Contour · Schema

TLS

TLS configuration for the virtual host.

EnvoyIngress ControllerKubernetesNetworkingProxy

Properties

Name Type Description
secretName string Name of the Kubernetes Secret containing the TLS certificate and private key. May reference a Secret in another namespace if TLSCertificateDelegation is configured.
minimumProtocolVersion string Minimum TLS protocol version to negotiate.
passthrough boolean If true, TLS termination is done at the backend service.
enableFallbackCertificate boolean If true, a default fallback certificate is served for SNI names that don't match any configured virtual host.
View JSON Schema on GitHub

JSON Schema

contour-tls-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/TLS",
  "title": "TLS",
  "type": "object",
  "description": "TLS configuration for the virtual host.",
  "properties": {
    "secretName": {
      "type": "string",
      "description": "Name of the Kubernetes Secret containing the TLS certificate and private key. May reference a Secret in another namespace if TLSCertificateDelegation is configured."
    },
    "minimumProtocolVersion": {
      "type": "string",
      "description": "Minimum TLS protocol version to negotiate.",
      "enum": [
        "1.2",
        "1.3"
      ]
    },
    "passthrough": {
      "type": "boolean",
      "description": "If true, TLS termination is done at the backend service."
    },
    "enableFallbackCertificate": {
      "type": "boolean",
      "description": "If true, a default fallback certificate is served for SNI names that don't match any configured virtual host."
    }
  }
}