Commit Graph

61 Commits

Author SHA1 Message Date
Jason Young 2198cccdc2 add incremental mcp support (#620)
* add incremental mcp based on incremental xds

Extend the MCP to include support for incremental configuration
pushes. This is *heavily* derived from the new incremental xDS
protocol.

xref: https://github.com/envoyproxy/data-plane-api/blob/master/XDS_PROTOCOL.md#incremental-xds

* document initial_resource_versions should only be included in first request

* move resource version into metadata
2018-08-27 11:50:57 -07:00
Jason Young fccf4189d6 add create_time to mcp resource envelope (#622) 2018-08-27 11:08:58 -07:00
Kuat fac61dc6aa add new check template (#619)
Signed-off-by: Kuat Yessenov <kuat@google.com>
2018-08-22 05:19:33 -07:00
Jason Young a3d84057e2 add galley service address to mesh config (#616) 2018-08-20 12:20:33 -07:00
Venil Noronha 214c7598af Deprecate int percent in favor of double percentage (#609)
* Deprecate int percent in favor of FractionalPercent

This commit deprecates the integer percent field in Delay and Abort
types in favor of the new FractionalPercent type which allows finer
control.

Signed-off-by: Venil Noronha <veniln@vmware.com>

* Remove FractionalPercent and use double for percentage

Signed-off-by: Venil Noronha <veniln@vmware.com>

* Fix docs related to the percentage field

Signed-off-by: Venil Noronha <veniln@vmware.com>

* Copy envoy.type.Percent proto definition

* The "type" in envoy.type.Percent is renamed to "types" in
istio.envoy.types.Percent to avoid a keyword conflict in Golang.

* The Makefile splits the *.pb.go file generation for v2alpha1/*.proto
and types/*.proto in order to avoid the "inconsistent package names"
error in protoc-gen-go.

Signed-off-by: Venil Noronha <veniln@vmware.com>

* Use istio.envoy.types.Percent for percentage

Signed-off-by: Venil Noronha <veniln@vmware.com>

* Revert copy envoy.type.Percent and its usage

Signed-off-by: Venil Noronha <veniln@vmware.com>

* Add and use Percent type in virtual_service.proto

Signed-off-by: Venil Noronha <veniln@vmware.com>
2018-08-17 15:27:45 -04:00
Kuat 864a7336a1 mixer: add header operation templates (#612)
* add header operation templates

Signed-off-by: Kuat Yessenov <kuat@google.com>

* comment

Signed-off-by: Kuat Yessenov <kuat@google.com>

* add comment

Signed-off-by: Kuat Yessenov <kuat@google.com>

* add comment

Signed-off-by: Kuat Yessenov <kuat@google.com>

* use repeated

Signed-off-by: Kuat Yessenov <kuat@google.com>
2018-08-16 17:09:32 -07:00
Yangmin e0ffa87228 move common.StringMatcher to policy.proto (#614) 2018-08-16 15:33:57 -07:00
Yangmin 33feaf42f8 Update JWT to support per-path validation. (#607)
* Update JWT to support per-path validation.

* update based on discussions.

* address comments.
2018-08-14 19:37:31 -07:00
Yangmin fe4a677a40 Hide peer_is_optional and origin_is_optional from docs for later deprecation (#602)
* Hide peer_is_optional and origin_is_optional from docs for later deprecation.

* update
2018-08-09 18:30:30 -07:00
Yangmin 961e28fa67 jwt: add a excluded_path to jwt policy for health check support. (#594)
* jwt: add a excluded_path to jwt policy for health check support.

* make StringMatch reusable.
2018-07-27 12:20:40 -07:00
Shriram Rajagopalan f4733971fb
destination_subnet to destination_subnets (#584)
Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
2018-07-16 11:27:58 -04:00
Shriram Rajagopalan 4464ccf06b
Bring back array of destination subnets (#582)
Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
2018-07-13 15:07:11 -04:00
Jason Young dd1d174ddf remove legacy routing apis (#581) 2018-07-13 12:47:35 -04:00
Jason Young 76f27f20f1 remove broker api definitions (#573) 2018-07-07 10:52:39 -07:00
Zach Gershman 702662575f Bump release-1.0 (#572)
* Add a Readme.md file for the MCP protocol. (#565)

* Add a Readme.md file for the MCP protocol.

* Add a link to the XDS protocol.

* source_ip field is bool (#568)

* source_ip field is bool

- on the envoy side the source_ip field is
used as an indicator to determine whether or not
to use it as the hash value.

2c3c3e7546/api/envoy/api/v2/route/route.proto (L535)

* field now called use_source_ip

* Fix typos in comments. (#571)
2018-07-05 14:00:10 -04:00
Ozben Evren 80b4a7b836 Move config/mcp => mcp (#569)
* Add a Readme.md file for the MCP protocol.

* Move config/mcp to mcp. This does not include fixups.

* Complete the move config/mcp => mcp.

Fixup names, and regenerate code/documents.

* Add missing Python files.
2018-07-03 21:02:25 -07:00
Utako Ueda 2d182f5d15 update minimum_ring_size to uint64 (#564)
to be consistent with envoy v2 api minimum_ring_size:
79bce5fe1c/api/envoy/api/v2/cds.proto (L351-L358)
2018-07-02 15:05:59 -07:00
Utako Ueda 5c68ae6fa9 update cookie to use time.Duration (#563)
* update cookie to use time.Duration

destination rule should use time.Duration for its cookie to be
consistent with Envoy's api.

* update envoy_filter

* update destination_rule python as well
2018-07-02 13:27:37 -07:00
Shriram Rajagopalan 53c85fce88
Fix consistent hash LB and TLS (#562)
Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
2018-07-02 10:20:32 -07:00
cmluciano f9a7a88b87 use correct removeresponseheaders type (#560)
* RemoveResponseHeaders should be a repeated string instead of a map

Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>

* Add removeResponseHeaders generated code

Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
2018-06-29 10:12:29 -07:00
Jason Young 5c19bec52d add missing gogoproto.equal_all option to mcp envelope and metadata (#554) 2018-06-21 13:53:56 -07:00
Jason Young c977bae572 Add the Mesh Configuration Protocol (MCP) service. (#552)
* Add the Mesh Configuration Protocol (MCP) service.

The MCP service is to be used as a environment neutral downward API
for some Istio runtime components. Motivation for the MCP service
along with high-level design proposals are documented in the following
two docs:

* Pilot Decomposition (see https://goo.gl/qAsEQx)
* Galley component config distirbution (see https://goo.gl/EJu5hg)

MCP is conceptually aligned with envoy project's xDS protocol and ADS
service (see
https://github.com/envoyproxy/data-plane-api/blob/master/XDS_PROTOCOL.md). The
proto definitions are derived from the envoy API definitions with
unnecessary or envoy specific messages and fields removed. Names have
also been changed to make it unambiguous with xDS protocol.

* add missing generated files

* re-generate files

* address @geeknoid review comments

* update client comment
2018-06-21 12:56:56 -07:00
Quanjie Lin bd40812e1e add enable_sds flag to MeshConfig proto definition (#547)
* add enable_sds flag to MeshConfig proto definition

* address comments -
1. update boolean(sds_enable) to string(uds path)
2. add sds_refresh_delay field

* address comment
2018-06-20 10:38:55 -07:00
Shriram Rajagopalan 0d23676d8a Explicit SNI routing in VirtualService (#549)
* SNI routing primitives

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* updates

* remove ALPN

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* more doc tweaks

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* nits

* nits

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
2018-06-20 09:40:55 -07:00
Shriram Rajagopalan 1d135c6d2e
Revert "SNI routing primitives (#546)" (#548)
This reverts commit 3f90a768a1.

This PR was merged prematurely. Needs more work.
2018-06-19 22:19:24 -04:00
Shriram Rajagopalan 3f90a768a1 SNI routing primitives (#546)
* SNI routing primitives

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* updates
2018-06-19 16:57:55 -07:00
Shriram Rajagopalan deda82b83a
fix plurality of EnvoyFilter (#545)
* fix plurality of EnvoyFilter

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* more conditions
2018-06-19 09:46:48 -04:00
Shriram Rajagopalan 545c7300f1 Use port names and numbers for filter match (#540)
* Pilot plugin configurations

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* redo envoy filters

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* nits

* new ci image

* updates

* updates

* updates
2018-06-18 11:09:55 -07:00
Kuat 7c8f38470c mesh: client side check option (#528)
* client side check option

Signed-off-by: Kuat Yessenov <kuat@google.com>

* regenerate

Signed-off-by: Kuat Yessenov <kuat@google.com>

* build is bad

Signed-off-by: Kuat Yessenov <kuat@google.com>
2018-06-14 19:50:00 -07:00
Ozben Evren d9c69f7a8e Rename Resource => Envelope & Resource.contents => Envelope.resource. (#533)
* Rename Resource => Envelope & Resource.contents => Envelope.resource.

* Add missing python file.
2018-06-14 09:57:00 -07:00
Shriram Rajagopalan a2c69bea9e Envoy filter configurations (#447)
* Pilot plugin configurations

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* redo envoy filters

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* nits

* new ci image

* updates
2018-06-14 09:53:00 -07:00
Ozben Evren add0cbc47b Add core MCP protocol protos. (#531)
* Add core MCP protocol protos.

* Accommodate CR feedback.

* Accommodate CR feedback.

* Accommodate CR feedback.

* Accommodate CR feedback.
2018-06-14 09:34:59 -07:00
Diem Vu fe829db48c Remove mtls_excluded_services from mesh config. (#511)
* Mark mtls_excluded_services deprecated.

* Remove mtls_excluded_services flag completely.
2018-06-11 20:27:58 -07:00
Sunny Gupta 8c4ad02445 Create a separate field compiled in template and compiled in adapters. (#526)
* Create a separate field for referencing compiled in template and compiled in adapters.

* rename
2018-06-11 18:49:58 -07:00
Shriram Rajagopalan 2f201341f1
TCP outlier detection (#515)
Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
2018-06-08 17:09:27 -04:00
Jianfei Hu 2d2fd0bdcf remove TLS_PERMISSIVE mode in authn policy. (#518) 2018-06-08 11:10:58 -07:00
Kuat a29d69c48f make referenced attributes optional (#517) 2018-06-07 17:06:31 -07:00
Kuat f403f2ff3a mixer: route directive (#510)
* merge fix

Signed-off-by: Kuat Yessenov <kuat@google.com>

* pull out override

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>

* regenerate

Signed-off-by: Kuat Yessenov <kuat@google.com>

* clarify pseudo-headers

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>
2018-06-07 11:21:58 -07:00
Wayne Zhang c747495e94 Move back jwt_auth/config.proto from Envoy (#512)
* Move back jwt_auth/config.proto from Envoy

* Added python files
2018-06-06 23:19:58 -07:00
cmluciano b7531fa078 Add removeHeaders to virtualservice (#505)
* Add removeHeaders to virtualservice

* Hide removeHeaders from docs until implemented

* Clarify forwarding a response instead of request

* Use removeresponseheaders

* Blank line before new option
2018-06-05 15:09:36 -04:00
Tao Li d9e5202f00 Clean up unused field (#469) 2018-05-30 12:29:49 -07:00
Sunny Gupta 9fb97f846d Move types to policy/v1beta1 (#481)
* Move Value and other types to policy/v1beta1
2018-05-29 14:11:56 -07:00
Kuat ecef45ec0f
mixerfilter: control upstream forwarding (#502) 2018-05-23 16:06:01 -07:00
Kuat a660b4d5e0
mixerfilter: add forwarded attributes to per-route config (#500) 2018-05-23 15:58:30 -07:00
Martin Taillefer 9b8e46e9e9
Regenerate the docs with the latest generator tool. (#495)
Also fix one more Python-related build warning.
2018-05-17 14:52:51 -07:00
Martin Taillefer d5403102ee
Regenerate docs given latest doc extraction tool. (#477)
Also, fix python generation logic to stop passing directory names as proto files.
This eliminates a bunch of warnings when building the repo, and eliminates a bunch
of broken dud checked in files.
2018-05-11 15:01:12 -07:00
Jianfei Hu 170445541e add ISTIO_MUTUAL mode to indicate the key cert provisioned by istio. (#467)
* add ISTIO_MUTUAL mode to indicate the key cert provisioned by istio.

* fix the comments.

* run make to update the doc.
2018-05-03 13:26:55 -04:00
Sunny Gupta 98021d3b73
Add schema for templates. (#462)
* Add schema for templates.
Also change adapter Info to refer to tempalte instead of inlining it.

* fix number
2018-04-26 14:52:29 -07:00
Shriram Rajagopalan 793db0cb1a
Rename ExternalService to ServiceEntry (#459)
* rename ExternalService to ServiceEntry

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* remove useless file

* updating docs

* fix up docs

* doc fixes

* service location

* another rename

* Revert "another rename"

This reverts commit a459bded0a.

* docs trimming
2018-04-25 14:54:46 -04:00
Jianfei Hu 47aef7477a Change MutualParams to support more mode. (#458)
* Change MutualParams to support more mode.

* Add comments for mode also run make to update the doc.
2018-04-24 16:31:09 -07:00