القائمة
Configuration schema reference: complete field definitions for Controller (YAML) and Gateway (YAML) configuration and the EdgionGatewayConfig CRD.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
| name | config-reference |
| description | Configuration schema reference: complete field definitions for Controller (YAML) and Gateway (YAML) configuration and the EdgionGatewayConfig CRD. |
Configuration has three layers — first decide which layer to change, then look up its schema.
| Layer | Carrier | Scope | Change Frequency |
|---|---|---|---|
| Controller process configuration | YAML file | A single Controller instance | Low (loaded at startup) |
| Gateway process configuration | YAML file | A single Gateway instance | Low (loaded at startup) |
| Runtime configuration | EdgionGatewayConfig CRD | All Gateways under the same GatewayClass | Medium (takes effect dynamically) |
| File | Topic |
|---|---|
| 00-controller-config.md | Full Controller YAML schema |
| 01-gateway-config.md | Full Gateway YAML schema |
| 02-edgion-gateway-config.md | EdgionGatewayConfig CRD schema |
| 03-auth-bootstrap.md | Admin token bootstrap — token-only (Istio-style bearer) auth, EDGION_ADMIN_TOKEN / admin_token, 503 fail-close, token rotation |
| I want to change… | Change this layer |
|---|---|
| Controller gRPC/Admin listen address | Controller YAML server |
| conf_center mode (FileSystem/K8s) | Controller YAML conf_center |
| Controller address that the Gateway connects to | Gateway YAML gateway |
| System log level/format | Controller YAML logging / Gateway YAML logging |
| Access/SSL/TCP/TLS/UDP log toggles and paths | Gateway YAML *_log sections |
| Pingora worker thread count/connection pool | Gateway YAML server |
| Global HTTP timeouts | EdgionGatewayConfig CRD spec.httpTimeout |
| Global retry count | EdgionGatewayConfig CRD spec.maxRetries (top-level field; spec.httpTimeout.backend.defaultMaxRetries is deprecated) |
| Global real IP extraction | EdgionGatewayConfig CRD spec.realIp |
| Global security protection (XFF restriction, SNI match) | EdgionGatewayConfig CRD spec.securityProtect |
| Global plugins | EdgionGatewayConfig CRD spec.globalPluginsRef |
Path normalization (reject requests containing %2F / invalid percent-encoding) | EdgionGatewayConfig CRD spec.pathNormalization |
Conventions shared by the in-repo binaries (edgion-controller, edgion-gateway, edgion-cli) — project overview, command line / directory / config-path conventions, Core layering conventions, resource system.
KubernetesCenter implementation — K8s Reflector watching, leader election, HA mode, ResourceController lifecycle, status writeback.
ConfigCenter subsystem — ConfCenter trait abstraction, FileSystemCenter and KubernetesCenter implementations, unified Workqueue + ResourceProcessor pipeline.
edgion-controller control plane architecture — overall design, startup/shutdown, Admin API, ConfigCenter, Workqueue, ResourceProcessor, Requeue, CacheServer, ACME service.
Route matching overview — multi-stage pipeline (Listener→Domain→Path→DeepMatch), per-listener isolation, registration flow, atomic swap.
TLS subsystem overview — TLS Store, SNI matching, certificate management, BoringSSL/OpenSSL backend selection.
