ProxyEndpoint.spec.routes[].domain
Domain is the domain to be added to the proxy allowlist. Absolute domain names (e.g., example.com) and wildcard patterns are supported. There are two types of supported wildcard patterns: 1) Prefix wildcard (*): Matches any subdomain or prefix. Can only appear as the leftmost character of the domain. For example: - *.example.com matches foo.example.com and bar.example.com - *test.com matches footest.com and bartest.com The wildcard character is taken literally; *.*.com is not valid. 2) Single-segment placeholder (%): Matches exactly one domain segment. Can be used as the leftmost segment or within the domain as a complete label. For example: - %.example.com matches foo.example.com but not foo.bar.example.com - ec2.%.aws.com matches ec2.us-east-1.aws.com but not ec2.us.east.aws.com The placeholder must be a complete label; %test.com is not valid. Both types of wildcards may be combined (e.g., *.%.example.com). However, overly broad wildcard patterns that match a large number of domains (e.g., "*", "%", "*.*", "*.com", "%.com", "*.co.uk") are not allowed. A webhook validates that patterns include sufficient concrete domain content. Domain entries should not include URL schemes (e.g., "https://"). For example, "example.com" is valid, but "https://example.com" is not. It is assumed that all provided domains use HTTPS, and the proxy will route accordingly.
| Field / Type | Description |
|---|---|
ProxyEndpoint.spec.routes[].domain | Domain is the domain to be added to the proxy allowlist. Absolute domain names (e.g., example.com) and wildcard patterns are supported. There are two types of supported wildcard patterns: 1) Prefix wildcard (*): Matches any subdomain or prefix. Can only appear as the leftmost character of the domain. For example: - *.example.com matches foo.example.com and bar.example.com - *test.com matches footest.com and bartest.com The wildcard character is taken literally; *.*.com is not valid. 2) Single-segment placeholder (%): Matches exactly one domain segment. Can be used as the leftmost segment or within the domain as a complete label. For example: - %.example.com matches foo.example.com but not foo.bar.example.com - ec2.%.aws.com matches ec2.us-east-1.aws.com but not ec2.us.east.aws.com The placeholder must be a complete label; %test.com is not valid. Both types of wildcards may be combined (e.g., *.%.example.com). However, overly broad wildcard patterns that match a large number of domains (e.g., "*", "%", "*.*", "*.com", "%.com", "*.co.uk") are not allowed. A webhook validates that patterns include sufficient concrete domain content. Domain entries should not include URL schemes (e.g., "https://"). For example, "example.com" is valid, but "https://example.com" is not. It is assumed that all provided domains use HTTPS, and the proxy will route accordingly.
|