1---
2apiVersion: apiextensions.k8s.io/v1
3kind: CustomResourceDefinition
4metadata:
5 annotations:
6 controller-gen.kubebuilder.io/version: (unknown)
7 name: computesslpolicies.compute.cnrm.cloud.google.com
8spec:
9 group: compute.cnrm.cloud.google.com
10 names:
11 kind: ComputeSSLPolicy
12 listKind: ComputeSSLPolicyList
13 plural: computesslpolicies
14 singular: computesslpolicy
15 scope: Namespaced
16 versions:
17 - name: v1beta1
18 schema:
19 openAPIV3Schema:
20 description: ComputeSSLPolicy is the Schema for the compute API
21 properties:
22 apiVersion:
23 description: |-
24 APIVersion defines the versioned schema of this representation of an object.
25 Servers should convert recognized schemas to the latest internal value, and
26 may reject unrecognized values.
27 More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
28 type: string
29 kind:
30 description: |-
31 Kind is a string value representing the REST resource this object represents.
32 Servers may infer this from the endpoint the client submits requests to.
33 Cannot be updated.
34 In CamelCase.
35 More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
36 type: string
37 metadata:
38 type: object
39 spec:
40 properties:
41 customFeatures:
42 description: |-
43 Profile specifies the set of SSL features that can be used by the
44 load balancer when negotiating SSL with clients. This can be one of
45 'COMPATIBLE', 'MODERN', 'RESTRICTED', or 'CUSTOM'. If using 'CUSTOM',
46 the set of SSL features to enable must be specified in the
47 'customFeatures' field.
48
49
50 See the [official documentation](https://cloud.google.com/compute/docs/load-balancing/ssl-policies#profilefeaturesupport)
51 for which ciphers are available to use. **Note**: this argument
52 *must* be present when using the 'CUSTOM' profile. This argument
53 *must not* be present when using any other profile.
54 items:
55 type: string
56 type: array
57 description:
58 description: Immutable. An optional description of this resource.
59 type: string
60 minTlsVersion:
61 description: |-
62 The minimum version of SSL protocol that can be used by the clients
63 to establish a connection with the load balancer. Default value: "TLS_1_0" Possible values: ["TLS_1_0", "TLS_1_1", "TLS_1_2"].
64 type: string
65 profile:
66 description: |-
67 Profile specifies the set of SSL features that can be used by the
68 load balancer when negotiating SSL with clients. If using 'CUSTOM',
69 the set of SSL features to enable must be specified in the
70 'customFeatures' field.
71
72
73 See the [official documentation](https://cloud.google.com/compute/docs/load-balancing/ssl-policies#profilefeaturesupport)
74 for information on what cipher suites each profile provides. If
75 'CUSTOM' is used, the 'custom_features' attribute **must be set**. Default value: "COMPATIBLE" Possible values: ["COMPATIBLE", "MODERN", "RESTRICTED", "CUSTOM"].
76 type: string
77 resourceID:
78 description: Immutable. Optional. The name of the resource. Used for
79 creation and acquisition. When unset, the value of `metadata.name`
80 is used as the default.
81 type: string
82 type: object
83 status:
84 properties:
85 conditions:
86 description: |-
87 Conditions represent the latest available observations of the
88 ComputeSSLPolicy's current state.
89 items:
90 properties:
91 lastTransitionTime:
92 description: Last time the condition transitioned from one status
93 to another.
94 type: string
95 message:
96 description: Human-readable message indicating details about
97 last transition.
98 type: string
99 reason:
100 description: |-
101 Unique, one-word, CamelCase reason for the condition's last
102 transition.
103 type: string
104 status:
105 description: Status is the status of the condition. Can be True,
106 False, Unknown.
107 type: string
108 type:
109 description: Type is the type of the condition.
110 type: string
111 type: object
112 type: array
113 creationTimestamp:
114 description: Creation timestamp in RFC3339 text format.
115 type: string
116 enabledFeatures:
117 description: The list of features enabled in the SSL policy.
118 items:
119 type: string
120 type: array
121 fingerprint:
122 description: |-
123 Fingerprint of this resource. A hash of the contents stored in this
124 object. This field is used in optimistic locking.
125 type: string
126 observedGeneration:
127 description: ObservedGeneration is the generation of the resource
128 that was most recently observed by the Config Connector controller.
129 If this is equal to metadata.generation, then that means that the
130 current reported status reflects the most recent desired state of
131 the resource.
132 type: integer
133 selfLink:
134 type: string
135 type: object
136 type: object
137 served: true
138 storage: true
View as plain text