Configuration reference

Backend CRD

On this page

Selected version

Backend CRD Configuration reference

Available since version 1.7

The Backend custom resource extends the Kubernetes API to let you manage how traffic is load balanced across pods.

Install the Backend custom resource Jump to heading

Info

If you installed the ingress controller with Helm, this CRD is installed and updated automatically. If you installed with kubectl, follow these instructions for installation. Once installed, to perform updates on this CRD see: Update CRDs.

Before you can use the Backend custom resource, you must install its definition into your Kubernetes cluster.

  1. Download the v1-11 Backend custom resource filev1-10 Backend custom resource filev1-9 Backend custom resource filev1-8 Backend custom resource filev1-7 Backend custom resource file.

  2. Install the custom resource definition with kubectl apply:

    nix
    kubectl apply -f ingress.v1.haproxy.com_backends.yaml
    nix
    kubectl apply -f ingress.v1.haproxy.com_backends.yaml
    nix
    kubectl apply -f backends.core.haproxy.org.yaml
    nix
    kubectl apply -f backends.core.haproxy.org.yaml
    nix
    kubectl apply -f backends.core.haproxy.org.yaml
    nix
    kubectl apply -f backends.core.haproxy.org.yaml
    nix
    kubectl apply -f backend.yaml
    nix
    kubectl apply -f backend.yaml
    nix
    kubectl apply -f backend.yaml
    nix
    kubectl apply -f backend.yaml
  3. Verify that the installation worked by listing custom resources defined in your cluster:

    nix
    kubectl get crd
    nix
    kubectl get crd
    output
    text
    NAME CREATED AT
    backends.ingress.v1.haproxy.com 2022-01-21T20:00:31Z
    output
    text
    NAME CREATED AT
    backends.ingress.v1.haproxy.com 2022-01-21T20:00:31Z
    output
    text
    NAME CREATED AT
    backends.core.haproxy.org 2022-01-21T20:00:31Z
    output
    text
    NAME CREATED AT
    backends.core.haproxy.org 2022-01-21T20:00:31Z
    output
    text
    NAME CREATED AT
    backends.core.haproxy.org 2022-01-21T20:00:31Z
    output
    text
    NAME CREATED AT
    backends.core.haproxy.org 2022-01-21T20:00:31Z
    output
    text
    NAME CREATED AT
    backends.core.haproxy.org 2022-01-21T20:00:31Z
    output
    text
    NAME CREATED AT
    backends.core.haproxy.org 2022-01-21T20:00:31Z
    output
    text
    NAME CREATED AT
    backends.core.haproxy.org 2022-01-21T20:00:31Z
    output
    text
    NAME CREATED AT
    backends.core.haproxy.org 2022-01-21T20:00:31Z

Use the Backend custom resource Jump to heading

With the Backend custom resource, you can manage how traffic is load balanced across pods. To use it:

  1. Create a YAML file that declares a Backend resource and add properties to its spec.config section.

    In the example below, the balance.algorithm property changes the load balancing algorithm to least connections.

    example-backend.yaml
    yaml
    apiVersion: "ingress.v1.haproxy.com/v1"
    kind: Backend
    metadata:
    name: example-backend
    namespace: default
    spec:
    config:
    balance:
    algorithm: "leastconn"
    example-backend.yaml
    yaml
    apiVersion: "ingress.v1.haproxy.com/v1"
    kind: Backend
    metadata:
    name: example-backend
    namespace: default
    spec:
    config:
    balance:
    algorithm: "leastconn"
    example-backend.yaml
    yaml
    apiVersion: "core.haproxy.org/v1alpha2"
    kind: Backend
    metadata:
    name: example-backend
    namespace: default
    spec:
    config:
    balance:
    algorithm: "leastconn"
    example-backend.yaml
    yaml
    apiVersion: "core.haproxy.org/v1alpha2"
    kind: Backend
    metadata:
    name: example-backend
    namespace: default
    spec:
    config:
    balance:
    algorithm: "leastconn"
    example-backend.yaml
    yaml
    apiVersion: "core.haproxy.org/v1alpha2"
    kind: Backend
    metadata:
    name: example-backend
    namespace: default
    spec:
    config:
    balance:
    algorithm: "leastconn"
    example-backend.yaml
    yaml
    apiVersion: "core.haproxy.org/v1alpha2"
    kind: Backend
    metadata:
    name: example-backend
    namespace: default
    spec:
    config:
    balance:
    algorithm: "leastconn"
    example-backend.yaml
    yaml
    apiVersion: "core.haproxy.org/v1alpha1"
    kind: Backend
    metadata:
    name: example-backend
    namespace: default
    spec:
    config:
    balance:
    algorithm: "leastconn"
    example-backend.yaml
    yaml
    apiVersion: "core.haproxy.org/v1alpha1"
    kind: Backend
    metadata:
    name: example-backend
    namespace: default
    spec:
    config:
    balance:
    algorithm: "leastconn"
    example-backend.yaml
    yaml
    apiVersion: "core.haproxy.org/v1alpha1"
    kind: Backend
    metadata:
    name: example-backend
    namespace: default
    spec:
    config:
    balance:
    algorithm: "leastconn"
    example-backend.yaml
    yaml
    apiVersion: "core.haproxy.org/v1alpha1"
    kind: Backend
    metadata:
    name: example-backend
    namespace: default
    spec:
    config:
    balance:
    algorithm: "leastconn"
  2. Deploy it to your cluster using kubectl apply.

    nix
    kubectl apply -f example-backend.yaml
    nix
    kubectl apply -f example-backend.yaml
  3. Decide which Kubernetes services the resource should apply to. Do one of the following:

    • To have the properties apply to all services, create a new ConfigMap with the name haproxy-kubernetes-ingress to override the one that ships with the ingress controller. Add the cr-backend key to the data section to implement the backend properties.

      example-configmap.yaml
      yaml
      apiVersion: v1
      kind: ConfigMap
      metadata:
      name: haproxy-kubernetes-ingress
      namespace: haproxy-controller
      data:
      cr-backend: default/example-backend
      example-configmap.yaml
      yaml
      apiVersion: v1
      kind: ConfigMap
      metadata:
      name: haproxy-kubernetes-ingress
      namespace: haproxy-controller
      data:
      cr-backend: default/example-backend

      Update the ConfigMap in your cluster by using kubectl apply:

      nix
      kubectl apply -f example-configmap.yaml
      nix
      kubectl apply -f example-configmap.yaml
    • To have the properties apply to all services that the Ingress routes traffic to, add the cr-backend annotation to your Ingress definition. The Ingress below applies to the services example-service1 and example-service2:

      example-ingress.yaml
      yaml
      apiVersion: networking.k8s.io/v1
      kind: Ingress
      metadata:
      name: example-ingress
      annotations:
      haproxy.org/cr-backend: default/example-backend
      spec:
      rules:
      - http:
      paths:
      - path: /example1
      pathType: Prefix
      backend:
      service:
      name: example-service1
      port:
      number: 80
      - path: /example2
      pathType: Prefix
      backend:
      service:
      name: example-service2
      port:
      number: 80
      example-ingress.yaml
      yaml
      apiVersion: networking.k8s.io/v1
      kind: Ingress
      metadata:
      name: example-ingress
      annotations:
      haproxy.org/cr-backend: default/example-backend
      spec:
      rules:
      - http:
      paths:
      - path: /example1
      pathType: Prefix
      backend:
      service:
      name: example-service1
      port:
      number: 80
      - path: /example2
      pathType: Prefix
      backend:
      service:
      name: example-service2
      port:
      number: 80

      Update the Ingress in your cluster by using kubectl apply:

      nix
      kubectl apply -f example-ingress.yaml
      nix
      kubectl apply -f example-ingress.yaml
    • To have the properties apply to only a specific Kubernetes service, add the cr-backend annotation to your Service definition. The Service below applies the properties only to the service named example-service1.

      example-service.yaml
      yaml
      apiVersion: v1
      kind: Service
      metadata:
      labels:
      run: app
      name: example-service1
      annotations:
      haproxy.org/cr-backend: default/example-backend
      spec:
      selector:
      run: app
      ports:
      - name: http
      port: 80
      protocol: TCP
      targetPort: 8080
      example-service.yaml
      yaml
      apiVersion: v1
      kind: Service
      metadata:
      labels:
      run: app
      name: example-service1
      annotations:
      haproxy.org/cr-backend: default/example-backend
      spec:
      selector:
      run: app
      ports:
      - name: http
      port: 80
      protocol: TCP
      targetPort: 8080

      Update the Service in your cluster by using kubectl apply:

      nix
      kubectl apply -f example-service.yaml
      nix
      kubectl apply -f example-service.yaml

Backend config

  • CRD version: 1.11
  • API version: ingress.v1.haproxy.com/v1

abortonclose

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    abortonclose: String allowed values are enableddisabled

accept_invalid_http_response

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    accept_invalid_http_response: String allowed values are enableddisabled

adv_check

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    adv_check: String allowed values are ssl-hello-chksmtpchkldap-checkmysql-checkpgsql-checktcp-checkredis-checkhttpchk

allbackups

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    allbackups: String allowed values are enableddisabled

balance

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    balance: 
algorithm: String allowed values are roundrobinstatic-rrleastconnfirstsourceuriurl_paramhdrrandomrdp-cookiehash
hash_expression: String
hdr_name: String
hdr_use_domain_only: Boolean
random_draws: Integer
rdp_cookie_name: String allowed pattern: ^[^\s]+$
uri_depth: Integer
uri_len: Integer
uri_path_only: Boolean
uri_whole: Boolean
url_param: String allowed pattern: ^[^\s]+$
url_param_check_post: Integer
url_param_max_wait: Integer

bind_process

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    bind_process: String allowed pattern: ^[^\s]+$

check_timeout

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    check_timeout: Integer 

checkcache

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    checkcache: String allowed values are enableddisabled

compression

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    compression: 
algo-req: String allowed values are identitygzipdeflateraw-deflate
algorithms: Array of String
algos-res: Array of String
direction: String allowed values are requestresponseboth
offload: Boolean
types: Array of String
types-req: Array of String
types-res: Array of String

connect_timeout

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    connect_timeout: Integer 
[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    cookie: 
attr:
value: String allowed pattern: ^[^\s]+$
domain:
value: String allowed pattern: ^[^\s]+$
dynamic: Boolean
httponly: Boolean
indirect: Boolean
maxidle: Integer
maxlife: Integer
name: String allowed pattern: ^[^\s]+$
nocache: Boolean
postonly: Boolean
preserve: Boolean
secure: Boolean
type: String allowed values are rewriteinsertprefix

default_server

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    default_server: 
agent-addr: String allowed pattern: ^[^\s]+$
agent-check: String allowed values are enableddisabled
agent-inter: Integer
agent-port: Integer Minimum: 1 Maximum: 65535
agent-send: String
allow_0rtt: Boolean
alpn: String allowed pattern: ^[^\s]+$
backup: String allowed values are enableddisabled
check: String allowed values are enableddisabled
check-send-proxy: String allowed values are enableddisabled
check-sni: String allowed pattern: ^[^\s]+$
check-ssl: String allowed values are enableddisabled
check_alpn: String allowed pattern: ^[^\s]+$
check_proto: String allowed pattern: ^[^\s]+$
check_via_socks4: String allowed values are enableddisabled
ciphers: String
ciphersuites: String
client_sigalgs: String
cookie: String allowed pattern: ^[^\s]+$
crl_file: String
curves: String
downinter: Integer
error_limit: Integer
fall: Integer
fastinter: Integer
force_sslv3: String allowed values are enableddisabled
force_tlsv10: String allowed values are enableddisabled
force_tlsv11: String allowed values are enableddisabled
force_tlsv12: String allowed values are enableddisabled
force_tlsv13: String allowed values are enableddisabled
health_check_address: String allowed pattern: ^[^\s]+$
health_check_port: Integer Minimum: 1 Maximum: 65535
init-addr: String allowed pattern: ^[^\s]+$
inter: Integer
log-bufsize: Integer
log_proto: String allowed values are legacyoctet-count
maintenance: String allowed values are enableddisabled
max_reuse: Integer
maxconn: Integer
maxqueue: Integer
minconn: Integer
namespace: String
no_sslv3: String allowed values are enableddisabled
no_tlsv10: String allowed values are enableddisabled
no_tlsv11: String allowed values are enableddisabled
no_tlsv12: String allowed values are enableddisabled
no_tlsv13: String allowed values are enableddisabled
no_verifyhost: String allowed values are enableddisabled
npn: String
observe: String allowed values are layer4layer7
on-error: String allowed values are fastinterfail-checksudden-deathmark-down
on-marked-down: String allowed values are shutdown-sessions
on-marked-up: String allowed values are shutdown-backup-sessions
pool_low_conn: Integer
pool_max_conn: Integer
pool_purge_delay: Integer
proto: String allowed pattern: ^[^\s]+$
proxy-v2-options: Array of String
redir: String
resolve-net: String allowed pattern: ^([A-Za-z0-9.:/]+)(,[A-Za-z0-9.:/]+)*$
resolve-prefer: String allowed values are ipv4ipv6
resolve_opts: String allowed pattern: ^(allow-dup-ip|ignore-weight|prevent-dup-ip)(,(allow-dup-ip|ignore-weight|prevent-dup-ip))*$
resolvers: String allowed pattern: ^[^\s]+$
rise: Integer
send-proxy: String allowed values are enableddisabled
send-proxy-v2: String allowed values are enableddisabled
send_proxy_v2_ssl: String allowed values are enableddisabled
send_proxy_v2_ssl_cn: String allowed values are enableddisabled
set-proxy-v2-tlv-fmt:
id: String
value: String
shard: Integer
sigalgs: String
slowstart: Integer
sni: String allowed pattern: ^[^\s]+$
socks4: String allowed pattern: ^[^\s]+$
source: String
ssl: String allowed values are enableddisabled
ssl_cafile: String allowed pattern: ^[^\s]+$
ssl_certificate: String allowed pattern: ^[^\s]+$
ssl_max_ver: String allowed values are SSLv3TLSv1.0TLSv1.1TLSv1.2TLSv1.3
ssl_min_ver: String allowed values are SSLv3TLSv1.0TLSv1.1TLSv1.2TLSv1.3
ssl_reuse: String allowed values are enableddisabled
stick: String allowed values are enableddisabled
tcp_ut: Integer
tfo: String allowed values are enableddisabled
tls_tickets: String allowed values are enableddisabled
track: String
verify: String allowed values are nonerequired
verifyhost: String
weight: Integer
ws: String allowed values are autoh1h2

description

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    description: String 

disabled

[boolean]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    disabled: Boolean
[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    dynamic_cookie_key: String allowed pattern: ^[^\s]+$

email_alert

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    email_alert: 
from: String allowed pattern: ^\S+@\S+$
level: String allowed values are emergalertcriterrwarningnoticeinfodebug
mailers: String
myhostname: String
to: String allowed pattern: ^\S+@\S+$

enabled

[boolean]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    enabled: Boolean

error_files

[array]
code [integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
    error_files: 
      - code: Integer 200400401403404405407408410413425429500501502503504
file [string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
    error_files: 
      - file: String 

errorfiles_from_http_errors

[array]
codes [array]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
    errorfiles_from_http_errors: 
      - codes: Array of Integer 
name [string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
    errorfiles_from_http_errors: 
      - name: String 

errorloc302

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    errorloc302: 
code: Integer 200400401403404405407408410413425429500501502503504
url: String

errorloc303

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    errorloc303: 
code: Integer 200400401403404405407408410413425429500501502503504
url: String

external_check

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check: String allowed values are enableddisabled

external_check_command

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check_command: String allowed pattern: ^[^\s]+$

external_check_path

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check_path: String allowed pattern: ^[^\s]+$

force_persist

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    force_persist: 
cond: String allowed values are ifunless
cond_test: String

forwardfor

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    forwardfor: 
enabled: String allowed values are enabled
except: String allowed pattern: ^[^\s]+$
header: String allowed pattern: ^[^\s]+$
ifnone: Boolean

from

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    from: String allowed pattern: ^[A-Za-z0-9-_.:]+$

fullconn

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    fullconn: Integer 

h1_case_adjust_bogus_server

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    h1_case_adjust_bogus_server: String allowed values are enableddisabled

hash_type

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    hash_type: 
function: String allowed values are sdbmdjb2wt6crc32none
method: String allowed values are map-basedconsistent
modifier: String allowed values are avalanche

http-buffer-request

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-buffer-request: String allowed values are enableddisabled

http-check

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-check: 
addr: String allowed pattern: ^[^\s]+$
alpn: String allowed pattern: ^[^\s]+$
body: String
body_log_format: String
check_comment: String
default: Boolean
error_status: String allowed values are L7OKCL7RSPL7STSL6RSPL4CON
exclamation_mark: Boolean
headers:
fmt: String
name: String
index: Integer
linger: Boolean
match: String allowed values are statusrstatushdrfhdrstringrstring
method: String allowed values are HEADPUTPOSTGETTRACEPATCHDELETECONNECTOPTIONS
min_recv: Integer
ok_status: String allowed values are L7OKL7OKCL6OKL4OK
on_error: String
on_success: String
pattern: String
port: Integer Minimum: 1 Maximum: 65535
port_string: String
proto: String
send_proxy: Boolean
sni: String
ssl: Boolean
status-code: String
tout_status: String allowed values are L7TOUTL6TOUTL4TOUT
type: String allowed values are commentconnectdisable-on-404expectsendsend-stateset-varset-var-fmtunset-var
uri: String
uri_log_format: String
var_expr: String
var_format: String
var_name: String allowed pattern: ^[^\s]+$
var_scope: String allowed pattern: ^[^\s]+$
version: String
via_socks4: Boolean

http-keep-alive

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-keep-alive: String allowed values are enableddisabled

http-no-delay

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-no-delay: String allowed values are enableddisabled

http-server-close

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-server-close: String allowed values are enableddisabled

http-use-htx

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-use-htx: String allowed values are enableddisabled

http_connection_mode

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_connection_mode: String allowed values are httpclosehttp-server-closehttp-keep-alive

http_keep_alive_timeout

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_keep_alive_timeout: Integer 

http_pretend_keepalive

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_pretend_keepalive: String allowed values are enableddisabled

http_proxy

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_proxy: String allowed values are enableddisabled

http_request_timeout

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_request_timeout: Integer 

http_restrict_req_hdr_names

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_restrict_req_hdr_names: String allowed values are preservedeletereject

http_reuse

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_reuse: String allowed values are aggressivealwaysneversafe

http_send_name_header

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_send_name_header: String 

httpchk_params

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    httpchk_params: 
method: String allowed values are HEADPUTPOSTGETTRACEPATCHDELETECONNECTOPTIONS
uri: String allowed pattern: ^[^ ]*$
version: String

httpclose

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    httpclose: String allowed values are enableddisabled

id

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    id: Integer 

ignore_persist

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    ignore_persist: 
cond: String allowed values are ifunless
cond_test: String

independent_streams

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    independent_streams: String allowed values are enableddisabled

load_server_state_from_file

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    load_server_state_from_file: String allowed values are globallocalnone

log_health_checks

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    log_health_checks: String allowed values are enableddisabled

log_tag

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    log_tag: String allowed pattern: ^[^\s]+$

max_keep_alive_queue

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    max_keep_alive_queue: Integer 

mode

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    mode: String allowed values are httptcplog

mysql_check_params

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    mysql_check_params: 
client_version: String allowed values are pre-41post-41
username: String

name

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    name: String allowed pattern: ^[A-Za-z0-9-_.:]+$

nolinger

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    nolinger: String allowed values are enableddisabled

originalto

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    originalto: 
enabled: String allowed values are enabled
except: String allowed pattern: ^[^\s]+$
header: String allowed pattern: ^[^\s]+$

persist

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    persist: String allowed values are enableddisabled

persist_rule

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    persist_rule: 
rdp_cookie_name: String allowed pattern: ^[^\s]+$
type: String allowed values are rdp-cookie

pgsql_check_params

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    pgsql_check_params: 
username: String

prefer_last_server

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    prefer_last_server: String allowed values are enableddisabled

queue_timeout

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    queue_timeout: Integer 

redispatch

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    redispatch: 
enabled: String allowed values are enableddisabled
interval: Integer

retries

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    retries: Integer 

retry_on

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    retry_on: String 

server_fin_timeout

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    server_fin_timeout: Integer 

server_state_file_name

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    server_state_file_name: String 

server_timeout

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    server_timeout: Integer 

smtpchk_params

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    smtpchk_params: 
domain: String
hello: String

source

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    source: 
address: String
address_second: String
hdr: String
interface: String
occ: String
port: Integer Minimum: 1 Maximum: 65535
port_second: Integer Minimum: 1 Maximum: 65535
usesrc: String allowed values are addressclientclientiphdr_ip

splice_auto

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    splice_auto: String allowed values are enableddisabled

splice_request

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    splice_request: String allowed values are enableddisabled

splice_response

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    splice_response: String allowed values are enableddisabled

spop_check

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    spop_check: String allowed values are enableddisabled

srvtcpka

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    srvtcpka: String allowed values are enableddisabled

srvtcpka_cnt

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    srvtcpka_cnt: Integer 

srvtcpka_idle

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    srvtcpka_idle: Integer 

srvtcpka_intvl

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    srvtcpka_intvl: Integer 

stats_options

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    stats_options: 
stats_admin: Boolean
stats_admin_cond: String allowed values are ifunless
stats_admin_cond_test: String
stats_auths:
passwd: String
user: String
stats_enable: Boolean
stats_hide_version: Boolean
stats_http_requests:
cond: String
cond_test: String
realm: String
type: String allowed values are allowdenyauth
stats_maxconn: Integer Minimum: 1
stats_realm: Boolean
stats_realm_realm: String
stats_refresh_delay: Integer
stats_show_desc: String
stats_show_legends: Boolean
stats_show_modules: Boolean
stats_show_node_name: String allowed pattern: ^[^\s]+$
stats_uri_prefix: String allowed pattern: ^[^\s]+$

stick_table

[object]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    stick_table: 
expire: Integer
keylen: Integer
nopurge: Boolean
peers: String allowed pattern: ^[^\s]+$
size: Integer
srvkey: String allowed values are addrname
store: String allowed pattern: ^[^\s]+$
type: String allowed values are ipipv6integerstringbinary
write_to: String allowed pattern: ^[^\s]+$

tarpit_timeout

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    tarpit_timeout: Integer 

tcp_smart_connect

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    tcp_smart_connect: String allowed values are enableddisabled

tcpka

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    tcpka: String allowed values are enableddisabled

transparent

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    transparent: String allowed values are enableddisabled

tunnel_timeout

[integer]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    tunnel_timeout: Integer 

use_fcgi_app

[string]
apiVersion: "ingress.v1.haproxy.com/v1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    use_fcgi_app: String 

Backend config

  • CRD version: 1.10
  • API version: core.haproxy.org/v1alpha2

abortonclose

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    abortonclose: String allowed values are enableddisabled

accept_invalid_http_response

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    accept_invalid_http_response: String allowed values are enableddisabled

adv_check

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    adv_check: String allowed values are ssl-hello-chksmtpchkldap-checkmysql-checkpgsql-checktcp-checkredis-checkhttpchk

allbackups

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    allbackups: String allowed values are enableddisabled

balance

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    balance: 
algorithm: String allowed values are roundrobinstatic-rrleastconnfirstsourceuriurl_paramhdrrandomrdp-cookie
hdr_name: String
hdr_use_domain_only: Boolean
random_draws: Integer
rdp_cookie_name: String allowed pattern: ^[^\s]+$
uri_depth: Integer
uri_len: Integer
uri_path_only: Boolean
uri_whole: Boolean
url_param: String allowed pattern: ^[^\s]+$
url_param_check_post: Integer
url_param_max_wait: Integer

bind_process

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    bind_process: String allowed pattern: ^[^\s]+$

check_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    check_timeout: Integer | null 

compression

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    compression: 
algorithms: String allowed values are identitygzipdeflateraw-deflate
offload: Boolean
types: Array of String

connect_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    connect_timeout: Integer | null 
[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    cookie: 
domain:
value: String allowed pattern: ^[^\s]+$
dynamic: Boolean
httponly: Boolean
indirect: Boolean
maxidle: Integer
maxlife: Integer
name: String allowed pattern: ^[^\s]+$
nocache: Boolean
postonly: Boolean
preserve: Boolean
secure: Boolean
type: String allowed values are rewriteinsertprefix

default_server

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    default_server: 
address: String allowed pattern: ^[^\s]+$
agent-addr: String allowed pattern: ^[^\s]+$
agent-check: String allowed values are enableddisabled
agent-inter: Integer | null
agent-port: Integer | null Minimum: 1 Maximum: 65535
agent-send: String
allow_0rtt: Boolean
alpn: String allowed pattern: ^[^\s]+$
backup: String allowed values are enableddisabled
ca_file: String
check: String allowed values are enableddisabled
check-send-proxy: String allowed values are enableddisabled
check-sni: String allowed pattern: ^[^\s]+$
check-ssl: String allowed values are enableddisabled
check_alpn: String allowed pattern: ^[^\s]+$
check_proto: String allowed pattern: ^[^\s]+$
check_via_socks4: String allowed values are enableddisabled
ciphers: String
ciphersuites: String
cookie: String allowed pattern: ^[^\s]+$
crl_file: String
disabled: String allowed values are enableddisabled
downinter: Integer | null
enabled: String allowed values are enableddisabled
error_limit: Integer
fall: Integer | null
fastinter: Integer | null
force_sslv3: String allowed values are enableddisabled
force_tlsv10: String allowed values are enableddisabled
force_tlsv11: String allowed values are enableddisabled
force_tlsv12: String allowed values are enableddisabled
force_tlsv13: String allowed values are enableddisabled
health_check_port: Integer | null Minimum: 1 Maximum: 65535
init-addr: String allowed pattern: ^[^\s]+$
inter: Integer | null
log_proto: String allowed values are legacyoctet-count
max_reuse: Integer | null
maxconn: Integer | null
maxqueue: Integer | null
minconn: Integer | null
name: String allowed pattern: ^[^\s]+$
namespace: String
no_sslv3: String allowed values are enableddisabled
no_tlsv10: String allowed values are enableddisabled
no_tlsv11: String allowed values are enableddisabled
no_tlsv12: String allowed values are enableddisabled
no_tlsv13: String allowed values are enableddisabled
no_verifyhost: String allowed values are enableddisabled
npn: String
observe: String allowed values are layer4layer7
on-error: String allowed values are fastinterfail-checksudden-deathmark-down
on-marked-down: String allowed values are shutdown-sessions
on-marked-up: String allowed values are shutdown-backup-sessions
pool_low_conn: Integer | null
pool_max_conn: Integer | null
pool_purge_delay: Integer | null
port: Integer | null Minimum: 1 Maximum: 65535
proto: String allowed pattern: ^[^\s]+$
proxy-v2-options: String allowed values are sslcert-cnssl-ciphercert-sigcert-keyauthoritycrc32cunique-id
redir: String
resolve-net: String allowed pattern: ^[^\s]+$
resolve-prefer: String allowed values are ipv4ipv6
resolve_opts: String allowed pattern: ^[^,\s][^\,]*[^,\s]*$
resolvers: String allowed pattern: ^[^\s]+$
rise: Integer | null
send-proxy: String allowed values are enableddisabled
send-proxy-v2: String allowed values are enableddisabled
send_proxy_v2_ssl: String allowed values are enableddisabled
send_proxy_v2_ssl_cn: String allowed values are enableddisabled
slowstart: Integer | null
sni: String allowed pattern: ^[^\s]+$
socks4: String allowed pattern: ^[^\s]+$
source: String
ssl: String allowed values are enableddisabled
ssl_certificate: String allowed pattern: ^[^\s]+$
ssl_max_ver: String allowed values are SSLv3TLSv1.0TLSv1.1TLSv1.2TLSv1.3
ssl_min_ver: String allowed values are SSLv3TLSv1.0TLSv1.1TLSv1.2TLSv1.3
ssl_reuse: String allowed values are enableddisabled
stick: String allowed values are enableddisabled
tcp_ut: Integer
tfo: String allowed values are enableddisabled
tls_tickets: String allowed values are enableddisabled
track: String
verify: String allowed values are nonerequired
verifyhost: String
weight: Integer | null
[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    dynamic_cookie_key: String allowed pattern: ^[^\s]+$

external_check

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check: String allowed values are enableddisabled

external_check_command

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check_command: String allowed pattern: ^[^\s]+$

external_check_path

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check_path: String allowed pattern: ^[^\s]+$

forwardfor

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    forwardfor: 
enabled: String allowed values are enabled
except: String allowed pattern: ^[^\s]+$
header: String allowed pattern: ^[^\s]+$
ifnone: Boolean

h1_case_adjust_bogus_server

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    h1_case_adjust_bogus_server: String allowed values are enableddisabled

hash_type

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    hash_type: 
function: String allowed values are sdbmdjb2wt6crc32
method: String allowed values are map-basedconsistent
modifier: String allowed values are avalanche

http-buffer-request

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-buffer-request: String allowed values are enableddisabled

http-check

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-check: 
addr: String allowed pattern: ^[^\s]+$
alpn: String allowed pattern: ^[^\s]+$
body: String
body_log_format: String
check_comment: String
default: Boolean
error_status: String allowed values are L7OKCL7RSPL7STSL6RSPL4CON
exclamation_mark: Boolean
headers:
fmt: String
name: String
index: Integer | null
linger: Boolean
match: String allowed values are statusrstatushdrfhdrstringrstring
method: String
min_recv: Integer | null
ok_status: String allowed values are L7OKL7OKCL6OKL4OK
on_error: String
on_success: String
pattern: String
port: Integer | null Minimum: 1 Maximum: 65535
port_string: String
proto: String
send_proxy: Boolean
sni: String
ssl: Boolean
status-code: String
tout_status: String allowed values are L7TOUTL6TOUTL4TOUT
type: String allowed values are commentconnectdisable-on-404expectsendsend-stateset-varset-var-fmtunset-var
uri: String
uri_log_format: String
var_expr: String
var_format: String
var_name: String allowed pattern: ^[^\s]+$
var_scope: String allowed pattern: ^[^\s]+$
version: String
via_socks4: Boolean

http-keep-alive

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-keep-alive: String allowed values are enableddisabled

http-no-delay

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-no-delay: String allowed values are enableddisabled

http-server-close

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-server-close: String allowed values are enableddisabled

http-use-htx

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-use-htx: String allowed values are enableddisabled

http_connection_mode

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_connection_mode: String allowed values are httpclosehttp-server-closehttp-keep-alive

http_keep_alive_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_keep_alive_timeout: Integer | null 

http_pretend_keepalive

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_pretend_keepalive: String allowed values are enableddisabled

http_proxy

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_proxy: String allowed values are enableddisabled

http_request_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_request_timeout: Integer | null 

http_reuse

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_reuse: String allowed values are aggressivealwaysneversafe

httpchk_params

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    httpchk_params: 
method: String allowed values are HEADPUTPOSTGETTRACEPATCH
uri: String allowed pattern: ^[^ ]*$
version: String

httpclose

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    httpclose: String allowed values are enableddisabled

log_health_checks

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    log_health_checks: String allowed values are enableddisabled

log_tag

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    log_tag: String allowed pattern: ^[^\s]+$

mode

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    mode: String allowed values are httptcp

mysql_check_params

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    mysql_check_params: 
client_version: String allowed values are pre-41post-41
username: String

name

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    name: String allowed pattern: ^[A-Za-z0-9-_.:]+$

pgsql_check_params

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    pgsql_check_params: 
username: String

queue_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    queue_timeout: Integer | null 

redispatch

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    redispatch: 
enabled: String allowed values are enableddisabled
interval: Integer

retries

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    retries: Integer | null 

server_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    server_timeout: Integer | null 

smtpchk_params

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    smtpchk_params: 
domain: String
hello: String

srvtcpka

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    srvtcpka: String allowed values are enableddisabled

stats_options

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    stats_options: 
stats_admin: Boolean
stats_admin_cond: String allowed values are ifunless
stats_admin_cond_test: String
stats_enable: Boolean
stats_hide_version: Boolean
stats_maxconn: Integer Minimum: 1
stats_refresh_delay: Integer | null
stats_show_desc: String
stats_show_legends: Boolean
stats_show_node_name: String allowed pattern: ^[^\s]+$
stats_uri_prefix: String allowed pattern: ^[^\s]+$

stick_table

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    stick_table: 
expire: Integer | null
keylen: Integer | null
nopurge: Boolean
peers: String allowed pattern: ^[^\s]+$
size: Integer | null
store: String allowed pattern: ^[^\s]+$
type: String allowed values are ipipv6integerstringbinary

tcpka

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    tcpka: String allowed values are enableddisabled

tunnel_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    tunnel_timeout: Integer | null 

Backend config

  • CRD version: 1.9
  • API version: core.haproxy.org/v1alpha2

abortonclose

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    abortonclose: String allowed values are enableddisabled

accept_invalid_http_response

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    accept_invalid_http_response: String allowed values are enableddisabled

adv_check

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    adv_check: String allowed values are ssl-hello-chksmtpchkldap-checkmysql-checkpgsql-checktcp-checkredis-checkhttpchk

allbackups

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    allbackups: String allowed values are enableddisabled

balance

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    balance: 
algorithm: String allowed values are roundrobinstatic-rrleastconnfirstsourceuriurl_paramhdrrandomrdp-cookie
hdr_name: String
hdr_use_domain_only: Boolean
random_draws: Integer
rdp_cookie_name: String allowed pattern: ^[^\s]+$
uri_depth: Integer
uri_len: Integer
uri_path_only: Boolean
uri_whole: Boolean
url_param: String allowed pattern: ^[^\s]+$
url_param_check_post: Integer
url_param_max_wait: Integer

bind_process

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    bind_process: String allowed pattern: ^[^\s]+$

check_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    check_timeout: Integer | null 

compression

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    compression: 
algorithms: String allowed values are identitygzipdeflateraw-deflate
offload: Boolean
types: Array of String

connect_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    connect_timeout: Integer | null 
[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    cookie: 
domain:
value: String allowed pattern: ^[^\s]+$
dynamic: Boolean
httponly: Boolean
indirect: Boolean
maxidle: Integer
maxlife: Integer
name: String allowed pattern: ^[^\s]+$
nocache: Boolean
postonly: Boolean
preserve: Boolean
secure: Boolean
type: String allowed values are rewriteinsertprefix

default_server

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    default_server: 
address: String allowed pattern: ^[^\s]+$
agent-addr: String allowed pattern: ^[^\s]+$
agent-check: String allowed values are enableddisabled
agent-inter: Integer | null
agent-port: Integer | null Minimum: 1 Maximum: 65535
agent-send: String
allow_0rtt: Boolean
alpn: String allowed pattern: ^[^\s]+$
backup: String allowed values are enableddisabled
ca_file: String
check: String allowed values are enableddisabled
check-send-proxy: String allowed values are enableddisabled
check-sni: String allowed pattern: ^[^\s]+$
check-ssl: String allowed values are enableddisabled
check_alpn: String allowed pattern: ^[^\s]+$
check_proto: String allowed pattern: ^[^\s]+$
check_via_socks4: String allowed values are enableddisabled
ciphers: String
ciphersuites: String
cookie: String allowed pattern: ^[^\s]+$
crl_file: String
disabled: String allowed values are enableddisabled
downinter: Integer | null
enabled: String allowed values are enableddisabled
error_limit: Integer
fall: Integer | null
fastinter: Integer | null
force_sslv3: String allowed values are enableddisabled
force_tlsv10: String allowed values are enableddisabled
force_tlsv11: String allowed values are enableddisabled
force_tlsv12: String allowed values are enableddisabled
force_tlsv13: String allowed values are enableddisabled
health_check_port: Integer | null Minimum: 1 Maximum: 65535
init-addr: String allowed pattern: ^[^\s]+$
inter: Integer | null
log_proto: String allowed values are legacyoctet-count
max_reuse: Integer | null
maxconn: Integer | null
maxqueue: Integer | null
minconn: Integer | null
name: String allowed pattern: ^[^\s]+$
namespace: String
no_sslv3: String allowed values are enableddisabled
no_tlsv10: String allowed values are enableddisabled
no_tlsv11: String allowed values are enableddisabled
no_tlsv12: String allowed values are enableddisabled
no_tlsv13: String allowed values are enableddisabled
no_verifyhost: String allowed values are enableddisabled
npn: String
observe: String allowed values are layer4layer7
on-error: String allowed values are fastinterfail-checksudden-deathmark-down
on-marked-down: String allowed values are shutdown-sessions
on-marked-up: String allowed values are shutdown-backup-sessions
pool_low_conn: Integer | null
pool_max_conn: Integer | null
pool_purge_delay: Integer | null
port: Integer | null Minimum: 1 Maximum: 65535
proto: String allowed pattern: ^[^\s]+$
proxy-v2-options: String allowed values are sslcert-cnssl-ciphercert-sigcert-keyauthoritycrc32cunique-id
redir: String
resolve-net: String allowed pattern: ^[^\s]+$
resolve-prefer: String allowed values are ipv4ipv6
resolve_opts: String allowed pattern: ^[^,\s][^\,]*[^,\s]*$
resolvers: String allowed pattern: ^[^\s]+$
rise: Integer | null
send-proxy: String allowed values are enableddisabled
send-proxy-v2: String allowed values are enableddisabled
send_proxy_v2_ssl: String allowed values are enableddisabled
send_proxy_v2_ssl_cn: String allowed values are enableddisabled
slowstart: Integer | null
sni: String allowed pattern: ^[^\s]+$
socks4: String allowed pattern: ^[^\s]+$
source: String
ssl: String allowed values are enableddisabled
ssl_certificate: String allowed pattern: ^[^\s]+$
ssl_max_ver: String allowed values are SSLv3TLSv1.0TLSv1.1TLSv1.2TLSv1.3
ssl_min_ver: String allowed values are SSLv3TLSv1.0TLSv1.1TLSv1.2TLSv1.3
ssl_reuse: String allowed values are enableddisabled
stick: String allowed values are enableddisabled
tcp_ut: Integer
tfo: String allowed values are enableddisabled
tls_tickets: String allowed values are enableddisabled
track: String
verify: String allowed values are nonerequired
verifyhost: String
weight: Integer | null
[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    dynamic_cookie_key: String allowed pattern: ^[^\s]+$

external_check

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check: String allowed values are enableddisabled

external_check_command

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check_command: String allowed pattern: ^[^\s]+$

external_check_path

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check_path: String allowed pattern: ^[^\s]+$

forwardfor

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    forwardfor: 
enabled: String allowed values are enabled
except: String allowed pattern: ^[^\s]+$
header: String allowed pattern: ^[^\s]+$
ifnone: Boolean

h1_case_adjust_bogus_server

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    h1_case_adjust_bogus_server: String allowed values are enableddisabled

hash_type

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    hash_type: 
function: String allowed values are sdbmdjb2wt6crc32
method: String allowed values are map-basedconsistent
modifier: String allowed values are avalanche

http-buffer-request

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-buffer-request: String allowed values are enableddisabled

http-check

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-check: 
addr: String allowed pattern: ^[^\s]+$
alpn: String allowed pattern: ^[^\s]+$
body: String
body_log_format: String
check_comment: String
default: Boolean
error_status: String allowed values are L7OKCL7RSPL7STSL6RSPL4CON
exclamation_mark: Boolean
headers:
fmt: String
name: String
index: Integer | null
linger: Boolean
match: String allowed values are statusrstatushdrfhdrstringrstring
method: String
min_recv: Integer | null
ok_status: String allowed values are L7OKL7OKCL6OKL4OK
on_error: String
on_success: String
pattern: String
port: Integer | null Minimum: 1 Maximum: 65535
port_string: String
proto: String
send_proxy: Boolean
sni: String
ssl: Boolean
status-code: String
tout_status: String allowed values are L7TOUTL6TOUTL4TOUT
type: String allowed values are commentconnectdisable-on-404expectsendsend-stateset-varset-var-fmtunset-var
uri: String
uri_log_format: String
var_expr: String
var_format: String
var_name: String allowed pattern: ^[^\s]+$
var_scope: String allowed pattern: ^[^\s]+$
version: String
via_socks4: Boolean

http-keep-alive

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-keep-alive: String allowed values are enableddisabled

http-no-delay

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-no-delay: String allowed values are enableddisabled

http-server-close

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-server-close: String allowed values are enableddisabled

http-use-htx

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-use-htx: String allowed values are enableddisabled

http_connection_mode

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_connection_mode: String allowed values are httpclosehttp-server-closehttp-keep-alive

http_keep_alive_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_keep_alive_timeout: Integer | null 

http_pretend_keepalive

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_pretend_keepalive: String allowed values are enableddisabled

http_proxy

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_proxy: String allowed values are enableddisabled

http_request_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_request_timeout: Integer | null 

http_reuse

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_reuse: String allowed values are aggressivealwaysneversafe

httpchk_params

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    httpchk_params: 
method: String allowed values are HEADPUTPOSTGETTRACEPATCH
uri: String allowed pattern: ^[^ ]*$
version: String

httpclose

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    httpclose: String allowed values are enableddisabled

log_health_checks

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    log_health_checks: String allowed values are enableddisabled

log_tag

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    log_tag: String allowed pattern: ^[^\s]+$

mode

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    mode: String allowed values are httptcp

mysql_check_params

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    mysql_check_params: 
client_version: String allowed values are pre-41post-41
username: String

name

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    name: String allowed pattern: ^[A-Za-z0-9-_.:]+$

pgsql_check_params

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    pgsql_check_params: 
username: String

queue_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    queue_timeout: Integer | null 

redispatch

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    redispatch: 
enabled: String allowed values are enableddisabled
interval: Integer

retries

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    retries: Integer | null 

server_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    server_timeout: Integer | null 

smtpchk_params

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    smtpchk_params: 
domain: String
hello: String

srvtcpka

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    srvtcpka: String allowed values are enableddisabled

stats_options

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    stats_options: 
stats_admin: Boolean
stats_admin_cond: String allowed values are ifunless
stats_admin_cond_test: String
stats_enable: Boolean
stats_hide_version: Boolean
stats_maxconn: Integer Minimum: 1
stats_refresh_delay: Integer | null
stats_show_desc: String
stats_show_legends: Boolean
stats_show_node_name: String allowed pattern: ^[^\s]+$
stats_uri_prefix: String allowed pattern: ^[^\s]+$

stick_table

[object]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    stick_table: 
expire: Integer | null
keylen: Integer | null
nopurge: Boolean
peers: String allowed pattern: ^[^\s]+$
size: Integer | null
store: String allowed pattern: ^[^\s]+$
type: String allowed values are ipipv6integerstringbinary

tcpka

[string]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    tcpka: String allowed values are enableddisabled

tunnel_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha2"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    tunnel_timeout: Integer | null 

Backend config

  • CRD version: 1.8
  • API version: core.haproxy.org/v1alpha1

name

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    name: String allowed pattern: ^[A-Za-z0-9-_.:]+$

balance

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    balance: 
algorithm: String allowed values are roundrobinstatic-rrleastconnfirstsourceuriurl_paramhdrrandomrdp-cookie
uri_whole: Boolean
uri_len: Integer
uri_depth: Integer
url_param: String allowed pattern: ^[^\s]+$
url_param_check_post: Integer
url_param_max_wait: Integer
hdr_name: String
hdr_use_domain_only: Boolean
random_draws: Integer
rdp_cookie_name: String allowed pattern: ^[^\s]+$
uri_path_only: Boolean

hash_type

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    hash_type: 
method: String allowed values are map-basedconsistent
function: String allowed values are sdbmdjb2wt6crc32
modifier: String allowed values are avalanche

http-check

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-check: 
type: String allowed values are disable-on-404expectsend-state
exclamation_mark: Boolean
match: String allowed values are statusrstatusstringrstring
pattern: String

bind_process

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    bind_process: String allowed pattern: ^[^\s]+$

mode

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    mode: String allowed values are httptcp

allbackups

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    allbackups: String allowed values are enableddisabled

http-buffer-request

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-buffer-request: String allowed values are enableddisabled

log_tag

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    log_tag: String allowed pattern: ^[^\s]+$

http_connection_mode

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_connection_mode: String allowed values are httpclosehttp-server-closehttp-keep-alive

http_pretend_keepalive

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_pretend_keepalive: String allowed values are enableddisabled

abortonclose

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    abortonclose: String allowed values are enableddisabled

forwardfor

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    forwardfor: 
enabled: String allowed values are enabled
except: String allowed pattern: ^[^\s]+$
header: String allowed pattern: ^[^\s]+$
ifnone: Boolean
[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    cookie: 
name: String allowed pattern: ^[^\s]+$
type: String allowed values are rewriteinsertprefix
indirect: Boolean
nocache: Boolean
postonly: Boolean
preserve: Boolean
httponly: Boolean
secure: Boolean
domain:
value: String allowed pattern: ^[^\s]+$
maxidle: Integer
maxlife: Integer
dynamic: Boolean

default_server

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    default_server: 
init-addr: String allowed pattern: ^[^\s]+$
inter: Integer | null
fastinter: Integer | null
downinter: Integer | null
rise: Integer | null
fall: Integer | null
check-sni: String allowed pattern: ^[^\s]+$
slowstart: Integer | null
sni: String allowed pattern: ^[^\s]+$
check-ssl: String allowed values are enableddisabled
check-send-proxy: String allowed values are enableddisabled
ca_file: String
enabled: String allowed values are enableddisabled
disabled: String allowed values are enableddisabled
port: Integer | null Minimum: 1 Maximum: 65535
resolvers: String allowed pattern: ^[^\s]+$
resolve-prefer: String allowed values are ipv4ipv6
resolve-net: String allowed pattern: ^[^\s]+$
name: String allowed pattern: ^[^\s]+$
address: String allowed pattern: ^[^\s]+$
health_check_port: Integer | null Minimum: 1 Maximum: 65535
ssl_certificate: String allowed pattern: ^[^\s]+$
agent-check: String allowed values are enableddisabled
agent-send: String
agent-inter: Integer | null
agent-addr: String allowed pattern: ^[^\s]+$
agent-port: Integer | null Minimum: 1 Maximum: 65535
allow_0rtt: Boolean
alpn: String allowed pattern: ^[^\s]+$
backup: String allowed values are enableddisabled
check: String allowed values are enableddisabled
check_alpn: String allowed pattern: ^[^\s]+$
check_proto: String allowed pattern: ^[^\s]+$
check_via_socks4: String allowed values are enableddisabled
ciphers: String
ciphersuites: String
cookie: String allowed pattern: ^[^\s]+$
crl_file: String
error_limit: Integer
force_sslv3: String allowed values are enableddisabled
force_tlsv10: String allowed values are enableddisabled
force_tlsv11: String allowed values are enableddisabled
force_tlsv12: String allowed values are enableddisabled
force_tlsv13: String allowed values are enableddisabled
log_proto: String allowed values are legacyoctet-count
maxconn: Integer | null
maxqueue: Integer | null
max_reuse: Integer | null
minconn: Integer | null
namespace: String
no_sslv3: String allowed values are enableddisabled
no_tlsv10: String allowed values are enableddisabled
no_tlsv11: String allowed values are enableddisabled
no_tlsv12: String allowed values are enableddisabled
no_tlsv13: String allowed values are enableddisabled
no_verifyhost: String allowed values are enableddisabled
npn: String
observe: String allowed values are layer4layer7
on-error: String allowed values are fastinterfail-checksudden-deathmark-down
on-marked-down: String allowed values are shutdown-sessions
on-marked-up: String allowed values are shutdown-backup-sessions
pool_low_conn: Integer | null
pool_max_conn: Integer | null
pool_purge_delay: Integer | null
proto: String allowed pattern: ^[^\s]+$
redir: String
resolve_opts: String allowed pattern: ^[^,\s][^\,]*[^,\s]*$
send-proxy: String allowed values are enableddisabled
send-proxy-v2: String allowed values are enableddisabled
proxy-v2-options: String allowed values are sslcert-cnssl-ciphercert-sigcert-keyauthoritycrc32cunique-id
send_proxy_v2_ssl: String allowed values are enableddisabled
send_proxy_v2_ssl_cn: String allowed values are enableddisabled
source: String
ssl: String allowed values are enableddisabled
ssl_max_ver: String allowed values are SSLv3TLSv1.0TLSv1.1TLSv1.2TLSv1.3
ssl_min_ver: String allowed values are SSLv3TLSv1.0TLSv1.1TLSv1.2TLSv1.3
ssl_reuse: String allowed values are enableddisabled
stick: String allowed values are enableddisabled
socks4: String allowed pattern: ^[^\s]+$
tcp_ut: Integer
tfo: String allowed values are enableddisabled
track: String
tls_tickets: String allowed values are enableddisabled
verify: String allowed values are nonerequired
verifyhost: String
weight: Integer | null

check_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    check_timeout: Integer | null 

adv_check

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    adv_check: String allowed values are ssl-hello-chksmtpchkldap-checkmysql-checkpgsql-checktcp-checkredis-checkhttpchk

smtpchk_params

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    smtpchk_params: 
hello: String
domain: String

mysql_check_params

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    mysql_check_params: 
username: String
client_version: String allowed values are pre-41post-41

pgsql_check_params

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    pgsql_check_params: 
username: String

external_check

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check: String allowed values are enableddisabled

external_check_path

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check_path: String allowed pattern: ^[^\s]+$

external_check_command

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check_command: String allowed pattern: ^[^\s]+$

queue_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    queue_timeout: Integer | null 

connect_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    connect_timeout: Integer | null 

http_request_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_request_timeout: Integer | null 

http_keep_alive_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_keep_alive_timeout: Integer | null 

retries

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    retries: Integer | null 

redispatch

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    redispatch: 
enabled: String allowed values are enableddisabled
interval: Integer

server_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    server_timeout: Integer | null 

tunnel_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    tunnel_timeout: Integer | null 

httpchk_params

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    httpchk_params: 
method: String allowed values are HEADPUTPOSTGETTRACEPATCH
uri: String allowed pattern: ^[^ ]*$
version: String

http_reuse

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_reuse: String allowed values are aggressivealwaysneversafe

stick_table

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    stick_table: 
type: String allowed values are ipipv6integerstringbinary
keylen: Integer | null
size: Integer | null
expire: Integer | null
nopurge: Boolean
peers: String allowed pattern: ^[^\s]+$
store: String allowed pattern: ^[^\s]+$

http-use-htx

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-use-htx: String allowed values are enableddisabled

stats_options

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    stats_options: 
stats_enable: Boolean
stats_hide_version: Boolean
stats_maxconn: Integer Minimum: 1
stats_refresh_delay: Integer | null
stats_show_desc: String
stats_show_legends: Boolean
stats_show_node_name: String allowed pattern: ^[^\s]+$
stats_uri_prefix: String allowed pattern: ^[^\s]+$

Backend config

  • CRD version: 1.7
  • API version: core.haproxy.org/v1alpha1

name

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    name: String allowed pattern: ^[A-Za-z0-9-_.:]+$

balance

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    balance: 
algorithm: String allowed values are roundrobinstatic-rrleastconnfirstsourceuriurl_paramhdrrandomrdp-cookie
uri_whole: Boolean
uri_len: Integer
uri_depth: Integer
url_param: String allowed pattern: ^[^\s]+$
url_param_check_post: Integer
url_param_max_wait: Integer
hdr_name: String
hdr_use_domain_only: Boolean
random_draws: Integer
rdp_cookie_name: String allowed pattern: ^[^\s]+$
uri_path_only: Boolean

hash_type

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    hash_type: 
method: String allowed values are map-basedconsistent
function: String allowed values are sdbmdjb2wt6crc32
modifier: String allowed values are avalanche

http-check

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-check: 
type: String allowed values are disable-on-404expectsend-state
exclamation_mark: Boolean
match: String allowed values are statusrstatusstringrstring
pattern: String

bind_process

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    bind_process: String allowed pattern: ^[^\s]+$

mode

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    mode: String allowed values are httptcp

allbackups

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    allbackups: String allowed values are enableddisabled

http-buffer-request

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-buffer-request: String allowed values are enableddisabled

log_tag

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    log_tag: String allowed pattern: ^[^\s]+$

http_connection_mode

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_connection_mode: String allowed values are httpclosehttp-server-closehttp-keep-alive

http_pretend_keepalive

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_pretend_keepalive: String allowed values are enableddisabled

abortonclose

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    abortonclose: String allowed values are enableddisabled

forwardfor

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    forwardfor: 
enabled: String allowed values are enabled
except: String allowed pattern: ^[^\s]+$
header: String allowed pattern: ^[^\s]+$
ifnone: Boolean
[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    cookie: 
name: String allowed pattern: ^[^\s]+$
type: String allowed values are rewriteinsertprefix
indirect: Boolean
nocache: Boolean
postonly: Boolean
preserve: Boolean
httponly: Boolean
secure: Boolean
domain:
value: String allowed pattern: ^[^\s]+$
maxidle: Integer
maxlife: Integer
dynamic: Boolean

default_server

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    default_server: 
init-addr: String allowed pattern: ^[^\s]+$
inter: Integer | null
fastinter: Integer | null
downinter: Integer | null
rise: Integer | null
fall: Integer | null
check-sni: String allowed pattern: ^[^\s]+$
slowstart: Integer | null
sni: String allowed pattern: ^[^\s]+$
check-ssl: String allowed values are enableddisabled
check-send-proxy: String allowed values are enableddisabled
ca_file: String
enabled: String allowed values are enableddisabled
disabled: String allowed values are enableddisabled
port: Integer | null Minimum: 1 Maximum: 65535
resolvers: String allowed pattern: ^[^\s]+$
resolve-prefer: String allowed values are ipv4ipv6
resolve-net: String allowed pattern: ^[^\s]+$
name: String allowed pattern: ^[^\s]+$
address: String allowed pattern: ^[^\s]+$
health_check_port: Integer | null Minimum: 1 Maximum: 65535
ssl_certificate: String allowed pattern: ^[^\s]+$
agent-check: String allowed values are enableddisabled
agent-send: String
agent-inter: Integer | null
agent-addr: String allowed pattern: ^[^\s]+$
agent-port: Integer | null Minimum: 1 Maximum: 65535
allow_0rtt: Boolean
alpn: String allowed pattern: ^[^\s]+$
backup: String allowed values are enableddisabled
check: String allowed values are enableddisabled
check_alpn: String allowed pattern: ^[^\s]+$
check_proto: String allowed pattern: ^[^\s]+$
check_via_socks4: String allowed values are enableddisabled
ciphers: String
ciphersuites: String
cookie: String allowed pattern: ^[^\s]+$
crl_file: String
error_limit: Integer
force_sslv3: String allowed values are enableddisabled
force_tlsv10: String allowed values are enableddisabled
force_tlsv11: String allowed values are enableddisabled
force_tlsv12: String allowed values are enableddisabled
force_tlsv13: String allowed values are enableddisabled
log_proto: String allowed values are legacyoctet-count
maxconn: Integer | null
maxqueue: Integer | null
max_reuse: Integer | null
minconn: Integer | null
namespace: String
no_sslv3: String allowed values are enableddisabled
no_tlsv10: String allowed values are enableddisabled
no_tlsv11: String allowed values are enableddisabled
no_tlsv12: String allowed values are enableddisabled
no_tlsv13: String allowed values are enableddisabled
no_verifyhost: String allowed values are enableddisabled
npn: String
observe: String allowed values are layer4layer7
on-error: String allowed values are fastinterfail-checksudden-deathmark-down
on-marked-down: String allowed values are shutdown-sessions
on-marked-up: String allowed values are shutdown-backup-sessions
pool_low_conn: Integer | null
pool_max_conn: Integer | null
pool_purge_delay: Integer | null
proto: String allowed pattern: ^[^\s]+$
redir: String
resolve_opts: String allowed pattern: ^[^,\s][^\,]*[^,\s]*$
send-proxy: String allowed values are enableddisabled
send-proxy-v2: String allowed values are enableddisabled
proxy-v2-options: String allowed values are sslcert-cnssl-ciphercert-sigcert-keyauthoritycrc32cunique-id
send_proxy_v2_ssl: String allowed values are enableddisabled
send_proxy_v2_ssl_cn: String allowed values are enableddisabled
source: String
ssl: String allowed values are enableddisabled
ssl_max_ver: String allowed values are SSLv3TLSv1.0TLSv1.1TLSv1.2TLSv1.3
ssl_min_ver: String allowed values are SSLv3TLSv1.0TLSv1.1TLSv1.2TLSv1.3
ssl_reuse: String allowed values are enableddisabled
stick: String allowed values are enableddisabled
socks4: String allowed pattern: ^[^\s]+$
tcp_ut: Integer
tfo: String allowed values are enableddisabled
track: String
tls_tickets: String allowed values are enableddisabled
verify: String allowed values are nonerequired
verifyhost: String
weight: Integer | null

check_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    check_timeout: Integer | null 

adv_check

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    adv_check: String allowed values are ssl-hello-chksmtpchkldap-checkmysql-checkpgsql-checktcp-checkredis-checkhttpchk

smtpchk_params

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    smtpchk_params: 
hello: String
domain: String

mysql_check_params

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    mysql_check_params: 
username: String
client_version: String allowed values are pre-41post-41

pgsql_check_params

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    pgsql_check_params: 
username: String

external_check

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check: String allowed values are enableddisabled

external_check_path

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check_path: String allowed pattern: ^[^\s]+$

external_check_command

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    external_check_command: String allowed pattern: ^[^\s]+$

queue_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    queue_timeout: Integer | null 

connect_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    connect_timeout: Integer | null 

http_request_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_request_timeout: Integer | null 

http_keep_alive_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_keep_alive_timeout: Integer | null 

retries

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    retries: Integer | null 

redispatch

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    redispatch: 
enabled: String allowed values are enableddisabled
interval: Integer

server_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    server_timeout: Integer | null 

tunnel_timeout

[integer]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    tunnel_timeout: Integer | null 

httpchk_params

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    httpchk_params: 
method: String allowed values are HEADPUTPOSTGETTRACEPATCH
uri: String allowed pattern: ^[^ ]*$
version: String

http_reuse

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http_reuse: String allowed values are aggressivealwaysneversafe

stick_table

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    stick_table: 
type: String allowed values are ipipv6integerstringbinary
keylen: Integer | null
size: Integer | null
expire: Integer | null
nopurge: Boolean
peers: String allowed pattern: ^[^\s]+$
store: String allowed pattern: ^[^\s]+$

http-use-htx

[string]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    http-use-htx: String allowed values are enableddisabled

stats_options

[object]
apiVersion: "core.haproxy.org/v1alpha1"
  kind: Backend
metadata:
  name: example-backend
  namespace: default
spec:
  config:
    stats_options: 
stats_enable: Boolean
stats_hide_version: Boolean
stats_maxconn: Integer Minimum: 1
stats_refresh_delay: Integer | null
stats_show_desc: String
stats_show_legends: Boolean
stats_show_node_name: String allowed pattern: ^[^\s]+$
stats_uri_prefix: String allowed pattern: ^[^\s]+$

Do you have any suggestions on how we can improve the content of this page?