Commit Graph

66 Commits

Author SHA1 Message Date
John Howard b9c26acf91
Generate alias for types instead of copies (#3188) 2024-05-20 11:48:31 -04:00
Whitney Griffith ebd4d88ced
[API] Implement Release channels (#3135)
* implement release channels

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* implement release channels without multiple crds

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

---------

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>
2024-04-22 10:56:33 -07:00
Whitney Griffith d7ab31abb3
Promote Telemetry API to v1 (#3133)
* create v1 Telemetry API

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* add tracing.match example

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* update metrics.match example

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

---------

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>
2024-04-04 10:59:08 -07:00
Joao Grassi e5b8f83935
OpenTelemetryTracingProvider: Allow configuring samplers (#3134)
* Add Dynatrace Sampler config

Add API configurations for the Dynatrace sampler.

* Add release notes

* Fix doc typo in code snippet

* Clarify Dynatrace fields

* make gen
2024-03-28 09:03:02 -07:00
Whitney Griffith 2b0bfde445
Networking APIs graduation to v1 (#3111)
* bump networking apis to v1

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* set storageVersion as v1beta1

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* Add release notes

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* Update release notes

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* make gen

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* Remove ProxyConfig v1

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* update release notes

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* Remove update notes

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

---------

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>
2024-03-15 10:52:50 -07:00
Whitney Griffith 339eb52daa
PeerAuthentication Graduation to v1 (#3112)
* bump peer auth to v1

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* update sync

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* Add release notes

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* run make gen

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* Fix release notes

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* Update release notes

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* Update release notes

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* make gen

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

* fix gen-check

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>

---------

Signed-off-by: whitneygriffith <whitney.griffith16@gmail.com>
2024-03-13 16:19:34 -07:00
Joao Grassi d7d5d27b5f
OpenTelemetryTracingProvider: New configurations for resource detectors (#3002)
* WIP: Extend OpenTelemetry tracing extension

* Remove sampler config

* Add release notes

* Improve proto docs

* Use strong type for resource detectors

* fix lint

* Add proper issue to release notes

* fix lint

* Remove extra > in docs link
2024-02-02 08:56:41 -08:00
zirain 62e5dd9150
add shortname for authz (#3069)
* add shortname for authz

* rename to ap

* release notes
2024-01-29 12:55:32 -08:00
Joao Grassi 9911a0a699
OpenTelemetryTracingProvider : New configurations to export via HTTP (#2998)
* Add OTLP/HTTP config

* Make gen

* Add release notes

* Fix release notes

* PR suggestions - remove optional for headers

* Document default value for timeout

* Make HTTP service a generic type

* Rename to exporter options to 'http'

* Add example config to proto docs
2024-01-26 06:59:58 -08:00
Iris c9b0bf6b29
add fallback support for PrivateKeyProvider (#3045)
* add fallback support for privatekeyprovider

* add default value into comment

* Update releasenotes/notes/private-key-provider-fallback.yaml

---------

Co-authored-by: Lin Sun <lin.sun@solo.io>
2024-01-16 12:07:42 -08:00
Kuat 0e784ed339
agent: remove BDS (#3038)
Change-Id: I82b18264d957a5702205aedf131c9c4246ab6634

Signed-off-by: Kuat Yessenov <kuat@google.com>
2024-01-09 10:50:44 -08:00
zirain 5e4450dbd5
mark extraStatTags deprecated (#3037)
* mark extraStatTags deprecated

* release-notes

* fix gen
2024-01-09 09:27:44 -08:00
Jacek Ewertowski 258dcfe4fd
Add idle_timeout to DestinationRule.TcpSettings (#2999)
* Add idle_timeout to DestinationRule.TcpSettings

Signed-off-by: Jacek Ewertowski <jewertow@redhat.com>

* Add release note

Signed-off-by: Jacek Ewertowski <jewertow@redhat.com>

* Clarify that idle_timeout does not work for weighted clusters

Signed-off-by: Jacek Ewertowski <jewertow@redhat.com>

* Describe idle_timeout in more detail

Signed-off-by: Jacek Ewertowski <jewertow@redhat.com>

* Add suggested change

Signed-off-by: Jacek Ewertowski <jewertow@redhat.com>

---------

Signed-off-by: Jacek Ewertowski <jewertow@redhat.com>
2023-12-15 17:26:37 -08:00
Jackie Elliott 61be6001a3
Add max_concurrent_streams definition to DestinationRule (#2952)
* Add max_concurrent_streams definition to DestinationRule.

Part of https://github.com/istio/istio/issues/47166

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Hide from docs

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* move misplaced field from tcp settings to http settings

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Rebase and update crd gen yaml

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

---------

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>
2023-10-17 12:23:37 -07:00
Zack Butcher 6d61c896cb
Mirror DestinationRule connection pool configuration on Sidecar (#2961)
* Add support for default and per-port connection pool settings for inbound connections to Envoy sidecars

* flesh out comments on connection pool and describe how they relate to destinationrule. Add a release note for the new field.

* missed comments in v1beta1 that should've been in v1alpha1
2023-10-15 18:53:35 -07:00
Jackie Elliott 283cc40b07
Define targetRef proto (#2888)
* Define protobuf for PolicyTargetReference

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Add targetRef to AuthorizationPolicy, Telemetry, WasmPlugin,
ProxyConfig, and RequestAuthentication.

Need more examples.

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Add examples

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Moved targetRef def to selector.proto. Removed kubebuilder
comments. Added release note for targetRef.

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Add oneof to CRD protos. Add clarifying comments about intended
use of taretRef.

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Remove targetRef from ProxyConfig

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Removed root namespace references and ingress gateway targetRef
examples.

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Hide API changes from docs and remove examples until impl is
complete

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Remove telemtry example until impl complete

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* add clarification resource must be in same ns as policy and add
oneof to wasm plugin.

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Remove oneof in to avoid go changes.

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* update release note to clarify scope is limited to waypoints

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Update authorizationPolicy selector comment

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* clarify in targetRef description only waypoint is supported as a
targeted resource

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* add k8s gateway references

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Respond to PR feedback and add selector example.

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

* Address nits

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>

---------

Signed-off-by: Jackie Elliott <jaellio@microsoft.com>
2023-09-05 15:45:52 -07:00
zirain 9d672598ed
mark opencensus deprecated (#2871)
* mark opencensus deprecated

* fix gen

* add release notes
2023-07-31 07:47:52 -07:00
Kuat fb3ebd69aa
proxy config: add support for PROXY protocol for gateways (#2860)
* introduce PROXY annotation

Signed-off-by: Kuat Yessenov <kuat@google.com>

* add release note

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix

Signed-off-by: Kuat Yessenov <kuat@google.com>

* update api

Signed-off-by: Kuat Yessenov <kuat@google.com>

* rewrite

Signed-off-by: Kuat Yessenov <kuat@google.com>

* rename to proxy_protocol

Signed-off-by: Kuat Yessenov <kuat@google.com>

* make gen

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-07-12 12:02:48 -07:00
FVarya 1364cf24e4
Wrong defaults for Destination Rule (#2844)
* Fixed default values for Destination Rule ConnectionPoolSettings.HTTPSettings

* added corresponding release note
2023-06-29 10:01:01 -07:00
jacob-delgado 8ba6dc2ef1
Add cipher suites support in meshConfig for mesh-wide ciphers (#2758)
* Support cipher suites to be specified for mesh-wide

* make gen

* Add release note
2023-05-12 07:03:03 -07:00
Faseela K f07e07dec0
Add ecdh_curves support (#2543)
* Add ecdh_curves support to Gateway

Signed-off-by: Faseela K <faseela.k@est.tech>

* Add release notes

Signed-off-by: Faseela K <faseela.k@est.tech>

* Support ecdh_curves for destination_rule

Signed-off-by: Faseela K <faseela.k@est.tech>

* Fix release note

Signed-off-by: Faseela K <faseela.k@est.tech>

* Add ecdh_curves to MeshConfig and remove from DestinationRule

Signed-off-by: Faseela K <faseela.k@est.tech>

* rename the TLSConfig for external traffic

Signed-off-by: Faseela K <faseela.k@est.tech>

* Make the config mesh_external

Signed-off-by: Faseela K <faseela.k@est.tech>

* Retain only MeshConfig changes

Signed-off-by: Faseela K <faseela.k@est.tech>

* Manually fix proto.lock

Signed-off-by: Faseela K <faseela.k@est.tech>

* make gen

Signed-off-by: Faseela K <faseela.k@est.tech>

* rebase

Signed-off-by: Faseela K <faseela.k@est.tech>

* Edit ECDH description

Signed-off-by: Faseela K <faseela.k@est.tech>

* enhance mesh external description

Signed-off-by: Faseela K <faseela.k@est.tech>

* Clarify ecdh curves documentation

Signed-off-by: Faseela K <faseela.k@est.tech>

* rebase

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-02-17 10:36:03 -08:00
zirain 522813ce75
mark Lightstep provider deprecated (#2635)
* mark Lightstep provider deprecated

* hide from doc

* add release-notes
2023-01-30 10:08:02 -08:00
rrobb-aspen bcd542ae5e
Update DestinationRule docs with correct env variable name (#2596)
* update docs to use the correct destination rule flag name for verifyCertAtClient

* add release notes

* fix release notes
2022-12-14 10:54:09 -08:00
Ravi kumar Veeramally 7a104c8b5f
Enable configuring Envoy QAT private key provider (#2565)
* Add QAT PrivateKeyProvider protobuf in ProxyConfig

Private key provider configuration will be provided by
user in ProxyConfig configuration. This information will
be used to send configuration to gateway/sidecar proxies.

* make gen

* add release notes

* fix comment

* make gen
2022-11-22 08:35:23 -08:00
luohua13 417106f309
remove comment about not support regex for delegete vs (#2526)
* Add comment about support regex in delegate vs

Signed-off-by: luohua13 <jcwang@alauda.io>

* Apply suggestions from code review

Apply suggestions form code review.

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update by review comment

Signed-off-by: luohua13 <jcwang@alauda.io>

Signed-off-by: luohua13 <jcwang@alauda.io>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2022-11-21 12:59:57 -08:00
Aryan Gupta 9c7e8716fa
copy jwt claim to header (#2570) 2022-11-17 14:44:03 -08:00
sschepens de09801552
Virtual Service Direct Response (#2407)
* feature: virtual service direct response

* make gen proto-commit

* add release notes

* use previous tools

* Revert "use previous tools"

This reverts commit 293ec72aaf.

* add bytes example

* add headers example
2022-07-07 15:33:42 -07:00
Rama Chavali 9152602184
add stat prefix for routes (#2405)
* add stat prefix for routes

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* add release notes

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2022-07-07 06:48:20 -07:00
Zhonghu Xu d233ac5e12
Deprecate MeshConfig.Certificates (#2392)
* deprecate MeshConfig.Certificates

* make gen

* update comments

* Add release note

* Address comments

* gen files

* Update releasenotes/notes/deprecate-meshconfig-certificates.yaml

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2022-07-05 06:47:28 -07:00
Frank Budinsky 25925643fd
Namespace annotation for cluster leaders (#2385)
* Namespace annotation for cluster leaders

* add release note

* better description

* regen

* spelling

* change default

* change annotation name

* update release note

* change default
2022-06-30 06:44:07 -07:00
Oksana Baranova bfbafaf1ba
Document new sidecar annotation to exclude interfaces (#2374)
* Document new sidecar annotation to exclude interfaces and update auto generated files

* release note

* make gen

* updated as a feature
2022-06-14 09:39:45 -07:00
Xinnan Wen 579e7e6982
bump k8s hpa api mirrored in operator api to v2beta2 (#2273)
* bump k8s hpa api mirrored in operator api to v2beta2

* rebase and update quantity type

* update proto lock

* add release notes
2022-05-05 15:06:56 -07:00
Jacek Ewertowski b6a03a9e47
Extend DestinationRule with TunnelSettings (#2283)
TunnelSettings enables tunneling TCP traffic over other transport or application layers.
Istio will initially support tunneling TCP over HTTP or H2 using CONNECT or POST methods,
but the supported protocols list might be extended in the future.
At the beginning tunnel settings will be applicable to TCP or TLS routes only,
but support for HTTP routes is also on the roadmap.

Signed-off-by: Jacek Ewertowski <jewertow@redhat.com>
2022-04-20 09:43:08 -07:00
lei-tang 2792e813eb
TLS configuration API (phase 1) (#2284)
* TLS configuration API (phase 1)

* Update based on reviewer's comments
2022-03-21 12:50:58 -07:00
Faseela K 7fbbe6f27e
WorkloadSelector support for DestinationRule (#2207)
* WIP: WorkloadSelector support for DestinationRule

Adding support for workloadSelector in DR
as per RFC Simplify Sidecar Egress For MTLS

Signed-off-by: Faseela K <faseela.k@est.tech>

* Fix release-notes

Signed-off-by: Faseela K <faseela.k@est.tech>

* Use istio.type.v1beta1.WorkloadSelector

Signed-off-by: Faseela K <faseela.k@est.tech>

* run proto-commit

Signed-off-by: Faseela K <faseela.k@est.tech>

* Rebase

Signed-off-by: Faseela K <faseela.k@est.tech>

* incorporate review comments and rebase

Signed-off-by: Faseela K <faseela.k@est.tech>

* Additional review comments for usecase explanation

Signed-off-by: Faseela K <faseela.k@est.tech>
2022-03-19 00:58:43 -07:00
Douglas Reid c471f4dab0
Telemetry API: Add WorkloadMode selection to Tracing/Logging (#2266)
* Telemetry API: Add TrafficDirection selection to Tracing/Logging

* use workloadmode instead of a new enum

* add release note

* move match clauses to top
2022-03-18 10:40:05 -07:00
Ravi kumar Veeramally e5c6661929
Enable configuring Envoy private key provider through ProxyConfig (#2261)
* Add PrivateKeyProvider protobuf in ProxyConfig

Private key provider configuration will be provided by
user in ProxyConfig configuration. This information will
be used to send configuration to gateway/sidecar proxies.

* make gen

* make proto-commit

* add release notes
2022-03-15 10:55:40 -07:00
Rama Chavali 6ad61f9856
add warmup duration secs api (#2153)
* add warmup duration secs api

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>

* add release notes

Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
2022-02-11 09:42:59 -08:00
Nathan Mittler 1bf4189352
Updating LB enum to allow switch in default (#2232)
Switching the default zero value to UNSPECIFIED. This allows us
to better detect when the user has set a value for the enum. If
the user previously specified ROUND_ROBIN, it will still be
handled properly, but will be assigned a new enum value.

In addition, the value LEAST_CONN is now deprecated in favor of
a new value LEAST_REQUEST. It was previously poorly named and
only remains for backward compatibility.

There is a chance that this change could break existing tools
if they rely on binary marshaling/unmarshaling of the proto.
There are currently no tools within Istio that do this,
however.
2022-02-08 07:22:31 -08:00
zirain 9e7be6c8d8
add otel als provider (#2175) 2022-01-20 08:00:43 -08:00
Douglas Reid a3a1e91b06
proxyconfig(service-cluster): add control for service cluster naming (#2174)
* proxyconfig(service-cluster): add option for controlling service cluster naming

Provide enumerated options for `service_cluster` generation. This can be used to control the service names used in trace spans.

* simplify options

* add release note
2022-01-18 09:33:37 -08:00
Shriram Sharma 2bcfbc3342
added tls to sidecar api (#2165)
* added tls to sidecar api

* Added comments and examples

* added release notes

* fixed the release notes

* adding the gen files

* fixed the comments based on the review

* added gen files

* fixed the example config yaml

* fixed the comment

* added hide-from-docs

Co-authored-by: Shriram Sharma <shriram_sharma@intuit.com>
2022-01-12 17:43:59 -08:00
Steven Landow e200e560af
fix storage version for workload group (#2203) 2022-01-09 19:07:43 -08:00
Steven Landow 7f464483e0
promote WorkloadGroup to v1beta1 (#2177)
* promote WorkloadGroup to v1beta1

* release note

* rebase and regen
2022-01-07 13:53:14 -08:00
zirain e1d5fcda80
fix telemetry doc (#2195)
* fix telemetry doc

* add release notes

* Update releasenotes/notes/fix-telemetry-doc.yaml

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update releasenotes/notes/fix-telemetry-doc.yaml

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update releasenotes/notes/fix-telemetry-doc.yaml

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2021-12-29 09:29:19 -08:00
Douglas Reid d334c433d5
telemetry: add provider-specific format options (#2110)
* telemetry: add provider-specific format options

* update and add filter

* clean up comments

* add release note

* address review comments

* expose stackdriver logging options

* refactor provider config

* rename fields

* fix default log names
2021-11-19 13:01:59 -08:00
Rei Shimizu 291096a6ad
add option to skip sidecar generated requestID based sampling decision (#2104)
* add option to skip sidecar generated requestID based sampling decision

* release note

* fix

* fix

* move to telemetry api

* missing file

Signed-off-by: Shikugawa <Shikugawa@gmail.com>

* hide from docs
2021-11-02 16:38:13 -07:00
Sam Naser 7601b496f6
Add ProxyConfig CRD (#2080)
* Add ProxyConfig CRD

* Iterate on comments

* Update description

* Add proper cue gen annotations

* Add plural

* Add storageVersion cue annotation

* iterate on comments

* improve docs

* improve descriptions

* update release note
2021-10-13 10:42:15 -07:00
jacob-delgado 5c0524bcf8
Add support for Envoy's connection type LOGICAL_DNS in ServiceEntry (#2084)
* Add logical to service entry resolution

* Run make gen

* Attempt to come up with a better name instead of LOGICAL

* Run make gen

* Code review comments

* Add release notes

* Update comments

* Update previous definitions

* Fix releasenotes

* Run make gen

* Fix release notes

* Fix release notes
2021-10-04 22:43:55 -07:00
Neeraj Poddar f8889a3464
Add global HTTP retry policy API in MeshConfig (#2058)
* Add global HTTP retry policy API in MeshConfig

Addresses: https://github.com/istio/istio/issues/6861

* Add release notes

* Add release notes

* Clarify disabling retry policy

* Fix disable comment

* Clarification about perRetryTimeout field

* Added hide_from_docs flag
2021-08-10 13:59:15 -07:00