Apigee Operator for Kubernetes resource reference

This pageapplies toApigee andApigee hybrid.

View Apigee Edge documentation.

This page is a reference for each Kubernetes resource that is supported by the Apigee Operator for Kubernetes. Unless specifically noted as Optional, all fields are required.

APIProduct

Field	Description
`apiVersion` Type:`string`	`apim.googleapis.com/v1`
`kind` Type:`string`	`APIProduct`
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:APIProductSpec	`spec` defines the desired state of the APIProductSet.

APIProductSpec

Field	Description
`name` Type:`string`	The name of the API Product.
`approvalType` Type:`string`	Flag that specifies how API keys are approved to access the APIs defined by the API product.If set to`manual`, the consumer key is generated and returned as`pending`.In this case, the API keys won't work until they are explicitly approved. If set to`auto`, the consumer key is generated and returned as`approved`and can be used immediately.
`description` Type:`string`	Description of the API product.
`displayName` Type:`string`	Name displayed in the UI or developer portal to developers registering for API access.
`analytics` Type: Analytics	Defines whether analytics should be collected for operations associated with this product.
`enforcementRefs` Type:`Array`	Array ofEnforcementRef resources to apply to the API product.
`attributes` Type:`Array`	Array of attributes that may be used to extend the default API product profile with customer-specific metadata.

EnforcementRef

Field	Description
`name` Type:`string`	The name of the target resource.
`kind` Type:`string`	`APIMExtensionPolicy`
`group` Type:`string`	TheAPIGroup for Apigee APIM Operator, which is`apim.googleapis.com`.
`namespace` Type:`string`	(Optional) The namespace of the referent. When unspecified, the local namespace is inferred.

Attribute

Field	Description
`name` Type:`string`	The key of the attribute.
`value` Type:`string`	The value of the attribute.

APIOperationSet

Field	Description
`apiVersion` Type:`string`	`apim.googleapis.com/v1`
`kind` Type:`string`	`APIOperationSet`
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:APIOperationSetSpec	Defines the desired state of the APIOperationSet.

APIOperationSetSpec

Field	Description
`quota` Type:Quota	Quota definition.
`restOperations` Type:`Array`	Array ofRESTOperation definitions.
`apiProductRefs` Type:`Array`	Array ofAPIProductRef resources, or references to API Products where theRESTOperations should apply.

Quota

Field	Description
`limit` Type:`integer`	Number of request messages permitted per app by the API product for the specified`interval` and`timeUnit`.
`interval` Type:`integer`	Time interval over which the number of request messages is calculated.
`timeUnit` Type:`string`	Time unit defined for the interval. Valid values include`minute`,`hour`,`day`, or`month`.

RESTOperation

Field	Description
`name` Type:`string`	The name of the of the REST operation.
`path` Type:`string`	In combination with`methods`,`path` is the HTTP path to match for aquota and/or for anAPI product.
`methods` Type:`array`	In combination with`path`,`methods` is the list (as`strings`) of applicable http methods to match for aquota and/or for anAPI product.

APIProductRef

Field	Description
`name` Type:`string`	The name of the target resource.
`kind` Type:`string`	`APIProduct`
`group` Type:`string`	TheAPIGroup for Apigee APIM Operator, which is`apim.googleapis.com`.
`namespace` Type:`string`	(Optional) The namespace of the referent. When unspecified, the local namespace is inferred.

APIMExtensionPolicy

Field	Description
`apiVersion` Type:`string`	`apim.googleapis.com/v1`
`kind` Type:`string`	APIMExtensionPolicy
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:APIMExtensionPolicySpec	Defines the desired state of APIMExtensionPolicy.

APIMExtensionPolicySpec

Field	Description
`apigeeEnv`	(Optional) Apigee environment. If not provided, a new environment is created and attached to all available instances. If provided, this environment must be attached to all available instances while using an external global load balancer.
`failOpen` Type:`boolean`	Specifies whether or not tofail open when the Apigee runtime is unreachable. If set to`true`, calls to the Apigee runtime will be treated as successful even if the runtime is unreachable.
`timeout` Type:`string`	Specifies the timeout period before calls to the Apigee runtime fail, in seconds or milliseconds. For example,`10s`.
`targetRef` Type:ExtensionServerRef	Identifies the Google Kubernetes Engine Gateway where the extension should be installed.
`location` Type:`string`	Identifies the Google Cloud location where APIMExtensionPolicy is enforced.
`supportedEvents` Type:`List` of events	Specifies the list of extension processor events sent to Apigee. These include the following: `"REQUEST_HEADERS"` `"RESPONSE_HEADERS"` `"REQUEST_BODY"` (Preview) `"RESPONSE_BODY"` (Preview) `"REQUEST_TRAILERS"` `"RESPONSE_TRAILERS"`

ExtensionServerRef

Field	Description
`name` Type:`string`	The name of the target resource.
`kind` Type:`string`	Specifies the`kind` of the target resource, for example,`Gateway` or`Service`.
`group` Type:`string`	TheAPIGroup for Apigee APIM Operator, which is`apim.googleapis.com`.
`namespace` Type:`string`	(Optional) The namespace of the referent. When unspecified, the local namespace is inferred.

ApigeeGatewayPolicy

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	ApigeeGatewayPolicy
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:ApigeeGatewayPolicySpec	Defines the desired state of ApigeeGatewayPolicy.

ApigeeGatewayPolicySpec

Field	Description
`ref` Type:ExtensionServerRef	Refers to the APIM template created to govern the policies applied to the GKE Gateway.
`targetRef` Type:ExtensionServerRef	Refers to the APIM extension policy that should apply this specific Gateway policy. Indirectly refers to the GKE Gateway.
`serviceAccount`	(Optional) Specifies the service account used to generate Google auth tokens in an Apigee ProApigee proxy.

ApimTemplate

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	ApimTemplate
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:ApimTemplateSpec	Defines the desired state of ApimTemplate.

ApimTemplateSpec

Field	Description
`templates` Type:`list`	A list ofApimTemplateFlow resources that specify the policies that are to be executed in the request flow.
`apimTemplateRule` Type:ExtensionServerRef	Specifies the APIM template rule that should be used to validate the applied policies.

ApimTemplateFlow

Field	Description
`policies` Type:`list`ConditionalParameterReference	A list ofConditionalParameterReference resources that specify the ordered list of policies to be executed as part of the request flow.
`condition` Type:`string`	Specifies the conditions for executing this resource.

ConditionalParameterReference

Field	Description
`condition` `Type:string`	Specifies the conditions for executing this resource.

ApimTemplateRule

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	ApimTemplateRule
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:ApimTemplateRuleSpec	Defines the desired state of ApimTemplateRule.

ApimTemplateRuleSpec

Field	Description
`requiredList`	The list of policies (as`strings`) thatmust be present in the ApimTemplate.
`denyList`	The list of policies (as`strings`) thatshould not be present in the ApimTemplate.
`allowList`	The list of policies (as`strings`) thatmay be present in the ApimTemplate but are not required.
`override` Type:`boolean`	Overrides updates to the APIM template rule in the event that APIM templates using the rule exist. Valid values are`true` or`false`.

AssignMessage (Google token injection)

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	AssignMessage
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:AssignMessageBean	Defines the desired state of the AssignMessage policy.

AssignMessageBean

Field	Description
`setActions` Type:`array`	Array of`SetActionsBean` objects. Replaces values of existing properties on the request or response, as specified by the`AssignTo` element. If the headers or parameters are already present in the original message,`setActions` overwrites the values. Otherwise,`setActions` adds new headers or parameters as specified.
`AssignTo` Type:AssignToBean	Specifies which message the AssignMessage policy operates on. Options include the request, the response, or a new custom message.

SetActionsBean

Field	Description
`Authentication` Type:AuthenticationBean	Generates Google OAuth 2.0 or OpenID Connect tokens to make authenticated calls to Google services or custom services running on certain Google Cloud products, such as Cloud Run functions and Cloud Run.

AuthenticationBean

Field	Description
`GoogleAccessToken` Type:GoogleAccessTokenBean	GeneratesGoogle OAuth 2.0 tokens to make authenticated calls to Google services.
`GoogleIDToken` Type:GoogleIDTokenBean	Configuration to generate an OpenID Connect Token to authenticate the target request.
`headerName` Type:`string`	By default, when an Authentication configuration is present, Apigee generates a bearer token and injects it into the Authorization header of the message sent to the target system. The`headerName` element allows you to specify the name of adifferent header to hold the bearer token.

GoogleAccessTokenBean

Field	Description
`scopes` Type:`array`	Array of`strings` that specifies a valid Google API scope. For more information, seeOAuth 2.0 Scopes for Google APIs.
`LifetimeInSeconds` Type:`integer`	Specifies the lifetime duration of the access token in seconds.

GoogleIDTokenBean

Field	Description
`Audience` Type:AudienceBean	The audience for the generated authentication token, such as the API or service account granted access by the token.
`IncludeEmail` Type:`boolean`	If set to`true`, the generated authentication token will contain the service account`email` and`email_verified` claims.

AudienceBean

Field	Description
`useTargetHost` Type:`string`	If the value of`Audience` is empty or the`ref` variable does not resolve to a valid value, and`useTargetUrl` is`true`, then the URL of the target (excluding any query parameters) is used as the audience.
`useTargetUrl` Type:`boolean`	By default,`useTargetUrl` is`false`.

AssignToBean

Field	Description
`createNew` Type:`boolean`	Determines whether the policy creates a new message when assigning values. If set to`true`, the policy creates a new message.
`type` Type:`string`	Specifies the type of the new message, when`CreateNew` is set to`true` true. Valid values arerequest orresponse.

Javascript

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	JavaScript
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:JavascriptBean	Defines the desired state of the JavaScript policy.

JavascriptBean

Field	Description
`mode` Type:`array`	Array of`strings` that specifies`ProxyRequest` or`ProxyResponse`. Determines whether the policy is attached to the request flow or response flow.
`source` Type:`string`	Inline JavaScript code.
`timeLimit` Type:`integer`	Specifies the timeout for JavaScript code execution.

KVM

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	KVM
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:KeyValueMapOperationsBean	Defines the desired state of the KVM policy.

KeyValueMapOperationsBean

Field	Description
`MapName` Type:`MapName`	Enables the policy to identify which KVM to use dynamically, at runtime. For more information, seeMapName element.
`expiryTimeInSecs` Type:`integer`	Specifies the duration in seconds after which Apigee refreshes its cached value from the specified KVM. For more information, seeExpiryTimeInSecs element.
`initialEntries` Type:`list`	Seed values for KVMs, which are populated in the KVM when it is initialized. For more information, seeInitialEntries element.
`delete` Type:`list` of`Delete`	Deletes the specified key/value pair from the KVM. For more information, seeDelete element.
`get` Type:`list` of`Get`	Retrieves the value of a key from the KVM. For more information, seeGet element.

OASValidation

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	OASValidation
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:OASValidationBean	Defines the desired state of the OASValidation policy.
`status` Type:ApimResourceStatus	Shows the OASValidation policy status.

OASValidationBean

Field	Description
`openApiSpec` Type:`string`	Specifies the OpenAPI spec in`yaml` to be validated. Because this is a multiline`yaml` fragment, use the "\|" delimiter.
`source` Type:`string`	One of`message`,`request`, or`response`. When set to`request`, it will evaluate inbound requests from client apps; when set to`response`, it will evaluate responses from target servers. When set to`message`, it will automatically evaluate request or response depending on whether the policy is attached to the request or response flow.
`options` Type:`OASValidationOptions`	SeeOASValidationOptions/td>

OASValidationOptions

Field	Description
`validateMessageBody` Type:`boolean`	Specifies whether the policy should validate the message body against the operation's request body schema in the OpenAPI Specification. Set to`true` to validate the message body contents. Set to`false` to validate only that the message body exists.
`allowUnspecifiedParameters` Type:`StrictOptions`	SeeStrictOptions

StrictOptions

Field	Description
`header` Type:`boolean`	To allow header parameters to be specified in the request that are not defined in the OpenAPI Specification, set this parameter to`true`. Otherwise, set this parameter to`false` to cause policy execution to fail.
`query` Type:`boolean`	To allow query parameters to be specified in the request that are not defined in the OpenAPI Specification, set this parameter to`true`. Otherwise, set this parameter to`false` to cause policy execution to fail.
`cookie` Type:`boolean`	To allow cookie parameters to be specified in the request that are not defined in the OpenAPI Specification, set this parameter to`true`. Otherwise, set this parameter to`false` to cause policy execution to fail.

ApimResourceStatus

Field	Description
`currentState` Type:`enum`	Shows the current state of the resource: `RUNNING` = resource is in running state. `CREATING` = resource is being created `CREATED` = resource has been created `UPDATING` = resource is being updated `DELETING` = resource is being deleted `CREATE_UPDATE_FAILED` = create or update operation failed `DELETE_FAILED` = delete operation failed
`errorMessage` Type:`string`	Error message related to one of the failure states of`currentState` field.
`operationResult` Type:`string`	A response string from one of the long running operations related to resource creation, update, or deletion.

ServiceCallout

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	ServiceCallout
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:ServiceCalloutBean	Defines the desired state of the ServiceCallout policy.
`status` Type:ApimResourceStatus	Shows the ServiceCallout policy status.

ServiceCalloutBean

Field	Description
`httpTargetConnection` Type:`HttpTargetConnection`	Provides transport details such as URL, TLS/SSL, and HTTP properties.
`request` Type: CalloutRequest	Specifies the variable containing the request message that gets sent from the API proxy to the other service.
`Response` Type:`string`	Specifies the variable containing the response message that gets returned to the API proxy from the external service.

HttpTargetConnection

Field	Description
`url` Type:`string`	The URL of the target service.
`properties` Type:`Map of<string, string>`	HTTP transport properties to the backend service. For more information, seeEndpoint properties reference.
`timeout` Type:`int`	The timeout in milliseconds for the service callout. For more information, seetimeout.

CalloutRequest

Field	Description
`url` Type:`string`	The URL of the target service.
`properties` Type:`Map of<string, string>`	HTTP transport properties to the backend service. For more information, seeEndpoint properties reference.

SpikeArrest

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	SpikeArrest
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:SpikeArrestBean	Defines the desired state of the SpikeArrest policy.

SpikeArrestBean

Field	Description
`mode` Type:`array`	Array of`strings` that specifies`ProxyRequest` or`ProxyResponse`. Determines whether the policy is attached to the request flow or response flow.
`peakMessageRate` Type:peakMessageRate	Specifies the messagerate for SpikeArrest.
`useEffectiveCount` Type:`boolean`	If set to`true`true, SpikeArrest is distributed in a region, with request counts synchronized across Apigee message processors (MPs) in a region. If set to`false`, SpikeArrest uses atoken bucket algorithm locally. For more information, see UseEffectiveCount.

peakMessageRate

Field	Description
`ref` Type:`string`	Variable referencing the`rate` value.
`value` Type:`string`	Actual`rate` value if a reference is not available.

GenerateJWT

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	GenerateJWT
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:GenerateJWTBean	Defines the desired state of the GenerateJWT policy.
`status` Type:ApimResourceStatus	Shows the GenerateJWT policy status.

GenerateJWTBean

Field	Description
`subject` Type:PropertyBean	Identifies the principal that is the subject of the JWT. For more information, seeSubject element.
`issuer` Type:PropertyBean	Identifies the principal that issued the JWT. For more information, seeIssuer element.
`audience` Type:VarArrayBean	Identifies the recipients that the JWT is intended for. For more information, seeAudience element.
`id` Type:PropertyBean	Specifies a unique identifier for the JWT. For more information, seeId element.
`expiresIn` Type:PropertyBean	Specifies the expiration time for the JWT. For more information, seeExpiresIn element.
`notBefore` Type:PropertyBean	Identifies the time before which the JWT must not be accepted for processing. For more information, seeNotBefore element.
`additionalClaims` Type:AdditionalClaimsBean	Specifies additional claims to include in the JWT. For more information, seeAdditionalClaims element.
`compress` Type:`boolean`	Specifies whether to compress the JWT payload. For more information, seeCompress element.

PropertyBean

Field	Description
`value` Type:`string`	The literal value of the property.
`ref` Type:`string`	A reference to a variable containing the value of the property.

VarArrayBean

Field	Description
`values` Type:`array` of`string`	An array of literal string values.
`ref` Type:`string`	A reference to a variable containing the array of values.

AdditionalClaimsBean

Field	Description
`claims` Type:`map` of`string` to`string`	A map of claim names to claim values.
`ref` Type:`string`	A reference to a variable containing the claims map.

OAuthV2

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	OAuthV2
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:OAuthV2Bean	Defines the desired state of the OAuthV2 policy.
`status` Type:ApimResourceStatus	Shows the OAuthV2 policy status.

OAuthV2Bean

Field	Description
`operation` Type:`enum`	The OAuthV2 operation to perform. Valid values are: `GenerateAuthorizationCode` `GenerateAccessToken` `GenerateAccessTokenImplicitGrant` `GenerateJWTAccessTokenImplicitGrant` `GenerateJWTAccessToken` `RefreshAccessToken` `RefreshJWTAccessToken` `VerifyAccessToken` `VerifyJWTAccessToken` `ValidateToken` `InvalidateToken` For more information, seeOperation element.
`configRef` Type:`string`	(Optional) Reference to an`OAuthV2Config` custom resource name containing reusable OAuthV2 settings.
`scope` Type:`string`	The scope of the access token. For more information, seeScope element.
`generateResponse` Type:GenerateResponse	Configures the response generation. For more information, seeGenerateResponse element.
`generateErrorResponse` Type:GenerateErrorResponse	Configures the error response generation. For more information, seeGenerateErrorResponse element.
`expiresIn` Type:PropertyExpiryBean	The expiration time of the access token. For more information, seeExpiresIn element.
`refreshTokenExpiresIn` Type:PropertyExpiryBean	The expiration time of the refresh token. For more information, seeRefreshTokenExpiresIn element.
`supportedGrantTypes` Type:`array` of`string`	A list of supported grant types. For more information, seeSupportedGrantTypes element.
`redirectURI` Type:`string`	The redirect URI used in the authorization code grant type. For more information, seeRedirectUri element.
`responseType` Type:`string`	The response type for the authorization code grant type. For more information, seeResponseType element.
`clientID` Type:`string`	The client ID. For more information, seeClientId element.
`state` Type:`string`	The state parameter for the authorization code grant type. For more information, seeState element.
`appEndUser` Type:`string`	The end user ID. For more information, seeAppEndUser element.
`code` Type:`string`	The authorization code. For more information, seeCode element.
`userName` Type:`string`	The username for the password grant type. For more information, seeUserName element.
`password` Type:`string`	The password for the password grant type. For more information, seePassword element.
`grantType` Type:`string`	The grant type. For more information, seeGrantType element.
`refreshToken` Type:`string`	The refresh token. For more information, seeRefreshToken element.
`accessToken` Type:`string`	The access token. For more information, seeAccessToken element.
`cacheExpiryInSeconds` Type:PropertyExpiryBean	The cache expiry time in seconds. For more information, seeCache Expiry Settings.
`verifyAccessTokenPrefix` Type:`string`	(Optional) Prefix to use when verifying an access token.
`externalAuthorization` Type:`boolean`	Indicates whether to use an external authorization service. For more information, seeExternalAuthorization element.
`reuseRefreshToken` Type:`boolean`	Specifies whether to reuse refresh tokens. For more information, seeReuseRefreshToken element.
`rfcCompliance` Type:`boolean`	Enforces RFC compliance. For more information, seeRFCCompliantRequestResponse element.
`enforceStrictCallbackURIEnforced` Type:`boolean`	(Optional) Enforces strict callback URI matching.
`customAttributes` Type:`array` ofCustomAttribute	Custom attributes to add to the token. For more information, seeAttributes element.
`externalAccessToken` Type:`string`	An external access token. For more information, seeExternalAccessToken element.
`externalRefreshToken` Type:`string`	An external refresh token. For more information, seeExternalRefreshToken element.
`storeToken` Type:`string`	Specifies whether to store the token. For more information, seeStoreToken element.
`tokens` Type:`array` of`Token`	A list of tokens to invalidate. For more information, seeTokens element.
`algorithm` Type:`string`	The algorithm used to sign the JWT. For more information, seeAlgorithm element.
`secretKey` Type:SecretKey	The secret key used to sign the JWT. For more information, seeSecretKey element.
`privateKey` Type:PrivateKey	The private key used to sign the JWT. For more information, seePrivateKey element.
`publicKey` Type:PublicKey	The public key used to verify the JWT. For more information, seePublicKey element.

GenerateResponse

Field	Description
`enabled` Type:`boolean`	If set to`true` or if the enabled attribute is omitted, the policy generates and returns a response.
`format` Type:`enum`	One of`XML`,`FORM_PARAM`.

GenerateErrorResponse

Field	Description
`enabled` Type:`boolean`	If set to`true` or if the enabled attribute is omitted, the policy generates and returns a response.
`format` Type:`enum`	One of`XML`,`FORM_PARAM`.
`realm` Type:PropertyBean	The realm to return in the`WWW-Authenticate` header.

PropertyExpiryBean

Field	Description
`value` Type:`long`	The literal value of the expiration.
`ref` Type:`string`	A reference to a variable containing the expiration value.

CustomAttribute

Field	Description
`name` Type:`string`	The name of the custom attribute.
`ref` Type:`string`	A reference to a variable containing the attribute value.
`value` Type:`string`	The literal value of the attribute.

SecretKey

Field	Description
`value` Type:PropertyBean	Specifies the secret key used to sign the JWT. For more information, seeSecretKey element.

PrivateKey

Field	Description
`value` Type:PropertyBean	Specifies the private key used to sign the JWT. For more information, seePrivateKey element.

PublicKey

Field	Description
`value` Type:PropertyBean	Specifies the public key used to verify the JWT. For more information, seePublicKey element.

ResponseCache Policy

Field	Description
`apiVersion` Type:`string`	apim.googleapis.com/v1
`kind` Type:`string`	ResponseCache
`metadata` Type:Kubernetes meta/v1.ObjectMeta	Refer to the Kubernetes API documentation for the fields available in`metadata`.
`spec` Type:APIExtensionPolicySpec	Defines the desired state of ResponseCache.

ResponseCacheBean

Field	Description
`mode` Type:`boolean`	Specifies`ProxyRequest` or`ProxyResponse`. Determines whether the policy is attached to the request flow or response flow.
`cacheExpiry` Type:cacheExpiry	Provides the cacheExpiry object.
`cacheKey` Type:cacheKey	Provides the cacheKey object.
`cacheLookupTimeOut` type:`integer`	Specifies the cache look up timeout period.
`cacheResourceRef` type:`string`	Specifies the cache resource identifier using a variable reference.
`excludeErrorResponse` type:`boolean`	This policy can cache HTTP responses withany status code. That means both success and error responses can be cached, including`2xx` and`3xx` status codes.
`skipCacheLookupCondition` type:`string`	Defines an expression that, if it evaluates to`true` at runtime, specifies that cache lookup should be skipped and the cache should be refreshed
`skipCachePopulationCondition` type:`string`	Defines an expression that, if it evaluates to`true` at runtime, specifies that cache lookup should be skipped and the cache should be refreshed at runtime, specifies that a write to the cache should be skipped.
`useAcceptHeader` type:`boolean`	Set to`true` to append values from response`Accept` headers to the response cache entry's cache key.
`useResponseCacheHeaders` type:`boolean`	Set to`true` to have HTTP response headers considered when setting the "time to live" (TTL) of the response in the cache.

cacheExpiry

Field	Description
`expiryDate` Type:`object`	Specifies the date on which a cache entry should expire.
`timeOfDay` Type:`object`	Specifies the time of day at which a cache entry should expire.
`timeoutInSeconds` Type:`object`	Specifies the number of seconds after which a cache entry should expire.

cacheKey

Field	Description
`cacheKeyPrefix` Type:`string`	Specifies a value to use as a cache key prefix.
`fragments` Type:`object`	Specifies a value to be included in the cache key to create a namespace for matching requests to cached responses.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.

Movatterモバイル変換

Apigee Operator for Kubernetes resource reference Stay organized with collections Save and categorize content based on your preferences.