菜单
Configuration schema reference: complete field definitions for Controller (YAML) and Gateway (YAML) configuration and the EdgionGatewayConfig CRD.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Conventions shared by the in-repo binaries (edgion-controller, edgion-gateway, edgion-cli) — project overview, command line / directory / config-path conventions, Core layering conventions, resource system.
KubernetesCenter implementation — K8s Reflector watching, leader election, HA mode, ResourceController lifecycle, status writeback.
ConfigCenter subsystem — ConfCenter trait abstraction, FileSystemCenter and KubernetesCenter implementations, unified Workqueue + ResourceProcessor pipeline.
edgion-controller control plane architecture — overall design, startup/shutdown, Admin API, ConfigCenter, Workqueue, ResourceProcessor, Requeue, CacheServer, ACME service.
Route matching overview — multi-stage pipeline (Listener→Domain→Path→DeepMatch), per-listener isolation, registration flow, atomic swap.
TLS subsystem overview — TLS Store, SNI matching, certificate management, BoringSSL/OpenSSL backend selection.
| name | config-reference |
| description | Configuration schema reference: complete field definitions for Controller (YAML) and Gateway (YAML) configuration and the EdgionGatewayConfig CRD. |
Configuration has three layers — first decide which layer to change, then look up its schema.
| Layer | Carrier | Scope | Change Frequency |
|---|---|---|---|
| Controller process configuration | YAML file | A single Controller instance | Low (loaded at startup) |
| Gateway process configuration | YAML file | A single Gateway instance | Low (loaded at startup) |
| Runtime configuration | EdgionGatewayConfig CRD | All Gateways under the same GatewayClass | Medium (takes effect dynamically) |
| File | Topic |
|---|---|
| 00-controller-config.md | Full Controller YAML schema |
| 01-gateway-config.md | Full Gateway YAML schema |
| 02-edgion-gateway-config.md | EdgionGatewayConfig CRD schema |
| 03-auth-bootstrap.md | Admin token bootstrap — token-only (Istio-style bearer) auth, EDGION_ADMIN_TOKEN / admin_token, 503 fail-close, token rotation |
| I want to change… | Change this layer |
|---|---|
| Controller gRPC/Admin listen address | Controller YAML server |
| conf_center mode (FileSystem/K8s) | Controller YAML conf_center |
| Controller address that the Gateway connects to | Gateway YAML gateway |
| System log level/format | Controller YAML logging / Gateway YAML logging |
| Access/SSL/TCP/TLS/UDP log toggles and paths | Gateway YAML *_log sections |
| Pingora worker thread count/connection pool | Gateway YAML server |
| Global HTTP timeouts | EdgionGatewayConfig CRD spec.httpTimeout |
| Global retry count | EdgionGatewayConfig CRD spec.maxRetries (top-level field; spec.httpTimeout.backend.defaultMaxRetries is deprecated) |
| Global real IP extraction | EdgionGatewayConfig CRD spec.realIp |
| Global security protection (XFF restriction, SNI match) | EdgionGatewayConfig CRD spec.securityProtect |
| Global plugins | EdgionGatewayConfig CRD spec.globalPluginsRef |
Path normalization (reject requests containing %2F / invalid percent-encoding) | EdgionGatewayConfig CRD spec.pathNormalization |
