Add this modeline to the top of your manifest to get validation and
completion in any editor with yaml-language-server
support (VS Code with the YAML extension, for example):
Accepted for k8s familiarity but ignored — every operator manages one airdress’s resources (one namespace).
resourceVersion
string | null
no
—
Optimistic concurrency token. When present, apply is rejected with 409 if the stored row’s resource_version doesn’t match. When absent, last-writer-wins.
Secret-vault key holding the upstream bearer token. The operator resolves the reference on each reconcile; the manifest only carries the reference name, never the secret value. Omitted for echo, which has no upstream to authenticate to.
backend
string
yes
—
Backend identifier. “vllm-openai” (an OpenAI-API upstream) or “echo” (no upstream; answers with the text it was sent). Unknown values are rejected at apply time.
caFileRef
string | null
no
—
Optional secret-vault key for a private-CA bundle. When set, the operator adds the bundle to the HTTPS client’s root store before connecting to url. Use this for Tailscale-style private CAs and LE staging.
computeOperatorRef
string | null
no
—
Name of the enrolled compute-role operator the homing operator should dispatch through. Required when transport is operator-signal; rejected when transport is http-direct.
draining
boolean
no
false
When true, the router stops sending new traffic. In-flight requests still complete. Toggling to false re-admits the member after a successful probe. Defaults to false.
models
array of object
yes
—
Models this member advertises. The reconciler probes GET /v1/models per tick; declared names not seen in the upstream response flip ModelsAdvertised=False.
traits
object | null
no
—
Backend capability declarations. Omitting this block is equivalent to declaring every trait at its default.
transport
"http-direct" | "operator-signal" | null
no
—
Transport discriminator. Omitting the field defaults to http-direct, so existing manifests round trip without changes.
url
string
no
""
Upstream URL the operator probes and forwards inference to. HTTPS in production; http:// accepted for LAN or private-network development. Required for vllm-openai over http-direct; omitted for echo and for operator-signal members, which have nothing to dial.
Whether this backend can serve more than one concurrent, independent conversation. Every OpenAI-compatible chat-completions backend is stateless per request and trivially satisfies this, as does echo; default true. Set false for a backend that is genuinely session-bound.