Configuration reference

Global CRD

On this page

Selected version

Global CRD Configuration reference

This page applies to:

HAProxy Enterprise Kubernetes Ingress Controller 1.7 and newer

The Global custom resource extends the Kubernetes API to let you manage process-level options for the ingress controller.

On-demand webinar

Using CRDs to Improve Quality of Life in Kubernetes

Install the Global custom resource Jump to heading

Info

If you installed the ingress controller with Helm, this CRD is installed and updated automatically. If you installed with kubectl, follow these instructions for installation. Once installed, to perform updates on this CRD see: Update CRDs.

Before you can use the Global custom resource, you must install its definition into your Kubernetes cluster.

Download the v3-2 Global custom resource file v3-2 Global custom resource file v3-0 Global custom resource file v1-11 Global custom resource file v1-10 Global custom resource file v1-9 Global custom resource file v1-8 Global custom resource file v1-7 Global custom resource file.

Install the custom resource definition with kubectl apply:

nix
kubectl apply -f ingress.v1.haproxy.com_globals.yaml

nix
kubectl apply -f ingress.v1.haproxy.com_globals.yaml

nix
kubectl apply -f ingress.v3.haproxy.com_globals.yaml

nix
kubectl apply -f ingress.v3.haproxy.com_globals.yaml

nix
kubectl apply -f ingress.v1.haproxy.com_globals.yaml

nix
kubectl apply -f ingress.v1.haproxy.com_globals.yaml

nix
kubectl apply -f ingress.v1.haproxy.com_globals.yaml

nix
kubectl apply -f ingress.v1.haproxy.com_globals.yaml

nix
kubectl apply -f globals.core.haproxy.org.yaml

nix
kubectl apply -f globals.core.haproxy.org.yaml

nix
kubectl apply -f globals.core.haproxy.org.yaml

nix
kubectl apply -f globals.core.haproxy.org.yaml

nix
kubectl apply -f global.yaml

nix
kubectl apply -f global.yaml

nix
kubectl apply -f global.yaml

nix
kubectl apply -f global.yaml

Verify that the installation worked by listing custom resources defined in your cluster:

nix
kubectl get crd

nix
kubectl get crd

output
text
NAME                        CREATED AT
globals.ingress.v1.haproxy.com   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.ingress.v1.haproxy.com   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.ingress.v3.haproxy.com   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.ingress.v3.haproxy.com   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.ingress.v1.haproxy.com   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.ingress.v1.haproxy.com   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.ingress.v1.haproxy.com   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.ingress.v1.haproxy.com   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.core.haproxy.org   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.core.haproxy.org   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.core.haproxy.org   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.core.haproxy.org   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.core.haproxy.org   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.core.haproxy.org   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.core.haproxy.org   2022-01-21T20:00:31Z

output
text
NAME                        CREATED AT
globals.core.haproxy.org   2022-01-21T20:00:31Z

Use the Global custom resource Jump to heading

With the Global custom resource, you can tune process-level options for the ingress controller. To use it:

Create a YAML file that declares a Global resource and add properties to its spec.config section.

In the example below, the maxconn property limits how many concurrent TCP connections the ingress controller will accept.

example-global.yaml
yaml
apiVersion: "ingress.v3.haproxy.com/v3"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "ingress.v3.haproxy.com/v3"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "ingress.v1.haproxy.com/v1"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "ingress.v1.haproxy.com/v1"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "ingress.v1.haproxy.com/v1"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "ingress.v1.haproxy.com/v1"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "core.haproxy.org/v1alpha2"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "core.haproxy.org/v1alpha2"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "core.haproxy.org/v1alpha2"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "core.haproxy.org/v1alpha2"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "core.haproxy.org/v1alpha1"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "core.haproxy.org/v1alpha1"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "core.haproxy.org/v1alpha1"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

example-global.yaml
yaml
apiVersion: "core.haproxy.org/v1alpha1"
 kind: Global
 metadata:
   name: example-global
   namespace: default
 spec:
   config:
     maxconn: 60000

Deploy it to your cluster using kubectl apply.

nix
kubectl apply -f example-global.yaml

nix
kubectl apply -f example-global.yaml

Use kubectl edit to modify the haproxy-kubernetes-ingress ConfigMap.

nix
kubectl edit configmap haproxy-kubernetes-ingress --namespace haproxy-controller

nix
kubectl edit configmap haproxy-kubernetes-ingress --namespace haproxy-controller

Add the cr-global key to the data section to implement the process-level options, then save the file. The key specifies the namespace and name of the custom resource.

yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: haproxy-kubernetes-ingress
  namespace: haproxy-controller
data:
  cr-global: default/example-global

yaml
apiVersion: v1
kind: ConfigMap
metadata:
  name: haproxy-kubernetes-ingress
  namespace: haproxy-controller
data:
  cr-global: default/example-global

Global config

CRD version: 3.2
API version: ingress.v1.haproxy.com/v1

anonkey

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    anonkey: Integer Minimum: 0 Maximum: 4294967295

botmgmt

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    botmgmt: 
      auto_enable: Boolean
      data_file: String 
      update: 
        delay: Integer 
        dontlog_normal: Boolean
        log: Boolean
        modified: Boolean
        retries: Integer 
        server_params: 
        agent-addr: String # Allowed pattern: ^[^\s]+$
        agent-check: String # Allowed values are enabled, disabled
        agent-inter: Integer 
        agent-port: Integer Minimum: 1 Maximum: 65535 
        agent-send: String 
        allow_0rtt: Boolean
        alpn: String # Allowed pattern: ^[^\s]+$
        backup: String # Allowed values are enabled, disabled
        check: String # Allowed values are enabled, disabled
        check-send-proxy: String # Allowed values are enabled, disabled
        check-sni: String # Allowed pattern: ^[^\s]+$
        check-ssl: String # Allowed values are enabled, disabled
        check_alpn: String # Allowed pattern: ^[^\s]+$
        check_proto: String # Allowed pattern: ^[^\s]+$
        check_via_socks4: String # Allowed values are enabled, disabled
        ciphers: String 
        ciphersuites: String 
        client_sigalgs: String 
        cookie: String # Allowed pattern: ^[^\s]+$
        crl_file: String 
        curves: String 
        downinter: Integer 
        error_limit: Integer 
        fall: Integer 
        fastinter: Integer 
        force_sslv3: String # Allowed values are enabled, disabled
        force_tlsv10: String # Allowed values are enabled, disabled
        force_tlsv11: String # Allowed values are enabled, disabled
        force_tlsv12: String # Allowed values are enabled, disabled
        force_tlsv13: String # Allowed values are enabled, disabled
        health_check_address: String # Allowed pattern: ^[^\s]+$
        health_check_port: Integer Minimum: 1 Maximum: 65535 
        init-addr: String # Allowed pattern: ^[^\s]+$
        inter: Integer 
        log-bufsize: Integer 
        log_proto: String # Allowed values are legacy, octet-count
        maintenance: String # Allowed values are enabled, disabled
        max_reuse: Integer 
        maxconn: Integer 
        maxqueue: Integer 
        minconn: Integer 
        namespace: String 
        no_sslv3: String # Allowed values are enabled, disabled
        no_tlsv10: String # Allowed values are enabled, disabled
        no_tlsv11: String # Allowed values are enabled, disabled
        no_tlsv12: String # Allowed values are enabled, disabled
        no_tlsv13: String # Allowed values are enabled, disabled
        no_verifyhost: String # Allowed values are enabled, disabled
        npn: String 
        observe: String # Allowed values are layer4, layer7
        on-error: String # Allowed values are fastinter, fail-check, sudden-death, mark-down
        on-marked-down: String # Allowed values are shutdown-sessions
        on-marked-up: String # Allowed values are shutdown-backup-sessions
        pool_low_conn: Integer 
        pool_max_conn: Integer 
        pool_purge_delay: Integer 
        proto: String # Allowed pattern: ^[^\s]+$
        proxy-v2-options: Array of String 
        redir: String 
        resolve-net: String # Allowed pattern: ^([A-Za-z0-9.:/]+)(,[A-Za-z0-9.:/]+)*$
        resolve-prefer: String # Allowed values are ipv4, ipv6
        resolve_opts: String # Allowed pattern: ^(allow-dup-ip|ignore-weight|prevent-dup-ip)(,(allow-dup-ip|ignore-weight|prevent-dup-ip))*$
        resolvers: String # Allowed pattern: ^[^\s]+$
        rise: Integer 
        send-proxy: String # Allowed values are enabled, disabled
        send-proxy-v2: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl_cn: String # Allowed values are enabled, disabled
        set-proxy-v2-tlv-fmt: 
        id: String 
        value: String 
        shard: Integer 
        sigalgs: String 
        slowstart: Integer 
        sni: String # Allowed pattern: ^[^\s]+$
        socks4: String # Allowed pattern: ^[^\s]+$
        source: String 
        ssl: String # Allowed values are enabled, disabled
        ssl_cafile: String # Allowed pattern: ^[^\s]+$
        ssl_certificate: String # Allowed pattern: ^[^\s]+$
        ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_reuse: String # Allowed values are enabled, disabled
        stick: String # Allowed values are enabled, disabled
        tcp_ut: Integer 
        tfo: String # Allowed values are enabled, disabled
        tls_tickets: String # Allowed values are enabled, disabled
        track: String 
        verify: String # Allowed values are none, required
        verifyhost: String 
        weight: Integer 
        ws: String # Allowed values are auto, h1, h2
        timeout: Integer 
        url: String # Allowed pattern: ^[^\s]+$
        xmodified: Boolean

busy_polling

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    busy_polling: Boolean

ca_base

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ca_base: String

chroot

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    chroot: String # Allowed pattern: ^[^\s]+$

close_spread_time

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    close_spread_time: Integer

cluster_secret

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cluster_secret: String

cook_chal.set_cookie_attributes

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cook_chal.set_cookie_attributes: String

cpu_maps

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cpu_maps: 
        - cpu_set: String 
          process: String

crt_base

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    crt_base: String

daemon

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    daemon: String # Allowed values are enabled, disabled

default_path

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    default_path: 
      path: String # Allowed pattern: ^[^\s]+$
      type: String # Allowed values are current, config, parent, origin

description

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    description: String

device_atlas_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    device_atlas_options: 
      json_file: String 
      log_level: String 
      properties_cookie: String 
      separator: String

expose_experimental_directives

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    expose_experimental_directives: Boolean

external_check

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    external_check: Boolean

fifty_one_degrees_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    fifty_one_degrees_options: 
      cache_size: Integer 
      data_file: String 
      property_name_list: String 
      property_separator: String

fingerprint_ssl_bufsize

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    fingerprint_ssl_bufsize: Integer

gid

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    gid: Integer

grace

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    grace: Integer

group

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    group: String # Allowed pattern: ^[^\s]+$

h1_accept_payload_with_any_method

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_accept_payload_with_any_method: Boolean

h1_case_adjust

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_case_adjust: 
        - from: String 
          to: String

h1_case_adjust_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_case_adjust_file: String

h1_do_not_close_on_insecure_transfer_encoding

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_do_not_close_on_insecure_transfer_encoding: Boolean

h2_workaround_bogus_websocket_clients

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h2_workaround_bogus_websocket_clients: Boolean

hard_stop_after

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    hard_stop_after: Integer

httpclient_resolvers_disabled

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_resolvers_disabled: String # Allowed values are enabled, disabled

httpclient_resolvers_id

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_resolvers_id: String

httpclient_resolvers_prefer

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_resolvers_prefer: String # Allowed values are ipv4, ipv6

httpclient_retries

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_retries: Integer

httpclient_ssl_ca_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_ssl_ca_file: String

httpclient_ssl_verify

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_ssl_verify: String # Allowed values are , none, required

httpclient_timeout_connect

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_timeout_connect: Integer

insecure_fork_wanted

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    insecure_fork_wanted: Boolean

insecure_setuid_wanted

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    insecure_setuid_wanted: Boolean

issuers_chain_path

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    issuers_chain_path: String

limited_quic

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    limited_quic: Boolean

localpeer

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    localpeer: String # Allowed pattern: ^[^\s]+$

log_send_hostname

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    log_send_hostname: 
      enabled: String # Allowed values are enabled, disabled
      param: String # Allowed pattern: ^[^\s]+$

lua_load_per_thread

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_load_per_thread: String

lua_loads

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_loads: 
        - file: String # Allowed pattern: ^[^\s]+$

lua_prepend_path

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_prepend_path: 
        - path: String # Allowed pattern: ^[^\s]+$
          type: String # Allowed values are path, cpath

master-worker

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    master-worker: Boolean

max_spread_checks

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    max_spread_checks: Integer

maxcompcpuusage

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxcompcpuusage: Integer

maxcomprate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxcomprate: Integer

maxconn

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconn: Integer

maxconnrate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconnrate: Integer

maxmind_cache_size

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_cache_size: Integer

maxmind_debug

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_debug: Boolean

maxmind_load

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_load: 
      maxmind_dbs: 
        - key: String 
          path: String 
      mlock_max: Integer

maxmind_update

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_update: 
      checksum: Boolean
      delay: Integer 
      dontlog_normal: Boolean
      hash: Boolean
      log: Boolean
      maxmind_urls: 
        - key: String 
          url: String 
      retries: Integer 
      timeout: Integer

maxpipes

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxpipes: Integer

maxsessrate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsessrate: Integer

maxsslconn

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsslconn: Integer

maxsslrate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsslrate: Integer

maxzlibmem

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxzlibmem: Integer

modsecurity-deny-blocking-io

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-deny-blocking-io: Boolean

modsecurity-max-cpu-action

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-action: String # Allowed values are deny, pass

modsecurity-max-cpu-backoff-delay

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-backoff-delay: String

modsecurity-max-cpu-backoff-retries

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-backoff-retries: Integer

modsecurity-max-cpu-period

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-period: String

modsecurity-max-cpu-usage

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-usage: Integer

module-loads

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    module-loads: 
        - value: String

module-path

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    module-path: String

mworker_max_reloads

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    mworker_max_reloads: Integer Minimum: 0

nbproc

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbproc: Integer

nbthread

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbthread: Integer

no-quic

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    no-quic: Boolean

node

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    node: String

noepoll

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noepoll: Boolean

noevports

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noevports: Boolean

nogetaddrinfo

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nogetaddrinfo: Boolean

nokqueue

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nokqueue: Boolean

nopoll

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nopoll: Boolean

noreuseport

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noreuseport: Boolean

nosplice

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nosplice: Boolean

numa_cpu_mapping

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    numa_cpu_mapping: String # Allowed values are enabled, disabled

pidfile

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    pidfile: String

pp2_never_send_local

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    pp2_never_send_local: Boolean

prealloc-fd

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    prealloc-fd: Boolean

presetenv

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    presetenv: 
        - name: String 
          value: String

profiling_tasks

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    profiling_tasks: String # Allowed values are auto, on, off

quiet

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    quiet: Boolean

resetenv

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    resetenv: String

runtime_apis

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    runtime_apis: 
        - accept_netscaler_cip: Integer 
          accept_proxy: Boolean
          address: String # Allowed pattern: ^[^\s]+$
          allow_0rtt: Boolean
          alpn: String # Allowed pattern: ^[^\s]+$
          backlog: String 
          ca_ignore_err: String 
          ca_sign_file: String 
          ca_sign_pass: String 
          ca_verify_file: String 
          ciphers: String 
          ciphersuites: String 
          client_sigalgs: String 
          crl_file: String 
          crt_ignore_err: String 
          crt_list: String 
          curves: String 
          defer_accept: Boolean
          ecdhe: String 
          expose_fd_listeners: Boolean
          force_sslv3: Boolean
          force_tlsv10: Boolean
          force_tlsv11: Boolean
          force_tlsv12: Boolean
          force_tlsv13: Boolean
          generate_certificates: Boolean
          gid: Integer 
          group: String 
          id: String 
          interface: String 
          level: String # Allowed values are user, operator, admin
          maxconn: Integer 
          mode: String 
          mss: String 
          name: String # Allowed pattern: ^[^\s]+$
          namespace: String 
          nbconn: Integer 
          nice: Integer 
          no_alpn: Boolean
          no_ca_names: Boolean
          no_sslv3: Boolean
          no_tls_tickets: Boolean
          no_tlsv10: Boolean
          no_tlsv11: Boolean
          no_tlsv12: Boolean
          no_tlsv13: Boolean
          npn: String 
          prefer_client_ciphers: Boolean
          process: String # Allowed pattern: ^[^\s]+$
          proto: String 
          quic-cc-algo: String # Allowed values are cubic, newreno
          quic-force-retry: Boolean
          quic-socket: String # Allowed values are connection, listener
          severity_output: String # Allowed values are none, number, string
          sigalgs: String 
          ssl: Boolean
          ssl_cafile: String # Allowed pattern: ^[^\s]+$
          ssl_certificate: String # Allowed pattern: ^[^\s]+$
          ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
          ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
          strict_sni: Boolean
          tcp_user_timeout: Integer 
          tfo: Boolean
          thread: String 
          tls_ticket_keys: String 
          transparent: Boolean
          uid: String 
          user: String 
          v4v6: Boolean
          v6only: Boolean
          verify: String # Allowed values are none, optional, required

saml_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    saml_options: 
      saml_sso_load: 
        configuration_directory: String 
        ini_file: String

server_state_base

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_base: String # Allowed pattern: ^[^\s]+$

server_state_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_file: String # Allowed pattern: ^[^\s]+$

set_dumpable

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    set_dumpable: Boolean

set_var

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    set_var: 
        - expr: String 
          name: String

set_var_fmt

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    set_var_fmt: 
        - format: String 
          name: String

setcap

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    setcap: String # Allowed pattern: ^[^\s]+$

setenv

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    setenv: 
        - name: String 
          value: String

spread_checks

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    spread_checks: Integer

ssl_default_bind_ciphers

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphers: String

ssl_default_bind_ciphersuites

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphersuites: String

ssl_default_bind_client_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_client_sigalgs: String

ssl_default_bind_curves

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_curves: String

ssl_default_bind_options

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_options: String

ssl_default_bind_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_sigalgs: String

ssl_default_server_ciphers

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphers: String

ssl_default_server_ciphersuites

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphersuites: String

ssl_default_server_client_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_client_sigalgs: String

ssl_default_server_curves

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_curves: String

ssl_default_server_options

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_options: String

ssl_default_server_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_sigalgs: String

ssl_dh_param_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_dh_param_file: String

ssl_engines

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_engines: 
        - algorithms: String 
          name: String

ssl_load_extra_files

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_load_extra_files: String

ssl_mode_async

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_mode_async: String # Allowed values are enabled, disabled

ssl_propquery

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_propquery: String

ssl_provider

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_provider: String

ssl_provider_path

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_provider_path: String

ssl_server_verify

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_server_verify: String # Allowed values are none, required

ssl_skip_self_issued_ca

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_skip_self_issued_ca: Boolean

stats_maxconn

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    stats_maxconn: Integer

stats_timeout

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    stats_timeout: Integer

strict_limits

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    strict_limits: Boolean

thread_group_lines

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    thread_group_lines: 
        - group: String 
          num_or_range: String

thread_groups

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    thread_groups: Integer

tune_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_options: 
      buffers_limit: Integer 
      buffers_reserve: Integer Minimum: 2 
      bufsize: Integer 
      comp_maxlevel: Integer 
      disable_zero_copy_forwarding: Boolean
      events_max_events_at_once: Integer Minimum: 1 Maximum: 10000 
      fail_alloc: Boolean
      fd_edge_triggered: String # Allowed values are enabled, disabled
      h1_zero_copy_fwd_recv: String # Allowed values are enabled, disabled
      h1_zero_copy_fwd_send: String # Allowed values are enabled, disabled
      h2_be_initial_window_size: Integer 
      h2_be_max_concurrent_streams: Integer 
      h2_fe_initial_window_size: Integer 
      h2_fe_max_concurrent_streams: Integer 
      h2_header_table_size: Integer Maximum: 65535 
      h2_initial_window_size: Integer 
      h2_max_concurrent_streams: Integer 
      h2_max_frame_size: Integer 
      h2_zero_copy_fwd_send: String # Allowed values are enabled, disabled
      http_cookielen: Integer 
      http_logurilen: Integer 
      http_maxhdr: Integer Minimum: 1 Maximum: 32767 
      idle_pool_shared: String # Allowed values are enabled, disabled
      idletimer: Integer Minimum: 0 Maximum: 65535 
      listener_default_shards: String # Allowed values are by-process, by-thread, by-group
      listener_multi_queue: String # Allowed values are enabled, disabled
      lua_burst_timeout: Integer 
      lua_forced_yield: Integer 
      lua_log_loggers: String # Allowed values are enabled, disabled
      lua_log_stderr: String # Allowed values are auto, enabled, disabled
      lua_maxmem: Boolean
      lua_service_timeout: Integer 
      lua_session_timeout: Integer 
      lua_task_timeout: Integer 
      max_checks_per_thread: Integer 
      maxaccept: Integer 
      maxpollevents: Integer 
      maxrewrite: Integer 
      memory_hot_size: Integer 
      pattern_cache_size: Integer 
      peers_max_updates_at_once: Integer 
      pipesize: Integer 
      pool_high_fd_ratio: Integer 
      pool_low_fd_ratio: Integer 
      pt_zero_copy_forwarding: String # Allowed values are enabled, disabled
      quic_frontend_conn_tx_buffers_limit: Integer 
      quic_frontend_max_idle_timeout: Integer 
      quic_frontend_max_streams_bidi: Integer 
      quic_max_frame_loss: Integer 
      quic_retry_threshold: Integer 
      quic_socket_owner: String # Allowed values are listener, connection
      rcvbuf_backend: Integer 
      rcvbuf_client: Integer 
      rcvbuf_frontend: Integer 
      rcvbuf_server: Integer 
      recv_enough: Integer 
      runqueue_depth: Integer 
      sched_low_latency: String # Allowed values are enabled, disabled
      sndbuf_backend: Integer 
      sndbuf_client: Integer 
      sndbuf_frontend: Integer 
      sndbuf_server: Integer 
      ssl_cachesize: Integer 
      ssl_capture_buffer_size: Integer 
      ssl_ctx_cache_size: Integer 
      ssl_default_dh_param: Integer 
      ssl_force_private_cache: Boolean
      ssl_keylog: String # Allowed values are enabled, disabled
      ssl_lifetime: Integer 
      ssl_maxrecord: Integer 
      ssl_ocsp_update_max_delay: Integer 
      ssl_ocsp_update_min_delay: Integer 
      stick_counters: Integer 
      vars_global_max_size: Integer 
      vars_proc_max_size: Integer 
      vars_reqres_max_size: Integer 
      vars_sess_max_size: Integer 
      vars_txn_max_size: Integer 
      zlib_memlevel: Integer Minimum: 1 Maximum: 9 
      zlib_windowsize: Integer Minimum: 8 Maximum: 15

tune_ssl_default_dh_param

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_ssl_default_dh_param: Integer

uid

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    uid: Integer

ulimit_n

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ulimit_n: Integer

unsetenv

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    unsetenv: String

user

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    user: String # Allowed pattern: ^[^\s]+$

waf-body-limit

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf-body-limit: Integer

waf-json-levels

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf-json-levels: Integer

waf-load

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf-load: String

waf_analyzer_cache

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf_analyzer_cache: Integer

waf_log_host_header_len

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf_log_host_header_len: Integer

waf_update

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf_update: 
      delay: Integer 
      dontlog_normal: Boolean
      id: String 
      log: Boolean
      modified: Boolean
      retries: Integer 
      server_params: 
        agent-addr: String # Allowed pattern: ^[^\s]+$
        agent-check: String # Allowed values are enabled, disabled
        agent-inter: Integer 
        agent-port: Integer Minimum: 1 Maximum: 65535 
        agent-send: String 
        allow_0rtt: Boolean
        alpn: String # Allowed pattern: ^[^\s]+$
        backup: String # Allowed values are enabled, disabled
        check: String # Allowed values are enabled, disabled
        check-send-proxy: String # Allowed values are enabled, disabled
        check-sni: String # Allowed pattern: ^[^\s]+$
        check-ssl: String # Allowed values are enabled, disabled
        check_alpn: String # Allowed pattern: ^[^\s]+$
        check_proto: String # Allowed pattern: ^[^\s]+$
        check_via_socks4: String # Allowed values are enabled, disabled
        ciphers: String 
        ciphersuites: String 
        client_sigalgs: String 
        cookie: String # Allowed pattern: ^[^\s]+$
        crl_file: String 
        curves: String 
        downinter: Integer 
        error_limit: Integer 
        fall: Integer 
        fastinter: Integer 
        force_sslv3: String # Allowed values are enabled, disabled
        force_tlsv10: String # Allowed values are enabled, disabled
        force_tlsv11: String # Allowed values are enabled, disabled
        force_tlsv12: String # Allowed values are enabled, disabled
        force_tlsv13: String # Allowed values are enabled, disabled
        health_check_address: String # Allowed pattern: ^[^\s]+$
        health_check_port: Integer Minimum: 1 Maximum: 65535 
        init-addr: String # Allowed pattern: ^[^\s]+$
        inter: Integer 
        log-bufsize: Integer 
        log_proto: String # Allowed values are legacy, octet-count
        maintenance: String # Allowed values are enabled, disabled
        max_reuse: Integer 
        maxconn: Integer 
        maxqueue: Integer 
        minconn: Integer 
        namespace: String 
        no_sslv3: String # Allowed values are enabled, disabled
        no_tlsv10: String # Allowed values are enabled, disabled
        no_tlsv11: String # Allowed values are enabled, disabled
        no_tlsv12: String # Allowed values are enabled, disabled
        no_tlsv13: String # Allowed values are enabled, disabled
        no_verifyhost: String # Allowed values are enabled, disabled
        npn: String 
        observe: String # Allowed values are layer4, layer7
        on-error: String # Allowed values are fastinter, fail-check, sudden-death, mark-down
        on-marked-down: String # Allowed values are shutdown-sessions
        on-marked-up: String # Allowed values are shutdown-backup-sessions
        pool_low_conn: Integer 
        pool_max_conn: Integer 
        pool_purge_delay: Integer 
        proto: String # Allowed pattern: ^[^\s]+$
        proxy-v2-options: Array of String 
        redir: String 
        resolve-net: String # Allowed pattern: ^([A-Za-z0-9.:/]+)(,[A-Za-z0-9.:/]+)*$
        resolve-prefer: String # Allowed values are ipv4, ipv6
        resolve_opts: String # Allowed pattern: ^(allow-dup-ip|ignore-weight|prevent-dup-ip)(,(allow-dup-ip|ignore-weight|prevent-dup-ip))*$
        resolvers: String # Allowed pattern: ^[^\s]+$
        rise: Integer 
        send-proxy: String # Allowed values are enabled, disabled
        send-proxy-v2: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl_cn: String # Allowed values are enabled, disabled
        set-proxy-v2-tlv-fmt: 
        id: String 
        value: String 
        shard: Integer 
        sigalgs: String 
        slowstart: Integer 
        sni: String # Allowed pattern: ^[^\s]+$
        socks4: String # Allowed pattern: ^[^\s]+$
        source: String 
        ssl: String # Allowed values are enabled, disabled
        ssl_cafile: String # Allowed pattern: ^[^\s]+$
        ssl_certificate: String # Allowed pattern: ^[^\s]+$
        ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_reuse: String # Allowed values are enabled, disabled
        stick: String # Allowed values are enabled, disabled
        tcp_ut: Integer 
        tfo: String # Allowed values are enabled, disabled
        tls_tickets: String # Allowed values are enabled, disabled
        track: String 
        verify: String # Allowed values are none, required
        verifyhost: String 
        weight: Integer 
        ws: String # Allowed values are auto, h1, h2
      source: 
        address: String # Allowed pattern: ^[^\s]+$
        port: Integer Minimum: 1 Maximum: 65535 
      timeout: Integer 
      url: String # Allowed pattern: ^[^\s]+$
      xmodified: Boolean

wurfl_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    wurfl_options: 
      cache_size: Integer 
      data_file: String 
      information_list: String 
      information_list_separator: String 
      patch_file: String

zero_warning

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    zero_warning: Boolean

Log Targets

CRD version: 3.2
API version: ingress.v1.haproxy.com/v1

address

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - address: String # Allowed pattern: ^[^\s]+$

facility

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - facility: String # Allowed values are kern, user, mail, daemon, auth, syslog, lpr, news, uucp, cron, auth2, ftp, ntp, audit, alert, cron2, local0, local1, local2, local3, local4, local5, local6, local7

format

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - format: String # Allowed values are local, rfc3164, rfc5424, priority, short, timed, iso, raw

global

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - global: Boolean

index

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - index: Integer

length

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - length: Integer

level

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - level: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

minlevel

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - minlevel: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

nolog

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - nolog: Boolean

sample_range

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - sample_range: String

sample_size

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - sample_size: Integer

Properties

CRD version: 3.2
API version: ingress.v3.haproxy.com/v3

botmanagement_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    botmanagement_options: 
      auto_enable: Boolean
      data_file: String 
      update: 
        delay: Integer 
        dontlog_normal: Boolean
        log: Boolean
        modified: Boolean
        retries: Integer 
        server_params: 
        agent-addr: String # Allowed pattern: ^[^\s]+$
        agent-check: String # Allowed values are enabled, disabled
        agent-inter: Integer Minimum: 0 
        agent-port: Integer Minimum: 1 Maximum: 65535 
        agent-send: String 
        allow_0rtt: Boolean
        alpn: String # Allowed pattern: ^[^\s]+$
        backup: String # Allowed values are enabled, disabled
        check: String # Allowed values are enabled, disabled
        check-pool-conn-name: String # Allowed pattern: ^[^\s]+$
        check-reuse-pool: String # Allowed values are enabled, disabled
        check-send-proxy: String # Allowed values are enabled, disabled
        check-sni: String # Allowed pattern: ^[^\s]+$
        check-ssl: String # Allowed values are enabled, disabled
        check_alpn: String # Allowed pattern: ^[^\s]+$
        check_proto: String # Allowed pattern: ^[^\s]+$
        check_via_socks4: String # Allowed values are enabled, disabled
        ciphers: String 
        ciphersuites: String 
        client_sigalgs: String 
        cookie: String # Allowed pattern: ^[^\s]+$
        crl_file: String 
        curves: String 
        downinter: Integer Minimum: 0 
        error_limit: Integer 
        fall: Integer 
        fastinter: Integer Minimum: 0 
        force_sslv3: String # Allowed values are enabled, disabled
        force_tlsv10: String # Allowed values are enabled, disabled
        force_tlsv11: String # Allowed values are enabled, disabled
        force_tlsv12: String # Allowed values are enabled, disabled
        force_tlsv13: String # Allowed values are enabled, disabled
        guid: String # Allowed pattern: ^[A-Za-z0-9-_.:]+$
        hash_key: String # Allowed pattern: ^[^\s]+$
        health_check_address: String # Allowed pattern: ^[^\s]+$
        health_check_port: Integer Minimum: 1 Maximum: 65535 
        idle_ping: Integer Minimum: 0 
        init-addr: String # Allowed pattern: ^[^\s]+$
        init-state: String # Allowed values are fully-up, up, down, fully-down
        inter: Integer Minimum: 0 
        log-bufsize: Integer 
        log_proto: String # Allowed values are legacy, octet-count
        maintenance: String # Allowed values are enabled, disabled
        max_reuse: Integer 
        maxconn: Integer 
        maxqueue: Integer 
        minconn: Integer 
        namespace: String 
        no_sslv3: String # Allowed values are enabled, disabled
        no_tlsv10: String # Allowed values are enabled, disabled
        no_tlsv11: String # Allowed values are enabled, disabled
        no_tlsv12: String # Allowed values are enabled, disabled
        no_tlsv13: String # Allowed values are enabled, disabled
        no_verifyhost: String # Allowed values are enabled, disabled
        npn: String 
        observe: String # Allowed values are layer4, layer7
        on-error: String # Allowed values are fastinter, fail-check, sudden-death, mark-down
        on-marked-down: String # Allowed values are shutdown-sessions
        on-marked-up: String # Allowed values are shutdown-backup-sessions
        pool_conn_name: String # Allowed pattern: ^[^\s]+$
        pool_low_conn: Integer 
        pool_max_conn: Integer 
        pool_purge_delay: Integer Minimum: 0 
        proto: String # Allowed pattern: ^[^\s]+$
        proxy-v2-options: Array of String 
        redir: String 
        resolve-net: String # Allowed pattern: ^([A-Za-z0-9.:/]+)(,[A-Za-z0-9.:/]+)*$
        resolve-prefer: String # Allowed values are ipv4, ipv6
        resolve_opts: String # Allowed pattern: ^(allow-dup-ip|ignore-weight|prevent-dup-ip)(,(allow-dup-ip|ignore-weight|prevent-dup-ip))*$
        resolvers: String # Allowed pattern: ^[^\s]+$
        rise: Integer 
        send-proxy: String # Allowed values are enabled, disabled
        send-proxy-v2: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl_cn: String # Allowed values are enabled, disabled
        set-proxy-v2-tlv-fmt: 
        id: String 
        value: String 
        shard: Integer 
        sigalgs: String 
        slowstart: Integer Minimum: 0 
        sni: String # Allowed pattern: ^[^\s]+$
        socks4: String # Allowed pattern: ^[^\s]+$
        source: String 
        ssl: String # Allowed values are enabled, disabled
        ssl_cafile: String # Allowed pattern: ^[^\s]+$
        ssl_certificate: String # Allowed pattern: ^[^\s]+$
        ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_reuse: String # Allowed values are enabled, disabled
        sslv3: String # Allowed values are enabled, disabled
        stick: String # Allowed values are enabled, disabled
        strict-maxconn: Boolean
        tcp_ut: Integer Minimum: 0 
        tfo: String # Allowed values are enabled, disabled
        tls_tickets: String # Allowed values are enabled, disabled
        tlsv10: String # Allowed values are enabled, disabled
        tlsv11: String # Allowed values are enabled, disabled
        tlsv12: String # Allowed values are enabled, disabled
        tlsv13: String # Allowed values are enabled, disabled
        track: String 
        verify: String # Allowed values are none, required
        verifyhost: String 
        weight: Integer 
        ws: String # Allowed values are auto, h1, h2
        timeout: Integer 
        url: String # Allowed pattern: ^[^\s]+$
        xmodified: Boolean

chroot

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    chroot: String # Allowed pattern: ^[^\s]+$

close_spread_time

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    close_spread_time: Integer Minimum: 0

cluster_secret

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    cluster_secret: String

cook_chal.set_cookie_attributes

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    cook_chal.set_cookie_attributes: String

cpu_maps

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    cpu_maps: 
        - cpu_set: String 
          process: String

cpu_policy

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    cpu_policy: String # Allowed values are none, efficiency, first-usable-node, group-by-2-ccx, group-by-2-clusters, group-by-3-ccx, group-by-3-clusters, group-by-4-ccx, group-by-4-cluster, group-by-ccx, group-by-cluster, performance, resource

cpu_set

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    cpu_set: 
        - directive: String # Allowed values are reset, drop-cpu, only-cpu, drop-node, only-node, drop-cluster, only-cluster, drop-core, only-core, drop-thread, only-thread
          set: String

daemon

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    daemon: Boolean

debug_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    debug_options: 
      anonkey: Integer Minimum: 0 Maximum: 4294967295 
      quiet: Boolean
      stress_level: Integer Minimum: 0 Maximum: 9 
      zero_warning: Boolean

default_path

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    default_path: 
      path: String # Allowed pattern: ^[^\s]+$
      type: String # Allowed values are current, config, parent, origin

description

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    description: String

device_atlas_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    device_atlas_options: 
      cache_size: Integer 
      json_file: String 
      log_level: String 
      properties_cookie: String 
      separator: String

dns_accept_family

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    dns_accept_family: String # Allowed pattern: ^[^\s]+$

environment_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    environment_options: 
      presetenv: 
        - name: String 
          value: String 
      resetenv: String 
      setenv: 
        - name: String 
          value: String 
      unsetenv: String

expose_deprecated_directives

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    expose_deprecated_directives: Boolean

expose_experimental_directives

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    expose_experimental_directives: Boolean

external_check

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    external_check: Boolean

fifty_one_degrees_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    fifty_one_degrees_options: 
      cache_size: Integer 
      data_file: String 
      property_name_list: String 
      property_separator: String

fingerprint_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    fingerprint_options: 
      ssl_bufsize: Integer

force_cfg_parser_pause

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    force_cfg_parser_pause: Integer Minimum: 0

gid

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    gid: Integer

grace

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    grace: Integer Minimum: 0

group

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    group: String # Allowed pattern: ^[^\s]+$

h1_accept_payload_with_any_method

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    h1_accept_payload_with_any_method: Boolean

h1_case_adjust

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    h1_case_adjust: 
        - from: String 
          to: String

h1_case_adjust_file

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    h1_case_adjust_file: String

h1_do_not_close_on_insecure_transfer_encoding

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    h1_do_not_close_on_insecure_transfer_encoding: Boolean

h2_workaround_bogus_websocket_clients

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    h2_workaround_bogus_websocket_clients: Boolean

hard_stop_after

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    hard_stop_after: Integer Minimum: 0

harden

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    harden: 
      reject_privileged_ports: 
        quic: String # Allowed values are enabled, disabled
        tcp: String # Allowed values are enabled, disabled

http_client_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    http_client_options: 
      resolvers_disabled: String # Allowed values are enabled, disabled
      resolvers_id: String 
      resolvers_prefer: String # Allowed values are ipv4, ipv6
      retries: Integer 
      ssl_ca_file: String 
      ssl_verify: String # Allowed values are , none, required
      timeout_connect: Integer Minimum: 0

http_err_codes

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    http_err_codes: 
        - value: String # Allowed pattern: ^[a-zA-Z0-9 +\-,]+$

http_fail_codes

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    http_fail_codes: 
        - value: String # Allowed pattern: ^[a-zA-Z0-9 +\-,]+$

insecure_fork_wanted

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    insecure_fork_wanted: Boolean

insecure_setuid_wanted

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    insecure_setuid_wanted: Boolean

limited_quic

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    limited_quic: Boolean

localpeer

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    localpeer: String # Allowed pattern: ^[^\s]+$

log_send_hostname

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    log_send_hostname: 
      enabled: String # Allowed values are enabled, disabled
      param: String # Allowed pattern: ^[^\s]+$

log_target_list

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    log_target_list: 
        - address: String # Allowed pattern: ^[^\s]+$
          facility: String # Allowed values are kern, user, mail, daemon, auth, syslog, lpr, news, uucp, cron, auth2, ftp, ntp, audit, alert, cron2, local0, local1, local2, local3, local4, local5, local6, local7
          format: String # Allowed values are local, rfc3164, rfc5424, priority, short, timed, iso, raw
          global: Boolean
          length: Integer 
          level: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug
          minlevel: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug
          nolog: Boolean
          profile: String 
          sample_range: String 
          sample_size: Integer

lua_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    lua_options: 
      load_per_thread: String 
      loads: 
        - file: String # Allowed pattern: ^[^\s]+$
      prepend_path: 
        - path: String # Allowed pattern: ^[^\s]+$
          type: String # Allowed values are path, cpath

master-worker

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    master-worker: Boolean

maxmind_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    maxmind_options: 
      cache_size: Integer 
      debug: Boolean
      load: 
        maxmind_dbs: 
        - key: String 
          path: String 
        mlock_max: Integer 
      update: 
        checksum: Boolean
        delay: Integer 
        dontlog_normal: Boolean
        hash: Boolean
        log: Boolean
        maxmind_urls: 
        - key: String 
          url: String 
        retries: Integer 
        timeout: Integer

metadata

[]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    metadata:

modsecurity_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    modsecurity_options: 
      deny_blocking_io: Boolean
      max_cpu_action: String # Allowed values are deny, pass
      max_cpu_backoff_delay: String 
      max_cpu_backoff_retries: Integer 
      max_cpu_period: String 
      max_cpu_usage: Integer

module-loads

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    module-loads: 
        - value: String

module-path

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    module-path: String

mworker_max_reloads

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    mworker_max_reloads: Integer Minimum: 0

nbthread

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    nbthread: Integer

no_quic

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    no_quic: Boolean

node

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    node: String

numa_cpu_mapping

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    numa_cpu_mapping: String # Allowed values are enabled, disabled

ocsp_update_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    ocsp_update_options: 
      disable: Boolean
      httpproxy: 
        address: String # Allowed pattern: ^[^\s]+$
        port: Integer Minimum: 1 Maximum: 65535 
      maxdelay: Integer 
      mindelay: Integer 
      mode: String # Allowed values are enabled, disabled

performance_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    performance_options: 
      busy_polling: Boolean
      max_spread_checks: Integer Minimum: 0 
      maxcompcpuusage: Integer 
      maxcomprate: Integer 
      maxconn: Integer 
      maxconnrate: Integer 
      maxpipes: Integer 
      maxsessrate: Integer 
      maxzlibmem: Integer 
      noepoll: Boolean
      noevports: Boolean
      nogetaddrinfo: Boolean
      nokqueue: Boolean
      nopoll: Boolean
      noreuseport: Boolean
      nosplice: Boolean
      profiling_memory: String # Allowed values are enabled, disabled
      profiling_tasks: String # Allowed values are auto, enabled, disabled
      server_state_base: String # Allowed pattern: ^[^\s]+$
      server_state_file: String # Allowed pattern: ^[^\s]+$
      spread_checks: Integer 
      thread_hard_limit: Integer

pidfile

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    pidfile: String

pp2_never_send_local

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    pp2_never_send_local: Boolean

prealloc_fd

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    prealloc_fd: Boolean

runtime_apis

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    runtime_apis: 
        - accept_netscaler_cip: Integer 
          accept_proxy: Boolean
          address: String # Allowed pattern: ^[^\s]+$
          allow_0rtt: Boolean
          alpn: String # Allowed pattern: ^[^\s]+$
          backlog: String 
          ca_ignore_err: String 
          ca_sign_file: String 
          ca_sign_pass: String 
          ca_verify_file: String 
          ciphers: String 
          ciphersuites: String 
          client_sigalgs: String 
          crl_file: String 
          crt_ignore_err: String 
          crt_list: String 
          curves: String 
          default_crt_list: Array of String 
          defer_accept: Boolean
          ecdhe: String 
          expose_fd_listeners: Boolean
          force_sslv3: Boolean
          force_strict_sni: String # Allowed values are enabled, disabled
          force_tlsv10: Boolean
          force_tlsv11: Boolean
          force_tlsv12: Boolean
          force_tlsv13: Boolean
          generate_certificates: Boolean
          gid: Integer 
          group: String 
          guid_prefix: String # Allowed pattern: ^[A-Za-z0-9-_.:]+$
          id: String 
          idle_ping: Integer Minimum: 0 
          interface: String 
          level: String # Allowed values are user, operator, admin
          maxconn: Integer 
          mode: String 
          mss: String 
          name: String # Allowed pattern: ^[^\s]+$
          namespace: String 
          nbconn: Integer 
          nice: Integer 
          no_alpn: Boolean
          no_ca_names: Boolean
          no_sslv3: Boolean
          no_strict_sni: Boolean
          no_tls_tickets: Boolean
          no_tlsv10: Boolean
          no_tlsv11: Boolean
          no_tlsv12: Boolean
          no_tlsv13: Boolean
          npn: String 
          prefer_client_ciphers: Boolean
          proto: String 
          quic-cc-algo: String # Allowed values are cubic, newreno, bbr, nocc
          quic-force-retry: Boolean
          quic-socket: String # Allowed values are connection, listener
          quic_cc_algo_burst_size: Integer Minimum: 0 Maximum: 1024 
          quic_cc_algo_max_window: Integer Minimum: 10 Maximum: 4194304 
          severity_output: String # Allowed values are none, number, string
          sigalgs: String 
          ssl: Boolean
          ssl_cafile: String # Allowed pattern: ^[^\s]+$
          ssl_certificate: String # Allowed pattern: ^[^\s]+$
          ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
          ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
          sslv3: String # Allowed values are enabled, disabled
          strict_sni: Boolean
          tcp_user_timeout: Integer 
          tfo: Boolean
          thread: String 
          tls_ticket_keys: String 
          tls_tickets: String # Allowed values are enabled, disabled
          tlsv10: String # Allowed values are enabled, disabled
          tlsv11: String # Allowed values are enabled, disabled
          tlsv12: String # Allowed values are enabled, disabled
          tlsv13: String # Allowed values are enabled, disabled
          transparent: Boolean
          uid: String 
          user: String 
          v4v6: Boolean
          v6only: Boolean
          verify: String # Allowed values are none, optional, required

saml_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    saml_options: 
      saml_sso_load: 
        configuration_directory: String 
        ini_file: String

set_dumpable

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    set_dumpable: Boolean

set_var

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    set_var: 
        - expr: String 
          name: String

set_var_fmt

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    set_var_fmt: 
        - format: String 
          name: String

setcap

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    setcap: String # Allowed pattern: ^[^\s]+$

ssl_crl_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    ssl_crl_options: 
      add_crls: Boolean
      debug: Integer

ssl_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    ssl_options: 
      acme_scheduler: String # Allowed values are auto, off
      ca_base: String 
      crt_base: String 
      default_bind_ciphers: String 
      default_bind_ciphersuites: String 
      default_bind_client_sigalgs: String 
      default_bind_curves: String 
      default_bind_options: String 
      default_bind_sigalgs: String 
      default_server_ciphers: String 
      default_server_ciphersuites: String 
      default_server_client_sigalgs: String 
      default_server_curves: String 
      default_server_options: String 
      default_server_sigalgs: String 
      dh_param_file: String 
      engines: 
        - algorithms: String 
          name: String 
      issuers_chain_path: String 
      load_extra_files: String 
      maxsslconn: Integer 
      maxsslrate: Integer 
      mode_async: String # Allowed values are enabled, disabled
      propquery: String 
      provider: String 
      provider_path: String 
      security_level: Integer Minimum: 0 Maximum: 5 
      server_verify: String # Allowed values are none, required
      skip_self_issued_ca: Boolean

stats_file

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    stats_file: String

stats_maxconn

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    stats_maxconn: Integer

stats_timeout

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    stats_timeout: Integer Minimum: 0

strict_limits

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    strict_limits: Boolean

thread_group_lines

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    thread_group_lines: 
        - group: String 
          num_or_range: String

thread_groups

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    thread_groups: Integer

tune_buffer_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_buffer_options: 
      buffers_limit: Integer 
      buffers_reserve: Integer Minimum: 2 
      bufsize: Integer 
      bufsize_small: Integer Minimum: 1 
      pipesize: Integer 
      rcvbuf_backend: Integer 
      rcvbuf_client: Integer 
      rcvbuf_frontend: Integer 
      rcvbuf_server: Integer 
      recv_enough: Integer 
      sndbuf_backend: Integer 
      sndbuf_client: Integer 
      sndbuf_frontend: Integer 
      sndbuf_server: Integer

tune_lua_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_lua_options: 
      bool_sample_conversion: String # Allowed values are normal, pre-3.1-bug
      burst_timeout: Integer Minimum: 0 
      forced_yield: Integer 
      log_loggers: String # Allowed values are enabled, disabled
      log_stderr: String # Allowed values are auto, enabled, disabled
      maxmem: Integer 
      service_timeout: Integer Minimum: 0 
      session_timeout: Integer Minimum: 0 
      task_timeout: Integer Minimum: 0

tune_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_options: 
      applet_zero_copy_forwarding: String # Allowed values are enabled, disabled
      comp_maxlevel: Integer 
      disable_fast_forward: Boolean
      disable_zero_copy_forwarding: Boolean
      epoll_mask_events: Array of String 
      events_max_events_at_once: Integer Minimum: 1 Maximum: 10000 
      fail_alloc: Boolean
      fd_edge_triggered: String # Allowed values are enabled, disabled
      glitches_kill_cpu_usage: Integer Minimum: 0 Maximum: 100 
      h1_zero_copy_fwd_recv: String # Allowed values are enabled, disabled
      h1_zero_copy_fwd_send: String # Allowed values are enabled, disabled
      h2_be_glitches_threshold: Integer 
      h2_be_initial_window_size: Integer 
      h2_be_max_concurrent_streams: Integer 
      h2_be_rxbuf: Integer 
      h2_fe_glitches_threshold: Integer 
      h2_fe_initial_window_size: Integer 
      h2_fe_max_concurrent_streams: Integer 
      h2_fe_max_total_streams: Integer 
      h2_fe_rxbuf: Integer 
      h2_header_table_size: Integer Maximum: 65535 
      h2_initial_window_size: Integer 
      h2_max_concurrent_streams: Integer 
      h2_max_frame_size: Integer 
      h2_zero_copy_fwd_send: String # Allowed values are enabled, disabled
      http_cookielen: Integer 
      http_logurilen: Integer 
      http_maxhdr: Integer Minimum: 1 Maximum: 32767 
      idle_pool_shared: String # Allowed values are enabled, disabled
      idletimer: Integer Minimum: 0 Maximum: 65535 
      listener_default_shards: String # Allowed values are by-process, by-thread, by-group
      listener_multi_queue: String # Allowed values are enabled, disabled
      max_checks_per_thread: Integer 
      max_rules_at_once: Integer Minimum: 0 
      maxaccept: Integer 
      maxpollevents: Integer 
      maxrewrite: Integer 
      memory_hot_size: Integer 
      notsent_lowat_client: Integer 
      notsent_lowat_server: Integer 
      pattern_cache_size: Integer 
      peers_max_updates_at_once: Integer 
      pool_high_fd_ratio: Integer 
      pool_low_fd_ratio: Integer 
      pt_zero_copy_forwarding: String # Allowed values are enabled, disabled
      renice_runtime: Integer Minimum: -20 Maximum: 19 
      renice_startup: Integer Minimum: -20 Maximum: 19 
      ring_queues: Integer 
      runqueue_depth: Integer 
      sched_low_latency: String # Allowed values are enabled, disabled
      stick_counters: Integer 
      takeover_other_tg_connections: String # Allowed values are none, restricted, full

tune_quic_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_quic_options: 
      frontend_conn_tx_buffers_limit: Integer 
      frontend_max_idle_timeout: Integer Minimum: 0 
      frontend_max_streams_bidi: Integer 
      frontend_max_tx_memory: Integer 
      max_frame_loss: Integer 
      reorder_ratio: Integer Minimum: 0 Maximum: 100 
      retry_threshold: Integer 
      socket_owner: String # Allowed values are listener, connection
      zero_copy_fwd_send: String # Allowed values are enabled, disabled

tune_ssl_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_ssl_options: 
      cachesize: Integer 
      capture_buffer_size: Integer 
      ctx_cache_size: Integer 
      default_dh_param: Integer 
      force_private_cache: Boolean
      keylog: String # Allowed values are enabled, disabled
      lifetime: Integer Minimum: 0 
      maxrecord: Integer 
      ocsp_update_max_delay: Integer 
      ocsp_update_min_delay: Integer

tune_vars_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_vars_options: 
      global_max_size: Integer 
      proc_max_size: Integer 
      reqres_max_size: Integer 
      sess_max_size: Integer 
      txn_max_size: Integer

tune_zlib_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_zlib_options: 
      memlevel: Integer Minimum: 1 Maximum: 9 
      windowsize: Integer Minimum: 8 Maximum: 15

uid

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    uid: Integer

ulimit_n

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    ulimit_n: Integer

user

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    user: String # Allowed pattern: ^[^\s]+$

waf_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    waf_options: 
      analyzer_cache: Integer 
      body_limit: Integer 
      json_levels: Integer 
      load: String 
      log_host_header_len: Integer 
      update: 
        delay: Integer 
        dontlog_normal: Boolean
        id: String 
        log: Boolean
        modified: Boolean
        retries: Integer 
        server_params: 
        agent-addr: String # Allowed pattern: ^[^\s]+$
        agent-check: String # Allowed values are enabled, disabled
        agent-inter: Integer Minimum: 0 
        agent-port: Integer Minimum: 1 Maximum: 65535 
        agent-send: String 
        allow_0rtt: Boolean
        alpn: String # Allowed pattern: ^[^\s]+$
        backup: String # Allowed values are enabled, disabled
        check: String # Allowed values are enabled, disabled
        check-pool-conn-name: String # Allowed pattern: ^[^\s]+$
        check-reuse-pool: String # Allowed values are enabled, disabled
        check-send-proxy: String # Allowed values are enabled, disabled
        check-sni: String # Allowed pattern: ^[^\s]+$
        check-ssl: String # Allowed values are enabled, disabled
        check_alpn: String # Allowed pattern: ^[^\s]+$
        check_proto: String # Allowed pattern: ^[^\s]+$
        check_via_socks4: String # Allowed values are enabled, disabled
        ciphers: String 
        ciphersuites: String 
        client_sigalgs: String 
        cookie: String # Allowed pattern: ^[^\s]+$
        crl_file: String 
        curves: String 
        downinter: Integer Minimum: 0 
        error_limit: Integer 
        fall: Integer 
        fastinter: Integer Minimum: 0 
        force_sslv3: String # Allowed values are enabled, disabled
        force_tlsv10: String # Allowed values are enabled, disabled
        force_tlsv11: String # Allowed values are enabled, disabled
        force_tlsv12: String # Allowed values are enabled, disabled
        force_tlsv13: String # Allowed values are enabled, disabled
        guid: String # Allowed pattern: ^[A-Za-z0-9-_.:]+$
        hash_key: String # Allowed pattern: ^[^\s]+$
        health_check_address: String # Allowed pattern: ^[^\s]+$
        health_check_port: Integer Minimum: 1 Maximum: 65535 
        idle_ping: Integer Minimum: 0 
        init-addr: String # Allowed pattern: ^[^\s]+$
        init-state: String # Allowed values are fully-up, up, down, fully-down
        inter: Integer Minimum: 0 
        log-bufsize: Integer 
        log_proto: String # Allowed values are legacy, octet-count
        maintenance: String # Allowed values are enabled, disabled
        max_reuse: Integer 
        maxconn: Integer 
        maxqueue: Integer 
        minconn: Integer 
        namespace: String 
        no_sslv3: String # Allowed values are enabled, disabled
        no_tlsv10: String # Allowed values are enabled, disabled
        no_tlsv11: String # Allowed values are enabled, disabled
        no_tlsv12: String # Allowed values are enabled, disabled
        no_tlsv13: String # Allowed values are enabled, disabled
        no_verifyhost: String # Allowed values are enabled, disabled
        npn: String 
        observe: String # Allowed values are layer4, layer7
        on-error: String # Allowed values are fastinter, fail-check, sudden-death, mark-down
        on-marked-down: String # Allowed values are shutdown-sessions
        on-marked-up: String # Allowed values are shutdown-backup-sessions
        pool_conn_name: String # Allowed pattern: ^[^\s]+$
        pool_low_conn: Integer 
        pool_max_conn: Integer 
        pool_purge_delay: Integer Minimum: 0 
        proto: String # Allowed pattern: ^[^\s]+$
        proxy-v2-options: Array of String 
        redir: String 
        resolve-net: String # Allowed pattern: ^([A-Za-z0-9.:/]+)(,[A-Za-z0-9.:/]+)*$
        resolve-prefer: String # Allowed values are ipv4, ipv6
        resolve_opts: String # Allowed pattern: ^(allow-dup-ip|ignore-weight|prevent-dup-ip)(,(allow-dup-ip|ignore-weight|prevent-dup-ip))*$
        resolvers: String # Allowed pattern: ^[^\s]+$
        rise: Integer 
        send-proxy: String # Allowed values are enabled, disabled
        send-proxy-v2: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl_cn: String # Allowed values are enabled, disabled
        set-proxy-v2-tlv-fmt: 
        id: String 
        value: String 
        shard: Integer 
        sigalgs: String 
        slowstart: Integer Minimum: 0 
        sni: String # Allowed pattern: ^[^\s]+$
        socks4: String # Allowed pattern: ^[^\s]+$
        source: String 
        ssl: String # Allowed values are enabled, disabled
        ssl_cafile: String # Allowed pattern: ^[^\s]+$
        ssl_certificate: String # Allowed pattern: ^[^\s]+$
        ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_reuse: String # Allowed values are enabled, disabled
        sslv3: String # Allowed values are enabled, disabled
        stick: String # Allowed values are enabled, disabled
        strict-maxconn: Boolean
        tcp_ut: Integer Minimum: 0 
        tfo: String # Allowed values are enabled, disabled
        tls_tickets: String # Allowed values are enabled, disabled
        tlsv10: String # Allowed values are enabled, disabled
        tlsv11: String # Allowed values are enabled, disabled
        tlsv12: String # Allowed values are enabled, disabled
        tlsv13: String # Allowed values are enabled, disabled
        track: String 
        verify: String # Allowed values are none, required
        verifyhost: String 
        weight: Integer 
        ws: String # Allowed values are auto, h1, h2
        source: 
        address: String # Allowed pattern: ^[^\s]+$
        port: Integer Minimum: 1 Maximum: 65535 
        timeout: Integer 
        url: String # Allowed pattern: ^[^\s]+$
        xmodified: Boolean

warn_blocked_traffic_after

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    warn_blocked_traffic_after: Integer Minimum: 1

wurfl_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    wurfl_options: 
      cache_size: Integer 
      data_file: String 
      information_list: String 
      information_list_separator: String 
      patch_file: String

Properties

CRD version: 3.2
API version: ingress.v3.haproxy.com/v3

botmanagement_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    botmanagement_options: 
      auto_enable: Boolean
      data_file: String 
      update: 
        delay: Integer 
        dontlog_normal: Boolean
        log: Boolean
        modified: Boolean
        retries: Integer 
        server_params: 
        agent-addr: String # Allowed pattern: ^[^\s]+$
        agent-check: String # Allowed values are enabled, disabled
        agent-inter: Integer Minimum: 0 
        agent-port: Integer Minimum: 1 Maximum: 65535 
        agent-send: String 
        allow_0rtt: Boolean
        alpn: String # Allowed pattern: ^[^\s]+$
        backup: String # Allowed values are enabled, disabled
        check: String # Allowed values are enabled, disabled
        check-pool-conn-name: String # Allowed pattern: ^[^\s]+$
        check-reuse-pool: String # Allowed values are enabled, disabled
        check-send-proxy: String # Allowed values are enabled, disabled
        check-sni: String # Allowed pattern: ^[^\s]+$
        check-ssl: String # Allowed values are enabled, disabled
        check_alpn: String # Allowed pattern: ^[^\s]+$
        check_proto: String # Allowed pattern: ^[^\s]+$
        check_via_socks4: String # Allowed values are enabled, disabled
        ciphers: String 
        ciphersuites: String 
        client_sigalgs: String 
        cookie: String # Allowed pattern: ^[^\s]+$
        crl_file: String 
        curves: String 
        downinter: Integer Minimum: 0 
        error_limit: Integer 
        fall: Integer 
        fastinter: Integer Minimum: 0 
        force_sslv3: String # Allowed values are enabled, disabled
        force_tlsv10: String # Allowed values are enabled, disabled
        force_tlsv11: String # Allowed values are enabled, disabled
        force_tlsv12: String # Allowed values are enabled, disabled
        force_tlsv13: String # Allowed values are enabled, disabled
        guid: String # Allowed pattern: ^[A-Za-z0-9-_.:]+$
        hash_key: String # Allowed pattern: ^[^\s]+$
        health_check_address: String # Allowed pattern: ^[^\s]+$
        health_check_port: Integer Minimum: 1 Maximum: 65535 
        idle_ping: Integer Minimum: 0 
        init-addr: String # Allowed pattern: ^[^\s]+$
        init-state: String # Allowed values are fully-up, up, down, fully-down
        inter: Integer Minimum: 0 
        log-bufsize: Integer 
        log_proto: String # Allowed values are legacy, octet-count
        maintenance: String # Allowed values are enabled, disabled
        max_reuse: Integer 
        maxconn: Integer 
        maxqueue: Integer 
        minconn: Integer 
        namespace: String 
        no_sslv3: String # Allowed values are enabled, disabled
        no_tlsv10: String # Allowed values are enabled, disabled
        no_tlsv11: String # Allowed values are enabled, disabled
        no_tlsv12: String # Allowed values are enabled, disabled
        no_tlsv13: String # Allowed values are enabled, disabled
        no_verifyhost: String # Allowed values are enabled, disabled
        npn: String 
        observe: String # Allowed values are layer4, layer7
        on-error: String # Allowed values are fastinter, fail-check, sudden-death, mark-down
        on-marked-down: String # Allowed values are shutdown-sessions
        on-marked-up: String # Allowed values are shutdown-backup-sessions
        pool_conn_name: String # Allowed pattern: ^[^\s]+$
        pool_low_conn: Integer 
        pool_max_conn: Integer 
        pool_purge_delay: Integer Minimum: 0 
        proto: String # Allowed pattern: ^[^\s]+$
        proxy-v2-options: Array of String 
        redir: String 
        resolve-net: String # Allowed pattern: ^([A-Za-z0-9.:/]+)(,[A-Za-z0-9.:/]+)*$
        resolve-prefer: String # Allowed values are ipv4, ipv6
        resolve_opts: String # Allowed pattern: ^(allow-dup-ip|ignore-weight|prevent-dup-ip)(,(allow-dup-ip|ignore-weight|prevent-dup-ip))*$
        resolvers: String # Allowed pattern: ^[^\s]+$
        rise: Integer 
        send-proxy: String # Allowed values are enabled, disabled
        send-proxy-v2: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl_cn: String # Allowed values are enabled, disabled
        set-proxy-v2-tlv-fmt: 
        id: String 
        value: String 
        shard: Integer 
        sigalgs: String 
        slowstart: Integer Minimum: 0 
        sni: String # Allowed pattern: ^[^\s]+$
        socks4: String # Allowed pattern: ^[^\s]+$
        source: String 
        ssl: String # Allowed values are enabled, disabled
        ssl_cafile: String # Allowed pattern: ^[^\s]+$
        ssl_certificate: String # Allowed pattern: ^[^\s]+$
        ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_reuse: String # Allowed values are enabled, disabled
        sslv3: String # Allowed values are enabled, disabled
        stick: String # Allowed values are enabled, disabled
        strict-maxconn: Boolean
        tcp_ut: Integer Minimum: 0 
        tfo: String # Allowed values are enabled, disabled
        tls_tickets: String # Allowed values are enabled, disabled
        tlsv10: String # Allowed values are enabled, disabled
        tlsv11: String # Allowed values are enabled, disabled
        tlsv12: String # Allowed values are enabled, disabled
        tlsv13: String # Allowed values are enabled, disabled
        track: String 
        verify: String # Allowed values are none, required
        verifyhost: String 
        weight: Integer 
        ws: String # Allowed values are auto, h1, h2
        timeout: Integer 
        url: String # Allowed pattern: ^[^\s]+$
        xmodified: Boolean

chroot

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    chroot: String # Allowed pattern: ^[^\s]+$

close_spread_time

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    close_spread_time: Integer Minimum: 0

cluster_secret

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    cluster_secret: String

cook_chal.set_cookie_attributes

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    cook_chal.set_cookie_attributes: String

cpu_maps

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    cpu_maps: 
        - cpu_set: String 
          process: String

cpu_policy

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    cpu_policy: String # Allowed values are none, efficiency, first-usable-node, group-by-2-ccx, group-by-2-clusters, group-by-3-ccx, group-by-3-clusters, group-by-4-ccx, group-by-4-cluster, group-by-ccx, group-by-cluster, performance, resource

cpu_set

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    cpu_set: 
        - directive: String # Allowed values are reset, drop-cpu, only-cpu, drop-node, only-node, drop-cluster, only-cluster, drop-core, only-core, drop-thread, only-thread
          set: String

daemon

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    daemon: Boolean

debug_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    debug_options: 
      anonkey: Integer Minimum: 0 Maximum: 4294967295 
      quiet: Boolean
      stress_level: Integer Minimum: 0 Maximum: 9 
      zero_warning: Boolean

default_path

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    default_path: 
      path: String # Allowed pattern: ^[^\s]+$
      type: String # Allowed values are current, config, parent, origin

description

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    description: String

device_atlas_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    device_atlas_options: 
      cache_size: Integer 
      json_file: String 
      log_level: String 
      properties_cookie: String 
      separator: String

dns_accept_family

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    dns_accept_family: String # Allowed pattern: ^[^\s]+$

environment_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    environment_options: 
      presetenv: 
        - name: String 
          value: String 
      resetenv: String 
      setenv: 
        - name: String 
          value: String 
      unsetenv: String

expose_deprecated_directives

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    expose_deprecated_directives: Boolean

expose_experimental_directives

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    expose_experimental_directives: Boolean

external_check

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    external_check: Boolean

fifty_one_degrees_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    fifty_one_degrees_options: 
      cache_size: Integer 
      data_file: String 
      property_name_list: String 
      property_separator: String

fingerprint_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    fingerprint_options: 
      ssl_bufsize: Integer

force_cfg_parser_pause

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    force_cfg_parser_pause: Integer Minimum: 0

gid

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    gid: Integer

grace

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    grace: Integer Minimum: 0

group

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    group: String # Allowed pattern: ^[^\s]+$

h1_accept_payload_with_any_method

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    h1_accept_payload_with_any_method: Boolean

h1_case_adjust

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    h1_case_adjust: 
        - from: String 
          to: String

h1_case_adjust_file

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    h1_case_adjust_file: String

h1_do_not_close_on_insecure_transfer_encoding

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    h1_do_not_close_on_insecure_transfer_encoding: Boolean

h2_workaround_bogus_websocket_clients

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    h2_workaround_bogus_websocket_clients: Boolean

hard_stop_after

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    hard_stop_after: Integer Minimum: 0

harden

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    harden: 
      reject_privileged_ports: 
        quic: String # Allowed values are enabled, disabled
        tcp: String # Allowed values are enabled, disabled

http_client_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    http_client_options: 
      resolvers_disabled: String # Allowed values are enabled, disabled
      resolvers_id: String 
      resolvers_prefer: String # Allowed values are ipv4, ipv6
      retries: Integer 
      ssl_ca_file: String 
      ssl_verify: String # Allowed values are , none, required
      timeout_connect: Integer Minimum: 0

http_err_codes

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    http_err_codes: 
        - value: String # Allowed pattern: ^[a-zA-Z0-9 +\-,]+$

http_fail_codes

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    http_fail_codes: 
        - value: String # Allowed pattern: ^[a-zA-Z0-9 +\-,]+$

insecure_fork_wanted

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    insecure_fork_wanted: Boolean

insecure_setuid_wanted

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    insecure_setuid_wanted: Boolean

limited_quic

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    limited_quic: Boolean

localpeer

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    localpeer: String # Allowed pattern: ^[^\s]+$

log_send_hostname

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    log_send_hostname: 
      enabled: String # Allowed values are enabled, disabled
      param: String # Allowed pattern: ^[^\s]+$

log_target_list

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    log_target_list: 
        - address: String # Allowed pattern: ^[^\s]+$
          facility: String # Allowed values are kern, user, mail, daemon, auth, syslog, lpr, news, uucp, cron, auth2, ftp, ntp, audit, alert, cron2, local0, local1, local2, local3, local4, local5, local6, local7
          format: String # Allowed values are local, rfc3164, rfc5424, priority, short, timed, iso, raw
          global: Boolean
          length: Integer 
          level: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug
          minlevel: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug
          nolog: Boolean
          profile: String 
          sample_range: String 
          sample_size: Integer

lua_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    lua_options: 
      load_per_thread: String 
      loads: 
        - file: String # Allowed pattern: ^[^\s]+$
      prepend_path: 
        - path: String # Allowed pattern: ^[^\s]+$
          type: String # Allowed values are path, cpath

master-worker

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    master-worker: Boolean

maxmind_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    maxmind_options: 
      cache_size: Integer 
      debug: Boolean
      load: 
        maxmind_dbs: 
        - key: String 
          path: String 
        mlock_max: Integer 
      update: 
        checksum: Boolean
        delay: Integer 
        dontlog_normal: Boolean
        hash: Boolean
        log: Boolean
        maxmind_urls: 
        - key: String 
          url: String 
        retries: Integer 
        timeout: Integer

metadata

[]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    metadata:

modsecurity_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    modsecurity_options: 
      deny_blocking_io: Boolean
      max_cpu_action: String # Allowed values are deny, pass
      max_cpu_backoff_delay: String 
      max_cpu_backoff_retries: Integer 
      max_cpu_period: String 
      max_cpu_usage: Integer

module-loads

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    module-loads: 
        - value: String

module-path

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    module-path: String

mworker_max_reloads

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    mworker_max_reloads: Integer Minimum: 0

nbthread

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    nbthread: Integer

no_quic

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    no_quic: Boolean

node

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    node: String

numa_cpu_mapping

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    numa_cpu_mapping: String # Allowed values are enabled, disabled

ocsp_update_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    ocsp_update_options: 
      disable: Boolean
      httpproxy: 
        address: String # Allowed pattern: ^[^\s]+$
        port: Integer Minimum: 1 Maximum: 65535 
      maxdelay: Integer 
      mindelay: Integer 
      mode: String # Allowed values are enabled, disabled

performance_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    performance_options: 
      busy_polling: Boolean
      max_spread_checks: Integer Minimum: 0 
      maxcompcpuusage: Integer 
      maxcomprate: Integer 
      maxconn: Integer 
      maxconnrate: Integer 
      maxpipes: Integer 
      maxsessrate: Integer 
      maxzlibmem: Integer 
      noepoll: Boolean
      noevports: Boolean
      nogetaddrinfo: Boolean
      nokqueue: Boolean
      nopoll: Boolean
      noreuseport: Boolean
      nosplice: Boolean
      profiling_memory: String # Allowed values are enabled, disabled
      profiling_tasks: String # Allowed values are auto, enabled, disabled
      server_state_base: String # Allowed pattern: ^[^\s]+$
      server_state_file: String # Allowed pattern: ^[^\s]+$
      spread_checks: Integer 
      thread_hard_limit: Integer

pidfile

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    pidfile: String

pp2_never_send_local

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    pp2_never_send_local: Boolean

prealloc_fd

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    prealloc_fd: Boolean

runtime_apis

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    runtime_apis: 
        - accept_netscaler_cip: Integer 
          accept_proxy: Boolean
          address: String # Allowed pattern: ^[^\s]+$
          allow_0rtt: Boolean
          alpn: String # Allowed pattern: ^[^\s]+$
          backlog: String 
          ca_ignore_err: String 
          ca_sign_file: String 
          ca_sign_pass: String 
          ca_verify_file: String 
          ciphers: String 
          ciphersuites: String 
          client_sigalgs: String 
          crl_file: String 
          crt_ignore_err: String 
          crt_list: String 
          curves: String 
          default_crt_list: Array of String 
          defer_accept: Boolean
          ecdhe: String 
          expose_fd_listeners: Boolean
          force_sslv3: Boolean
          force_strict_sni: String # Allowed values are enabled, disabled
          force_tlsv10: Boolean
          force_tlsv11: Boolean
          force_tlsv12: Boolean
          force_tlsv13: Boolean
          generate_certificates: Boolean
          gid: Integer 
          group: String 
          guid_prefix: String # Allowed pattern: ^[A-Za-z0-9-_.:]+$
          id: String 
          idle_ping: Integer Minimum: 0 
          interface: String 
          level: String # Allowed values are user, operator, admin
          maxconn: Integer 
          mode: String 
          mss: String 
          name: String # Allowed pattern: ^[^\s]+$
          namespace: String 
          nbconn: Integer 
          nice: Integer 
          no_alpn: Boolean
          no_ca_names: Boolean
          no_sslv3: Boolean
          no_strict_sni: Boolean
          no_tls_tickets: Boolean
          no_tlsv10: Boolean
          no_tlsv11: Boolean
          no_tlsv12: Boolean
          no_tlsv13: Boolean
          npn: String 
          prefer_client_ciphers: Boolean
          proto: String 
          quic-cc-algo: String # Allowed values are cubic, newreno, bbr, nocc
          quic-force-retry: Boolean
          quic-socket: String # Allowed values are connection, listener
          quic_cc_algo_burst_size: Integer Minimum: 0 Maximum: 1024 
          quic_cc_algo_max_window: Integer Minimum: 10 Maximum: 4194304 
          severity_output: String # Allowed values are none, number, string
          sigalgs: String 
          ssl: Boolean
          ssl_cafile: String # Allowed pattern: ^[^\s]+$
          ssl_certificate: String # Allowed pattern: ^[^\s]+$
          ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
          ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
          sslv3: String # Allowed values are enabled, disabled
          strict_sni: Boolean
          tcp_user_timeout: Integer 
          tfo: Boolean
          thread: String 
          tls_ticket_keys: String 
          tls_tickets: String # Allowed values are enabled, disabled
          tlsv10: String # Allowed values are enabled, disabled
          tlsv11: String # Allowed values are enabled, disabled
          tlsv12: String # Allowed values are enabled, disabled
          tlsv13: String # Allowed values are enabled, disabled
          transparent: Boolean
          uid: String 
          user: String 
          v4v6: Boolean
          v6only: Boolean
          verify: String # Allowed values are none, optional, required

saml_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    saml_options: 
      saml_sso_load: 
        configuration_directory: String 
        ini_file: String

set_dumpable

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    set_dumpable: Boolean

set_var

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    set_var: 
        - expr: String 
          name: String

set_var_fmt

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    set_var_fmt: 
        - format: String 
          name: String

setcap

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    setcap: String # Allowed pattern: ^[^\s]+$

ssl_crl_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    ssl_crl_options: 
      add_crls: Boolean
      debug: Integer

ssl_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    ssl_options: 
      acme_scheduler: String # Allowed values are auto, off
      ca_base: String 
      crt_base: String 
      default_bind_ciphers: String 
      default_bind_ciphersuites: String 
      default_bind_client_sigalgs: String 
      default_bind_curves: String 
      default_bind_options: String 
      default_bind_sigalgs: String 
      default_server_ciphers: String 
      default_server_ciphersuites: String 
      default_server_client_sigalgs: String 
      default_server_curves: String 
      default_server_options: String 
      default_server_sigalgs: String 
      dh_param_file: String 
      engines: 
        - algorithms: String 
          name: String 
      issuers_chain_path: String 
      load_extra_files: String 
      maxsslconn: Integer 
      maxsslrate: Integer 
      mode_async: String # Allowed values are enabled, disabled
      propquery: String 
      provider: String 
      provider_path: String 
      security_level: Integer Minimum: 0 Maximum: 5 
      server_verify: String # Allowed values are none, required
      skip_self_issued_ca: Boolean

stats_file

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    stats_file: String

stats_maxconn

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    stats_maxconn: Integer

stats_timeout

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    stats_timeout: Integer Minimum: 0

strict_limits

[boolean]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    strict_limits: Boolean

thread_group_lines

[array]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    thread_group_lines: 
        - group: String 
          num_or_range: String

thread_groups

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    thread_groups: Integer

tune_buffer_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_buffer_options: 
      buffers_limit: Integer 
      buffers_reserve: Integer Minimum: 2 
      bufsize: Integer 
      bufsize_small: Integer Minimum: 1 
      pipesize: Integer 
      rcvbuf_backend: Integer 
      rcvbuf_client: Integer 
      rcvbuf_frontend: Integer 
      rcvbuf_server: Integer 
      recv_enough: Integer 
      sndbuf_backend: Integer 
      sndbuf_client: Integer 
      sndbuf_frontend: Integer 
      sndbuf_server: Integer

tune_lua_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_lua_options: 
      bool_sample_conversion: String # Allowed values are normal, pre-3.1-bug
      burst_timeout: Integer Minimum: 0 
      forced_yield: Integer 
      log_loggers: String # Allowed values are enabled, disabled
      log_stderr: String # Allowed values are auto, enabled, disabled
      maxmem: Integer 
      service_timeout: Integer Minimum: 0 
      session_timeout: Integer Minimum: 0 
      task_timeout: Integer Minimum: 0

tune_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_options: 
      applet_zero_copy_forwarding: String # Allowed values are enabled, disabled
      comp_maxlevel: Integer 
      disable_fast_forward: Boolean
      disable_zero_copy_forwarding: Boolean
      epoll_mask_events: Array of String 
      events_max_events_at_once: Integer Minimum: 1 Maximum: 10000 
      fail_alloc: Boolean
      fd_edge_triggered: String # Allowed values are enabled, disabled
      glitches_kill_cpu_usage: Integer Minimum: 0 Maximum: 100 
      h1_zero_copy_fwd_recv: String # Allowed values are enabled, disabled
      h1_zero_copy_fwd_send: String # Allowed values are enabled, disabled
      h2_be_glitches_threshold: Integer 
      h2_be_initial_window_size: Integer 
      h2_be_max_concurrent_streams: Integer 
      h2_be_rxbuf: Integer 
      h2_fe_glitches_threshold: Integer 
      h2_fe_initial_window_size: Integer 
      h2_fe_max_concurrent_streams: Integer 
      h2_fe_max_total_streams: Integer 
      h2_fe_rxbuf: Integer 
      h2_header_table_size: Integer Maximum: 65535 
      h2_initial_window_size: Integer 
      h2_max_concurrent_streams: Integer 
      h2_max_frame_size: Integer 
      h2_zero_copy_fwd_send: String # Allowed values are enabled, disabled
      http_cookielen: Integer 
      http_logurilen: Integer 
      http_maxhdr: Integer Minimum: 1 Maximum: 32767 
      idle_pool_shared: String # Allowed values are enabled, disabled
      idletimer: Integer Minimum: 0 Maximum: 65535 
      listener_default_shards: String # Allowed values are by-process, by-thread, by-group
      listener_multi_queue: String # Allowed values are enabled, disabled
      max_checks_per_thread: Integer 
      max_rules_at_once: Integer Minimum: 0 
      maxaccept: Integer 
      maxpollevents: Integer 
      maxrewrite: Integer 
      memory_hot_size: Integer 
      notsent_lowat_client: Integer 
      notsent_lowat_server: Integer 
      pattern_cache_size: Integer 
      peers_max_updates_at_once: Integer 
      pool_high_fd_ratio: Integer 
      pool_low_fd_ratio: Integer 
      pt_zero_copy_forwarding: String # Allowed values are enabled, disabled
      renice_runtime: Integer Minimum: -20 Maximum: 19 
      renice_startup: Integer Minimum: -20 Maximum: 19 
      ring_queues: Integer 
      runqueue_depth: Integer 
      sched_low_latency: String # Allowed values are enabled, disabled
      stick_counters: Integer 
      takeover_other_tg_connections: String # Allowed values are none, restricted, full

tune_quic_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_quic_options: 
      frontend_conn_tx_buffers_limit: Integer 
      frontend_max_idle_timeout: Integer Minimum: 0 
      frontend_max_streams_bidi: Integer 
      frontend_max_tx_memory: Integer 
      max_frame_loss: Integer 
      reorder_ratio: Integer Minimum: 0 Maximum: 100 
      retry_threshold: Integer 
      socket_owner: String # Allowed values are listener, connection
      zero_copy_fwd_send: String # Allowed values are enabled, disabled

tune_ssl_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_ssl_options: 
      cachesize: Integer 
      capture_buffer_size: Integer 
      ctx_cache_size: Integer 
      default_dh_param: Integer 
      force_private_cache: Boolean
      keylog: String # Allowed values are enabled, disabled
      lifetime: Integer Minimum: 0 
      maxrecord: Integer 
      ocsp_update_max_delay: Integer 
      ocsp_update_min_delay: Integer

tune_vars_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_vars_options: 
      global_max_size: Integer 
      proc_max_size: Integer 
      reqres_max_size: Integer 
      sess_max_size: Integer 
      txn_max_size: Integer

tune_zlib_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    tune_zlib_options: 
      memlevel: Integer Minimum: 1 Maximum: 9 
      windowsize: Integer Minimum: 8 Maximum: 15

uid

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    uid: Integer

ulimit_n

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    ulimit_n: Integer

user

[string]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    user: String # Allowed pattern: ^[^\s]+$

waf_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    waf_options: 
      analyzer_cache: Integer 
      body_limit: Integer 
      json_levels: Integer 
      load: String 
      log_host_header_len: Integer 
      update: 
        delay: Integer 
        dontlog_normal: Boolean
        id: String 
        log: Boolean
        modified: Boolean
        retries: Integer 
        server_params: 
        agent-addr: String # Allowed pattern: ^[^\s]+$
        agent-check: String # Allowed values are enabled, disabled
        agent-inter: Integer Minimum: 0 
        agent-port: Integer Minimum: 1 Maximum: 65535 
        agent-send: String 
        allow_0rtt: Boolean
        alpn: String # Allowed pattern: ^[^\s]+$
        backup: String # Allowed values are enabled, disabled
        check: String # Allowed values are enabled, disabled
        check-pool-conn-name: String # Allowed pattern: ^[^\s]+$
        check-reuse-pool: String # Allowed values are enabled, disabled
        check-send-proxy: String # Allowed values are enabled, disabled
        check-sni: String # Allowed pattern: ^[^\s]+$
        check-ssl: String # Allowed values are enabled, disabled
        check_alpn: String # Allowed pattern: ^[^\s]+$
        check_proto: String # Allowed pattern: ^[^\s]+$
        check_via_socks4: String # Allowed values are enabled, disabled
        ciphers: String 
        ciphersuites: String 
        client_sigalgs: String 
        cookie: String # Allowed pattern: ^[^\s]+$
        crl_file: String 
        curves: String 
        downinter: Integer Minimum: 0 
        error_limit: Integer 
        fall: Integer 
        fastinter: Integer Minimum: 0 
        force_sslv3: String # Allowed values are enabled, disabled
        force_tlsv10: String # Allowed values are enabled, disabled
        force_tlsv11: String # Allowed values are enabled, disabled
        force_tlsv12: String # Allowed values are enabled, disabled
        force_tlsv13: String # Allowed values are enabled, disabled
        guid: String # Allowed pattern: ^[A-Za-z0-9-_.:]+$
        hash_key: String # Allowed pattern: ^[^\s]+$
        health_check_address: String # Allowed pattern: ^[^\s]+$
        health_check_port: Integer Minimum: 1 Maximum: 65535 
        idle_ping: Integer Minimum: 0 
        init-addr: String # Allowed pattern: ^[^\s]+$
        init-state: String # Allowed values are fully-up, up, down, fully-down
        inter: Integer Minimum: 0 
        log-bufsize: Integer 
        log_proto: String # Allowed values are legacy, octet-count
        maintenance: String # Allowed values are enabled, disabled
        max_reuse: Integer 
        maxconn: Integer 
        maxqueue: Integer 
        minconn: Integer 
        namespace: String 
        no_sslv3: String # Allowed values are enabled, disabled
        no_tlsv10: String # Allowed values are enabled, disabled
        no_tlsv11: String # Allowed values are enabled, disabled
        no_tlsv12: String # Allowed values are enabled, disabled
        no_tlsv13: String # Allowed values are enabled, disabled
        no_verifyhost: String # Allowed values are enabled, disabled
        npn: String 
        observe: String # Allowed values are layer4, layer7
        on-error: String # Allowed values are fastinter, fail-check, sudden-death, mark-down
        on-marked-down: String # Allowed values are shutdown-sessions
        on-marked-up: String # Allowed values are shutdown-backup-sessions
        pool_conn_name: String # Allowed pattern: ^[^\s]+$
        pool_low_conn: Integer 
        pool_max_conn: Integer 
        pool_purge_delay: Integer Minimum: 0 
        proto: String # Allowed pattern: ^[^\s]+$
        proxy-v2-options: Array of String 
        redir: String 
        resolve-net: String # Allowed pattern: ^([A-Za-z0-9.:/]+)(,[A-Za-z0-9.:/]+)*$
        resolve-prefer: String # Allowed values are ipv4, ipv6
        resolve_opts: String # Allowed pattern: ^(allow-dup-ip|ignore-weight|prevent-dup-ip)(,(allow-dup-ip|ignore-weight|prevent-dup-ip))*$
        resolvers: String # Allowed pattern: ^[^\s]+$
        rise: Integer 
        send-proxy: String # Allowed values are enabled, disabled
        send-proxy-v2: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl_cn: String # Allowed values are enabled, disabled
        set-proxy-v2-tlv-fmt: 
        id: String 
        value: String 
        shard: Integer 
        sigalgs: String 
        slowstart: Integer Minimum: 0 
        sni: String # Allowed pattern: ^[^\s]+$
        socks4: String # Allowed pattern: ^[^\s]+$
        source: String 
        ssl: String # Allowed values are enabled, disabled
        ssl_cafile: String # Allowed pattern: ^[^\s]+$
        ssl_certificate: String # Allowed pattern: ^[^\s]+$
        ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_reuse: String # Allowed values are enabled, disabled
        sslv3: String # Allowed values are enabled, disabled
        stick: String # Allowed values are enabled, disabled
        strict-maxconn: Boolean
        tcp_ut: Integer Minimum: 0 
        tfo: String # Allowed values are enabled, disabled
        tls_tickets: String # Allowed values are enabled, disabled
        tlsv10: String # Allowed values are enabled, disabled
        tlsv11: String # Allowed values are enabled, disabled
        tlsv12: String # Allowed values are enabled, disabled
        tlsv13: String # Allowed values are enabled, disabled
        track: String 
        verify: String # Allowed values are none, required
        verifyhost: String 
        weight: Integer 
        ws: String # Allowed values are auto, h1, h2
        source: 
        address: String # Allowed pattern: ^[^\s]+$
        port: Integer Minimum: 1 Maximum: 65535 
        timeout: Integer 
        url: String # Allowed pattern: ^[^\s]+$
        xmodified: Boolean

warn_blocked_traffic_after

[integer]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    warn_blocked_traffic_after: Integer Minimum: 1

wurfl_options

[object]

apiVersion: "ingress.v3.haproxy.com/v3"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
    wurfl_options: 
      cache_size: Integer 
      data_file: String 
      information_list: String 
      information_list_separator: String 
      patch_file: String

Global config

CRD version: 3.0
API version: ingress.v1.haproxy.com/v1

anonkey

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    anonkey: Integer Minimum: 0 Maximum: 4294967295

botmgmt

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    botmgmt: 
      auto_enable: Boolean
      data_file: String 
      update: 
        delay: Integer 
        dontlog_normal: Boolean
        log: Boolean
        modified: Boolean
        retries: Integer 
        server_params: 
        agent-addr: String # Allowed pattern: ^[^\s]+$
        agent-check: String # Allowed values are enabled, disabled
        agent-inter: Integer 
        agent-port: Integer Minimum: 1 Maximum: 65535 
        agent-send: String 
        allow_0rtt: Boolean
        alpn: String # Allowed pattern: ^[^\s]+$
        backup: String # Allowed values are enabled, disabled
        check: String # Allowed values are enabled, disabled
        check-send-proxy: String # Allowed values are enabled, disabled
        check-sni: String # Allowed pattern: ^[^\s]+$
        check-ssl: String # Allowed values are enabled, disabled
        check_alpn: String # Allowed pattern: ^[^\s]+$
        check_proto: String # Allowed pattern: ^[^\s]+$
        check_via_socks4: String # Allowed values are enabled, disabled
        ciphers: String 
        ciphersuites: String 
        client_sigalgs: String 
        cookie: String # Allowed pattern: ^[^\s]+$
        crl_file: String 
        curves: String 
        downinter: Integer 
        error_limit: Integer 
        fall: Integer 
        fastinter: Integer 
        force_sslv3: String # Allowed values are enabled, disabled
        force_tlsv10: String # Allowed values are enabled, disabled
        force_tlsv11: String # Allowed values are enabled, disabled
        force_tlsv12: String # Allowed values are enabled, disabled
        force_tlsv13: String # Allowed values are enabled, disabled
        health_check_address: String # Allowed pattern: ^[^\s]+$
        health_check_port: Integer Minimum: 1 Maximum: 65535 
        init-addr: String # Allowed pattern: ^[^\s]+$
        inter: Integer 
        log-bufsize: Integer 
        log_proto: String # Allowed values are legacy, octet-count
        maintenance: String # Allowed values are enabled, disabled
        max_reuse: Integer 
        maxconn: Integer 
        maxqueue: Integer 
        minconn: Integer 
        namespace: String 
        no_sslv3: String # Allowed values are enabled, disabled
        no_tlsv10: String # Allowed values are enabled, disabled
        no_tlsv11: String # Allowed values are enabled, disabled
        no_tlsv12: String # Allowed values are enabled, disabled
        no_tlsv13: String # Allowed values are enabled, disabled
        no_verifyhost: String # Allowed values are enabled, disabled
        npn: String 
        observe: String # Allowed values are layer4, layer7
        on-error: String # Allowed values are fastinter, fail-check, sudden-death, mark-down
        on-marked-down: String # Allowed values are shutdown-sessions
        on-marked-up: String # Allowed values are shutdown-backup-sessions
        pool_low_conn: Integer 
        pool_max_conn: Integer 
        pool_purge_delay: Integer 
        proto: String # Allowed pattern: ^[^\s]+$
        proxy-v2-options: Array of String 
        redir: String 
        resolve-net: String # Allowed pattern: ^([A-Za-z0-9.:/]+)(,[A-Za-z0-9.:/]+)*$
        resolve-prefer: String # Allowed values are ipv4, ipv6
        resolve_opts: String # Allowed pattern: ^(allow-dup-ip|ignore-weight|prevent-dup-ip)(,(allow-dup-ip|ignore-weight|prevent-dup-ip))*$
        resolvers: String # Allowed pattern: ^[^\s]+$
        rise: Integer 
        send-proxy: String # Allowed values are enabled, disabled
        send-proxy-v2: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl_cn: String # Allowed values are enabled, disabled
        set-proxy-v2-tlv-fmt: 
        id: String 
        value: String 
        shard: Integer 
        sigalgs: String 
        slowstart: Integer 
        sni: String # Allowed pattern: ^[^\s]+$
        socks4: String # Allowed pattern: ^[^\s]+$
        source: String 
        ssl: String # Allowed values are enabled, disabled
        ssl_cafile: String # Allowed pattern: ^[^\s]+$
        ssl_certificate: String # Allowed pattern: ^[^\s]+$
        ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_reuse: String # Allowed values are enabled, disabled
        stick: String # Allowed values are enabled, disabled
        tcp_ut: Integer 
        tfo: String # Allowed values are enabled, disabled
        tls_tickets: String # Allowed values are enabled, disabled
        track: String 
        verify: String # Allowed values are none, required
        verifyhost: String 
        weight: Integer 
        ws: String # Allowed values are auto, h1, h2
        timeout: Integer 
        url: String # Allowed pattern: ^[^\s]+$
        xmodified: Boolean

busy_polling

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    busy_polling: Boolean

ca_base

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ca_base: String

chroot

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    chroot: String # Allowed pattern: ^[^\s]+$

close_spread_time

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    close_spread_time: Integer

cluster_secret

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cluster_secret: String

cook_chal.set_cookie_attributes

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cook_chal.set_cookie_attributes: String

cpu_maps

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cpu_maps: 
        - cpu_set: String 
          process: String

crt_base

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    crt_base: String

daemon

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    daemon: String # Allowed values are enabled, disabled

default_path

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    default_path: 
      path: String # Allowed pattern: ^[^\s]+$
      type: String # Allowed values are current, config, parent, origin

description

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    description: String

device_atlas_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    device_atlas_options: 
      json_file: String 
      log_level: String 
      properties_cookie: String 
      separator: String

expose_experimental_directives

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    expose_experimental_directives: Boolean

external_check

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    external_check: Boolean

fifty_one_degrees_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    fifty_one_degrees_options: 
      cache_size: Integer 
      data_file: String 
      property_name_list: String 
      property_separator: String

fingerprint_ssl_bufsize

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    fingerprint_ssl_bufsize: Integer

gid

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    gid: Integer

grace

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    grace: Integer

group

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    group: String # Allowed pattern: ^[^\s]+$

h1_accept_payload_with_any_method

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_accept_payload_with_any_method: Boolean

h1_case_adjust

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_case_adjust: 
        - from: String 
          to: String

h1_case_adjust_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_case_adjust_file: String

h1_do_not_close_on_insecure_transfer_encoding

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_do_not_close_on_insecure_transfer_encoding: Boolean

h2_workaround_bogus_websocket_clients

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h2_workaround_bogus_websocket_clients: Boolean

hard_stop_after

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    hard_stop_after: Integer

httpclient_resolvers_disabled

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_resolvers_disabled: String # Allowed values are enabled, disabled

httpclient_resolvers_id

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_resolvers_id: String

httpclient_resolvers_prefer

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_resolvers_prefer: String # Allowed values are ipv4, ipv6

httpclient_retries

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_retries: Integer

httpclient_ssl_ca_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_ssl_ca_file: String

httpclient_ssl_verify

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_ssl_verify: String # Allowed values are , none, required

httpclient_timeout_connect

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_timeout_connect: Integer

insecure_fork_wanted

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    insecure_fork_wanted: Boolean

insecure_setuid_wanted

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    insecure_setuid_wanted: Boolean

issuers_chain_path

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    issuers_chain_path: String

limited_quic

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    limited_quic: Boolean

localpeer

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    localpeer: String # Allowed pattern: ^[^\s]+$

log_send_hostname

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    log_send_hostname: 
      enabled: String # Allowed values are enabled, disabled
      param: String # Allowed pattern: ^[^\s]+$

lua_load_per_thread

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_load_per_thread: String

lua_loads

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_loads: 
        - file: String # Allowed pattern: ^[^\s]+$

lua_prepend_path

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_prepend_path: 
        - path: String # Allowed pattern: ^[^\s]+$
          type: String # Allowed values are path, cpath

master-worker

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    master-worker: Boolean

max_spread_checks

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    max_spread_checks: Integer

maxcompcpuusage

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxcompcpuusage: Integer

maxcomprate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxcomprate: Integer

maxconn

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconn: Integer

maxconnrate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconnrate: Integer

maxmind_cache_size

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_cache_size: Integer

maxmind_debug

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_debug: Boolean

maxmind_load

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_load: 
      maxmind_dbs: 
        - key: String 
          path: String 
      mlock_max: Integer

maxmind_update

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_update: 
      checksum: Boolean
      delay: Integer 
      dontlog_normal: Boolean
      hash: Boolean
      log: Boolean
      maxmind_urls: 
        - key: String 
          url: String 
      retries: Integer 
      timeout: Integer

maxpipes

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxpipes: Integer

maxsessrate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsessrate: Integer

maxsslconn

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsslconn: Integer

maxsslrate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsslrate: Integer

maxzlibmem

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxzlibmem: Integer

modsecurity-deny-blocking-io

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-deny-blocking-io: Boolean

modsecurity-max-cpu-action

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-action: String # Allowed values are deny, pass

modsecurity-max-cpu-backoff-delay

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-backoff-delay: String

modsecurity-max-cpu-backoff-retries

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-backoff-retries: Integer

modsecurity-max-cpu-period

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-period: String

modsecurity-max-cpu-usage

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-usage: Integer

module-loads

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    module-loads: 
        - value: String

module-path

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    module-path: String

mworker_max_reloads

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    mworker_max_reloads: Integer Minimum: 0

nbproc

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbproc: Integer

nbthread

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbthread: Integer

no-quic

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    no-quic: Boolean

node

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    node: String

noepoll

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noepoll: Boolean

noevports

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noevports: Boolean

nogetaddrinfo

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nogetaddrinfo: Boolean

nokqueue

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nokqueue: Boolean

nopoll

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nopoll: Boolean

noreuseport

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noreuseport: Boolean

nosplice

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nosplice: Boolean

numa_cpu_mapping

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    numa_cpu_mapping: String # Allowed values are enabled, disabled

pidfile

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    pidfile: String

pp2_never_send_local

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    pp2_never_send_local: Boolean

prealloc-fd

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    prealloc-fd: Boolean

presetenv

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    presetenv: 
        - name: String 
          value: String

profiling_tasks

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    profiling_tasks: String # Allowed values are auto, on, off

quiet

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    quiet: Boolean

resetenv

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    resetenv: String

runtime_apis

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    runtime_apis: 
        - accept_netscaler_cip: Integer 
          accept_proxy: Boolean
          address: String # Allowed pattern: ^[^\s]+$
          allow_0rtt: Boolean
          alpn: String # Allowed pattern: ^[^\s]+$
          backlog: String 
          ca_ignore_err: String 
          ca_sign_file: String 
          ca_sign_pass: String 
          ca_verify_file: String 
          ciphers: String 
          ciphersuites: String 
          client_sigalgs: String 
          crl_file: String 
          crt_ignore_err: String 
          crt_list: String 
          curves: String 
          defer_accept: Boolean
          ecdhe: String 
          expose_fd_listeners: Boolean
          force_sslv3: Boolean
          force_tlsv10: Boolean
          force_tlsv11: Boolean
          force_tlsv12: Boolean
          force_tlsv13: Boolean
          generate_certificates: Boolean
          gid: Integer 
          group: String 
          id: String 
          interface: String 
          level: String # Allowed values are user, operator, admin
          maxconn: Integer 
          mode: String 
          mss: String 
          name: String # Allowed pattern: ^[^\s]+$
          namespace: String 
          nbconn: Integer 
          nice: Integer 
          no_alpn: Boolean
          no_ca_names: Boolean
          no_sslv3: Boolean
          no_tls_tickets: Boolean
          no_tlsv10: Boolean
          no_tlsv11: Boolean
          no_tlsv12: Boolean
          no_tlsv13: Boolean
          npn: String 
          prefer_client_ciphers: Boolean
          process: String # Allowed pattern: ^[^\s]+$
          proto: String 
          quic-cc-algo: String # Allowed values are cubic, newreno
          quic-force-retry: Boolean
          quic-socket: String # Allowed values are connection, listener
          severity_output: String # Allowed values are none, number, string
          sigalgs: String 
          ssl: Boolean
          ssl_cafile: String # Allowed pattern: ^[^\s]+$
          ssl_certificate: String # Allowed pattern: ^[^\s]+$
          ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
          ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
          strict_sni: Boolean
          tcp_user_timeout: Integer 
          tfo: Boolean
          thread: String 
          tls_ticket_keys: String 
          transparent: Boolean
          uid: String 
          user: String 
          v4v6: Boolean
          v6only: Boolean
          verify: String # Allowed values are none, optional, required

saml_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    saml_options: 
      saml_sso_load: 
        configuration_directory: String 
        ini_file: String

server_state_base

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_base: String # Allowed pattern: ^[^\s]+$

server_state_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_file: String # Allowed pattern: ^[^\s]+$

set_dumpable

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    set_dumpable: Boolean

set_var

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    set_var: 
        - expr: String 
          name: String

set_var_fmt

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    set_var_fmt: 
        - format: String 
          name: String

setcap

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    setcap: String # Allowed pattern: ^[^\s]+$

setenv

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    setenv: 
        - name: String 
          value: String

spread_checks

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    spread_checks: Integer

ssl_default_bind_ciphers

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphers: String

ssl_default_bind_ciphersuites

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphersuites: String

ssl_default_bind_client_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_client_sigalgs: String

ssl_default_bind_curves

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_curves: String

ssl_default_bind_options

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_options: String

ssl_default_bind_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_sigalgs: String

ssl_default_server_ciphers

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphers: String

ssl_default_server_ciphersuites

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphersuites: String

ssl_default_server_client_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_client_sigalgs: String

ssl_default_server_curves

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_curves: String

ssl_default_server_options

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_options: String

ssl_default_server_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_sigalgs: String

ssl_dh_param_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_dh_param_file: String

ssl_engines

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_engines: 
        - algorithms: String 
          name: String

ssl_load_extra_files

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_load_extra_files: String

ssl_mode_async

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_mode_async: String # Allowed values are enabled, disabled

ssl_propquery

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_propquery: String

ssl_provider

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_provider: String

ssl_provider_path

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_provider_path: String

ssl_server_verify

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_server_verify: String # Allowed values are none, required

ssl_skip_self_issued_ca

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_skip_self_issued_ca: Boolean

stats_maxconn

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    stats_maxconn: Integer

stats_timeout

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    stats_timeout: Integer

strict_limits

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    strict_limits: Boolean

thread_group_lines

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    thread_group_lines: 
        - group: String 
          num_or_range: String

thread_groups

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    thread_groups: Integer

tune_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_options: 
      buffers_limit: Integer 
      buffers_reserve: Integer Minimum: 2 
      bufsize: Integer 
      comp_maxlevel: Integer 
      disable_zero_copy_forwarding: Boolean
      events_max_events_at_once: Integer Minimum: 1 Maximum: 10000 
      fail_alloc: Boolean
      fd_edge_triggered: String # Allowed values are enabled, disabled
      h1_zero_copy_fwd_recv: String # Allowed values are enabled, disabled
      h1_zero_copy_fwd_send: String # Allowed values are enabled, disabled
      h2_be_initial_window_size: Integer 
      h2_be_max_concurrent_streams: Integer 
      h2_fe_initial_window_size: Integer 
      h2_fe_max_concurrent_streams: Integer 
      h2_header_table_size: Integer Maximum: 65535 
      h2_initial_window_size: Integer 
      h2_max_concurrent_streams: Integer 
      h2_max_frame_size: Integer 
      h2_zero_copy_fwd_send: String # Allowed values are enabled, disabled
      http_cookielen: Integer 
      http_logurilen: Integer 
      http_maxhdr: Integer Minimum: 1 Maximum: 32767 
      idle_pool_shared: String # Allowed values are enabled, disabled
      idletimer: Integer Minimum: 0 Maximum: 65535 
      listener_default_shards: String # Allowed values are by-process, by-thread, by-group
      listener_multi_queue: String # Allowed values are enabled, disabled
      lua_burst_timeout: Integer 
      lua_forced_yield: Integer 
      lua_log_loggers: String # Allowed values are enabled, disabled
      lua_log_stderr: String # Allowed values are auto, enabled, disabled
      lua_maxmem: Boolean
      lua_service_timeout: Integer 
      lua_session_timeout: Integer 
      lua_task_timeout: Integer 
      max_checks_per_thread: Integer 
      maxaccept: Integer 
      maxpollevents: Integer 
      maxrewrite: Integer 
      memory_hot_size: Integer 
      pattern_cache_size: Integer 
      peers_max_updates_at_once: Integer 
      pipesize: Integer 
      pool_high_fd_ratio: Integer 
      pool_low_fd_ratio: Integer 
      pt_zero_copy_forwarding: String # Allowed values are enabled, disabled
      quic_frontend_conn_tx_buffers_limit: Integer 
      quic_frontend_max_idle_timeout: Integer 
      quic_frontend_max_streams_bidi: Integer 
      quic_max_frame_loss: Integer 
      quic_retry_threshold: Integer 
      quic_socket_owner: String # Allowed values are listener, connection
      rcvbuf_backend: Integer 
      rcvbuf_client: Integer 
      rcvbuf_frontend: Integer 
      rcvbuf_server: Integer 
      recv_enough: Integer 
      runqueue_depth: Integer 
      sched_low_latency: String # Allowed values are enabled, disabled
      sndbuf_backend: Integer 
      sndbuf_client: Integer 
      sndbuf_frontend: Integer 
      sndbuf_server: Integer 
      ssl_cachesize: Integer 
      ssl_capture_buffer_size: Integer 
      ssl_ctx_cache_size: Integer 
      ssl_default_dh_param: Integer 
      ssl_force_private_cache: Boolean
      ssl_keylog: String # Allowed values are enabled, disabled
      ssl_lifetime: Integer 
      ssl_maxrecord: Integer 
      ssl_ocsp_update_max_delay: Integer 
      ssl_ocsp_update_min_delay: Integer 
      stick_counters: Integer 
      vars_global_max_size: Integer 
      vars_proc_max_size: Integer 
      vars_reqres_max_size: Integer 
      vars_sess_max_size: Integer 
      vars_txn_max_size: Integer 
      zlib_memlevel: Integer Minimum: 1 Maximum: 9 
      zlib_windowsize: Integer Minimum: 8 Maximum: 15

tune_ssl_default_dh_param

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_ssl_default_dh_param: Integer

uid

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    uid: Integer

ulimit_n

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ulimit_n: Integer

unsetenv

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    unsetenv: String

user

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    user: String # Allowed pattern: ^[^\s]+$

waf-body-limit

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf-body-limit: Integer

waf-json-levels

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf-json-levels: Integer

waf-load

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf-load: String

waf_analyzer_cache

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf_analyzer_cache: Integer

waf_log_host_header_len

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf_log_host_header_len: Integer

waf_update

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf_update: 
      delay: Integer 
      dontlog_normal: Boolean
      id: String 
      log: Boolean
      modified: Boolean
      retries: Integer 
      server_params: 
        agent-addr: String # Allowed pattern: ^[^\s]+$
        agent-check: String # Allowed values are enabled, disabled
        agent-inter: Integer 
        agent-port: Integer Minimum: 1 Maximum: 65535 
        agent-send: String 
        allow_0rtt: Boolean
        alpn: String # Allowed pattern: ^[^\s]+$
        backup: String # Allowed values are enabled, disabled
        check: String # Allowed values are enabled, disabled
        check-send-proxy: String # Allowed values are enabled, disabled
        check-sni: String # Allowed pattern: ^[^\s]+$
        check-ssl: String # Allowed values are enabled, disabled
        check_alpn: String # Allowed pattern: ^[^\s]+$
        check_proto: String # Allowed pattern: ^[^\s]+$
        check_via_socks4: String # Allowed values are enabled, disabled
        ciphers: String 
        ciphersuites: String 
        client_sigalgs: String 
        cookie: String # Allowed pattern: ^[^\s]+$
        crl_file: String 
        curves: String 
        downinter: Integer 
        error_limit: Integer 
        fall: Integer 
        fastinter: Integer 
        force_sslv3: String # Allowed values are enabled, disabled
        force_tlsv10: String # Allowed values are enabled, disabled
        force_tlsv11: String # Allowed values are enabled, disabled
        force_tlsv12: String # Allowed values are enabled, disabled
        force_tlsv13: String # Allowed values are enabled, disabled
        health_check_address: String # Allowed pattern: ^[^\s]+$
        health_check_port: Integer Minimum: 1 Maximum: 65535 
        init-addr: String # Allowed pattern: ^[^\s]+$
        inter: Integer 
        log-bufsize: Integer 
        log_proto: String # Allowed values are legacy, octet-count
        maintenance: String # Allowed values are enabled, disabled
        max_reuse: Integer 
        maxconn: Integer 
        maxqueue: Integer 
        minconn: Integer 
        namespace: String 
        no_sslv3: String # Allowed values are enabled, disabled
        no_tlsv10: String # Allowed values are enabled, disabled
        no_tlsv11: String # Allowed values are enabled, disabled
        no_tlsv12: String # Allowed values are enabled, disabled
        no_tlsv13: String # Allowed values are enabled, disabled
        no_verifyhost: String # Allowed values are enabled, disabled
        npn: String 
        observe: String # Allowed values are layer4, layer7
        on-error: String # Allowed values are fastinter, fail-check, sudden-death, mark-down
        on-marked-down: String # Allowed values are shutdown-sessions
        on-marked-up: String # Allowed values are shutdown-backup-sessions
        pool_low_conn: Integer 
        pool_max_conn: Integer 
        pool_purge_delay: Integer 
        proto: String # Allowed pattern: ^[^\s]+$
        proxy-v2-options: Array of String 
        redir: String 
        resolve-net: String # Allowed pattern: ^([A-Za-z0-9.:/]+)(,[A-Za-z0-9.:/]+)*$
        resolve-prefer: String # Allowed values are ipv4, ipv6
        resolve_opts: String # Allowed pattern: ^(allow-dup-ip|ignore-weight|prevent-dup-ip)(,(allow-dup-ip|ignore-weight|prevent-dup-ip))*$
        resolvers: String # Allowed pattern: ^[^\s]+$
        rise: Integer 
        send-proxy: String # Allowed values are enabled, disabled
        send-proxy-v2: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl_cn: String # Allowed values are enabled, disabled
        set-proxy-v2-tlv-fmt: 
        id: String 
        value: String 
        shard: Integer 
        sigalgs: String 
        slowstart: Integer 
        sni: String # Allowed pattern: ^[^\s]+$
        socks4: String # Allowed pattern: ^[^\s]+$
        source: String 
        ssl: String # Allowed values are enabled, disabled
        ssl_cafile: String # Allowed pattern: ^[^\s]+$
        ssl_certificate: String # Allowed pattern: ^[^\s]+$
        ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_reuse: String # Allowed values are enabled, disabled
        stick: String # Allowed values are enabled, disabled
        tcp_ut: Integer 
        tfo: String # Allowed values are enabled, disabled
        tls_tickets: String # Allowed values are enabled, disabled
        track: String 
        verify: String # Allowed values are none, required
        verifyhost: String 
        weight: Integer 
        ws: String # Allowed values are auto, h1, h2
      source: 
        address: String # Allowed pattern: ^[^\s]+$
        port: Integer Minimum: 1 Maximum: 65535 
      timeout: Integer 
      url: String # Allowed pattern: ^[^\s]+$
      xmodified: Boolean

wurfl_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    wurfl_options: 
      cache_size: Integer 
      data_file: String 
      information_list: String 
      information_list_separator: String 
      patch_file: String

zero_warning

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    zero_warning: Boolean

Log Targets

CRD version: 3.0
API version: ingress.v1.haproxy.com/v1

address

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - address: String # Allowed pattern: ^[^\s]+$

facility

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - facility: String # Allowed values are kern, user, mail, daemon, auth, syslog, lpr, news, uucp, cron, auth2, ftp, ntp, audit, alert, cron2, local0, local1, local2, local3, local4, local5, local6, local7

format

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - format: String # Allowed values are local, rfc3164, rfc5424, priority, short, timed, iso, raw

global

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - global: Boolean

index

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - index: Integer

length

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - length: Integer

level

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - level: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

minlevel

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - minlevel: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

nolog

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - nolog: Boolean

sample_range

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - sample_range: String

sample_size

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - sample_size: Integer

Global config

CRD version: 1.11
API version: ingress.v1.haproxy.com/v1

anonkey

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    anonkey: Integer Minimum: 0 Maximum: 4294967295

botmgmt

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    botmgmt: 
      auto_enable: Boolean
      data_file: String 
      update: 
        delay: Integer 
        dontlog_normal: Boolean
        log: Boolean
        modified: Boolean
        retries: Integer 
        server_params: 
        agent-addr: String # Allowed pattern: ^[^\s]+$
        agent-check: String # Allowed values are enabled, disabled
        agent-inter: Integer 
        agent-port: Integer Minimum: 1 Maximum: 65535 
        agent-send: String 
        allow_0rtt: Boolean
        alpn: String # Allowed pattern: ^[^\s]+$
        backup: String # Allowed values are enabled, disabled
        check: String # Allowed values are enabled, disabled
        check-send-proxy: String # Allowed values are enabled, disabled
        check-sni: String # Allowed pattern: ^[^\s]+$
        check-ssl: String # Allowed values are enabled, disabled
        check_alpn: String # Allowed pattern: ^[^\s]+$
        check_proto: String # Allowed pattern: ^[^\s]+$
        check_via_socks4: String # Allowed values are enabled, disabled
        ciphers: String 
        ciphersuites: String 
        client_sigalgs: String 
        cookie: String # Allowed pattern: ^[^\s]+$
        crl_file: String 
        curves: String 
        downinter: Integer 
        error_limit: Integer 
        fall: Integer 
        fastinter: Integer 
        force_sslv3: String # Allowed values are enabled, disabled
        force_tlsv10: String # Allowed values are enabled, disabled
        force_tlsv11: String # Allowed values are enabled, disabled
        force_tlsv12: String # Allowed values are enabled, disabled
        force_tlsv13: String # Allowed values are enabled, disabled
        health_check_address: String # Allowed pattern: ^[^\s]+$
        health_check_port: Integer Minimum: 1 Maximum: 65535 
        init-addr: String # Allowed pattern: ^[^\s]+$
        inter: Integer 
        log-bufsize: Integer 
        log_proto: String # Allowed values are legacy, octet-count
        maintenance: String # Allowed values are enabled, disabled
        max_reuse: Integer 
        maxconn: Integer 
        maxqueue: Integer 
        minconn: Integer 
        namespace: String 
        no_sslv3: String # Allowed values are enabled, disabled
        no_tlsv10: String # Allowed values are enabled, disabled
        no_tlsv11: String # Allowed values are enabled, disabled
        no_tlsv12: String # Allowed values are enabled, disabled
        no_tlsv13: String # Allowed values are enabled, disabled
        no_verifyhost: String # Allowed values are enabled, disabled
        npn: String 
        observe: String # Allowed values are layer4, layer7
        on-error: String # Allowed values are fastinter, fail-check, sudden-death, mark-down
        on-marked-down: String # Allowed values are shutdown-sessions
        on-marked-up: String # Allowed values are shutdown-backup-sessions
        pool_low_conn: Integer 
        pool_max_conn: Integer 
        pool_purge_delay: Integer 
        proto: String # Allowed pattern: ^[^\s]+$
        proxy-v2-options: Array of String 
        redir: String 
        resolve-net: String # Allowed pattern: ^([A-Za-z0-9.:/]+)(,[A-Za-z0-9.:/]+)*$
        resolve-prefer: String # Allowed values are ipv4, ipv6
        resolve_opts: String # Allowed pattern: ^(allow-dup-ip|ignore-weight|prevent-dup-ip)(,(allow-dup-ip|ignore-weight|prevent-dup-ip))*$
        resolvers: String # Allowed pattern: ^[^\s]+$
        rise: Integer 
        send-proxy: String # Allowed values are enabled, disabled
        send-proxy-v2: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl_cn: String # Allowed values are enabled, disabled
        set-proxy-v2-tlv-fmt: 
        id: String 
        value: String 
        shard: Integer 
        sigalgs: String 
        slowstart: Integer 
        sni: String # Allowed pattern: ^[^\s]+$
        socks4: String # Allowed pattern: ^[^\s]+$
        source: String 
        ssl: String # Allowed values are enabled, disabled
        ssl_cafile: String # Allowed pattern: ^[^\s]+$
        ssl_certificate: String # Allowed pattern: ^[^\s]+$
        ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_reuse: String # Allowed values are enabled, disabled
        stick: String # Allowed values are enabled, disabled
        tcp_ut: Integer 
        tfo: String # Allowed values are enabled, disabled
        tls_tickets: String # Allowed values are enabled, disabled
        track: String 
        verify: String # Allowed values are none, required
        verifyhost: String 
        weight: Integer 
        ws: String # Allowed values are auto, h1, h2
        timeout: Integer 
        url: String # Allowed pattern: ^[^\s]+$
        xmodified: Boolean

busy_polling

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    busy_polling: Boolean

ca_base

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ca_base: String

chroot

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    chroot: String # Allowed pattern: ^[^\s]+$

close_spread_time

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    close_spread_time: Integer

cluster_secret

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cluster_secret: String

cook_chal.set_cookie_attributes

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cook_chal.set_cookie_attributes: String

cpu_maps

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cpu_maps: 
        - cpu_set: String 
          process: String

crt_base

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    crt_base: String

daemon

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    daemon: String # Allowed values are enabled, disabled

default_path

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    default_path: 
      path: String # Allowed pattern: ^[^\s]+$
      type: String # Allowed values are current, config, parent, origin

description

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    description: String

device_atlas_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    device_atlas_options: 
      json_file: String 
      log_level: String 
      properties_cookie: String 
      separator: String

expose_experimental_directives

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    expose_experimental_directives: Boolean

external_check

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    external_check: Boolean

fifty_one_degrees_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    fifty_one_degrees_options: 
      cache_size: Integer 
      data_file: String 
      property_name_list: String 
      property_separator: String

fingerprint_ssl_bufsize

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    fingerprint_ssl_bufsize: Integer

gid

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    gid: Integer

grace

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    grace: Integer

group

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    group: String # Allowed pattern: ^[^\s]+$

h1_accept_payload_with_any_method

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_accept_payload_with_any_method: Boolean

h1_case_adjust

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_case_adjust: 
        - from: String 
          to: String

h1_case_adjust_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_case_adjust_file: String

h1_do_not_close_on_insecure_transfer_encoding

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_do_not_close_on_insecure_transfer_encoding: Boolean

h2_workaround_bogus_websocket_clients

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h2_workaround_bogus_websocket_clients: Boolean

hard_stop_after

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    hard_stop_after: Integer

httpclient_resolvers_disabled

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_resolvers_disabled: String # Allowed values are enabled, disabled

httpclient_resolvers_id

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_resolvers_id: String

httpclient_resolvers_prefer

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_resolvers_prefer: String # Allowed values are ipv4, ipv6

httpclient_retries

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_retries: Integer

httpclient_ssl_ca_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_ssl_ca_file: String

httpclient_ssl_verify

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_ssl_verify: String # Allowed values are , none, required

httpclient_timeout_connect

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    httpclient_timeout_connect: Integer

insecure_fork_wanted

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    insecure_fork_wanted: Boolean

insecure_setuid_wanted

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    insecure_setuid_wanted: Boolean

issuers_chain_path

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    issuers_chain_path: String

limited_quic

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    limited_quic: Boolean

localpeer

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    localpeer: String # Allowed pattern: ^[^\s]+$

log_send_hostname

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    log_send_hostname: 
      enabled: String # Allowed values are enabled, disabled
      param: String # Allowed pattern: ^[^\s]+$

lua_load_per_thread

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_load_per_thread: String

lua_loads

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_loads: 
        - file: String # Allowed pattern: ^[^\s]+$

lua_prepend_path

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_prepend_path: 
        - path: String # Allowed pattern: ^[^\s]+$
          type: String # Allowed values are path, cpath

master-worker

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    master-worker: Boolean

max_spread_checks

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    max_spread_checks: Integer

maxcompcpuusage

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxcompcpuusage: Integer

maxcomprate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxcomprate: Integer

maxconn

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconn: Integer

maxconnrate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconnrate: Integer

maxmind_cache_size

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_cache_size: Integer

maxmind_debug

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_debug: Boolean

maxmind_load

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_load: 
      maxmind_dbs: 
        - key: String 
          path: String 
      mlock_max: Integer

maxmind_update

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxmind_update: 
      checksum: Boolean
      delay: Integer 
      dontlog_normal: Boolean
      hash: Boolean
      log: Boolean
      maxmind_urls: 
        - key: String 
          url: String 
      retries: Integer 
      timeout: Integer

maxpipes

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxpipes: Integer

maxsessrate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsessrate: Integer

maxsslconn

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsslconn: Integer

maxsslrate

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsslrate: Integer

maxzlibmem

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxzlibmem: Integer

modsecurity-deny-blocking-io

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-deny-blocking-io: Boolean

modsecurity-max-cpu-action

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-action: String # Allowed values are deny, pass

modsecurity-max-cpu-backoff-delay

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-backoff-delay: String

modsecurity-max-cpu-backoff-retries

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-backoff-retries: Integer

modsecurity-max-cpu-period

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-period: String

modsecurity-max-cpu-usage

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    modsecurity-max-cpu-usage: Integer

module-loads

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    module-loads: 
        - value: String

module-path

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    module-path: String

mworker_max_reloads

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    mworker_max_reloads: Integer Minimum: 0

nbproc

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbproc: Integer

nbthread

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbthread: Integer

no-quic

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    no-quic: Boolean

node

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    node: String

noepoll

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noepoll: Boolean

noevports

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noevports: Boolean

nogetaddrinfo

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nogetaddrinfo: Boolean

nokqueue

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nokqueue: Boolean

nopoll

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nopoll: Boolean

noreuseport

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noreuseport: Boolean

nosplice

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nosplice: Boolean

numa_cpu_mapping

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    numa_cpu_mapping: String # Allowed values are enabled, disabled

pidfile

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    pidfile: String

pp2_never_send_local

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    pp2_never_send_local: Boolean

prealloc-fd

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    prealloc-fd: Boolean

presetenv

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    presetenv: 
        - name: String 
          value: String

profiling_tasks

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    profiling_tasks: String # Allowed values are auto, on, off

quiet

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    quiet: Boolean

resetenv

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    resetenv: String

runtime_apis

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    runtime_apis: 
        - accept_netscaler_cip: Integer 
          accept_proxy: Boolean
          address: String # Allowed pattern: ^[^\s]+$
          allow_0rtt: Boolean
          alpn: String # Allowed pattern: ^[^\s]+$
          backlog: String 
          ca_ignore_err: String 
          ca_sign_file: String 
          ca_sign_pass: String 
          ca_verify_file: String 
          ciphers: String 
          ciphersuites: String 
          client_sigalgs: String 
          crl_file: String 
          crt_ignore_err: String 
          crt_list: String 
          curves: String 
          defer_accept: Boolean
          ecdhe: String 
          expose_fd_listeners: Boolean
          force_sslv3: Boolean
          force_tlsv10: Boolean
          force_tlsv11: Boolean
          force_tlsv12: Boolean
          force_tlsv13: Boolean
          generate_certificates: Boolean
          gid: Integer 
          group: String 
          id: String 
          interface: String 
          level: String # Allowed values are user, operator, admin
          maxconn: Integer 
          mode: String 
          mss: String 
          name: String # Allowed pattern: ^[^\s]+$
          namespace: String 
          nbconn: Integer 
          nice: Integer 
          no_alpn: Boolean
          no_ca_names: Boolean
          no_sslv3: Boolean
          no_tls_tickets: Boolean
          no_tlsv10: Boolean
          no_tlsv11: Boolean
          no_tlsv12: Boolean
          no_tlsv13: Boolean
          npn: String 
          prefer_client_ciphers: Boolean
          process: String # Allowed pattern: ^[^\s]+$
          proto: String 
          quic-cc-algo: String # Allowed values are cubic, newreno
          quic-force-retry: Boolean
          quic-socket: String # Allowed values are connection, listener
          severity_output: String # Allowed values are none, number, string
          sigalgs: String 
          ssl: Boolean
          ssl_cafile: String # Allowed pattern: ^[^\s]+$
          ssl_certificate: String # Allowed pattern: ^[^\s]+$
          ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
          ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
          strict_sni: Boolean
          tcp_user_timeout: Integer 
          tfo: Boolean
          thread: String 
          tls_ticket_keys: String 
          transparent: Boolean
          uid: String 
          user: String 
          v4v6: Boolean
          v6only: Boolean
          verify: String # Allowed values are none, optional, required

saml_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    saml_options: 
      saml_sso_load: 
        configuration_directory: String 
        ini_file: String

server_state_base

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_base: String # Allowed pattern: ^[^\s]+$

server_state_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_file: String # Allowed pattern: ^[^\s]+$

set_dumpable

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    set_dumpable: Boolean

set_var

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    set_var: 
        - expr: String 
          name: String

set_var_fmt

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    set_var_fmt: 
        - format: String 
          name: String

setcap

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    setcap: String # Allowed pattern: ^[^\s]+$

setenv

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    setenv: 
        - name: String 
          value: String

spread_checks

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    spread_checks: Integer

ssl_default_bind_ciphers

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphers: String

ssl_default_bind_ciphersuites

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphersuites: String

ssl_default_bind_client_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_client_sigalgs: String

ssl_default_bind_curves

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_curves: String

ssl_default_bind_options

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_options: String

ssl_default_bind_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_sigalgs: String

ssl_default_server_ciphers

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphers: String

ssl_default_server_ciphersuites

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphersuites: String

ssl_default_server_client_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_client_sigalgs: String

ssl_default_server_curves

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_curves: String

ssl_default_server_options

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_options: String

ssl_default_server_sigalgs

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_sigalgs: String

ssl_dh_param_file

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_dh_param_file: String

ssl_engines

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_engines: 
        - algorithms: String 
          name: String

ssl_load_extra_files

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_load_extra_files: String

ssl_mode_async

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_mode_async: String # Allowed values are enabled, disabled

ssl_propquery

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_propquery: String

ssl_provider

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_provider: String

ssl_provider_path

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_provider_path: String

ssl_server_verify

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_server_verify: String # Allowed values are none, required

ssl_skip_self_issued_ca

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_skip_self_issued_ca: Boolean

stats_maxconn

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    stats_maxconn: Integer

stats_timeout

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    stats_timeout: Integer

strict_limits

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    strict_limits: Boolean

thread_group_lines

[array]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    thread_group_lines: 
        - group: String 
          num_or_range: String

thread_groups

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    thread_groups: Integer

tune_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_options: 
      buffers_limit: Integer 
      buffers_reserve: Integer Minimum: 2 
      bufsize: Integer 
      comp_maxlevel: Integer 
      disable_zero_copy_forwarding: Boolean
      events_max_events_at_once: Integer Minimum: 1 Maximum: 10000 
      fail_alloc: Boolean
      fd_edge_triggered: String # Allowed values are enabled, disabled
      h1_zero_copy_fwd_recv: String # Allowed values are enabled, disabled
      h1_zero_copy_fwd_send: String # Allowed values are enabled, disabled
      h2_be_initial_window_size: Integer 
      h2_be_max_concurrent_streams: Integer 
      h2_fe_initial_window_size: Integer 
      h2_fe_max_concurrent_streams: Integer 
      h2_header_table_size: Integer Maximum: 65535 
      h2_initial_window_size: Integer 
      h2_max_concurrent_streams: Integer 
      h2_max_frame_size: Integer 
      h2_zero_copy_fwd_send: String # Allowed values are enabled, disabled
      http_cookielen: Integer 
      http_logurilen: Integer 
      http_maxhdr: Integer Minimum: 1 Maximum: 32767 
      idle_pool_shared: String # Allowed values are enabled, disabled
      idletimer: Integer Minimum: 0 Maximum: 65535 
      listener_default_shards: String # Allowed values are by-process, by-thread, by-group
      listener_multi_queue: String # Allowed values are enabled, disabled
      lua_burst_timeout: Integer 
      lua_forced_yield: Integer 
      lua_log_loggers: String # Allowed values are enabled, disabled
      lua_log_stderr: String # Allowed values are auto, enabled, disabled
      lua_maxmem: Boolean
      lua_service_timeout: Integer 
      lua_session_timeout: Integer 
      lua_task_timeout: Integer 
      max_checks_per_thread: Integer 
      maxaccept: Integer 
      maxpollevents: Integer 
      maxrewrite: Integer 
      memory_hot_size: Integer 
      pattern_cache_size: Integer 
      peers_max_updates_at_once: Integer 
      pipesize: Integer 
      pool_high_fd_ratio: Integer 
      pool_low_fd_ratio: Integer 
      pt_zero_copy_forwarding: String # Allowed values are enabled, disabled
      quic_frontend_conn_tx_buffers_limit: Integer 
      quic_frontend_max_idle_timeout: Integer 
      quic_frontend_max_streams_bidi: Integer 
      quic_max_frame_loss: Integer 
      quic_retry_threshold: Integer 
      quic_socket_owner: String # Allowed values are listener, connection
      rcvbuf_backend: Integer 
      rcvbuf_client: Integer 
      rcvbuf_frontend: Integer 
      rcvbuf_server: Integer 
      recv_enough: Integer 
      runqueue_depth: Integer 
      sched_low_latency: String # Allowed values are enabled, disabled
      sndbuf_backend: Integer 
      sndbuf_client: Integer 
      sndbuf_frontend: Integer 
      sndbuf_server: Integer 
      ssl_cachesize: Integer 
      ssl_capture_buffer_size: Integer 
      ssl_ctx_cache_size: Integer 
      ssl_default_dh_param: Integer 
      ssl_force_private_cache: Boolean
      ssl_keylog: String # Allowed values are enabled, disabled
      ssl_lifetime: Integer 
      ssl_maxrecord: Integer 
      ssl_ocsp_update_max_delay: Integer 
      ssl_ocsp_update_min_delay: Integer 
      stick_counters: Integer 
      vars_global_max_size: Integer 
      vars_proc_max_size: Integer 
      vars_reqres_max_size: Integer 
      vars_sess_max_size: Integer 
      vars_txn_max_size: Integer 
      zlib_memlevel: Integer Minimum: 1 Maximum: 9 
      zlib_windowsize: Integer Minimum: 8 Maximum: 15

tune_ssl_default_dh_param

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_ssl_default_dh_param: Integer

uid

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    uid: Integer

ulimit_n

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ulimit_n: Integer

unsetenv

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    unsetenv: String

user

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    user: String # Allowed pattern: ^[^\s]+$

waf-body-limit

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf-body-limit: Integer

waf-json-levels

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf-json-levels: Integer

waf-load

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf-load: String

waf_analyzer_cache

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf_analyzer_cache: Integer

waf_log_host_header_len

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf_log_host_header_len: Integer

waf_update

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    waf_update: 
      delay: Integer 
      dontlog_normal: Boolean
      id: String 
      log: Boolean
      modified: Boolean
      retries: Integer 
      server_params: 
        agent-addr: String # Allowed pattern: ^[^\s]+$
        agent-check: String # Allowed values are enabled, disabled
        agent-inter: Integer 
        agent-port: Integer Minimum: 1 Maximum: 65535 
        agent-send: String 
        allow_0rtt: Boolean
        alpn: String # Allowed pattern: ^[^\s]+$
        backup: String # Allowed values are enabled, disabled
        check: String # Allowed values are enabled, disabled
        check-send-proxy: String # Allowed values are enabled, disabled
        check-sni: String # Allowed pattern: ^[^\s]+$
        check-ssl: String # Allowed values are enabled, disabled
        check_alpn: String # Allowed pattern: ^[^\s]+$
        check_proto: String # Allowed pattern: ^[^\s]+$
        check_via_socks4: String # Allowed values are enabled, disabled
        ciphers: String 
        ciphersuites: String 
        client_sigalgs: String 
        cookie: String # Allowed pattern: ^[^\s]+$
        crl_file: String 
        curves: String 
        downinter: Integer 
        error_limit: Integer 
        fall: Integer 
        fastinter: Integer 
        force_sslv3: String # Allowed values are enabled, disabled
        force_tlsv10: String # Allowed values are enabled, disabled
        force_tlsv11: String # Allowed values are enabled, disabled
        force_tlsv12: String # Allowed values are enabled, disabled
        force_tlsv13: String # Allowed values are enabled, disabled
        health_check_address: String # Allowed pattern: ^[^\s]+$
        health_check_port: Integer Minimum: 1 Maximum: 65535 
        init-addr: String # Allowed pattern: ^[^\s]+$
        inter: Integer 
        log-bufsize: Integer 
        log_proto: String # Allowed values are legacy, octet-count
        maintenance: String # Allowed values are enabled, disabled
        max_reuse: Integer 
        maxconn: Integer 
        maxqueue: Integer 
        minconn: Integer 
        namespace: String 
        no_sslv3: String # Allowed values are enabled, disabled
        no_tlsv10: String # Allowed values are enabled, disabled
        no_tlsv11: String # Allowed values are enabled, disabled
        no_tlsv12: String # Allowed values are enabled, disabled
        no_tlsv13: String # Allowed values are enabled, disabled
        no_verifyhost: String # Allowed values are enabled, disabled
        npn: String 
        observe: String # Allowed values are layer4, layer7
        on-error: String # Allowed values are fastinter, fail-check, sudden-death, mark-down
        on-marked-down: String # Allowed values are shutdown-sessions
        on-marked-up: String # Allowed values are shutdown-backup-sessions
        pool_low_conn: Integer 
        pool_max_conn: Integer 
        pool_purge_delay: Integer 
        proto: String # Allowed pattern: ^[^\s]+$
        proxy-v2-options: Array of String 
        redir: String 
        resolve-net: String # Allowed pattern: ^([A-Za-z0-9.:/]+)(,[A-Za-z0-9.:/]+)*$
        resolve-prefer: String # Allowed values are ipv4, ipv6
        resolve_opts: String # Allowed pattern: ^(allow-dup-ip|ignore-weight|prevent-dup-ip)(,(allow-dup-ip|ignore-weight|prevent-dup-ip))*$
        resolvers: String # Allowed pattern: ^[^\s]+$
        rise: Integer 
        send-proxy: String # Allowed values are enabled, disabled
        send-proxy-v2: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl: String # Allowed values are enabled, disabled
        send_proxy_v2_ssl_cn: String # Allowed values are enabled, disabled
        set-proxy-v2-tlv-fmt: 
        id: String 
        value: String 
        shard: Integer 
        sigalgs: String 
        slowstart: Integer 
        sni: String # Allowed pattern: ^[^\s]+$
        socks4: String # Allowed pattern: ^[^\s]+$
        source: String 
        ssl: String # Allowed values are enabled, disabled
        ssl_cafile: String # Allowed pattern: ^[^\s]+$
        ssl_certificate: String # Allowed pattern: ^[^\s]+$
        ssl_max_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_min_ver: String # Allowed values are SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3
        ssl_reuse: String # Allowed values are enabled, disabled
        stick: String # Allowed values are enabled, disabled
        tcp_ut: Integer 
        tfo: String # Allowed values are enabled, disabled
        tls_tickets: String # Allowed values are enabled, disabled
        track: String 
        verify: String # Allowed values are none, required
        verifyhost: String 
        weight: Integer 
        ws: String # Allowed values are auto, h1, h2
      source: 
        address: String # Allowed pattern: ^[^\s]+$
        port: Integer Minimum: 1 Maximum: 65535 
      timeout: Integer 
      url: String # Allowed pattern: ^[^\s]+$
      xmodified: Boolean

wurfl_options

[object]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    wurfl_options: 
      cache_size: Integer 
      data_file: String 
      information_list: String 
      information_list_separator: String 
      patch_file: String

zero_warning

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    zero_warning: Boolean

Log Targets

CRD version: 1.11
API version: ingress.v1.haproxy.com/v1

address

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - address: String # Allowed pattern: ^[^\s]+$

facility

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - facility: String # Allowed values are kern, user, mail, daemon, auth, syslog, lpr, news, uucp, cron, auth2, ftp, ntp, audit, alert, cron2, local0, local1, local2, local3, local4, local5, local6, local7

format

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - format: String # Allowed values are local, rfc3164, rfc5424, priority, short, timed, iso, raw

global

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - global: Boolean

index

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - index: Integer

length

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - length: Integer

level

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - level: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

minlevel

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - minlevel: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

nolog

[boolean]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - nolog: Boolean

sample_range

[string]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - sample_range: String

sample_size

[integer]

apiVersion: "ingress.v1.haproxy.com/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - sample_size: Integer

Global config

CRD version: 1.10
API version: core.haproxy.org/v1

busy_polling

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    busy_polling: Boolean

ca_base

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ca_base: String

chroot

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    chroot: String # Allowed pattern: ^[^\s]+$

cpu_maps

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cpu_maps: 
        - cpu_set: String 
          process: String

crt_base

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    crt_base: String

daemon

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    daemon: String # Allowed values are enabled, disabled

external_check

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    external_check: Boolean

gid

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    gid: Integer

group

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    group: String # Allowed pattern: ^[^\s]+$

h1_case_adjust

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_case_adjust: 
        - from: String 
          to: String

h1_case_adjust_file

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_case_adjust_file: String

hard_stop_after

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    hard_stop_after: Integer | null

localpeer

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    localpeer: String # Allowed pattern: ^[^\s]+$

log_send_hostname

[object]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    log_send_hostname: 
      enabled: String # Allowed values are enabled, disabled
      param: String # Allowed pattern: ^[^\s]+$

lua_loads

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_loads: 
        - file: String # Allowed pattern: ^[^\s]+$

lua_prepend_path

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_prepend_path: 
        - path: String # Allowed pattern: ^[^\s]+$
          type: String # Allowed values are path, cpath

master-worker

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    master-worker: Boolean

max_spread_checks

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    max_spread_checks: Integer

maxcompcpuusage

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxcompcpuusage: Integer

maxcomprate

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxcomprate: Integer

maxconn

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconn: Integer

maxconnrate

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconnrate: Integer

maxpipes

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxpipes: Integer

maxsessrate

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsessrate: Integer

maxsslconn

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsslconn: Integer

maxsslrate

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsslrate: Integer

maxzlibmem

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxzlibmem: Integer

nbproc

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbproc: Integer

nbthread

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbthread: Integer

noepoll

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noepoll: Boolean

noevports

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noevports: Boolean

nogetaddrinfo

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nogetaddrinfo: Boolean

nokqueue

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nokqueue: Boolean

nopoll

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nopoll: Boolean

noreuseport

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noreuseport: Boolean

nosplice

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nosplice: Boolean

pidfile

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    pidfile: String

profiling_tasks

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    profiling_tasks: String # Allowed values are auto, on, off

runtime_apis

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    runtime_apis: 
        - address: String # Allowed pattern: ^[^\s]+$
          mode: String # Allowed pattern: ^[^\s]+$
          level: String # Allowed values are user, operator, admin
          process: String # Allowed pattern: ^[^\s]+$
          exposeFdListeners: Boolean

server_state_base

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_base: String # Allowed pattern: ^[^\s]+$

server_state_file

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_file: String # Allowed pattern: ^[^\s]+$

spread_checks

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    spread_checks: Integer

ssl_default_bind_ciphers

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphers: String

ssl_default_bind_ciphersuites

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphersuites: String

ssl_default_bind_options

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_options: String

ssl_default_server_ciphers

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphers: String

ssl_default_server_ciphersuites

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphersuites: String

ssl_default_server_options

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_options: String

ssl_mode_async

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_mode_async: String # Allowed values are enabled, disabled

stats_timeout

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    stats_timeout: Integer | null

tune_options

[object]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_options: 
      buffers_limit: Integer | null 
      buffers_reserve: Integer Minimum: 2 
      bufsize: Integer 
      comp_maxlevel: Integer 
      fail_alloc: Boolean
      h2_header_table_size: Integer Maximum: 65535 
      h2_initial_window_size: Integer | null 
      h2_max_concurrent_streams: Integer 
      h2_max_frame_size: Integer 
      http_cookielen: Integer 
      http_logurilen: Integer 
      http_maxhdr: Integer Minimum: 1 Maximum: 32767 
      idle_pool_shared: String # Allowed values are enabled, disabled
      idletimer: Integer | null Minimum: 0 Maximum: 65535 
      listener_multi_queue: String # Allowed values are enabled, disabled
      lua_forced_yield: Integer 
      lua_maxmem: Boolean
      lua_service_timeout: Integer | null 
      lua_session_timeout: Integer | null 
      lua_task_timeout: Integer | null 
      maxaccept: Integer 
      maxpollevents: Integer 
      maxrewrite: Integer 
      pattern_cache_size: Integer | null 
      pipesize: Integer 
      pool_high_fd_ratio: Integer 
      pool_low_fd_ratio: Integer 
      rcvbuf_client: Integer | null 
      rcvbuf_server: Integer | null 
      recv_enough: Integer 
      runqueue_depth: Integer 
      sched_low_latency: String # Allowed values are enabled, disabled
      sndbuf_client: Integer | null 
      sndbuf_server: Integer | null 
      ssl_cachesize: Integer | null 
      ssl_capture_buffer_size: Integer | null 
      ssl_ctx_cache_size: Integer 
      ssl_default_dh_param: Integer 
      ssl_force_private_cache: Boolean
      ssl_keylog: String # Allowed values are enabled, disabled
      ssl_lifetime: Integer | null 
      ssl_maxrecord: Integer | null 
      vars_global_max_size: Integer | null 
      vars_proc_max_size: Integer | null 
      vars_reqres_max_size: Integer | null 
      vars_sess_max_size: Integer | null 
      vars_txn_max_size: Integer | null 
      zlib_memlevel: Integer Minimum: 1 Maximum: 9 
      zlib_windowsize: Integer Minimum: 8 Maximum: 15

tune_ssl_default_dh_param

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_ssl_default_dh_param: Integer

uid

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    uid: Integer

user

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    user: String # Allowed pattern: ^[^\s]+$

Log Targets

CRD version: 1.10
API version: core.haproxy.org/v1

index

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - index: Integer | null

address

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - address: String # Allowed pattern: ^[^\s]+$

length

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - length: Integer

format

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - format: String # Allowed values are rfc3164, rfc5424, short, raw

facility

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - facility: String # Allowed values are kern, user, mail, daemon, auth, syslog, lpr, news, uucp, cron, auth2, ftp, ntp, audit, alert, cron2, local0, local1, local2, local3, local4, local5, local6, local7

level

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - level: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

minlevel

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - minlevel: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

Global config

CRD version: 1.9
API version: core.haproxy.org/v1

busy_polling

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    busy_polling: Boolean

ca_base

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ca_base: String

chroot

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    chroot: String # Allowed pattern: ^[^\s]+$

cpu_maps

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cpu_maps: 
        - cpu_set: String 
          process: String

crt_base

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    crt_base: String

daemon

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    daemon: String # Allowed values are enabled, disabled

external_check

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    external_check: Boolean

gid

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    gid: Integer

group

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    group: String # Allowed pattern: ^[^\s]+$

h1_case_adjust

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_case_adjust: 
        - from: String 
          to: String

h1_case_adjust_file

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    h1_case_adjust_file: String

hard_stop_after

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    hard_stop_after: Integer | null

localpeer

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    localpeer: String # Allowed pattern: ^[^\s]+$

log_send_hostname

[object]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    log_send_hostname: 
      enabled: String # Allowed values are enabled, disabled
      param: String # Allowed pattern: ^[^\s]+$

lua_loads

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_loads: 
        - file: String # Allowed pattern: ^[^\s]+$

lua_prepend_path

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_prepend_path: 
        - path: String # Allowed pattern: ^[^\s]+$
          type: String # Allowed values are path, cpath

master-worker

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    master-worker: Boolean

max_spread_checks

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    max_spread_checks: Integer

maxcompcpuusage

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxcompcpuusage: Integer

maxcomprate

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxcomprate: Integer

maxconn

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconn: Integer

maxconnrate

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconnrate: Integer

maxpipes

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxpipes: Integer

maxsessrate

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsessrate: Integer

maxsslconn

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsslconn: Integer

maxsslrate

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxsslrate: Integer

maxzlibmem

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxzlibmem: Integer

nbproc

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbproc: Integer

nbthread

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbthread: Integer

noepoll

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noepoll: Boolean

noevports

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noevports: Boolean

nogetaddrinfo

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nogetaddrinfo: Boolean

nokqueue

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nokqueue: Boolean

nopoll

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nopoll: Boolean

noreuseport

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    noreuseport: Boolean

nosplice

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nosplice: Boolean

pidfile

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    pidfile: String

profiling_tasks

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    profiling_tasks: String # Allowed values are auto, on, off

runtime_apis

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    runtime_apis: 
        - address: String # Allowed pattern: ^[^\s]+$
          mode: String # Allowed pattern: ^[^\s]+$
          level: String # Allowed values are user, operator, admin
          process: String # Allowed pattern: ^[^\s]+$
          exposeFdListeners: Boolean

server_state_base

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_base: String # Allowed pattern: ^[^\s]+$

server_state_file

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_file: String # Allowed pattern: ^[^\s]+$

spread_checks

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    spread_checks: Integer

ssl_default_bind_ciphers

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphers: String

ssl_default_bind_ciphersuites

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphersuites: String

ssl_default_bind_options

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_options: String

ssl_default_server_ciphers

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphers: String

ssl_default_server_ciphersuites

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphersuites: String

ssl_default_server_options

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_options: String

ssl_mode_async

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_mode_async: String # Allowed values are enabled, disabled

stats_timeout

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    stats_timeout: Integer | null

tune_options

[object]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_options: 
      buffers_limit: Integer | null 
      buffers_reserve: Integer Minimum: 2 
      bufsize: Integer 
      comp_maxlevel: Integer 
      fail_alloc: Boolean
      h2_header_table_size: Integer Maximum: 65535 
      h2_initial_window_size: Integer | null 
      h2_max_concurrent_streams: Integer 
      h2_max_frame_size: Integer 
      http_cookielen: Integer 
      http_logurilen: Integer 
      http_maxhdr: Integer Minimum: 1 Maximum: 32767 
      idle_pool_shared: String # Allowed values are enabled, disabled
      idletimer: Integer | null Minimum: 0 Maximum: 65535 
      listener_multi_queue: String # Allowed values are enabled, disabled
      lua_forced_yield: Integer 
      lua_maxmem: Boolean
      lua_service_timeout: Integer | null 
      lua_session_timeout: Integer | null 
      lua_task_timeout: Integer | null 
      maxaccept: Integer 
      maxpollevents: Integer 
      maxrewrite: Integer 
      pattern_cache_size: Integer | null 
      pipesize: Integer 
      pool_high_fd_ratio: Integer 
      pool_low_fd_ratio: Integer 
      rcvbuf_client: Integer | null 
      rcvbuf_server: Integer | null 
      recv_enough: Integer 
      runqueue_depth: Integer 
      sched_low_latency: String # Allowed values are enabled, disabled
      sndbuf_client: Integer | null 
      sndbuf_server: Integer | null 
      ssl_cachesize: Integer | null 
      ssl_capture_buffer_size: Integer | null 
      ssl_ctx_cache_size: Integer 
      ssl_default_dh_param: Integer 
      ssl_force_private_cache: Boolean
      ssl_keylog: String # Allowed values are enabled, disabled
      ssl_lifetime: Integer | null 
      ssl_maxrecord: Integer | null 
      vars_global_max_size: Integer | null 
      vars_proc_max_size: Integer | null 
      vars_reqres_max_size: Integer | null 
      vars_sess_max_size: Integer | null 
      vars_txn_max_size: Integer | null 
      zlib_memlevel: Integer Minimum: 1 Maximum: 9 
      zlib_windowsize: Integer Minimum: 8 Maximum: 15

tune_ssl_default_dh_param

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_ssl_default_dh_param: Integer

uid

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    uid: Integer

user

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    user: String # Allowed pattern: ^[^\s]+$

Log Targets

CRD version: 1.9
API version: core.haproxy.org/v1

index

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - index: Integer | null

address

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - address: String # Allowed pattern: ^[^\s]+$

length

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - length: Integer

format

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - format: String # Allowed values are rfc3164, rfc5424, short, raw

facility

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - facility: String # Allowed values are kern, user, mail, daemon, auth, syslog, lpr, news, uucp, cron, auth2, ftp, ntp, audit, alert, cron2, local0, local1, local2, local3, local4, local5, local6, local7

level

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - level: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

minlevel

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - minlevel: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

Global config

CRD version: 1.8
API version: core.haproxy.org/v1

chroot

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    chroot: String # Allowed pattern: ^[^\s]+$

group

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    group: String # Allowed pattern: ^[^\s]+$

hard_stop_after

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    hard_stop_after: Integer

user

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    user: String # Allowed pattern: ^[^\s]+$

daemon

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    daemon: String # Allowed values are enabled, disabled

nbproc

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbproc: Integer

nbthread

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbthread: Integer

master-worker

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    master-worker: Boolean

external_check

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    external_check: Boolean

pidfile

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    pidfile: String

maxconn

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconn: Integer

server_state_base

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_base: String # Allowed pattern: ^[^\s]+$

tune_ssl_default_dh_param

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_ssl_default_dh_param: Integer

ssl_default_bind_options

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_options: String

ssl_default_bind_ciphers

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphers: String

ssl_default_bind_ciphersuites

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphersuites: String

ssl_default_server_options

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_options: String

ssl_default_server_ciphers

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphers: String

ssl_default_server_ciphersuites

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphersuites: String

ssl_mode_async

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_mode_async: String # Allowed values are enabled, disabled

cpu_maps

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cpu_maps: 
        - process: String 
          cpu_set: String

runtime_apis

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    runtime_apis: 
        - address: String # Allowed pattern: ^[^\s]+$
          mode: String # Allowed pattern: ^[^\s]+$
          level: String # Allowed values are user, operator, admin
          process: String # Allowed pattern: ^[^\s]+$
          exposeFdListeners: Boolean

stats_timeout

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    stats_timeout: Integer

lua_loads

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_loads: 
        - file: String # Allowed pattern: ^[^\s]+$

log_send_hostname

[object]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    log_send_hostname: 
      enabled: String # Allowed values are enabled, disabled
      param: String # Allowed pattern: ^[^\s]+$

Log Targets

CRD version: 1.8
API version: core.haproxy.org/v1

index

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - index: Integer | null

address

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - address: String # Allowed pattern: ^[^\s]+$

length

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - length: Integer

format

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - format: String # Allowed values are rfc3164, rfc5424, short, raw

facility

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - facility: String # Allowed values are kern, user, mail, daemon, auth, syslog, lpr, news, uucp, cron, auth2, ftp, ntp, audit, alert, cron2, local0, local1, local2, local3, local4, local5, local6, local7

level

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - level: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

minlevel

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - minlevel: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

Global config

CRD version: 1.7
API version: core.haproxy.org/v1

chroot

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    chroot: String # Allowed pattern: ^[^\s]+$

group

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    group: String # Allowed pattern: ^[^\s]+$

hard_stop_after

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    hard_stop_after: Integer

user

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    user: String # Allowed pattern: ^[^\s]+$

daemon

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    daemon: String # Allowed values are enabled, disabled

nbproc

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbproc: Integer

nbthread

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    nbthread: Integer

master-worker

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    master-worker: Boolean

external_check

[boolean]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    external_check: Boolean

pidfile

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    pidfile: String

maxconn

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    maxconn: Integer

server_state_base

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    server_state_base: String # Allowed pattern: ^[^\s]+$

tune_ssl_default_dh_param

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    tune_ssl_default_dh_param: Integer

ssl_default_bind_options

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_options: String

ssl_default_bind_ciphers

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphers: String

ssl_default_bind_ciphersuites

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_bind_ciphersuites: String

ssl_default_server_options

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_options: String

ssl_default_server_ciphers

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphers: String

ssl_default_server_ciphersuites

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_default_server_ciphersuites: String

ssl_mode_async

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    ssl_mode_async: String # Allowed values are enabled, disabled

cpu_maps

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    cpu_maps: 
        - process: String 
          cpu_set: String

runtime_apis

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    runtime_apis: 
        - address: String # Allowed pattern: ^[^\s]+$
          mode: String # Allowed pattern: ^[^\s]+$
          level: String # Allowed values are user, operator, admin
          process: String # Allowed pattern: ^[^\s]+$
          exposeFdListeners: Boolean

stats_timeout

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    stats_timeout: Integer

lua_loads

[array]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    lua_loads: 
        - file: String # Allowed pattern: ^[^\s]+$

log_send_hostname

[object]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  config:
    log_send_hostname: 
      enabled: String # Allowed values are enabled, disabled
      param: String # Allowed pattern: ^[^\s]+$

Log Targets

CRD version: 1.7
API version: core.haproxy.org/v1

index

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - index: Integer | null

address

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - address: String # Allowed pattern: ^[^\s]+$

length

[integer]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - length: Integer

format

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - format: String # Allowed values are rfc3164, rfc5424, short, raw

facility

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - facility: String # Allowed values are kern, user, mail, daemon, auth, syslog, lpr, news, uucp, cron, auth2, ftp, ntp, audit, alert, cron2, local0, local1, local2, local3, local4, local5, local6, local7

level

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - level: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

minlevel

[string]

apiVersion: "core.haproxy.org/v1"
kind: Global
metadata:
  name: example-global
  namespace: default
spec:
  log_targets:
    - minlevel: String # Allowed values are emerg, alert, crit, err, warning, notice, info, debug

Do you have any suggestions on how we can improve the content of this page?

Previous page Frontend CRD Next page Ingress annotations

Product Documentation

API Documentation

Configuration Documentation

Selected version

Install the Global custom resource Jump to heading #

Use the Global custom resource Jump to heading #

Global config

anonkey

botmgmt

busy_polling

ca_base

chroot

close_spread_time

cluster_secret

cook_chal.set_cookie_attributes

cpu_maps

crt_base

daemon

default_path

description

device_atlas_options

expose_experimental_directives

external_check

fifty_one_degrees_options

fingerprint_ssl_bufsize

gid

grace

group

h1_accept_payload_with_any_method

h1_case_adjust

h1_case_adjust_file

h1_do_not_close_on_insecure_transfer_encoding

h2_workaround_bogus_websocket_clients

hard_stop_after

httpclient_resolvers_disabled

httpclient_resolvers_id

httpclient_resolvers_prefer

httpclient_retries

httpclient_ssl_ca_file

httpclient_ssl_verify

httpclient_timeout_connect

insecure_fork_wanted

insecure_setuid_wanted

issuers_chain_path

limited_quic

localpeer

log_send_hostname

lua_load_per_thread

lua_loads

lua_prepend_path

master-worker

max_spread_checks

maxcompcpuusage

maxcomprate

maxconn

maxconnrate

maxmind_cache_size

maxmind_debug

maxmind_load

maxmind_update

maxpipes

maxsessrate

maxsslconn

maxsslrate

maxzlibmem

modsecurity-deny-blocking-io

modsecurity-max-cpu-action

modsecurity-max-cpu-backoff-delay

modsecurity-max-cpu-backoff-retries

modsecurity-max-cpu-period

modsecurity-max-cpu-usage

module-loads

module-path

mworker_max_reloads

nbproc

nbthread

no-quic

node

noepoll

noevports

Install the Global custom resource Jump to heading

Use the Global custom resource Jump to heading