apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  name: tlsstores.traefik.io
spec:
  group: traefik.io
  scope: Namespaced
  names:
    kind: TLSStore
    listKind: TLSStoreList
    singular: tlsstore
    plural: tlsstores
  versions:
    - name: v1alpha1
      served: true
      storage: true
      schema:
        openAPIV3Schema:
          type: object
          description: >-
            TLSStore configures the default TLS certificate used by Traefik
            when an incoming request does not match any configured TLS
            certificate by SNI. The store named "default" is special and is
            looked up automatically for unmatched hostnames.
          properties:
            spec:
              type: object
              properties:
                defaultCertificate:
                  type: object
                  properties:
                    secretName:
                      type: string
                certificates:
                  type: array
                  items:
                    type: object
                    properties:
                      secretName:
                        type: string
                defaultGeneratedCert:
                  type: object
                  properties:
                    resolver:
                      type: string
                    domain:
                      type: object
                      properties:
                        main:
                          type: string
                        sans:
                          type: array
                          items:
                            type: string