NewDestEndpoint creates a new DestinationEndpoint.

NewInfra returns a new Infra with default parameters.

NewInfraMetadata returns a new InfraMetadata.

NewProxyInfra returns a new ProxyInfra with default parameters.

NewProxyListeners returns a new slice of ProxyListener with default parameters.

ExtProcBodyBuffered sets the buffered body processing mode.

ExtProcBodyBufferedPartial sets the partial buffered body processing mode.

ExtProcBodyStreamed sets the streamed body processing mode.

GRPC declares that the port carries gRPC traffic.

GRPCWeb declares that the port carries gRPC traffic.

HTTP declares that the port carries HTTP/1.1 traffic.

HTTP2 declares that the port carries HTTP/2 traffic.

HTTPProtocolType accepts cleartext HTTP/1.1 sessions over TCP or HTTP/2 over cleartext.

HTTPS declares that the port carries HTTPS traffic.

HTTPSProtocolType accepts HTTP/1.1 or HTTP/2 sessions over TLS.

ProxyProtocolVersionV1 is the PROXY protocol version 1 (human readable format).

ProxyProtocolVersionV2 is the PROXY protocol version 2 (binary format).

TCP declares the port uses TCP.

TCPProtocolType accepts TCP connection.

TLSAuto allows Envoy to choose the optimal TLS Version.

TLSProtocolType accepts TLS sessions over TCP.

TLSv10 specifies TLS version 1.0.

TLSv11 specifies TLS version 1.1.

TLSv12 specifies TLS version 1.2.

TLSv13 specifies TLS version 1.3.

UDP declares that the port uses UDP.

UDPProtocolType accepts UDP connection.

AccessLog holds the access logging configuration.

ActiveHealthCheck defines active health check settings +k8s:deepcopy-gen=true.

AddHeader configures a header to be added to a request or response.

ALSAccessLog holds the configuration for gRPC ALS access logging.

ALSAccessLogHTTP holds the configuration for HTTP ALS access logging.

Authorization defines the schema for the authorization.

AuthorizationRule defines the schema for the authorization rule.

BackendConnection settings for upstream connections +k8s:deepcopy-gen=true.

BackendWeights stores the weights of valid and invalid backends for the route so that 500 error responses can be returned in the same proportions.

+k8s:deepcopy-gen=true.

BasicAuth defines the schema for the HTTP Basic Authentication.

Backend CircuitBreaker settings for the DEFAULT routing priority +k8s:deepcopy-gen=true.

ClientConnection settings for downstream connections +k8s:deepcopy-gen=true.

ClientTimeout sets the timeout configuration for downstream connections +k8s:deepcopy-gen=true.

ConnectionLimit contains settings for downstream connection limits +k8s:deepcopy-gen=true.

ConsistentHash load balancer settings +k8s:deepcopy-gen=true.

+k8s:deepcopy-gen=true.

CORS holds the Cross-Origin Resource Sharing (CORS) policy for the route.

DestinationEndpoint holds the endpoint details associated with the destination +kubebuilder:object:generate=true.

DestinationFilters contains HTTP filters that will be used with the DestinationSetting.

DestinationSetting holds the settings associated with the destination +kubebuilder:object:generate=true.

DirectResponse holds the details for returning a body and status code for a route.

EnvoyExtensionFeatures holds the information associated with the Envoy Extension Policy.

EnvoyPatchPolicy defines the intermediate representation of the EnvoyPatchPolicy resource.

EnvoyPatchPolicyStatus defines the status reference for the EnvoyPatchPolicy resource +k8s:deepcopy-gen=true.

ExtAuth defines the schema for the external authorization.

ExtProc holds the information associated with the ExtProc extensions.

FaultInjection defines the schema for injecting faults into requests.

FaultInjectionAbort defines the schema for injecting abort into requests.

FaultInjectionDelay defines the schema for injecting delay into requests.

GlobalRateLimit holds the global rate limiting configuration.

GRPCExtAuthService defines the gRPC External Authorization service The authorization request message is defined in https://www.envoyproxy.io/docs/envoy/latest/api-v3/service/auth/v3/external_auth.proto +k8s:deepcopy-gen=true.

Header consistent hash type settings.

HeaderSettings provides configuration related to header processing on the listener.

HealthCheck defines health check settings +k8s:deepcopy-gen=true.

HealthCheckPayload defines the encoding of the payload bytes in the payload.

HTTP10Settings provides HTTP/1.0 configuration on the listener.

HTTP1Settings provides HTTP/1 configuration on the listener.

HTTP2Settings provides HTTP/2 configuration on the listener.

HTTP3Settings provides HTTP/3 configuration on the listener.

HTTPClientTimeout set the configuration for client HTTP.

HTTPExtAuthService defines the HTTP External Authorization service +k8s:deepcopy-gen=true.

HTTPHealthChecker defines the settings of http health check.

HTTPListener holds the listener configuration.

HTTPPathModifier holds instructions for how to modify the path of a request on a redirect response +k8s:deepcopy-gen=true.

HTTPRoute holds the route information associated with the HTTP Route +k8s:deepcopy-gen=true.

+k8s:deepcopy-gen=true.

HTTPWasmCode holds the information associated with the HTTP Wasm code source.

Infra defines managed infrastructure.

InfraMetadata defines metadata for the managed proxy infrastructure.

JSONAccessLog holds the configuration for JSON access logging.

JSONPatchConfig defines the configuration for patching a Envoy xDS Resource using JSONPatch semantics +k8s:deepcopy-gen=true.

JSONPatchOperation defines the JSON Patch Operation as defined in https://datatracker.ietf.org/doc/html/rfc6902 +k8s:deepcopy-gen=true.

JWT defines the schema for authenticating HTTP requests using JSON Web Tokens (JWT).

LeastRequest load balancer settings +k8s:deepcopy-gen=true.

ListenerPort defines a network port of a listener.

LoadBalancer defines the load balancer settings.

LocalRateLimit holds the local rate limiting configuration.

Metrics defines the configuration for metrics generated by Envoy +k8s:deepcopy-gen=true.

OIDC defines the schema for authenticating HTTP requests using OpenID Connect (OIDC).

OpenTelemetryAccessLog holds the configuration for OpenTelemetry access logging.

OutlierDetection defines passive health check settings +k8s:deepcopy-gen=true.

PathSettings holds configuration for path URI manipulations +k8s:deepcopy-gen=true.

+k8s:deepcopy-gen=true.

Principal defines the schema for the principal.

ProxyInfra defines managed proxy infrastructure.

ProxyListener defines the listener configuration of the proxy infrastructure.

ProxyProtocol upstream settings +k8s:deepcopy-gen=true.

Random load balancer settings +k8s:deepcopy-gen=true.

RateLimit holds the rate limiting configuration.

RateLimitRule holds the match and limit configuration for ratelimiting.

RateLimitValue holds the +k8s:deepcopy-gen=true.

Redirect holds the details for how and where to redirect a request +k8s:deepcopy-gen=true.

ResourceMetadata is metadata from the provider resource that is translated to an envoy resource +k8s:deepcopy-gen=true.

Retry define the retry policy configuration.

+k8s:deepcopy-gen=true.

RoundRobin load balancer settings +k8s:deepcopy-gen=true.

RouteDestination holds the destination details associated with the route +kubebuilder:object:generate=true.

SecurityFeatures holds the information associated with the Security Policy.

SlowStart defines the slow start configuration.

StringMatch holds the various match conditions.

TCPClientTimeout set the configuration for client TCP (not HTTP).

TCPHealthChecker defines the settings of tcp health check.

TCPKeepalive define the TCP Keepalive configuration.

TCPListener holds the TCP listener configuration.

TCPRoute holds the route information associated with the TCP Route +k8s:deepcopy-gen=true.

+k8s:deepcopy-gen=true.

TextAccessLog holds the configuration for text access logging.

Backend connection timeout settings +k8s:deepcopy-gen=true.

TLS holds information for configuring TLS on a listener +k8s:deepcopy-gen=true.

TLSCACertificate holds CA Certificate to validate clients +k8s:deepcopy-gen=true.

TLSCertificate holds a single certificate's details +k8s:deepcopy-gen=true.

TLSConfig holds the configuration for downstream TLS context.

TLSInspectorConfig holds the configuration required for inspecting TLS connections.

TLSUpstreamConfig contains sni and ca file in []byte format.

Tracing defines the configuration for tracing a Envoy xDS Resource +k8s:deepcopy-gen=true.

TrafficFeatures holds the information associated with the Backend Traffic Policy.

UDPListener holds the UDP listener configuration.

UDPRoute holds the route information associated with the UDP Route.

UnstructuredRef holds unstructured data for an arbitrary k8s resource introduced by an extension Envoy Gateway does not need to know about the resource types in order to store and pass the data for these objects to an extension.

URLRewrite holds the details for how to rewrite a request +k8s:deepcopy-gen=true.

Wasm holds the information associated with the Wasm extensions.

Xds holds the intermediate representation of a Gateway and is used by the xDS Translator to convert it into xDS resources.

Configure Envoy proxy how to handle the x-forwarded-client-cert (XFCC) HTTP header.

ClientIPDetectionSettings provides configuration for determining the original client IP address for requests.

DestinationAddressType describes the address type state for a group of DestinationEndpoint.

HealthCheckSettings provides HealthCheck configuration on the HTTP/HTTPS listener.

HTTPStatus represents http status code.

ProtocolType defines the application protocol accepted by a ListenerPort.