crd_tlscontext.go

Documentation: github.com/emissary-ingress/emissary/v3/pkg/api/getambassador.io/v2

     1  // Copyright 2020 Datawire.  All rights reserved
     2  //
     3  // Licensed under the Apache License, Version 2.0 (the "License");
     4  // you may not use this file except in compliance with the License.
     5  // You may obtain a copy of the License at
     6  //
     7  //     http://www.apache.org/licenses/LICENSE-2.0
     8  //
     9  // Unless required by applicable law or agreed to in writing, software
    10  // distributed under the License is distributed on an "AS IS" BASIS,
    11  // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    12  // See the License for the specific language governing permissions and
    13  // limitations under the License.
    14  
    15  ///////////////////////////////////////////////////////////////////////////
    16  // Important: Run "make update-yaml" to regenerate code after modifying
    17  // this file.
    18  ///////////////////////////////////////////////////////////////////////////
    19  
    20  package v2
    21  
    22  import (
    23  	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
    24  )
    25  
    26  // TLSContextSpec defines the desired state of TLSContext
    27  type TLSContextSpec struct {
    28  	AmbassadorID AmbassadorID `json:"ambassador_id,omitempty"`
    29  
    30  	Hosts           []string `json:"hosts,omitempty"`
    31  	Secret          string   `json:"secret,omitempty"`
    32  	CertChainFile   string   `json:"cert_chain_file,omitempty"`
    33  	PrivateKeyFile  string   `json:"private_key_file,omitempty"`
    34  	CASecret        string   `json:"ca_secret,omitempty"`
    35  	CACertChainFile string   `json:"cacert_chain_file,omitempty"`
    36  	ALPNProtocols   string   `json:"alpn_protocols,omitempty"`
    37  	CertRequired    *bool    `json:"cert_required,omitempty"`
    38  	// +kubebuilder:validation:Enum={"v1.0", "v1.1", "v1.2", "v1.3"}
    39  	MinTLSVersion string `json:"min_tls_version,omitempty"`
    40  	// +kubebuilder:validation:Enum={"v1.0", "v1.1", "v1.2", "v1.3"}
    41  	MaxTLSVersion         string   `json:"max_tls_version,omitempty"`
    42  	CipherSuites          []string `json:"cipher_suites,omitempty"`
    43  	ECDHCurves            []string `json:"ecdh_curves,omitempty"`
    44  	SecretNamespacing     *bool    `json:"secret_namespacing,omitempty"`
    45  	RedirectCleartextFrom *int     `json:"redirect_cleartext_from,omitempty"`
    46  	SNI                   string   `json:"sni,omitempty"`
    47  
    48  	// +k8s:conversion-gen:rename=CRLSecret
    49  	V3CRLSecret string `json:"v3CRLSecret,omitempty"`
    50  }
    51  
    52  // TLSContext is the Schema for the tlscontexts API
    53  //
    54  // +kubebuilder:object:root=true
    55  // +kubebuilder:storageversion
    56  type TLSContext struct {
    57  	metav1.TypeMeta   `json:""`
    58  	metav1.ObjectMeta `json:"metadata,omitempty"`
    59  
    60  	Spec TLSContextSpec `json:"spec,omitempty"`
    61  }
    62  
    63  // TLSContextList contains a list of TLSContexts.
    64  //
    65  // +kubebuilder:object:root=true
    66  type TLSContextList struct {
    67  	metav1.TypeMeta `json:""`
    68  	metav1.ListMeta `json:"metadata,omitempty"`
    69  	Items           []TLSContext `json:"items"`
    70  }
    71  
    72  func init() {
    73  	SchemeBuilder.Register(&TLSContext{}, &TLSContextList{})
    74  }
    75
View as plain text