Commit Graph

498 Commits

Author SHA1 Message Date
Rama Chavali 39b0069968
add support for additional cookie attributes (#3523)
Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2025-09-20 00:11:10 -07:00
jacob-delgado 3471b2b70b
run make gen (#3559) 2025-08-28 16:54:06 -04:00
Faseela K f7e2506971
Clarify Service Entry addresses behavior limitations (#3549)
Signed-off-by: Faseela K <faseela.k@est.tech>
2025-08-19 16:56:20 -04:00
jacob-delgado 28d2c81cb5
Run with latest build container (#3552) 2025-08-19 03:35:16 -04:00
Sergei Nikolaev 35764fa2f6
feat: add tls.caCertCredentialName (#3544)
* feat: add tls.caCertCredentialName

Signed-off-by: Sergei Nikolaev <kinolaev@gmail.com>

* chore: add release note

Signed-off-by: Sergei Nikolaev <kinolaev@gmail.com>

---------

Signed-off-by: Sergei Nikolaev <kinolaev@gmail.com>
2025-07-31 17:27:05 -04:00
zirain 09a4d534f2
add RetryBudget in DestinationRule (#3512)
* add RetryBudget in DestinationRule

* address comment

* gen

Signed-off-by: zirain <zirain2009@gmail.com>

---------

Signed-off-by: zirain <zirain2009@gmail.com>
2025-06-25 12:53:18 -04:00
zirain 65babd3c01
format protobuf files (#3522) 2025-06-16 11:17:16 -04:00
Craig Box 2d8537b42d
update sourceLabels and sourceNamespace docs (#3516)
* update sourceLabels and sourceNamespace docs

* made gen
2025-06-09 16:52:23 -04:00
Rama Chavali 5ce14890be
fix retry example in virtual service (#3514)
Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2025-06-07 10:13:53 -04:00
Rama Chavali 8c42862123
remove unnecessary comments (#3503)
Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2025-05-10 10:51:46 -04:00
Rama Chavali 11442f3c76
hide ca cert from tls certificates (#3495)
* hide ca cert from tls certificates

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* fix hide

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

---------

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2025-05-05 09:52:43 -04:00
Faseela K 6944c75efc
Migrate storage version of networking APIs to v1 (#3498)
* Migrate storage version of networking APIs to v1

Signed-off-by: Faseela K <faseela.k@est.tech>

* add release notes

Signed-off-by: Faseela K <faseela.k@est.tech>

* fix release notes

Signed-off-by: Faseela K <faseela.k@est.tech>

* generate crds

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2025-05-02 05:35:47 -04:00
Adesh Ghadage d4002d7d0b
Update refdocs to use markdown links and standardize HTTP/2 notation in master (#3430)
* update-refdocs-master-brokenUrl

* update-refdocs-release-1.24-brokenUrl

* updatedoc

* Regenerate API docs after changes

* Update networking/v1alpha3/destination_rule.proto

Co-authored-by: Craig Box <craig.box@gmail.com>

* Update networking/v1alpha3/destination_rule.proto

Co-authored-by: Craig Box <craig.box@gmail.com>

* Update networking/v1alpha3/destination_rule.proto

Co-authored-by: Craig Box <craig.box@gmail.com>

* Updated refdoc

---------

Co-authored-by: Craig Box <craig.box@gmail.com>
2025-05-02 05:35:39 -04:00
Daniel Grimm 813f014341
fix: remove spaces to fix YAML examples in ServiceEntry docstrings (#3488) 2025-04-14 11:37:22 -04:00
jacob-delgado 80b6f10e34
update protos (#3478)
* update protos

* update dependencies

* make tidy
2025-03-31 19:10:45 -04:00
Rama Chavali ffa4a971b2
add ecdsa certificate support at gateways (#3466)
* add ecdsa certificate support at gateways

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* add support for certs

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* add cel validations

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* add comments for subject alt names

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* clean gen

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* fix validations

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* fix message

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

---------

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2025-03-26 10:16:51 -04:00
Rama Chavali 81bc1902f4
add retry backoff interval (#3461)
* add retry backoff interval

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* add more docs

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

---------

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2025-03-20 03:33:41 -04:00
Leonardo Sarra 041c225b6e
Remove non-zero requirement on connectionPool.tcp.IdleTimeout (#3455) 2025-03-07 13:51:03 -05:00
Rama Chavali e40a0163c7
add retry host predicate api (#3432)
Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2025-02-22 02:11:53 -05:00
jacob-delgado 41ef999fc6
Run make gen (#3440) 2025-02-13 19:11:45 -05:00
Ian Rudie 03360c1a87
Validation: remove CEL for PolicyTargetRef to allow vendor extensions (#3414)
* Validation: CEL adjusted to allow PolicyTargetReference to target gtwapi GatewayClass

Signed-off-by: Ian Rudie <ian.rudie@solo.io>

* adding releasenote

Signed-off-by: Ian Rudie <ian.rudie@solo.io>

* remove CEL validations for PolicyTargetRef to allow vendor extensions

Signed-off-by: Ian Rudie <ian.rudie@solo.io>

* remove centralized group/kind detail and move to where targetRef is used in resources

Signed-off-by: Ian Rudie <ian.rudie@solo.io>

---------

Signed-off-by: Ian Rudie <ian.rudie@solo.io>
2025-01-24 17:16:00 -05:00
Rama Chavali 9bd352db2c
fix virtual service retry docs (#3416)
Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2025-01-17 12:53:55 -05:00
jacob-delgado 8a62f1e437
Run make gen (#3415) 2025-01-16 16:29:54 -05:00
Rama Chavali 5b3f065ee1
add domain name for virtual host match in envoy filters (#3376)
* add domain name for virtual host match in envoy filters

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* update docs

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* add examples

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

---------

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2025-01-16 12:34:53 -05:00
Istio Automation 6516922f64
Automator: update common-files@master in istio/api@master (#3405) 2025-01-03 18:49:58 -05:00
John Howard a684e698b8
Validation: add documentation and use CEL pre-processor (#3333)
* Move to oneof

* more oneof

* simplify SE one

* simplify expressions

* add validation readme

* lint
2024-12-31 19:32:56 -05:00
Craig Box 5fcb020312
New HTML (#3388) 2024-12-16 10:19:15 -05:00
Craig Box 83045844df
Fix some proto descriptions (#3384)
* fix some protos

* change comments from proto_names to yamlCase

* missed some backticks

* add make gen from prow
2024-12-12 12:02:02 -05:00
Rudrakh Panigrahi f3e32c3b7a
support grpc probes for workload group health checks (#3372)
Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>
2024-12-03 20:48:20 -05:00
jacob-delgado 918717d1a2
Run make gen with latest image (#3368) 2024-11-23 04:07:16 -05:00
John Howard fae8de666d
Fix incorrect SE docs (#3364)
There is no 'egress policy'.

Fixes https://github.com/istio/istio/issues/53904
2024-11-20 11:28:59 -05:00
Craig Box f9df5ff15e
add missing slash to fix docs path/lint (#3357)
* add missing slash to fix docs path/lint

* could swear I did this too
2024-11-07 17:52:27 -05:00
rob salmond 76c3278753
new schema format (#3352) 2024-11-07 02:19:27 -05:00
Saverio Proto a1abc531ee
Improve documentation for subjectAltNames (#3319) 2024-10-25 14:11:49 -04:00
Faseela K 05d7812873
Clarify filemounted crl usage (#3331)
Signed-off-by: Faseela K <faseela.k@est.tech>
2024-10-10 19:25:46 -04:00
John Howard 2ee8e3cf06
Fix over-correcting new SE CEL validation (#3320)
Adds regression test and fixes the issue
2024-10-10 15:17:46 -04:00
Faseela K 14aff11e9f
Run make-gen for protoc-gen-go v1.35.1 (#3330)
Signed-off-by: Faseela K <faseela.k@est.tech>
2024-10-10 14:46:46 -04:00
Frédéric Gaudet 2397ade04b
feat(DestinationRules): Adding aggression and min_weight_percent to DestinationRules API (#3216)
* feat(): Adding aggression and min_weight_percent to DestinationRules API

Signed-off-by: Frédéric Gaudet <frederic.gaudet@blablacar.com>

* feat(): Wrapping slowStart parameters

Signed-off-by: Frédéric Gaudet <frederic.gaudet@blablacar.com>

* feat(): Adding aggression and min_weight_percent to DestinationRules API

Signed-off-by: Frédéric Gaudet <frederic.gaudet@blablacar.com>

* Update networking/v1alpha3/destination_rule.proto

Co-authored-by: John Howard <john.howard@solo.io>

* feat(): Regenerating protos

Signed-off-by: Frédéric Gaudet <frederic.gaudet@blablacar.com>

* feat(): Update documentation

Signed-off-by: Frédéric Gaudet <frederic.gaudet@blablacar.com>

* feat(): Adding validation in LoadBalancerSettings

Signed-off-by: Frédéric Gaudet <frederic.gaudet@blablacar.com>

* feat(): Adding tests and comments

Signed-off-by: Frédéric Gaudet <frederic.gaudet@blablacar.com>

* feat(): Fixing tests

Signed-off-by: Frédéric Gaudet <frederic.gaudet@blablacar.com>

* feat(): Make Duration field required

Signed-off-by: Frédéric Gaudet <frederic.gaudet@blablacar.com>

* feat(): Gen files

Signed-off-by: Frédéric Gaudet <frederic.gaudet@blablacar.com>

---------

Signed-off-by: Frédéric Gaudet <frederic.gaudet@blablacar.com>
Co-authored-by: John Howard <john.howard@solo.io>
2024-10-08 06:26:45 -04:00
John Howard eb7df4d4b4
Add CEL validation to SE and WG (#3302)
* Add CEL validation to SE and WG

* fix bad validation
2024-10-02 14:37:29 -04:00
John Howard c4291e1b08
sidecar: fix misleading docs (#3308)
Stop saying we "block" or "allow" traffic; its not true.
2024-09-26 16:29:24 -04:00
John Howard 1708641991
Improve validation for targetRefs (#3312)
Per
https://gateway-api.sigs.k8s.io/geps/gep-2648/?h=targetrefs#multiple,
only 16 max allowed -- which is quite reasonable.

Additionally, consistently allow only workloadSelector OR targetRef; we
had this only on some types
2024-09-26 16:04:24 -04:00
Ian Rudie 18c92956f8
clarify documentation around stringMatch and case-sensitivity (#3304)
Signed-off-by: Ian Rudie <ian.rudie@solo.io>
2024-09-05 15:58:27 -04:00
John Howard abec44418d
Pick up changes to CRD template naming and fix excessive WG validation (#3295)
* Rename tag names

* Drop embedding address validation in WG
2024-08-20 17:22:23 -04:00
Jongwoo Han a47e765363
Fix minor typo (#3294)
Signed-off-by: Jongwoo Han <jongwooo.han@gmail.com>
2024-08-16 01:00:47 -04:00
John Howard 8636ed9638
Improve OutboundTrafficPolicy docs (#3270)
This is a bit of a mess since its documented in 3 places * 2 resources.

Meaningful changes:
* Explain registry only != security
* Remove recommendation to use registry_only, but explain why someone
  might
2024-07-26 17:23:32 -04:00
Ian Rudie c591cad198
fix: ServiceEntryStatus (#3279)
* update status to support 1 address per host rather than 1 address per service entry

Signed-off-by: ilrudie <ian.rudie@solo.io>

* release notes

Signed-off-by: ilrudie <ian.rudie@solo.io>

---------

Signed-off-by: ilrudie <ian.rudie@solo.io>
2024-07-26 16:51:32 -04:00
John Howard ba230b0fea
Make TTL allow duration=0s again (#3260) 2024-07-15 11:21:14 -04:00
John Howard b960de3424
validation: add CEL validation to workload entry (#3235)
* validation: add CEL validation to workload entry

* more
2024-07-15 09:46:14 -04:00
Ian Rudie 840956d74e
minor reorg and fixes (#3257)
* addressing late comments from 3244

Signed-off-by: ilrudie <ilrudie@gmail.com>

* adding an istio-status-override comment so tools may override the status without hardcoding

Signed-off-by: ilrudie <ilrudie@gmail.com>

* fix spelling

Signed-off-by: ilrudie <ilrudie@gmail.com>

* move status comment to a location where it can be consumed

Signed-off-by: ilrudie <ian.rudie@solo.io>

---------

Signed-off-by: ilrudie <ilrudie@gmail.com>
Signed-off-by: ilrudie <ian.rudie@solo.io>
2024-07-06 19:10:20 -04:00
Ian Rudie f877909024
New Status proto for ServiceEntry (#3244)
* wip proto for service entry status

Signed-off-by: ilrudie <ian.rudie@solo.io>

* fixes + make gen

Signed-off-by: Ian Rudie <ian.rudie@solo.io>

* suggestion to make the connection with IstioStatus more apparent

Signed-off-by: Ian Rudie <ian.rudie@solo.io>

* fixed from CI

Signed-off-by: Ian Rudie <ian.rudie@solo.io>

* Update meta/v1alpha1/serviceentry-status.proto

Co-authored-by: John Howard <john.howard@solo.io>

* comments from PR

Signed-off-by: ilrudie <ilrudie@gmail.com>

---------

Signed-off-by: ilrudie <ian.rudie@solo.io>
Signed-off-by: Ian Rudie <ian.rudie@solo.io>
Signed-off-by: ilrudie <ilrudie@gmail.com>
Co-authored-by: John Howard <john.howard@solo.io>
2024-07-05 18:10:19 -04:00