• Kubernetes Configuration Reference

    Kubernetes Configuration Reference

    Dynamic configuration with Kubernetes Custom Resource

    1. apiVersion: apiextensions.k8s.io/v1beta1
    2. kind: CustomResourceDefinition
    3. metadata:
    4.   name: ingressroutes.traefik.containo.us
    6. spec:
    7.   group: traefik.containo.us
    8.   version: v1alpha1
    9.   names:
    10.     kind: IngressRoute
    11.     plural: ingressroutes
    12.     singular: ingressroute
    13.   scope: Namespaced
    15. ---
    16. apiVersion: apiextensions.k8s.io/v1beta1
    17. kind: CustomResourceDefinition
    18. metadata:
    19.   name: middlewares.traefik.containo.us
    20. spec:
    21.   group: traefik.containo.us
    22.   version: v1alpha1
    23.   names:
    24.     kind: Middleware
    25.     plural: middlewares
    26.     singular: middleware
    27.   scope: Namespaced
    29. ---
    30. apiVersion: apiextensions.k8s.io/v1beta1
    31. kind: CustomResourceDefinition
    32. metadata:
    33.   name: tlsoptions.traefik.containo.us
    35. spec:
    36.   group: traefik.containo.us
    37.   version: v1alpha1
    38.   names:
    39.     kind: TLSOption
    40.     plural: tlsoptions
    41.     singular: tlsoption
    42.   scope: Namespaced
    44. ---
    45. apiVersion: apiextensions.k8s.io/v1beta1
    46. kind: CustomResourceDefinition
    47. metadata:
    48.   name: ingressroutetcps.traefik.containo.us
    50. spec:
    51.   group: traefik.containo.us
    52.   version: v1alpha1
    53.   names:
    54.     kind: IngressRouteTCP
    55.     plural: ingressroutetcps
    56.     singular: ingressroutetcp
    57.   scope: Namespaced
    59. ---
    60. apiVersion: traefik.containo.us/v1alpha1
    61. kind: IngressRoute
    62. metadata:
    63.   name: ingressroute
    64. spec:
    65.   entryPoints:
    66.     - web
    67.     - web-secure
    68.   routes:
    69.     - match: Host(`foo.com`) && PathPrefix(`/bar`)
    70.       kind: Rule
    71.       priority: 12
    72.       # defining several services is possible and allowed, but for now the servers of
    73.       # all the services (for a given route) get merged altogether under the same
    74.       # load-balancing strategy.
    75.       services:
    76.         - name: s1
    77.           port: 80
    78.           healthCheck:
    79.             path: /health
    80.             host: baz.com
    81.             intervalSeconds: 7
    82.             timeoutSeconds: 60
    83.           # strategy defines the load balancing strategy between the servers. It defaults
    84.           # to Round Robin, and for now only Round Robin is supported anyway.
    85.           strategy: RoundRobin
    86.         - name: s2
    87.           port: 433
    88.           healthCheck:
    89.             path: /health
    90.             host: baz.com
    91.             intervalSeconds: 7
    92.             timeoutSeconds: 60
    93.     - match: PathPrefix(`/misc`)
    94.       services:
    95.         - name: s3
    96.           port: 80
    97.       middlewares:
    98.         - name: stripprefix
    99.         - name: addprefix
    100.     - match: PathPrefix(`/misc`)
    101.       services:
    102.         - name: s3
    103.           port: 8443
    104.           # scheme allow to override the scheme for the service. (ex: https or h2c)
    105.           scheme: https
    106.   # use an empty tls object for TLS with Let's Encrypt
    107.   tls:
    108.     secretName: supersecret
    109.     options:
    110.       name: myTLSOption
    111.       namespace: default
    113. ---
    114. apiVersion: traefik.containo.us/v1alpha1
    115. kind: IngressRouteTCP
    116. metadata:
    117.   name: ingressroutetcp.crd
    118.   namespace: default
    120. spec:
    121.   entryPoints:
    122.     - footcp
    123.   routes:
    124.     - match: HostSNI(`bar.com`)
    125.       services:
    126.         - name: whoamitcp
    127.           port: 8080
    128.   tls:
    129.     secretName: foosecret
    130.     passthrough: false
    131.     options:
    132.       name: myTLSOption
    133.       namespace: default