Networking describes inbound and outbound interfaces of the dataplane.
Public IP on which the dataplane is accessible in the network.
In some situation, dataplane resides in a private network and not reachable via 'address'. advertisedAddress is configured with public routable address for such dataplane so that other dataplanes in the mesh can connect to it over advertisedAddress and not via address Note: Envoy binds to the address not advertisedAddress
Gateway describes configuration of gateway of the dataplane.
Tags associated with a gateway (e.g., Kong, Contour, etc) this dataplane is deployed next to, e.g. service=gateway, env=prod.
servicetag is mandatory.
Type of gateway this dataplane manages. The default is a DELEGATED gateway, which is an external proxy. The BUILTIN gateway type causes the dataplane proxy itself to be configured as a gateway.
Inbound describes a list of inbound interfaces of the dataplane.
Outbound describes a list of outbound interfaces of the dataplane.
TransparentProxying describes configuration for transparent proxying.
Port on which all inbound traffic is being transparently redirected.
Port on which all outbound traffic is being transparently redirected.
List of services that will be access directly via IP:PORT
Port on which all IPv6 inbound traffic is being transparently redirected.
List of reachable services (represented by the value of kuma.io/service) via transparent proxying. Setting an explicit list can dramatically improve the performance of the mesh. If not specified, all services in the mesh are reachable.
Admin contains configuration related to Envoy Admin API
Port on which Envoy Admin API server will be listening
Configuration for metrics that should be collected and exposed by the dataplane.
Settings defined here will override their respective defaults defined at a Mesh level.
Name of the backend, can be then used in Mesh.metrics.enabledBackend
Type of the backend (Kuma ships with 'prometheus')
Configuration of the backend
Probes describes list of endpoints which will redirect traffic from insecure port to localhost path