Commit Graph

290 Commits

Author SHA1 Message Date
Jacob Delgado a531ef9319 Use with latest tools image 2024-05-30 16:25:13 -06:00
Kim Sondrup c8f65e2f8b
Fix typo in closing tag for some code blocks (#3196) 2024-05-21 09:42:29 -04:00
John Howard 9fad1aecac
proxy config: clarify concurrency docs (#3193)
Fixes https://github.com/istio/api/issues/1783
2024-05-20 11:56:38 -04:00
John Howard f9846b4f41
Update mesh config to not import k8s libraries (#3154)
* Update mesh config to not import k8s libraries

* drop optional

* fix repeated

* gen
2024-05-20 11:56:31 -04:00
Craig Box 4252b0d3c7
make gen (#3202) 2024-05-15 21:41:11 -04:00
Joao Grassi e5b8f83935
OpenTelemetryTracingProvider: Allow configuring samplers (#3134)
* Add Dynatrace Sampler config

Add API configurations for the Dynatrace sampler.

* Add release notes

* Fix doc typo in code snippet

* Clarify Dynatrace fields

* make gen
2024-03-28 09:03:02 -07:00
jacob-delgado 3d9a233170
Run make gen (#3120) 2024-03-11 17:59:56 -07:00
Kuat 9d97da0c04
Revert "meshconfig: add compliance policy (#3082)" (#3093)
This reverts commit 7d248c97e6.
2024-02-21 11:53:23 -08:00
Kuat 7d248c97e6
meshconfig: add compliance policy (#3082)
* meshconfig: add compliance policy

Change-Id: I43bb205b5b62e557f61852e08b5084b63453ba6e
Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Change-Id: Ib099a02945c6a4ca28571e2e402b45a3d9f2eae4
Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Change-Id: I3c601090e485f87d178dd9e280841930ec65cfa2
Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2024-02-15 09:03:41 -08:00
Joao Grassi d7d5d27b5f
OpenTelemetryTracingProvider: New configurations for resource detectors (#3002)
* WIP: Extend OpenTelemetry tracing extension

* Remove sampler config

* Add release notes

* Improve proto docs

* Use strong type for resource detectors

* fix lint

* Add proper issue to release notes

* fix lint

* Remove extra > in docs link
2024-02-02 08:56:41 -08:00
bmangoen 1f5f63a120
Add missing deprecated tag for mesh fields (#3072) 2024-01-30 08:34:29 -08:00
Joao Grassi 9911a0a699
OpenTelemetryTracingProvider : New configurations to export via HTTP (#2998)
* Add OTLP/HTTP config

* Make gen

* Add release notes

* Fix release notes

* PR suggestions - remove optional for headers

* Document default value for timeout

* Make HTTP service a generic type

* Rename to exporter options to 'http'

* Add example config to proto docs
2024-01-26 06:59:58 -08:00
Rama Chavali 1d011e75bc
add inbound traffic policy to mesh config (#3044)
* add inbound traffic policy to mesh config

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* move comments

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

---------

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2024-01-24 23:35:02 -08:00
jacob-delgado 06018d723c
Run make gen with new protoc (#3051)
* Run make gen with new protoc

* Update dependencies
2024-01-17 09:03:58 -08:00
Iris c9b0bf6b29
add fallback support for PrivateKeyProvider (#3045)
* add fallback support for privatekeyprovider

* add default value into comment

* Update releasenotes/notes/private-key-provider-fallback.yaml

---------

Co-authored-by: Lin Sun <lin.sun@solo.io>
2024-01-16 12:07:42 -08:00
zirain 5e4450dbd5
mark extraStatTags deprecated (#3037)
* mark extraStatTags deprecated

* release-notes

* fix gen
2024-01-09 09:27:44 -08:00
Peter Jausovec a6b42dfa8a
docs: fix rendering of links and code snippets (#3036)
Signed-off-by: Peter Jausovec <peter.jausovec@solo.io>
2024-01-04 22:29:58 -08:00
Faseela K a75ac2eed5
Update tlsDefaults doc to include cipher suites support (#2974)
Signed-off-by: Faseela K <faseela.k@est.tech>
2023-10-26 07:46:28 -07:00
rob salmond 91a45efbaa
fix broken envoy docs link (#2937) 2023-10-06 19:06:06 -07:00
Eric Van Norman 1c3997104b
Run 'make gen' with new build-tools image (#2944) 2023-10-03 14:43:48 -07:00
Greg Hanson 708fbc7bc9
add metadata headers for proxyHeaders API (#2910)
* add metadata headers for proxyHeaders API

* remove includePassthrough flag

* typo

* clarify out of mesh distinction

* Update mesh/v1alpha1/proxy.proto

Co-authored-by: John Howard <howardjohn@google.com>

* review comments.  switch from ALWAYS to UNDEFINED

---------

Co-authored-by: John Howard <howardjohn@google.com>
2023-08-25 10:44:43 -07:00
rob salmond 6d14ca272a
add a note about the default inbound interception mode (#2913)
* add a note about the default mode

* include generated html
2023-08-25 08:35:43 -07:00
John Howard 7c4ff78bf1
Add controls around injected headers (#2240)
* Add controls around injected headers

This PR adds controls to which headers should be added to
requests/responses. This solves (most of)
https://github.com/istio/istio/issues/17635, a common feature request.

A prototype is implemented in https://github.com/istio/istio/pull/37215.

Open questions:
* Naming bikeshed
* Mesh config or proxy config or something else? Currently its in proxy
  config
* Is a list of ENUMs the best way to represent this? it does allow a
  strange config like `[REQUEST_ID, REQUEST_ID]` but that can just
rejected

* address comments

* xfcc
2023-08-11 08:52:04 -07:00
Eric Van Norman 5d68ba1077
Fix some spelling errors (#2884)
Co-authored-by: weizhoublue <weizhou.lan@daocloud.io>
2023-08-08 18:26:18 -07:00
John Howard 3dbbc82d7a
Discourage unsafe ProtocolDetectionTimeout in mesh config (#2882) 2023-08-04 09:27:12 -07:00
John Howard 38de472a5f
Drop json schema generation (#2875)
We only generate this for some resources and not others, and no one has
complained -- so there doesn't seem to be much value in maintaining
this, but it provides a lot of boilerplate.

Rather than "fixing" it to be used for all types, seems better to just
drop this. We already have the schema as proto and OpenAPI (via CRD).
2023-08-02 19:44:43 -07:00
zirain 9d672598ed
mark opencensus deprecated (#2871)
* mark opencensus deprecated

* fix gen

* add release notes
2023-07-31 07:47:52 -07:00
Rama Chavali 358b906cec
add docs for target port in stats prefix (#2869)
Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2023-07-25 07:49:37 -07:00
Kuat fb3ebd69aa
proxy config: add support for PROXY protocol for gateways (#2860)
* introduce PROXY annotation

Signed-off-by: Kuat Yessenov <kuat@google.com>

* add release note

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix

Signed-off-by: Kuat Yessenov <kuat@google.com>

* update api

Signed-off-by: Kuat Yessenov <kuat@google.com>

* rewrite

Signed-off-by: Kuat Yessenov <kuat@google.com>

* rename to proxy_protocol

Signed-off-by: Kuat Yessenov <kuat@google.com>

* make gen

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-07-12 12:02:48 -07:00
Matt Kramer 064529d3bb
chore: Fix typo in VirtualService docs (#2847)
* Fix typo in VirtualService docs

* Run make gen
2023-07-06 13:44:32 -07:00
Faseela K 5ee20e270d
docs changes for crl support (#2796)
Signed-off-by: Faseela K <faseela.k@est.tech>
2023-05-25 09:03:42 -07:00
jacob-delgado 8ba6dc2ef1
Add cipher suites support in meshConfig for mesh-wide ciphers (#2758)
* Support cipher suites to be specified for mesh-wide

* make gen

* Add release note
2023-05-12 07:03:03 -07:00
Zhonghu Xu a713b1dde1
Update failoverPriority doc to reflect the new `key=value` support (#2723)
* update document

* make gen

* Add an example

* make gen
2023-05-09 20:44:34 -07:00
Faseela K 6eff78243e
Clarify that MeshConfig.localityLbSetting is enabled by default (#2737)
* Clarify that MeshConfig.localityLbSetting is enabled by default

Signed-off-by: Faseela K <faseela.k@est.tech>

* address review comments

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-03-23 11:36:59 -07:00
zirain 49a8f67e97
update `proxy_inbound_listen_port` doc (#2735)
* update doc

* fix make gen

* fix gencheck
2023-03-21 19:43:21 -07:00
Sathish d80de99025
Format corrections of JWTRule document (#2720)
* Fix indentation of jwt doc

* Update comment line of jwtrule

* Fix indentation of jwt doc

* Update comment line of jwtrule

* Rebase with latest master

---------

Co-authored-by: Sathish Swaminathan <sathish.swaminathan@ibm.com>
2023-03-13 12:07:22 -07:00
Chromo-residuum-opec 681fed9f32
update credentialName docs for DestinationRule and Gateway (#2714)
* update credentialName docs for DestinationRule and Gateway

* address comments
2023-03-10 08:33:16 -08:00
zirain 17d87a97bc
make inbound port configurable (#2702)
* make inbound port configurable

Signed-off-by: hejianpeng <hejianpeng2@huawei.com>

* update Next available field number

---------

Signed-off-by: hejianpeng <hejianpeng2@huawei.com>
2023-03-09 17:56:15 -08:00
Yossi Mesika 5e59387fbd
Updated documented default refresh rate (#2711) 2023-03-06 11:11:45 -08:00
Faseela K 5d441588ae
Clarify ecdh_curves api - rename to tlsDefaults (#2693)
* Clarify ecdh_curves api docs

Signed-off-by: Faseela K <faseela.k@est.tech>

* Rename mesh_external_TLS to tls_defaults

Signed-off-by: Faseela K <faseela.k@est.tech>

* make gen

Signed-off-by: Faseela K <faseela.k@est.tech>

* clarify docs

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-03-06 03:09:45 -08:00
Faseela K 35782d263c
Clarify credentialName usage for separate ca secrets (#2692)
Signed-off-by: Faseela K <faseela.k@est.tech>
2023-02-24 09:46:55 -08:00
Faseela K f07e07dec0
Add ecdh_curves support (#2543)
* Add ecdh_curves support to Gateway

Signed-off-by: Faseela K <faseela.k@est.tech>

* Add release notes

Signed-off-by: Faseela K <faseela.k@est.tech>

* Support ecdh_curves for destination_rule

Signed-off-by: Faseela K <faseela.k@est.tech>

* Fix release note

Signed-off-by: Faseela K <faseela.k@est.tech>

* Add ecdh_curves to MeshConfig and remove from DestinationRule

Signed-off-by: Faseela K <faseela.k@est.tech>

* rename the TLSConfig for external traffic

Signed-off-by: Faseela K <faseela.k@est.tech>

* Make the config mesh_external

Signed-off-by: Faseela K <faseela.k@est.tech>

* Retain only MeshConfig changes

Signed-off-by: Faseela K <faseela.k@est.tech>

* Manually fix proto.lock

Signed-off-by: Faseela K <faseela.k@est.tech>

* make gen

Signed-off-by: Faseela K <faseela.k@est.tech>

* rebase

Signed-off-by: Faseela K <faseela.k@est.tech>

* Edit ECDH description

Signed-off-by: Faseela K <faseela.k@est.tech>

* enhance mesh external description

Signed-off-by: Faseela K <faseela.k@est.tech>

* Clarify ecdh curves documentation

Signed-off-by: Faseela K <faseela.k@est.tech>

* rebase

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-02-17 10:36:03 -08:00
zirain 4188d5cb29
telemetry: allow disable 128bit trace id for zipkin provider (#2680)
* telemetry: allow disable 128bit trace id for zipkin provider

* update with rama's comment

* fix nit
2023-02-17 07:22:57 -08:00
zirain 522813ce75
mark Lightstep provider deprecated (#2635)
* mark Lightstep provider deprecated

* hide from doc

* add release-notes
2023-01-30 10:08:02 -08:00
Blake R 3417dfab29
Add OpenTelemetry Tracing Provider to Docs (#2609)
* Add OpenTelemetry Tracing Provider to Docs

Signed-off-by: blakeromano <blakeromano19@gmail.com>

* Add Note about needing 1.16.1 or higher

Signed-off-by: blakeromano <blakeromano19@gmail.com>

* Run Make Gen

Signed-off-by: blakeromano <blakeromano19@gmail.com>

Signed-off-by: blakeromano <blakeromano19@gmail.com>
2022-12-22 08:38:24 -08:00
Rama Chavali c50e400135
remove parentshutdown duration (#2605)
Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2022-12-19 08:58:20 -08:00
Alan Wang ef5ad47485
fix: envoy statistics config documentation (#2592)
* fix: envoy statistics config documentation

* Update mesh/v1alpha1/proxy.proto

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* chore: make gen

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2022-12-15 06:34:08 -08:00
rrobb-aspen bcd542ae5e
Update DestinationRule docs with correct env variable name (#2596)
* update docs to use the correct destination rule flag name for verifyCertAtClient

* add release notes

* fix release notes
2022-12-14 10:54:09 -08:00
Ravi kumar Veeramally 7a104c8b5f
Enable configuring Envoy QAT private key provider (#2565)
* Add QAT PrivateKeyProvider protobuf in ProxyConfig

Private key provider configuration will be provided by
user in ProxyConfig configuration. This information will
be used to send configuration to gateway/sidecar proxies.

* make gen

* add release notes

* fix comment

* make gen
2022-11-22 08:35:23 -08:00
Rama Chavali cb4e5c4e41
remove thrift config from config (#2532)
Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2022-10-31 09:18:01 -07:00