kube-apiserver Configuration (v1alpha1)

    AdmissionConfiguration

    AdmissionConfiguration provides versioned configuration for admission controllers.

    EgressSelectorConfiguration

    EgressSelectorConfiguration provides versioned configuration for egress selector clients.

    FieldDescription
    apiVersion
    string    		apiserver.k8s.io/v1alpha1
    kind
    string
    egressSelections [Required]
    []EgressSelection

    connectionServices contains a list of egress selection client configurations

    TracingConfiguration

    TracingConfiguration provides versioned configuration for tracing clients.

    FieldDescription
    apiVersion
    string    		apiserver.k8s.io/v1alpha1
    kind
    string    		TracingConfiguration
    endpoint
    string

    Endpoint of the collector that’s running on the control-plane node. The APIServer uses the egressType ControlPlane when sending data to the collector. The syntax is defined in https://github.com/grpc/grpc/blob/master/doc/naming.md. Defaults to the otlpgrpc default, localhost:4317 The connection is insecure, and does not support TLS.

    samplingRatePerMillion
    int32

    SamplingRatePerMillion is the number of samples to collect per million spans. Defaults to 0.

    Appears in:

    AdmissionPluginConfiguration provides the configuration for a single plug-in.

    Connection

    Connection provides the configuration for a single egress selection client.

    FieldDescription
    proxyProtocol [Required]
    ProtocolType

    Protocol is the protocol used to connect from client to the konnectivity server.

    transport

    Transport defines the transport configurations we use to dial to the konnectivity server. This is required if ProxyProtocol is HTTPConnect or GRPC.

    EgressSelection

    Appears in:

    EgressSelection provides the configuration for a single egress selection client.

    FieldDescription
    [Required]
    string

    name is the name of the egress selection. Currently supported values are “controlplane”, “master”, “etcd” and “cluster” The “master” egress selector is deprecated in favor of “controlplane”

    connection [Required]
    Connection

    connection is the exact information used to configure the egress selection

    ProtocolType

    (Alias of string)

    Appears in:

    ProtocolType is a set of valid values for Connection.ProtocolType

    Appears in:

    TCPTransport provides the information to connect to konnectivity server via TCP

    TLSConfig

    Appears in:

    TLSConfig provides the authentication information to connect to konnectivity server Only used with TCPTransport

    FieldDescription
    caBundle
    string

    caBundle is the file location of the CA to be used to determine trust with the konnectivity server. Must be absent/empty if TCPTransport.URL is prefixed with http:// If absent while TCPTransport.URL is prefixed with https://, default to system trust roots.

    clientKey
    string

    clientKey is the file location of the client key to be used in mtls handshakes with the konnectivity server. Must be absent/empty if TCPTransport.URL is prefixed with http:// Must be configured if TCPTransport.URL is prefixed with https://

    clientCert
    string

    clientCert is the file location of the client certificate to be used in mtls handshakes with the konnectivity server. Must be absent/empty if TCPTransport.URL is prefixed with http:// Must be configured if TCPTransport.URL is prefixed with https://

    Transport

    Appears in:

    Transport defines the transport configurations we use to dial to the konnectivity server

    FieldDescription
    tcp

    TCP is the TCP configuration for communicating with the konnectivity server via TCP ProxyProtocol of GRPC is not supported with TCP transport at the moment Requires at least one of TCP or UDS to be set

    uds
    UDSTransport

    UDS is the UDS configuration for communicating with the konnectivity server via UDS Requires at least one of TCP or UDS to be set

    UDSTransport

    Appears in:

    UDSTransport provides the information to connect to konnectivity server via UDS