlugin or KongClusterPlugin resource. |
kind string
|
Kind can be KongPlugin or KongClusterPlugin. If not set, it is assumed to be KongPlugin. |
Appears in:
ServiceRef
ServiceRef is a reference to a KongService.
Field | Description |
---|---|
type string
|
Type can be one of: - namespacedRef |
namespacedRef NamespacedServiceRef
|
NamespacedRef is a reference to a KongService. |
Appears in:
TargetRef
TargetRef is a reference based on the object’s name.
Field | Description |
---|---|
name string
|
Name is the name of the entity. |
Appears in:
TargetRefWithGroupKind
TargetRefWithGroupKind is a reference based on the object’s group, kind, and name.
Field | Description |
---|---|
name string
|
Name is the name of the entity. |
kind string
|
|
group string
|
Appears in:
configuration.konghq.com/v1beta1
Package v1beta1 contains API Schema definitions for the configuration.konghq.com v1beta1 API group.
-
KongConsumerGroup
KongConsumerGroup
KongConsumerGroup is the Schema for the kongconsumergroups API.
Field | Description |
---|---|
apiVersion string
|
configuration.konghq.com/v1beta1 |
kind string
|
KongConsumerGroup |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongConsumerGroupSpec
|
|
status KongConsumerGroupStatus
|
Status represents the current status of the KongConsumerGroup resource. |
Types
In this section you will find types that the CRDs rely on.
gateway-operator.konghq.com/v1alpha1
Package v1alpha1 contains API Schema definitions for the operator v1alpha1 API group
AIGateway is a network Gateway enabling access and management for AI &
Machine Learning models such as Large Language Models (LLM).
The underlying technology for the AIGateway is the Kong Gateway configured
with a variety of plugins which provide the the AI featureset.
This is a list of the plugins, which are available in Kong Gateway v3.6.x+:
- ai-proxy (https://github.com/kong/kong/tree/master/kong/plugins/ai-proxy)
- ai-request-transformer (https://github.com/kong/kong/tree/master/kong/plugins/ai-request-transformer)
- ai-response-transformers (https://github.com/kong/kong/tree/master/kong/plugins/ai-response-transformer)
- ai-prompt-template (https://github.com/kong/kong/tree/master/kong/plugins/ai-prompt-template)
- ai-prompt-guard-plugin (https://github.com/kong/kong/tree/master/kong/plugins/ai-prompt-guard)
- ai-prompt-decorator-plugin (https://github.com/kong/kong/tree/master/kong/plugins/ai-prompt-decorator)
So effectively the AIGateway resource provides a bespoke Gateway resource (which it owns and manages) with the gateway, consumers and plugin configurations automated and configurable via Kubernetes APIs.
The current iteration only supports the proxy itself, but the API is being built with room for future growth in several dimensions. For instance:
- Supporting auxiliary functions (e.g. decorator, guard, templater, token-rate-limit)
- Supporting request/response transformers
- Supporting more than just LLMs (e.g. CCNs, GANs, e.t.c.)
- Supporting more hosting options for LLMs (e.g. self hosted)
- Supporting more AI cloud providers
- Supporting more AI cloud provider features
The validation rules throughout are set up to ensure at least one cloud-provider-based LLM is specified, but in the future when we have more model types and more hosting options for those types so we may want to look into using CEL validation to ensure that at least one model configuration is provided. We may also want to use CEL to validate things like identifier unique-ness, e.t.c.
See: https://kubernetes.io/docs/reference/using-api/cel/
Field | Description |
---|---|
apiVersion string
|
gateway-operator.konghq.com/v1alpha1 |
kind string
|
AIGateway |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec AIGatewaySpec
|
Spec is the desired state of the AIGateway. |
status AIGatewayStatus
|
Status is the observed state of the AIGateway. |
DataPlaneMetricsExtension
DataPlaneMetricsExtension holds the configuration for the DataPlane metrics extension.
It can be attached to a ControlPlane using its spec.extensions.
When attached it will make the ControlPlane configure its DataPlane with
the specified metrics configuration.
Additionally, it will also make the operator expose DataPlane’s metrics
enriched with metadata required for in-cluster Kubernetes autoscaling.
NOTE: This is an enterprise feature. In order to use it you need to use
the EE version of Kong Gateway Operator with a valid license.
Field | Description |
---|---|
apiVersion string
|
gateway-operator.konghq.com/v1alpha1 |
kind string
|
DataPlaneMetricsExtension |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec DataPlaneMetricsExtensionSpec
|
|
status DataPlaneMetricsExtensionStatus
|
KongPluginInstallation
KongPluginInstallation allows using a custom Kong Plugin distributed as a container image available in a registry. Such a plugin can be associated with GatewayConfiguration or DataPlane to be available for particular Kong Gateway and configured with KongPlugin CRD.
Field | Description |
---|---|
apiVersion string
|
gateway-operator.konghq.com/v1alpha1 |
kind string
|
KongPluginInstallation |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KongPluginInstallationSpec
|
|
status KongPluginInstallationStatus
|
KonnectExtension
KonnectExtension is the Schema for the KonnectExtension API, and is intended to be referenced as extension by the dataplane API. If a DataPlane successfully refers a KonnectExtension, the DataPlane deployment spec gets customized to include the konnect-related configuration.
Field | Description |
---|---|
apiVersion string
|
gateway-operator.konghq.com/v1alpha1 |
kind string
|
KonnectExtension |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KonnectExtensionSpec
|
Spec is the specification of the KonnectExtension resource. |
status KonnectExtensionStatus
|
Status is the status of the KonnectExtension resource. |
Types
In this section you will find types that the CRDs rely on.
AICloudProvider
AICloudProvider is the organization that provides API access to Large Language Models (LLMs).
Field | Description |
---|---|
name AICloudProviderName
|
Name is the unique name of an LLM provider. |
Appears in:
AICloudProviderAPITokenRef
AICloudProviderAPITokenRef is an reference to another object which contains the API token for an AI cloud provider.
Field | Description |
---|---|
name string
|
Name is the name of the reference object. |
namespace string
|
Namespace is the namespace of the reference object. If not specified, it will be assumed to be the same namespace as the object which references it. |
kind string
|
Kind is the API object kind If not specified, it will be assumed to be “Secret”. If a Secret is used as the Kind, the secret must contain a single key-value pair where the value is the secret API token. The key can be named anything, as long as there’s only one entry, but by convention it should be “apiToken”. |
Appears in:
AICloudProviderName
Underlying type: string
AICloudProviderName indicates the unique name of a supported AI cloud provider.
Appears in:
AIGatewayConsumerRef
AIGatewayConsumerRef indicates the Secret resource containing the credentials for the Kong consumer.
Field | Description |
---|---|
name string
|
Name is the name of the reference object. |
namespace string
|
Namespace is the namespace of the reference object. |
Appears in:
AIGatewayEndpoint
AIGatewayEndpoint is a network endpoint for accessing an AIGateway.
Field | Description |
---|---|
network EndpointNetworkAccessHint
|
NetworkAccessHint is a hint to the user about what kind of network access is expected for the reachability of this endpoint. |
url string
|
URL is the URL to access the endpoint from the network indicated by the NetworkAccessHint. |
models string array
|
AvailableModels is a list of the identifiers of all the AI models that are accessible from this endpoint. |
consumer AIGatewayConsumerRef
|
Consumer is a reference to the Secret that contains the credentials for the Kong consumer that is allowed to access this endpoint. |
conditions Condition array
|
Conditions describe the current conditions of the AIGatewayEndpoint. Known condition types are: - “Provisioning” - “EndpointReady” |
Appears in:
AIGatewaySpec
AIGatewaySpec defines the desired state of an AIGateway.
Field | Description |
---|---|
gatewayClassName string
|
GatewayClassName is the name of the GatewayClass which is responsible for the AIGateway. |
largeLanguageModels LargeLanguageModels
|
LargeLanguageModels is a list of Large Language Models (LLMs) to be managed by the AI Gateway. This is a required field because we only support LLMs at the moment. In future iterations we may support other model types. |
cloudProviderCredentials AICloudProviderAPITokenRef
|
CloudProviderCredentials is a reference to an object (e.g. a Kubernetes Secret) which contains the credentials needed to access the APIs of cloud providers. This is the global configuration that will be used by DEFAULT for all model configurations. A secret configured this way MAY include any number of key-value pairs equal to the number of providers you have, but used this way the keys MUST be named according to their providers (e.g. “openai”, “azure”, “cohere”, e.t.c.). For example: apiVersion: v1 kind: Secret metadata: name: devteam-ai-cloud-providers type: Opaque data: openai: ******* azure: ******* cohere: ********* See AICloudProviderName for a list of known and valid cloud providers. Note that the keys are NOT case-sensitive (e.g. “OpenAI”, “openai”, and “openAI” are all valid and considered the same keys) but if there are duplicates endpoints failures conditions will be emitted and endpoints will not be configured until the duplicates are resolved. This is currently considered required, but in future iterations will be optional as we do things like enable configuring credentials at the model level. |
Appears in:
AIGatewayStatus
AIGatewayStatus defines the observed state of AIGateway.
Field | Description |
---|---|
endpoints AIGatewayEndpoint array
|
Endpoints are collections of the URL, credentials and metadata needed in order to access models served by the AIGateway for inference. |
conditions Condition array
|
Conditions describe the current conditions of the AIGateway. Known condition types are: - “Accepted” - “Provisioning” - “EndpointsReady” |
Appears in:
CloudHostedLargeLanguageModel
CloudHostedLargeLanguageModel is the configuration for Large Language Models (LLM) hosted by a known and supported AI cloud provider (e.g. OpenAI, Cohere, Azure, e.t.c.).
Field | Description |
---|---|
identifier string
|
Identifier is the unique name which identifies the LLM. This will be used as part of the requests made to an AIGateway endpoint. For instance: if you provided the identifier “devteam-gpt-access”, then you would access this model via “https://${endpoint}/devteam-gpt-access” and supply it with your consumer credentials to authenticate requests. |
model string
|
Model is the model name of the LLM (e.g. gpt-3.5-turbo, phi-2, e.t.c.). If not specified, whatever the cloud provider specifies as the default model will be used. |
promptType LLMPromptType
|
PromptType is the type of prompt to be used for inference requests to the LLM (e.g. “chat”, “completions”). If “chat” is specified, prompts sent by the user will be interactive, contextual and stateful. The LLM will dynamically answer questions and simulate a dialogue, while also keeping track of the conversation to provide contextually relevant responses. If “completions” is specified, prompts sent by the user will be stateless and “one-shot”. The LLM will provide a single response to the prompt, without any context from previous prompts. If not specified, “completions” will be used as the default. |
defaultPrompts LLMPrompt array
|
DefaultPrompts is a list of prompts that should be provided to the LLM by default. This is generally used to influence inference behavior, for instance by providing a “system” role prompt that instructs the LLM to take on a certain persona. |
defaultPromptParams LLMPromptParams
|
DefaultPromptParams configures the parameters which will be sent with any and every inference request. If this is set, there is currently no way to override these parameters at the individual prompt level. This is an expected feature from later releases of our AI plugins. |
aiCloudProvider AICloudProvider
|
AICloudProvider defines the cloud provider that will fulfill the LLM requests for this CloudHostedLargeLanguageModel |
Appears in:
ClusterCertificateSecretRef
ClusterCertificateSecretRef contains the reference to the Secret containing the Konnect Control Plane’s cluster certificate.
Field | Description |
---|---|
name string
|
Name is the name of the Secret containing the Konnect Control Plane’s cluster certificate. |
Appears in:
DataPlaneMetricsExtensionSpec
DataPlaneMetricsExtensionSpec defines the spec for the DataPlaneMetricsExtension.
Field | Description |
---|---|
serviceSelector ServiceSelector
|
ServiceSelector holds the service selector specifying the services for which metrics should be collected. |
config MetricsConfig
|
Config holds the configuration for the DataPlane metrics. |
Appears in:
DataPlaneMetricsExtensionStatus
DataPlaneMetricsExtensionStatus defines the status of the DataPlaneMetricsExtension.
Field | Description |
---|---|
controlPlaneRef NamespacedRef
|
ControlPlaneRef is a reference to the ControlPlane that this is associated with. This field is set by the operator when this extension is associated with a ControlPlane through its extensions spec. There can only be one ControlPlane associated with a given DataPlaneMetricsExtension. When this is unset it means that the association has been removed. |
Appears in:
EndpointNetworkAccessHint
Underlying type: string
EndpointNetworkAccessHint provides a human readable indication of what kind
of network access is expected for a Gateway.
This isn’t meant to reflect knowledge of any specific network by name, which
is why it includes “hint” in the name. It’s meant to be a hint to the user
such as “internet-accessible”, “internal-only”.
Appears in:
KongPluginInstallationSpec
KongPluginInstallationSpec provides the information necessary to retrieve and install a Kong custom plugin.
Field | Description |
---|---|
image string
|
The image is an OCI image URL for a packaged custom Kong plugin. |
imagePullSecretRef SecretObjectReference
|
ImagePullSecretRef is a reference to a Kubernetes Secret containing credentials necessary to pull the OCI image in Image. It must follow the format in https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry. It is optional. If the image is public, omit this field. |
Appears in:
KongPluginInstallationStatus
KongPluginInstallationStatus defines the observed state of KongPluginInstallation.
Field | Description |
---|---|
conditions Condition array
|
Conditions describe the current conditions of this KongPluginInstallation. |
underlyingConfigMapName string
|
UnderlyingConfigMapName is the name of the ConfigMap that contains the plugin’s content. It is set when the plugin is successfully fetched and unpacked. |
Appears in:
KonnectControlPlaneAPIAuthConfiguration
KonnectControlPlaneAPIAuthConfiguration contains the configuration to authenticate with Konnect API ControlPlane.
Field | Description |
---|---|
clusterCertificateSecretRef ClusterCertificateSecretRef
|
ClusterCertificateSecretRef is the reference to the Secret containing the Konnect Control Plane’s cluster certificate. |
Appears in:
KonnectExtensionSpec
KonnectExtensionSpec defines the desired state of KonnectExtension.
Field | Description |
---|---|
controlPlaneRef ControlPlaneRef
|
ControlPlaneRef is a reference to a ControlPlane this KonnectExtension is associated with. |
controlPlaneRegion string
|
ControlPlaneRegion is the region of the Konnect Control Plane. |
serverHostname string
|
ServerHostname is the fully qualified domain name of the konnect server. This matches the RFC 1123 definition of a hostname with 1 notable exception that numeric IP addresses are not allowed. Note that as per RFC1035 and RFC1123, a label must consist of lower case alphanumeric characters or ‘-‘, and must start and end with an alphanumeric character. No other punctuation is allowed. |
konnectControlPlaneAPIAuthConfiguration KonnectControlPlaneAPIAuthConfiguration
|
AuthConfiguration must be used to configure the Konnect API authentication. |
clusterDataPlaneLabels object (keys:string, values:string)
|
ClusterDataPlaneLabels is a set of labels that will be applied to the Konnect DataPlane. |
Appears in:
KonnectExtensionStatus
KonnectExtensionStatus defines the observed state of KonnectExtension.
Field | Description |
---|---|
dataPlaneRefs NamespacedRef array
|
DataPlaneRefs is the array of DataPlane references this is associated with. A new reference is set by the operator when this extension is associated with a DataPlane through its extensions spec. |
Appears in:
LLMPrompt
LLMPrompt is a text prompt that includes parameters, a role and content.
This is intended for situations like when you need to provide roles in a
prompt to an LLM in order to influence its behavior and responses.
For example, you might want to provide a “system” role and tell the LLM
something like “you are a helpful assistant who responds in the style of
Sherlock Holmes”.
Field | Description |
---|---|
content string
|
Content is the prompt text sent for inference. |
role LLMPromptRole
|
Role indicates the role of the prompt. This is used to identify the prompt’s purpose, such as “system” or “user” and can influence the behavior of the LLM. If not specified, “user” will be used as the default. |
Appears in:
LLMPromptParams
LLMPromptParams contains parameters that can be used to control the behavior of a large language model (LLM) when generating text based on a prompt.
Field | Description |
---|---|
temperature string
|
Temperature controls the randomness of predictions by scaling the logits before applying softmax. A lower temperature (e.g., 0.0 to 0.7) makes the model more confident in its predictions, leading to more repetitive and deterministic outputs. A higher temperature (e.g., 0.8 to 1.0) increases randomness, generating more diverse and creative outputs. At very high temperatures, the outputs may become nonsensical or highly unpredictable. |
maxTokens integer
|
Max Tokens specifies the maximum length of the model’s output in terms of the number of tokens (words or pieces of words). This parameter limits the output’s size, ensuring the model generates content within a manageable scope. A token can be a word or part of a word, depending on the model’s tokenizer. |
topK integer
|
TopK sampling is a technique where the model’s prediction is limited to the K most likely next tokens at each step of the generation process. The probability distribution is truncated to these top K tokens, and the next token is randomly sampled from this subset. This method helps in reducing the chance of selecting highly improbable tokens, making the text more coherent. A smaller K leads to more predictable text, while a larger K allows for more diversity but with an increased risk of incoherence. |
topP string
|
TopP (also known as nucleus sampling) is an alternative to top K sampling. Instead of selecting the top K tokens, top P sampling chooses from the smallest set of tokens whose cumulative probability exceeds the threshold P. This method dynamically adjusts the number of tokens considered at each step, depending on their probability distribution. It helps in maintaining diversity while also avoiding very unlikely tokens. A higher P value increases diversity but can lead to less coherence, whereas a lower P value makes the model’s outputs more focused and coherent. |
Appears in:
LLMPromptRole
Underlying type: string
LLMPromptRole indicates the role of a prompt for a large language model (LLM).
Appears in:
LLMPromptType
Underlying type: string
LLMPromptType indicates the type of prompt to be used for a large language model (LLM).
Appears in:
LargeLanguageModels
LargeLanguageModels is a list of Large Language Models (LLM) hosted in various ways (cloud hosted, self hosted, e.t.c.) which the AIGateway should serve and manage traffic for.
Field | Description |
---|---|
cloudHosted CloudHostedLargeLanguageModel array
|
CloudHosted configures LLMs hosted and served by cloud providers. This is currently a required field, requiring at least one cloud-hosted LLM be specified, however in future iterations we may add other hosting options such as self-hosted LLMs as separate fields. |
Appears in:
MetricsConfig
MetricsConfig holds the configuration for the DataPlane metrics.
Field | Description |
---|---|
latency boolean
|
Latency indicates whether latency metrics are enabled for the DataPlane. This translates into deployed instances having latency_metrics option set on the Prometheus plugin. |
bandwidth boolean
|
Bandwidth indicates whether bandwidth metrics are enabled for the DataPlane. This translates into deployed instances having bandwidth_metrics option set on the Prometheus plugin. |
upstreamHealth boolean
|
UpstreamHealth indicates whether upstream health metrics are enabled for the DataPlane. This translates into deployed instances having upstream_health_metrics option set on the Prometheus plugin. |
statusCode boolean
|
StatusCode indicates whether status code metrics are enabled for the DataPlane. This translates into deployed instances having status_code_metrics option set on the Prometheus plugin. |
Appears in:
NamespacedRef
NamespacedRef is a reference to a namespaced resource.
Field | Description |
---|---|
name string
|
Name is the name of the referred resource. |
namespace string
|
Namespace is the namespace of the referred resource. For namespace-scoped resources if no Namespace is provided then the namespace of the parent object MUST be used. This field MUST not be set when referring to cluster-scoped resources. |
Appears in:
ServiceSelector
ServiceSelector holds the service selector specification.
Field | Description |
---|---|
matchNames ServiceSelectorEntry array
|
MatchNames holds the list of Services names to match. |
Appears in:
ServiceSelectorEntry
ServiceSelectorEntry holds the name of a service to match.
Field | Description |
---|---|
name string
|
Name is the name of the service to match. |
Appears in:
gateway-operator.konghq.com/v1beta1
Package v1beta1 contains API Schema definitions for the gateway-operator.konghq.com v1beta1 API group
- ControlPlane
- DataPlane
-
GatewayConfiguration
ControlPlane
ControlPlane is the Schema for the controlplanes API
Field | Description |
---|---|
apiVersion string
|
gateway-operator.konghq.com/v1beta1 |
kind string
|
ControlPlane |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec ControlPlaneSpec
|
|
status ControlPlaneStatus
|
DataPlane
DataPlane is the Schema for the dataplanes API
Field | Description |
---|---|
apiVersion string
|
gateway-operator.konghq.com/v1beta1 |
kind string
|
DataPlane |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec DataPlaneSpec
|
|
status DataPlaneStatus
|
GatewayConfiguration
GatewayConfiguration is the Schema for the gatewayconfigurations API
Field | Description |
---|---|
apiVersion string
|
gateway-operator.konghq.com/v1beta1 |
kind string
|
GatewayConfiguration |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec GatewayConfigurationSpec
|
|
status GatewayConfigurationStatus
|
Types
In this section you will find types that the CRDs rely on.
Address
Address describes an address which can be either an IP address or a hostname.
Field | Description |
---|---|
type AddressType
|
Type of the address. |
value string
|
Value of the address. The validity of the values will depend on the type and support by the controller. Examples: 1.2.3.4 , 128::1 , my-ip-address . |
sourceType AddressSourceType
|
Source type of the address. |
Appears in:
AddressSourceType
Underlying type: string
AddressSourceType defines the type of source this address represents.
Can be one of:
PublicLoadBalancer
PrivateLoadBalancer
PublicIP
PrivateIP
Appears in:
AddressType
Underlying type: string
AddressType defines how a network address is represented as a text string.
Can be one of:
IPAddress
Hostname
Appears in:
BlueGreenStrategy
BlueGreenStrategy defines the Blue Green deployment strategy.
Field | Description |
---|---|
promotion Promotion
|
Promotion defines how the operator handles promotion of resources. |
resources RolloutResources
|
Resources controls what happens to operator managed resources during or after a rollout. |
Appears in:
ControlPlaneDeploymentOptions
ControlPlaneDeploymentOptions is a shared type used on objects to indicate that their configuration results in a Deployment which is managed by the Operator and includes options for managing Deployments such as the the number of replicas or pod options like container image and resource requirements. version, as well as Env variable overrides.
Field | Description |
---|---|
replicas integer
|
Replicas describes the number of desired pods. This is a pointer to distinguish between explicit zero and not specified. This only affects the DataPlane deployments for now, for more details on ControlPlane scaling please see https://github.com/Kong/gateway-operator/issues/736. |
podTemplateSpec PodTemplateSpec
|
PodTemplateSpec defines PodTemplateSpec for Deployment’s pods. |
Appears in:
ControlPlaneOptions
ControlPlaneOptions indicates the specific information needed to deploy and connect a ControlPlane to a DataPlane object.
Field | Description |
---|---|
deployment ControlPlaneDeploymentOptions
|
|
dataplane string
|
DataPlanes refers to the named DataPlane objects which this ControlPlane is responsible for. Currently they must be in the same namespace as the DataPlane. |
extensions ExtensionRef array
|
Extensions provide additional or replacement features for the ControlPlane resources to influence or enhance functionality. |
Appears in:
ControlPlaneSpec
ControlPlaneSpec defines the desired state of ControlPlane
Field | Description |
---|---|
deployment ControlPlaneDeploymentOptions
|
|
dataplane string
|
DataPlanes refers to the named DataPlane objects which this ControlPlane is responsible for. Currently they must be in the same namespace as the DataPlane. |
extensions ExtensionRef array
|
Extensions provide additional or replacement features for the ControlPlane resources to influence or enhance functionality. |
gatewayClass ObjectName
|
GatewayClass indicates the Gateway resources which this ControlPlane should be responsible for configuring routes for (e.g. HTTPRoute, TCPRoute, UDPRoute, TLSRoute, e.t.c.). Required for the ControlPlane to have any effect: at least one Gateway must be present for configuration to be pushed to the data-plane and only Gateway resources can be used to identify data-plane entities. |
ingressClass string
|
IngressClass enables support for the older Ingress resource and indicates which Ingress resources this ControlPlane should be responsible for. Routing configured this way will be applied to the Gateway resources indicated by GatewayClass. If omitted, Ingress resources will not be supported by the ControlPlane. |
Appears in:
ControlPlaneStatus
ControlPlaneStatus defines the observed state of ControlPlane
Field | Description |
---|---|
conditions Condition array
|
Conditions describe the current conditions of the Gateway. |
Appears in:
DataPlaneDeploymentOptions
DataPlaneDeploymentOptions specifies options for the Deployments (as in the Kubernetes resource “Deployment”) which are created and managed for the DataPlane resource.
Field | Description |
---|---|
rollout Rollout
|
Rollout describes a custom rollout strategy. |
replicas integer
|
Replicas describes the number of desired pods. This is a pointer to distinguish between explicit zero and not specified. This is effectively shorthand for setting a scaling minimum and maximum to the same value. This field and the scaling field are mutually exclusive: You can only configure one or the other. |
scaling Scaling
|
Scaling defines the scaling options for the deployment. |
podTemplateSpec PodTemplateSpec
|
PodTemplateSpec defines PodTemplateSpec for Deployment’s pods. It’s being applied on top of the generated Deployments using StrategicMergePatch. |
Appears in:
DataPlaneNetworkOptions
DataPlaneNetworkOptions defines network related options for a DataPlane.
Field | Description |
---|---|
services DataPlaneServices
|
Services indicates the configuration of Kubernetes Services needed for the topology of various forms of traffic (including ingress, e.t.c.) to and from the DataPlane. |
konnectCertificate KonnectCertificateOptions
|
KonnectCA is the certificate authority that the operator uses to provision client certificates the DataPlane will use to authenticate itself to the Konnect API. Requires Enterprise. |
Appears in:
DataPlaneOptions
DataPlaneOptions defines the information specifically needed to deploy the DataPlane.
Field | Description |
---|---|
deployment DataPlaneDeploymentOptions
|
|
network DataPlaneNetworkOptions
|
|
resources DataPlaneResources
|
|
extensions ExtensionRef array
|
Extensions provide additional or replacement features for the DataPlane resources to influence or enhance functionality. NOTE: since we have one extension only (KonnectExtension), we limit the amount of extensions to 1. |
pluginsToInstall NamespacedName array
|
PluginsToInstall is a list of KongPluginInstallation resources that will be installed and available in the DataPlane. |
Appears in:
DataPlaneResources
DataPlaneResources defines the resources that will be created and managed for the DataPlane.
Field | Description |
---|---|
podDisruptionBudget PodDisruptionBudget
|
PodDisruptionBudget is the configuration for the PodDisruptionBudget that will be created for the DataPlane. |
Appears in:
DataPlaneRolloutStatus
DataPlaneRolloutStatus describes the DataPlane rollout status.
Field | Description |
---|---|
services DataPlaneRolloutStatusServices
|
Services contain the information about the services which are available through which user can access the preview deployment. |
deployment DataPlaneRolloutStatusDeployment
|
Deployment contains the information about the preview deployment. |
conditions Condition array
|
Conditions contains the status conditions about the rollout. |
Appears in:
DataPlaneRolloutStatusDeployment
DataPlaneRolloutStatusDeployment is a rollout status field which contains fields specific for Deployments during the rollout.
Field | Description |
---|---|
selector string
|
Selector is a stable label selector value assigned to a DataPlane rollout status which is used throughout the rollout as a deterministic labels selector for Services and Deployments. |
Appears in:
DataPlaneRolloutStatusServices
DataPlaneRolloutStatusServices describes the status of the services during DataPlane rollout.
Field | Description |
---|---|
ingress RolloutStatusService
|
Ingress contains the name and the address of the preview service for ingress. Using this service users can send requests that will hit the preview deployment. |
adminAPI RolloutStatusService
|
AdminAPI contains the name and the address of the preview service for Admin API. Using this service users can send requests to configure the DataPlane’s preview deployment. |
Appears in:
DataPlaneServiceOptions
DataPlaneServiceOptions contains Services related DataPlane configuration.
Field | Description |
---|---|
ports DataPlaneServicePort array
|
Ports defines the list of ports that are exposed by the service. The ports field allows defining the name, port and targetPort of the underlying service ports, while the protocol is defaulted to TCP, as it is the only protocol currently supported. |
type ServiceType
|
Type determines how the Service is exposed. Defaults to LoadBalancer .Valid options are LoadBalancer and ClusterIP .ClusterIP allocates a cluster-internal IP address for load-balancing to endpoints.LoadBalancer builds on NodePort and creates an external load-balancer (if supported in the current cloud) which routes to the same endpoints as the clusterIP.More info: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types |
annotations object (keys:string, values:string)
|
Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations |
externalTrafficPolicy ServiceExternalTrafficPolicy
|
ExternalTrafficPolicy describes how nodes distribute service traffic they receive on one of the Service’s “externally-facing” addresses (NodePorts, ExternalIPs, and LoadBalancer IPs). If set to “Local”, the proxy will configure the service in a way that assumes that external load balancers will take care of balancing the service traffic between nodes, and so each node will deliver traffic only to the node-local endpoints of the service, without masquerading the client source IP. (Traffic mistakenly sent to a node with no endpoints will be dropped.) The default value, “Cluster”, uses the standard behavior of routing to all endpoints evenly (possibly modified by topology and other features). Note that traffic sent to an External IP or LoadBalancer IP from within the cluster will always get “Cluster” semantics, but clients sending to a NodePort from within the cluster may need to take traffic policy into account when picking a node. More info: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip |
Appears in:
DataPlaneServicePort
DataPlaneServicePort contains information on service’s port.
Field | Description |
---|---|
name string
|
The name of this port within the service. This must be a DNS_LABEL. All ports within a ServiceSpec must have unique names. When considering the endpoints for a Service, this must match the ‘name’ field in the EndpointPort. Optional if only one ServicePort is defined on this service. |
port integer
|
The port that will be exposed by this service. |
targetPort IntOrString
|
Number or name of the port to access on the pods targeted by the service. Number must be in the range 1 to 65535. Name must be an IANA_SVC_NAME. If this is a string, it will be looked up as a named port in the target Pod’s container ports. If this is not specified, the value of the ‘port’ field is used (an identity map). This field is ignored for services with clusterIP=None, and should be omitted or set equal to the ‘port’ field. More info: https://kubernetes.io/docs/concepts/services-networking/service/#defining-a-service |
Appears in:
DataPlaneServices
DataPlaneServices contains Services related DataPlane configuration, shared with the GatewayConfiguration.
Field | Description |
---|---|
ingress DataPlaneServiceOptions
|
Ingress is the Kubernetes Service that will be used to expose ingress traffic for the DataPlane. Here you can determine whether the DataPlane will be exposed outside the cluster (e.g. using a LoadBalancer type Services) or only internally (e.g. ClusterIP), and inject any additional annotations you need on the service (for instance, if you need to influence a cloud provider LoadBalancer configuration). |
Appears in:
DataPlaneSpec
DataPlaneSpec defines the desired state of DataPlane
Field | Description |
---|---|
deployment DataPlaneDeploymentOptions
|
|
network DataPlaneNetworkOptions
|
|
resources DataPlaneResources
|
|
extensions ExtensionRef array
|
Extensions provide additional or replacement features for the DataPlane resources to influence or enhance functionality. NOTE: since we have one extension only (KonnectExtension), we limit the amount of extensions to 1. |
pluginsToInstall NamespacedName array
|
PluginsToInstall is a list of KongPluginInstallation resources that will be installed and available in the DataPlane. |
Appears in:
DataPlaneStatus
DataPlaneStatus defines the observed state of DataPlane
Field | Description |
---|---|
conditions Condition array
|
Conditions describe the status of the DataPlane. |
service string
|
Service indicates the Service that exposes the DataPlane’s configured routes |
addresses Address array
|
Addresses lists the addresses that have actually been bound to the DataPlane. |
selector string
|
Selector contains a unique DataPlane identifier used as a deterministic label selector that is used throughout its dependent resources. This is used e.g. as a label selector for DataPlane’s Services, Deployments and PodDisruptionBudgets. |
readyReplicas integer
|
ReadyReplicas indicates how many replicas have reported to be ready. |
replicas integer
|
Replicas indicates how many replicas have been set for the DataPlane. |
rollout DataPlaneRolloutStatus
|
RolloutStatus contains information about the rollout. It is set only if a rollout strategy was configured in the spec. |
Appears in:
DeploymentOptions
DeploymentOptions is a shared type used on objects to indicate that their configuration results in a Deployment which is managed by the Operator and includes options for managing Deployments such as the number of replicas or pod options like container image and resource requirements. version, as well as Env variable overrides.
Field | Description |
---|---|
replicas integer
|
Replicas describes the number of desired pods. This is a pointer to distinguish between explicit zero and not specified. This is effectively shorthand for setting a scaling minimum and maximum to the same value. This field and the scaling field are mutually exclusive: You can only configure one or the other. |
scaling Scaling
|
Scaling defines the scaling options for the deployment. |
podTemplateSpec PodTemplateSpec
|
PodTemplateSpec defines PodTemplateSpec for Deployment’s pods. It’s being applied on top of the generated Deployments using StrategicMergePatch. |
Appears in:
GatewayConfigDataPlaneNetworkOptions
GatewayConfigDataPlaneNetworkOptions defines network related options for a DataPlane.
Field | Description |
---|---|
services GatewayConfigDataPlaneServices
|
Services indicates the configuration of Kubernetes Services needed for the topology of various forms of traffic (including ingress, etc.) to and from the DataPlane. |
Appears in:
GatewayConfigDataPlaneOptions
GatewayConfigDataPlaneOptions indicates the specific information needed to configure and deploy a DataPlane object.
Field | Description |
---|---|
deployment DataPlaneDeploymentOptions
|
|
network GatewayConfigDataPlaneNetworkOptions
|
|
extensions ExtensionRef array
|
Extensions provide additional or replacement features for the DataPlane resources to influence or enhance functionality. NOTE: since we have one extension only (KonnectExtension), we limit the amount of extensions to 1. |
pluginsToInstall NamespacedName array
|
PluginsToInstall is a list of KongPluginInstallation resources that will be installed and available in the Gateways (DataPlanes) that use this GatewayConfig. |
Appears in:
GatewayConfigDataPlaneServices
GatewayConfigDataPlaneServices contains Services related DataPlane configuration.
Field | Description |
---|---|
ingress GatewayConfigServiceOptions
|
Ingress is the Kubernetes Service that will be used to expose ingress traffic for the DataPlane. Here you can determine whether the DataPlane will be exposed outside the cluster (e.g. using a LoadBalancer type Services) or only internally (e.g. ClusterIP), and inject any additional annotations you need on the service (for instance, if you need to influence a cloud provider LoadBalancer configuration). |
Appears in:
GatewayConfigServiceOptions
GatewayConfigServiceOptions is used to includes options to customize the ingress service, such as the annotations.
Field | Description |
---|---|
type ServiceType
|
Type determines how the Service is exposed. Defaults to LoadBalancer .Valid options are LoadBalancer and ClusterIP .ClusterIP allocates a cluster-internal IP address for load-balancing to endpoints.LoadBalancer builds on NodePort and creates an external load-balancer (if supported in the current cloud) which routes to the same endpoints as the clusterIP.More info: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types |
annotations object (keys:string, values:string)
|
Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations |
externalTrafficPolicy ServiceExternalTrafficPolicy
|
ExternalTrafficPolicy describes how nodes distribute service traffic they receive on one of the Service’s “externally-facing” addresses (NodePorts, ExternalIPs, and LoadBalancer IPs). If set to “Local”, the proxy will configure the service in a way that assumes that external load balancers will take care of balancing the service traffic between nodes, and so each node will deliver traffic only to the node-local endpoints of the service, without masquerading the client source IP. (Traffic mistakenly sent to a node with no endpoints will be dropped.) The default value, “Cluster”, uses the standard behavior of routing to all endpoints evenly (possibly modified by topology and other features). Note that traffic sent to an External IP or LoadBalancer IP from within the cluster will always get “Cluster” semantics, but clients sending to a NodePort from within the cluster may need to take traffic policy into account when picking a node. More info: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip |
Appears in:
GatewayConfigurationSpec
GatewayConfigurationSpec defines the desired state of GatewayConfiguration
Field | Description |
---|---|
dataPlaneOptions GatewayConfigDataPlaneOptions
|
DataPlaneOptions is the specification for configuration overrides for DataPlane resources that will be created for the Gateway. |
controlPlaneOptions ControlPlaneOptions
|
ControlPlaneOptions is the specification for configuration overrides for ControlPlane resources that will be created for the Gateway. |
Appears in:
GatewayConfigurationStatus
GatewayConfigurationStatus defines the observed state of GatewayConfiguration
Field | Description |
---|---|
conditions Condition array
|
Conditions describe the current conditions of the GatewayConfigurationStatus. |
Appears in:
HorizontalScaling
HorizontalScaling defines horizontal scaling options for the deployment. It holds all the options from the HorizontalPodAutoscalerSpec besides the ScaleTargetRef which is being controlled by the Operator.
Field | Description |
---|---|
minReplicas integer
|
minReplicas is the lower limit for the number of replicas to which the autoscaler can scale down. It defaults to 1 pod. minReplicas is allowed to be 0 if the alpha feature gate HPAScaleToZero is enabled and at least one Object or External metric is configured. Scaling is active as long as at least one metric value is available. |
maxReplicas integer
|
maxReplicas is the upper limit for the number of replicas to which the autoscaler can scale up. It cannot be less that minReplicas. |
metrics MetricSpec array
|
metrics contains the specifications for which to use to calculate the desired replica count (the maximum replica count across all metrics will be used). The desired replica count is calculated multiplying the ratio between the target value and the current value by the current number of pods. Ergo, metrics used must decrease as the pod count is increased, and vice-versa. See the individual metric source types for more information about how each type of metric must respond. If not set, the default metric will be set to 80% average CPU utilization. |
behavior HorizontalPodAutoscalerBehavior
|
behavior configures the scaling behavior of the target in both Up and Down directions (scaleUp and scaleDown fields respectively). If not set, the default HPAScalingRules for scale up and scale down are used. |
Appears in:
KonnectCertificateOptions
KonnectCertificateOptions indicates how the operator should manage the certificates that managed entities will use to interact with Konnect.
Field | Description |
---|---|
issuer NamespacedName
|
Issuer is the cert-manager Issuer or ClusterIssuer the operator will use to request certificates. When Namespace is set, the operator will retrieve the Issuer with that Name in that Namespace. When Namespace is omitted, the operator will retrieve the ClusterIssuer with that name. |
Appears in:
NamespacedName
NamespacedName is a resource identified by name and optional namespace.
Field | Description |
---|---|
namespace string
|
|
name string
|
Appears in:
PodDisruptionBudget
PodDisruptionBudget defines the configuration for the PodDisruptionBudget.
Field | Description |
---|---|
spec PodDisruptionBudgetSpec
|
Spec defines the specification of the PodDisruptionBudget. Selector is managed by the controller and cannot be set by the user. |
Appears in:
PodDisruptionBudgetSpec
PodDisruptionBudgetSpec defines the specification of a PodDisruptionBudget.
Field | Description |
---|---|
minAvailable IntOrString
|
An eviction is allowed if at least “minAvailable” pods selected by “selector” will still be available after the eviction, i.e. even in the absence of the evicted pod. So for example you can prevent all voluntary evictions by specifying “100%”. |
maxUnavailable IntOrString
|
An eviction is allowed if at most “maxUnavailable” pods selected by “selector” are unavailable after the eviction, i.e. even in absence of the evicted pod. For example, one can prevent all voluntary evictions by specifying 0. This is a mutually exclusive setting with “minAvailable”. |
unhealthyPodEvictionPolicy UnhealthyPodEvictionPolicyType
|
UnhealthyPodEvictionPolicy defines the criteria for when unhealthy pods should be considered for eviction. Current implementation considers healthy pods, as pods that have status.conditions item with type=”Ready”,status=”True”. Valid policies are IfHealthyBudget and AlwaysAllow. If no policy is specified, the default behavior will be used, which corresponds to the IfHealthyBudget policy. IfHealthyBudget policy means that running pods (status.phase=”Running”), but not yet healthy can be evicted only if the guarded application is not disrupted (status.currentHealthy is at least equal to status.desiredHealthy). Healthy pods will be subject to the PDB for eviction. AlwaysAllow policy means that all running pods (status.phase=”Running”), but not yet healthy are considered disrupted and can be evicted regardless of whether the criteria in a PDB is met. This means perspective running pods of a disrupted application might not get a chance to become healthy. Healthy pods will be subject to the PDB for eviction. Additional policies may be added in the future. Clients making eviction decisions should disallow eviction of unhealthy pods if they encounter an unrecognized policy in this field. This field is beta-level. The eviction API uses this field when the feature gate PDBUnhealthyPodEvictionPolicy is enabled (enabled by default). |
Appears in:
Promotion
Promotion is a type that contains fields that define how the operator handles promotion of resources during a blue/green rollout.
Field | Description |
---|---|
strategy PromotionStrategy
|
Strategy indicates how you want the operator to handle the promotion of the preview (green) resources (Deployments and Services) after all workflows and tests succeed, OR if you even want it to break before performing the promotion to allow manual inspection. |
Appears in:
PromotionStrategy
Underlying type: string
PromotionStrategy is the type of promotion strategy consts.
Allowed values:
-
BreakBeforePromotion
is a promotion strategy which will ensure all new resources are ready and then break, to enable manual inspection. The user must indicate manually when they want the promotion to continue. That can be done by annotating theDataPlane
object with"gateway-operator.konghq.com/promote-when-ready": "true"
.
Appears in:
Rollout
Rollout defines options for rollouts.
Field | Description |
---|---|
strategy RolloutStrategy
|
Strategy contains the deployment strategy for rollout. |
Appears in:
RolloutResourcePlan
RolloutResourcePlan is a type that holds rollout resource plan related fields which control how the operator handles resources during and after a rollout.
Field | Description |
---|---|
deployment RolloutResourcePlanDeployment
|
Deployment describes how the operator manages Deployments during and after a rollout. |
Appears in:
RolloutResourcePlanDeployment
Underlying type: string
RolloutResourcePlanDeployment is the type that holds the resource plan for
managing the Deployment objects during and after a rollout.
Allowed values:
-
ScaleDownOnPromotionScaleUpOnRollout
is a rollout resource plan for Deployment which makes the operator scale down the Deployment to 0 when the rollout is not initiated by a spec change and then to scale it up when the rollout is initiated (the owner resource like a DataPlane is patched or updated).
Appears in:
RolloutResources
RolloutResources is the type which contains the fields which control how the operator manages the resources it manages during or after the rollout concludes.
Field | Description |
---|---|
plan RolloutResourcePlan
|
Plan defines the resource plan for managing resources during and after a rollout. |
Appears in:
RolloutStatusService
RolloutStatusService is a struct which contains status information about services that are exposed as part of the rollout.
Field | Description |
---|---|
name string
|
Name indicates the name of the service. |
addresses Address array
|
Addresses contains the addresses of a Service. |
Appears in:
RolloutStrategy
RolloutStrategy holds the rollout strategy options.
Field | Description |
---|---|
blueGreen BlueGreenStrategy
|
BlueGreen holds the options specific for Blue Green Deployments. |
Appears in:
Scaling
Scaling defines the scaling options for the deployment.
Field | Description |
---|---|
horizontal HorizontalScaling
|
HorizontalScaling defines horizontal scaling options for the deployment. |
Appears in:
ServiceOptions
ServiceOptions is used to includes options to customize the ingress service, such as the annotations.
Field | Description |
---|---|
type ServiceType
|
Type determines how the Service is exposed. Defaults to LoadBalancer .Valid options are LoadBalancer and ClusterIP .ClusterIP allocates a cluster-internal IP address for load-balancing to endpoints.LoadBalancer builds on NodePort and creates an external load-balancer (if supported in the current cloud) which routes to the same endpoints as the clusterIP.More info: https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types |
annotations object (keys:string, values:string)
|
Annotations is an unstructured key value map stored with a resource that may be set by external tools to store and retrieve arbitrary metadata. They are not queryable and should be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations |
externalTrafficPolicy ServiceExternalTrafficPolicy
|
ExternalTrafficPolicy describes how nodes distribute service traffic they receive on one of the Service’s “externally-facing” addresses (NodePorts, ExternalIPs, and LoadBalancer IPs). If set to “Local”, the proxy will configure the service in a way that assumes that external load balancers will take care of balancing the service traffic between nodes, and so each node will deliver traffic only to the node-local endpoints of the service, without masquerading the client source IP. (Traffic mistakenly sent to a node with no endpoints will be dropped.) The default value, “Cluster”, uses the standard behavior of routing to all endpoints evenly (possibly modified by topology and other features). Note that traffic sent to an External IP or LoadBalancer IP from within the cluster will always get “Cluster” semantics, but clients sending to a NodePort from within the cluster may need to take traffic policy into account when picking a node. More info: https://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip |
Appears in:
konnect.konghq.com/v1alpha1
Package v1alpha1 contains API Schema definitions for the konnect.konghq.com v1alpha1 API group.
- KonnectAPIAuthConfiguration
-
KonnectGatewayControlPlane
KonnectAPIAuthConfiguration
KonnectAPIAuthConfiguration is the Schema for the Konnect configuration type.
Field | Description |
---|---|
apiVersion string
|
konnect.konghq.com/v1alpha1 |
kind string
|
KonnectAPIAuthConfiguration |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KonnectAPIAuthConfigurationSpec
|
Spec is the specification of the KonnectAPIAuthConfiguration resource. |
status KonnectAPIAuthConfigurationStatus
|
Status is the status of the KonnectAPIAuthConfiguration resource. |
KonnectGatewayControlPlane
KonnectGatewayControlPlane is the Schema for the KonnectGatewayControlplanes API.
Field | Description |
---|---|
apiVersion string
|
konnect.konghq.com/v1alpha1 |
kind string
|
KonnectGatewayControlPlane |
metadata ObjectMeta
|
Refer to Kubernetes API documentation for fields of metadata . |
spec KonnectGatewayControlPlaneSpec
|
Spec defines the desired state of KonnectGatewayControlPlane. |
status KonnectGatewayControlPlaneStatus
|
Status defines the observed state of KonnectGatewayControlPlane. |
Types
In this section you will find types that the CRDs rely on.
KonnectAPIAuthConfigurationRef
KonnectAPIAuthConfigurationRef is a reference to a KonnectAPIAuthConfiguration resource.
Field | Description |
---|---|
name string
|
Name is the name of the KonnectAPIAuthConfiguration resource. |
Appears in:
KonnectAPIAuthConfigurationSpec
KonnectAPIAuthConfigurationSpec is the specification of the KonnectAPIAuthConfiguration resource.
Field | Description |
---|---|
type KonnectAPIAuthType
|
|
token string
|
Token is the Konnect token used to authenticate with the Konnect API. |
secretRef SecretReference
|
SecretRef is a reference to a Kubernetes Secret containing the Konnect token. This secret is required to have the konghq.com/credential label set to “konnect”. |
serverURL string
|
ServerURL is the URL of the Konnect server. It can be either a full URL with an HTTPs scheme or just a hostname. Please refer to https://docs.konghq.com/konnect/network/ for the list of supported hostnames. |
Appears in:
KonnectAPIAuthConfigurationStatus
KonnectAPIAuthConfigurationStatus is the status of the KonnectAPIAuthConfiguration resource.
Field | Description |
---|---|
organizationID string
|
OrganizationID is the unique identifier of the organization in Konnect. |
serverURL string
|
ServerURL is configured server URL. |
conditions Condition array
|
Conditions describe the status of the Konnect configuration. |
Appears in:
KonnectAPIAuthType
Underlying type: string
KonnectAPIAuthType is the type of authentication used to authenticate with the Konnect API.
Appears in:
KonnectConfiguration
KonnectConfiguration is the Schema for the KonnectConfiguration API.
Field | Description |
---|---|
authRef KonnectAPIAuthConfigurationRef
|
APIAuthConfigurationRef is the reference to the API Auth Configuration that should be used for this Konnect Configuration. |
Appears in:
KonnectEntityStatus
KonnectEntityStatus represents the status of a Konnect entity.
Field | Description |
---|---|
id string
|
ID is the unique identifier of the Konnect entity as assigned by Konnect API. If it’s unset (empty string), it means the Konnect entity hasn’t been created yet. |
serverURL string
|
ServerURL is the URL of the Konnect server in which the entity exists. |
organizationID string
|
OrgID is ID of Konnect Org that this entity has been created in. |
Appears in:
- KonnectEntityStatusWithControlPlaneAndCertificateRefs
- KonnectEntityStatusWithControlPlaneAndConsumerRefs
- KonnectEntityStatusWithControlPlaneAndKeySetRef
- KonnectEntityStatusWithControlPlaneAndServiceRefs
- KonnectEntityStatusWithControlPlaneAndUpstreamRefs
- KonnectEntityStatusWithControlPlaneRef
- KonnectGatewayControlPlaneStatus
KonnectGatewayControlPlaneSpec
KonnectGatewayControlPlaneSpec defines the desired state of KonnectGatewayControlPlane.
Field | Description |
---|---|
name string
|
The name of the control plane. |
description string
|
The description of the control plane in Konnect. |
cluster_type CreateControlPlaneRequestClusterType
|
The ClusterType value of the cluster associated with the Control Plane. |
auth_type AuthType
|
The auth type value of the cluster associated with the Runtime Group. |
cloud_gateway boolean
|
Whether this control-plane can be used for cloud-gateways. |
proxy_urls ProxyURL array
|
Array of proxy URLs associated with reaching the data-planes connected to a control-plane. |
labels object (keys:string, values:string)
|
Labels store metadata of an entity that can be used for filtering an entity list or for searching across entity types. Keys must be of length 1-63 characters, and cannot start with “kong”, “konnect”, “mesh”, “kic”, or “_”. |
members LocalObjectReference array
|
Members is a list of references to the KonnectGatewayControlPlaneMembers that are part of this control plane group. Only applicable for ControlPlanes that are created as groups. |
konnect KonnectConfiguration
|
Appears in:
KonnectGatewayControlPlaneStatus
KonnectGatewayControlPlaneStatus defines the observed state of KonnectGatewayControlPlane.
Field | Description |
---|---|
id string
|
ID is the unique identifier of the Konnect entity as assigned by Konnect API. If it’s unset (empty string), it means the Konnect entity hasn’t been created yet. |
serverURL string
|
ServerURL is the URL of the Konnect server in which the entity exists. |
organizationID string
|
OrgID is ID of Konnect Org that this entity has been created in. |
conditions Condition array
|
Conditions describe the current conditions of the KonnectGatewayControlPlane. Known condition types are: * “Programmed” |
Appears in: