Kubernetes Configuration Reference

Dynamic configuration with Kubernetes Custom Resource

  1. apiVersion: apiextensions.k8s.io/v1beta1
  2. kind: CustomResourceDefinition
  3. metadata:
  4.   name: ingressroutes.traefik.containo.us
  6. spec:
  7.   group: traefik.containo.us
  8.   version: v1alpha1
  9.   names:
  10.     kind: IngressRoute
  11.     plural: ingressroutes
  12.     singular: ingressroute
  13.   scope: Namespaced
  15. ---
  16. apiVersion: apiextensions.k8s.io/v1beta1
  17. kind: CustomResourceDefinition
  18. metadata:
  19.   name: middlewares.traefik.containo.us
  20. spec:
  21.   group: traefik.containo.us
  22.   version: v1alpha1
  23.   names:
  24.     kind: Middleware
  25.     plural: middlewares
  26.     singular: middleware
  27.   scope: Namespaced
  29. ---
  30. apiVersion: apiextensions.k8s.io/v1beta1
  31. kind: CustomResourceDefinition
  32. metadata:
  33.   name: tlsoptions.traefik.containo.us
  35. spec:
  36.   group: traefik.containo.us
  37.   version: v1alpha1
  38.   names:
  39.     kind: TLSOption
  40.     plural: tlsoptions
  41.     singular: tlsoption
  42.   scope: Namespaced
  44. ---
  45. apiVersion: apiextensions.k8s.io/v1beta1
  46. kind: CustomResourceDefinition
  47. metadata:
  48.   name: ingressroutetcps.traefik.containo.us
  50. spec:
  51.   group: traefik.containo.us
  52.   version: v1alpha1
  53.   names:
  54.     kind: IngressRouteTCP
  55.     plural: ingressroutetcps
  56.     singular: ingressroutetcp
  57.   scope: Namespaced
  59. ---
  60. apiVersion: traefik.containo.us/v1alpha1
  61. kind: IngressRoute
  62. metadata:
  63.   name: ingressroute
  64. spec:
  65.   entryPoints:
  66.     - web
  67.     - web-secure
  68.   routes:
  69.     - match: Host(`foo.com`) && PathPrefix(`/bar`)
  70.       kind: Rule
  71.       priority: 12
  72.       # defining several services is possible and allowed, but for now the servers of
  73.       # all the services (for a given route) get merged altogether under the same
  74.       # load-balancing strategy.
  75.       services:
  76.         - name: s1
  77.           port: 80
  78.           healthCheck:
  79.             path: /health
  80.             host: baz.com
  81.             intervalSeconds: 7
  82.             timeoutSeconds: 60
  83.           # strategy defines the load balancing strategy between the servers. It defaults
  84.           # to Round Robin, and for now only Round Robin is supported anyway.
  85.           strategy: RoundRobin
  86.         - name: s2
  87.           port: 433
  88.           healthCheck:
  89.             path: /health
  90.             host: baz.com
  91.             intervalSeconds: 7
  92.             timeoutSeconds: 60
  93.     - match: PathPrefix(`/misc`)
  94.       services:
  95.         - name: s3
  96.           port: 80
  97.       middlewares:
  98.         - name: stripprefix
  99.         - name: addprefix
  100.     - match: PathPrefix(`/misc`)
  101.       services:
  102.         - name: s3
  103.           port: 8443
  104.           # scheme allow to override the scheme for the service. (ex: https or h2c)
  105.           scheme: https
  106.   # use an empty tls object for TLS with Let's Encrypt
  107.   tls:
  108.     secretName: supersecret
  109.     options:
  110.       name: myTLSOption
  111.       namespace: default
  113. ---
  114. apiVersion: traefik.containo.us/v1alpha1
  115. kind: IngressRouteTCP
  116. metadata:
  117.   name: ingressroutetcp.crd
  118.   namespace: default
  120. spec:
  121.   entryPoints:
  122.     - footcp
  123.   routes:
  124.     - match: HostSNI(`bar.com`)
  125.       services:
  126.         - name: whoamitcp
  127.           port: 8080
  128.   tls:
  129.     secretName: foosecret
  130.     passthrough: false
  131.     options:
  132.       name: myTLSOption
  133.       namespace: default