| deployment_custom_domain_check_enabled |
Option<bool> |
disable custom domain check when deploying an application |
[optional] |
| deployment_termination_grace_period_seconds |
Option<i32> |
define how long in seconds an application is supposed to be stopped gracefully |
[optional] |
| deployment_affinity_node_required |
Option<std::collections::HashMap<String, String>> |
Set pod placement on specific Kubernetes nodes labels |
[optional] |
| deployment_antiaffinity_pod |
Option<DeploymentAntiaffinityPod> |
Define how you want pods affinity to behave: * Preferred allows, but does not require, pods of a given service are not co-located (or co-hosted) on a single node * Requirred ensures that the pods of a given service are not co-located (or co-hosted) on a single node (safer in term of availability but can be expensive depending on the number of replicas) (enum: Preferred, Requirred) |
[optional] |
| deployment_topology_spread_zone |
Option<DeploymentTopologySpreadZone> |
Define how you want pods to be spread across availability zones: * Disabled no topology spread constraints are applied * ScheduleAnyway pods are spread across zones on a best-effort basis (soft constraint) * DoNotSchedule pods must be evenly spread across zones with a maxSkew of 1 (hard constraint) (enum: Disabled, ScheduleAnyway, DoNotSchedule) |
[optional] |
| deployment_update_strategy_type |
Option<DeploymentUpdateStrategyType> |
* RollingUpdate gracefully rollout new versions, and automatically rollback if the new version fails to start * Recreate stop all current versions and create new ones once all old ones have been shutdown (enum: RollingUpdate, Recreate) |
[optional] |
| deployment_update_strategy_rolling_update_max_unavailable_percent |
Option<i32> |
Define the percentage of a maximum number of pods that can be unavailable during the update process |
[optional] |
| deployment_update_strategy_rolling_update_max_surge_percent |
Option<i32> |
Define the percentage of the maximum number of pods that can be created over the desired number of pods |
[optional] |
| network_ingress_proxy_body_size_mb |
Option<i32> |
|
[optional] |
| network_ingress_force_ssl_redirect |
Option<bool> |
When using SSL offloading outside of cluster, you can enforce a redirect to HTTPS even when there is no TLS certificate available |
[optional] |
| network_ingress_enable_cors |
Option<bool> |
|
[optional] |
| network_ingress_cors_allow_origin |
Option<String> |
|
[optional] |
| network_ingress_cors_allow_methods |
Option<String> |
|
[optional] |
| network_ingress_cors_allow_headers |
Option<String> |
|
[optional] |
| network_ingress_proxy_buffer_size_kb |
Option<i32> |
header buffer size used while reading response header from upstream |
[optional] |
| network_ingress_keepalive_time_seconds |
Option<i32> |
Limits the maximum time (in seconds) during which requests can be processed through one keepalive connection |
[optional] |
| network_ingress_keepalive_timeout_seconds |
Option<i32> |
Sets a timeout (in seconds) during which an idle keepalive connection to an upstream server will stay open. |
[optional] |
| network_ingress_send_timeout_seconds |
Option<i32> |
Sets a timeout (in seconds) for transmitting a response to the client |
[optional] |
| network_ingress_proxy_connect_timeout_seconds |
Option<i32> |
Sets a timeout (in seconds) for establishing a connection to a proxied server |
[optional] |
| network_ingress_proxy_send_timeout_seconds |
Option<i32> |
Sets a timeout (in seconds) for transmitting a request to the proxied server |
[optional] |
| network_ingress_proxy_read_timeout_seconds |
Option<i32> |
Sets a timeout (in seconds) for reading a response from the proxied server |
[optional] |
| network_ingress_proxy_buffering |
Option<String> |
Allows to enable or disable nginx proxy-buffering |
[optional] |
| network_ingress_proxy_request_buffering |
Option<String> |
Allows to enable or disable nginx proxy-request-buffering |
[optional] |
| network_ingress_grpc_send_timeout_seconds |
Option<i32> |
Sets a timeout (in seconds) for transmitting a request to the grpc server |
[optional] |
| network_ingress_grpc_read_timeout_seconds |
Option<i32> |
Sets a timeout (in seconds) for transmitting a request to the grpc server |
[optional] |
| network_ingress_whitelist_source_range |
Option<String> |
list of source ranges to allow access to ingress proxy. This property can be used to whitelist source IP ranges for ingress proxy. The value is a comma separated list of CIDRs, e.g. 10.0.0.0/24,172.10.0.1 To allow all source ranges, set 0.0.0.0/0. |
[optional] |
| network_ingress_denylist_source_range |
Option<String> |
list of source ranges to deny access to ingress proxy. This property can be used to blacklist source IP ranges for ingress proxy. The value is a comma separated list of CIDRs, e.g. 10.0.0.0/24,172.10.0.1 |
[optional] |
| network_ingress_extra_headers |
Option<String> |
Allows to define response headers |
[optional] |
| network_gateway_api_http_request_timeout_seconds |
Option<i32> |
Sets a timeout (in seconds) for requests proxied through the Gateway API route. |
[optional] |
| network_gateway_api_http_connection_idle_timeout_seconds |
Option<i32> |
Sets the idle timeout (in seconds) for HTTP connections proxied through the Gateway API route. |
[optional] |
| network_ingress_basic_auth_env_var |
Option<String> |
Set the name of an environment variable to use as a basic authentication (login:crypted_password) from htpasswd command. You can add multiples comma separated values. |
[optional] |
| network_ingress_enable_sticky_session |
Option<bool> |
Enable the load balancer to bind a user's session to a specific target. This ensures that all requests from the user during the session are sent to the same target |
[optional] |
| security_service_account_name |
Option<String> |
Allows you to set an existing Kubernetes service account name |
[optional] |
| hpa_cpu_average_utilization_percent |
Option<i32> |
Percentage value of cpu usage at which point pods should scale up. |
[optional] |
| hpa_memory_average_utilization_percent |
Option<i32> |
Percentage value of memory usage at which point pods should scale up. |
[optional] |
| security_automount_service_account_token |
Option<bool> |
Automount Kubernetes service account token to have access to Kubernetes API from pods |
[optional] |
| security_read_only_root_filesystem |
Option<bool> |
Mounts the container's root filesystem as read-only |
[optional] |