123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348 |
- /*
- Copyright The Kubernetes Authors.
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
- */
- // This file was autogenerated by go-to-protobuf. Do not edit it manually!
- syntax = "proto2";
- package k8s.io.api.networking.v1beta1;
- import "k8s.io/api/core/v1/generated.proto";
- import "k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto";
- import "k8s.io/apimachinery/pkg/runtime/generated.proto";
- import "k8s.io/apimachinery/pkg/runtime/schema/generated.proto";
- import "k8s.io/apimachinery/pkg/util/intstr/generated.proto";
- // Package-wide variables from generator "generated".
- option go_package = "k8s.io/api/networking/v1beta1";
- // HTTPIngressPath associates a path with a backend. Incoming urls matching the
- // path are forwarded to the backend.
- message HTTPIngressPath {
- // path is matched against the path of an incoming request. Currently it can
- // contain characters disallowed from the conventional "path" part of a URL
- // as defined by RFC 3986. Paths must begin with a '/' and must be present
- // when using PathType with value "Exact" or "Prefix".
- // +optional
- optional string path = 1;
- // pathType determines the interpretation of the path matching. PathType can
- // be one of the following values:
- // * Exact: Matches the URL path exactly.
- // * Prefix: Matches based on a URL path prefix split by '/'. Matching is
- // done on a path element by element basis. A path element refers is the
- // list of labels in the path split by the '/' separator. A request is a
- // match for path p if every p is an element-wise prefix of p of the
- // request path. Note that if the last element of the path is a substring
- // of the last element in request path, it is not a match (e.g. /foo/bar
- // matches /foo/bar/baz, but does not match /foo/barbaz).
- // * ImplementationSpecific: Interpretation of the Path matching is up to
- // the IngressClass. Implementations can treat this as a separate PathType
- // or treat it identically to Prefix or Exact path types.
- // Implementations are required to support all path types.
- // Defaults to ImplementationSpecific.
- optional string pathType = 3;
- // backend defines the referenced service endpoint to which the traffic
- // will be forwarded to.
- optional IngressBackend backend = 2;
- }
- // HTTPIngressRuleValue is a list of http selectors pointing to backends.
- // In the example: http://<host>/<path>?<searchpart> -> backend where
- // where parts of the url correspond to RFC 3986, this resource will be used
- // to match against everything after the last '/' and before the first '?'
- // or '#'.
- message HTTPIngressRuleValue {
- // paths is a collection of paths that map requests to backends.
- repeated HTTPIngressPath paths = 1;
- }
- // Ingress is a collection of rules that allow inbound connections to reach the
- // endpoints defined by a backend. An Ingress can be configured to give services
- // externally-reachable urls, load balance traffic, terminate SSL, offer name
- // based virtual hosting etc.
- message Ingress {
- // Standard object's metadata.
- // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- // +optional
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
- // spec is the desired state of the Ingress.
- // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
- // +optional
- optional IngressSpec spec = 2;
- // status is the current state of the Ingress.
- // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
- // +optional
- optional IngressStatus status = 3;
- }
- // IngressBackend describes all endpoints for a given service and port.
- message IngressBackend {
- // serviceName specifies the name of the referenced service.
- // +optional
- optional string serviceName = 1;
- // servicePort Specifies the port of the referenced service.
- // +optional
- optional k8s.io.apimachinery.pkg.util.intstr.IntOrString servicePort = 2;
- // resource is an ObjectRef to another Kubernetes resource in the namespace
- // of the Ingress object. If resource is specified, serviceName and servicePort
- // must not be specified.
- // +optional
- optional k8s.io.api.core.v1.TypedLocalObjectReference resource = 3;
- }
- // IngressClass represents the class of the Ingress, referenced by the Ingress
- // Spec. The `ingressclass.kubernetes.io/is-default-class` annotation can be
- // used to indicate that an IngressClass should be considered default. When a
- // single IngressClass resource has this annotation set to true, new Ingress
- // resources without a class specified will be assigned this default class.
- message IngressClass {
- // Standard object's metadata.
- // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- // +optional
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
- // spec is the desired state of the IngressClass.
- // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status
- // +optional
- optional IngressClassSpec spec = 2;
- }
- // IngressClassList is a collection of IngressClasses.
- message IngressClassList {
- // Standard list metadata.
- // +optional
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
- // items is the list of IngressClasses.
- repeated IngressClass items = 2;
- }
- // IngressClassParametersReference identifies an API object. This can be used
- // to specify a cluster or namespace-scoped resource.
- message IngressClassParametersReference {
- // apiGroup is the group for the resource being referenced. If APIGroup is
- // not specified, the specified Kind must be in the core API group. For any
- // other third-party types, APIGroup is required.
- // +optional
- optional string aPIGroup = 1;
- // kind is the type of resource being referenced.
- optional string kind = 2;
- // name is the name of resource being referenced.
- optional string name = 3;
- // scope represents if this refers to a cluster or namespace scoped resource.
- // This may be set to "Cluster" (default) or "Namespace".
- optional string scope = 4;
- // namespace is the namespace of the resource being referenced. This field is
- // required when scope is set to "Namespace" and must be unset when scope is set to
- // "Cluster".
- // +optional
- optional string namespace = 5;
- }
- // IngressClassSpec provides information about the class of an Ingress.
- message IngressClassSpec {
- // controller refers to the name of the controller that should handle this
- // class. This allows for different "flavors" that are controlled by the
- // same controller. For example, you may have different parameters for the
- // same implementing controller. This should be specified as a
- // domain-prefixed path no more than 250 characters in length, e.g.
- // "acme.io/ingress-controller". This field is immutable.
- optional string controller = 1;
- // parameters is a link to a custom resource containing additional
- // configuration for the controller. This is optional if the controller does
- // not require extra parameters.
- // +optional
- optional IngressClassParametersReference parameters = 2;
- }
- // IngressList is a collection of Ingress.
- message IngressList {
- // Standard object's metadata.
- // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
- // +optional
- optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
- // items is the list of Ingress.
- repeated Ingress items = 2;
- }
- // IngressLoadBalancerIngress represents the status of a load-balancer ingress point.
- message IngressLoadBalancerIngress {
- // ip is set for load-balancer ingress points that are IP based.
- // +optional
- optional string ip = 1;
- // hostname is set for load-balancer ingress points that are DNS based.
- // +optional
- optional string hostname = 2;
- // ports provides information about the ports exposed by this LoadBalancer.
- // +listType=atomic
- // +optional
- repeated IngressPortStatus ports = 4;
- }
- // LoadBalancerStatus represents the status of a load-balancer.
- message IngressLoadBalancerStatus {
- // ingress is a list containing ingress points for the load-balancer.
- // +optional
- repeated IngressLoadBalancerIngress ingress = 1;
- }
- // IngressPortStatus represents the error condition of a service port
- message IngressPortStatus {
- // port is the port number of the ingress port.
- optional int32 port = 1;
- // protocol is the protocol of the ingress port.
- // The supported values are: "TCP", "UDP", "SCTP"
- optional string protocol = 2;
- // error is to record the problem with the service port
- // The format of the error shall comply with the following rules:
- // - built-in error values shall be specified in this file and those shall use
- // CamelCase names
- // - cloud provider specific error values must have names that comply with the
- // format foo.example.com/CamelCase.
- // ---
- // The regex it matches is (dns1123SubdomainFmt/)?(qualifiedNameFmt)
- // +optional
- // +kubebuilder:validation:Required
- // +kubebuilder:validation:Pattern=`^([a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*/)?(([A-Za-z0-9][-A-Za-z0-9_.]*)?[A-Za-z0-9])$`
- // +kubebuilder:validation:MaxLength=316
- optional string error = 3;
- }
- // IngressRule represents the rules mapping the paths under a specified host to
- // the related backend services. Incoming requests are first evaluated for a host
- // match, then routed to the backend associated with the matching IngressRuleValue.
- message IngressRule {
- // host is the fully qualified domain name of a network host, as defined by RFC 3986.
- // Note the following deviations from the "host" part of the
- // URI as defined in RFC 3986:
- // 1. IPs are not allowed. Currently an IngressRuleValue can only apply to
- // the IP in the Spec of the parent Ingress.
- // 2. The `:` delimiter is not respected because ports are not allowed.
- // Currently the port of an Ingress is implicitly :80 for http and
- // :443 for https.
- // Both these may change in the future.
- // Incoming requests are matched against the host before the
- // IngressRuleValue. If the host is unspecified, the Ingress routes all
- // traffic based on the specified IngressRuleValue.
- //
- // host can be "precise" which is a domain name without the terminating dot of
- // a network host (e.g. "foo.bar.com") or "wildcard", which is a domain name
- // prefixed with a single wildcard label (e.g. "*.foo.com").
- // The wildcard character '*' must appear by itself as the first DNS label and
- // matches only a single label. You cannot have a wildcard label by itself (e.g. Host == "*").
- // Requests will be matched against the Host field in the following way:
- // 1. If Host is precise, the request matches this rule if the http host header is equal to Host.
- // 2. If Host is a wildcard, then the request matches this rule if the http host header
- // is to equal to the suffix (removing the first label) of the wildcard rule.
- // +optional
- optional string host = 1;
- // IngressRuleValue represents a rule to route requests for this IngressRule.
- // If unspecified, the rule defaults to a http catch-all. Whether that sends
- // just traffic matching the host to the default backend or all traffic to the
- // default backend, is left to the controller fulfilling the Ingress. Http is
- // currently the only supported IngressRuleValue.
- // +optional
- optional IngressRuleValue ingressRuleValue = 2;
- }
- // IngressRuleValue represents a rule to apply against incoming requests. If the
- // rule is satisfied, the request is routed to the specified backend. Currently
- // mixing different types of rules in a single Ingress is disallowed, so exactly
- // one of the following must be set.
- message IngressRuleValue {
- // +optional
- optional HTTPIngressRuleValue http = 1;
- }
- // IngressSpec describes the Ingress the user wishes to exist.
- message IngressSpec {
- // ingressClassName is the name of the IngressClass cluster resource. The
- // associated IngressClass defines which controller will implement the
- // resource. This replaces the deprecated `kubernetes.io/ingress.class`
- // annotation. For backwards compatibility, when that annotation is set, it
- // must be given precedence over this field. The controller may emit a
- // warning if the field and annotation have different values.
- // Implementations of this API should ignore Ingresses without a class
- // specified. An IngressClass resource may be marked as default, which can
- // be used to set a default value for this field. For more information,
- // refer to the IngressClass documentation.
- // +optional
- optional string ingressClassName = 4;
- // backend is the default backend capable of servicing requests that don't match any
- // rule. At least one of 'backend' or 'rules' must be specified. This field
- // is optional to allow the loadbalancer controller or defaulting logic to
- // specify a global default.
- // +optional
- optional IngressBackend backend = 1;
- // tls represents the TLS configuration. Currently the Ingress only supports a
- // single TLS port, 443. If multiple members of this list specify different hosts,
- // they will be multiplexed on the same port according to the hostname specified
- // through the SNI TLS extension, if the ingress controller fulfilling the
- // ingress supports SNI.
- // +optional
- repeated IngressTLS tls = 2;
- // rules is a list of host rules used to configure the Ingress. If unspecified, or
- // no rule matches, all traffic is sent to the default backend.
- // +optional
- repeated IngressRule rules = 3;
- }
- // IngressStatus describes the current state of the Ingress.
- message IngressStatus {
- // loadBalancer contains the current status of the load-balancer.
- // +optional
- optional IngressLoadBalancerStatus loadBalancer = 1;
- }
- // IngressTLS describes the transport layer security associated with an Ingress.
- message IngressTLS {
- // hosts is a list of hosts included in the TLS certificate. The values in
- // this list must match the name/s used in the tlsSecret. Defaults to the
- // wildcard host setting for the loadbalancer controller fulfilling this
- // Ingress, if left unspecified.
- // +optional
- repeated string hosts = 1;
- // secretName is the name of the secret used to terminate TLS traffic on
- // port 443. Field is left optional to allow TLS routing based on SNI
- // hostname alone. If the SNI host in a listener conflicts with the "Host"
- // header field used by an IngressRule, the SNI host is used for termination
- // and value of the Host header is used for routing.
- // +optional
- optional string secretName = 2;
- }
|