apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: tlsoptions.traefik.io
spec:
  group: traefik.io
  scope: Namespaced
  names:
    kind: TLSOption
    listKind: TLSOptionList
    singular: tlsoption
    plural: tlsoptions
  versions:
    - name: v1alpha1
      served: true
      storage: true
      schema:
        openAPIV3Schema:
          type: object
          description: >-
            TLSOption defines a reusable set of TLS parameters - minimum
            version, supported cipher suites, curve preferences, ALPN
            protocols, SNI strictness, and mutual TLS (mTLS) client
            authentication settings - that can be referenced from any
            IngressRoute or IngressRouteTCP via spec.tls.options.
          properties:
            spec:
              type: object
              properties:
                minVersion:
                  type: string
                  description: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13.
                maxVersion:
                  type: string
                cipherSuites:
                  type: array
                  items:
                    type: string
                curvePreferences:
                  type: array
                  items:
                    type: string
                clientAuth:
                  type: object
                  properties:
                    secretNames:
                      type: array
                      items:
                        type: string
                    clientAuthType:
                      type: string
                      enum:
                        - NoClientCert
                        - RequestClientCert
                        - RequireAnyClientCert
                        - VerifyClientCertIfGiven
                        - RequireAndVerifyClientCert
                sniStrict:
                  type: boolean
                alpnProtocols:
                  type: array
                  items:
                    type: string