You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
|ingress.citrix.com/frontend-ip| IP address | Use this annotation to customize the virtual IP address (VIP). This IP address is configured in Citrix ADC as VIP. The annotation is mandatory if you are using Citrix ADC VPX or MPX. </br>**Note:** Do not use the annotation if you want to use the Citrix ADC IP address as VIP. | Citrix ADC IP address is used as VIP. |
10
-
|Ingress.citrix.com/frontend-ipset-name|Name of the IPSET |Use this annotation to specify the IPSET name for the frontend configuration. The IPSET is bound to the CS virtual server. Use this annotation with the `ingress.citrix.com/frontend-ip`. </br>**Note:** The IPSET name that you specify in the annotation should already be configured in Citrix ADC.| NA|
10
+
|Ingress.citrix.com/frontend-ipset-name|Name of the IPSET |Use this annotation to specify the IPSET name for the front-end configuration. The IPSET is bound to the CS virtual server. Use this annotation with the `ingress.citrix.com/frontend-ip`. </br>**Note:** The IPSET name that you specify in the annotation should already be configured in Citrix ADC.| NA|
11
11
|ingress.citrix.com/secure-port|Port number |Use this annotation to configure the port for HTTPS traffic. This port is configured in Citrix ADC as a port value for the corresponding Content Switching (CS) virtual server.|`443`|
12
12
|ingress.citrix.com/insecure-port| Port number | Use this annotation to configure the port for HTTP, TCP, or UDP traffic. This port is configured in Citrix ADC as a port value for the corresponding CS virtual server.|`80`|
13
13
|ingress.citrix.com/insecure-termination|`allow`, `redirect`, or `disallow`|Use `allow` to allow HTTP traffic, Use `redirect` to redirect the HTTP request to HTTPS, or Use `disallow` if you want to drop the HTTP traffic.</br></br> For example: `ingress.citrix.com/insecure-termination: "redirect"`|`disallow`|
@@ -17,6 +17,8 @@ The following are the Ingress annotations supported by Citrix:
17
17
|ingress.citrix.com/insecure-service-type|`http`, `tcp`, `udp`, `sip_udp`, or `any`| The annotation allows L4 load balancing with tcp/udp/sip_udp any as protocol. Use `tcp`, if you want TCP as the protocol. Use `udp`, if you want UDP as the protocol.|`http`|
18
18
|ingress.citrix.com/path-match-method |`prefix` or `exact`| Use this annotation for ingress path matching. </br>- Use `prefix` for Citrix ingress controller to consider any path string as a prefix expression.</br> - Use `exact` for the Citrix ingress controller to consider the path as an exact match.</br></br> For example, the `ingress.citrix.com/path-match-method: "prefix"` annotation defines the Citrix ingress controller to consider any path string as a prefix expression. |`prefix`|
19
19
| ingress.citrix.com/deployment |`dsr`| Use this annotation to create Direct Server Return (DSR) configuration on Citrix ADC. For example, the `ingress.citrix.com/deployment: "dsr"` annotation creates DSR configuration on the Citrix ADC. |
20
+
|`ingress.citrix.com/preconfigured-certkey`| Pre-configured certificate keys and type. Certificate type can be default, SNI, or CA. |Use this annotation to specify the preconfigured certificate key or keys in the Citrix ADC that you want to reuse and bind to applications. |If the type parameter is not provided with the name of a certificate, then the certificate is considered as the default (non-SNI) type. |
21
+
||| For example in the `ingress.citrix.com/preconfigured-certkey : '{"certs": [ {"name": "certkey1", "type": "default"}, {"name": "certkey2", "type": "sni"} ] }` annotation, `certkey1` is used as a non-SNI certificate and `certkey2` is used as a SNI certificate.||
0 commit comments