2 top-level fields · last changed in Istio 1.26.0
Configuration affecting edge load balancer. See more details at: https://istio.io/docs/reference/config/networking/gateway.html
One or more labels that indicate a specific set of pods/VMs on which this gateway configuration should be applied.
A list of server specifications.
The ip or the Unix domain socket to which the listener should be bound to.
One or more hosts exposed by this gateway.
An optional name of the server, when set must be unique across all servers.
The Port on which the proxy should listen for incoming connections.
Label assigned to the port.
A valid non-negative integer port number.
The protocol exposed on the port.
Set of TLS related options that govern the server's behavior.
REQUIRED if mode is `MUTUAL` or `OPTIONAL_MUTUAL`.
OPTIONAL: The path to the file containing the certificate revocation list (CRL) to use in verifying a presented client side certificate.
Optional: If specified, only support the specified cipher list.
For gateways running on Kubernetes, the name of the secret that holds the TLS certs including the CA certificates.
Same as CredentialName but for multiple certificates.
If set to true, the load balancer will send a 301 redirect for all http connections, asking the clients to use HTTPS.
Optional: Maximum TLS protocol version. Valid Options: TLS_AUTO, TLSV1_0, TLSV1_1, TLSV1_2, TLSV1_3
Optional: Minimum TLS protocol version. Valid Options: TLS_AUTO, TLSV1_0, TLSV1_1, TLSV1_2, TLSV1_3
Optional: Indicates whether connections to this port should be secured using TLS. Valid Options: PASSTHROUGH, SIMPLE, MUTUAL, AUTO_PASSTHROUGH, ISTIO_MUTUAL, OPTIONAL_MUTUAL
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
A list of alternate names to verify the subject identity in the certificate presented by the client.
Only one of `server_certificate`, `private_key`, `ca_certificates` or `credential_name` or `credential_names` or `tls_certificates` should be specified.
REQUIRED if mode is `MUTUAL` or `OPTIONAL_MUTUAL`.
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
REQUIRED if mode is `SIMPLE` or `MUTUAL`.
An optional list of hex-encoded SHA-256 hashes of the authorized client certificates.
An optional list of base64-encoded SHA-256 hashes of the SPKIs of authorized client certificates.
Current service state of the resource.
Last time we probed the condition.
Last time the condition transitioned from one status to another.
Human-readable message indicating details about last transition.
Resource Generation to which the Condition refers.
Unique, one-word, CamelCase reason for the condition's last transition.
Status is the status of the condition.
Type is the type of the condition.
Includes any errors or warnings detected by Istio's analyzers.
A url pointing to the Istio documentation for this specific error type.
Represents how severe a message is. Valid Options: UNKNOWN, ERROR, WARNING, INFO
A 7 character code matching `^IST[0-9]{4}$` intended to uniquely identify the message type.
A human-readable name for the message type.
Source: crd-all.gen.yaml
Changes to Gateway (networking.istio.io/v1alpha3) in each Istio version, compared to the version before it.
2 properties have been added
Released · View Gateway in 1.26.0
3 properties have been added
Released · View Gateway in 1.24.0
5 properties are now required
9 properties have changed the description
Released · View Gateway in 1.20.0
1 property has changed the description
Released · View Gateway in 1.19.0
2 properties have been added
Released · View Gateway in 1.7.0
Gateway was already present in this version of Istio, the oldest one on kubespec.dev
Released · View Gateway in 1.0.0
No examples of Gateway yet. Contribute one on GitHub.
kubespec.dev