Commit Graph

141 Commits

Author SHA1 Message Date
Gao Hongtao 6f137ab2ce Replacing envoy_google_grpc with envoy_grpc for als (#937) 2019-06-03 19:31:28 -07:00
mandarjog 5dd7dbbe45 H2 auto upgrade options (#930)
* Add h2upgrade policy

* review comments

* Add generated files
2019-06-01 20:47:16 -07:00
Gao Hongtao a92ad44857 Adding envoy gRPC access log service configuration to MeshConfig (#911)
* Adding envoy_accesslog_service to MeshConfig

* Update config message name

* Adding envoy_accesslog_service to MeshConfig
2019-05-31 08:47:44 -04:00
Hai Huang 9f689ccd27 adding fields to allow batch reporting options to be tunable as helm values (#929) 2019-05-29 11:45:17 -07:00
Venil Noronha 1dffc8d3d2 Add parameter to ignore HTTP match case (#926)
This adds a ignoreUriCase parameter to HTTPMatchRequest to allow for
configuring case-insensitive HTTP URI matching.

Signed-off-by: Venil Noronha <veniln@vmware.com>
2019-05-21 17:40:26 -07:00
Nupur Garg 657d9f2e55 Add a status field in QuotaResult (#921)
* Add a status field in QuotaResult

This is so that we can result status when we are not able to fetch quota and check call can fail based on fail-open policy set by user.
Issue: https://github.com/istio/istio/issues/12115

* Fix build
2019-05-16 13:05:03 -07:00
Hai Huang fb2153e2f1 adding report_batch_max_request and report_batch_max_time to TransportConfig (#914)
* adding report_batch_max_request and report_batch_max_time to TransportConfig

* run make proto-commit

* added comment on the default-value behavior

* added more descriptive comments on the 2 added fields
2019-05-02 06:32:50 -07:00
Arian Motamedi 6b8d1849e7 Adding idle_timeout field to DestinationRule (#891)
* adding idle_timeout setting for upstream connections.

* typo: removing extra whitespace from idle_timeout documentation.

* running proto-commit.
2019-04-05 10:27:52 -04:00
Venil Noronha 8a1240dcc3 Add configuration for matching on query params (#883)
This adds the necessary configuration for matching over query
parameters.

Signed-off-by: Venil Noronha <veniln@vmware.com>
2019-04-02 08:34:26 -04:00
Quanjie Lin c443173254 add sds related param to proxyconfig proto (#884)
* add sds related param to proxyconfig proto

* fix build

* update comment
2019-03-27 16:50:42 -07:00
John Howard 87afa02b7b Merge release-1.1 into master (#872)
* Doc fixes.

* Add high-level overview and diagrams for MCP (#805)

* document MCP

* add additional note on NACK behavior

* add a note about ignoring stale nonces

* Add envoy metrics service configuration to ProxyConfig (#803)

* Add envoy metrics service configuration to ProxyConfig

Similar to the statsd sink config, this change is in preparation for adding support for the envoy metrics service API.

* Update proto.lock

* Reorder metrics_service_address just after statsd_udp_address

* Update comment in the authN API to match with 1.1 behavior (#808)

* Rename metrics_service_address to clarify that it is for Envoy's API (#809)

Since "metrics service" is so ambiguous, this change specifically denotes that the config is for Envoy's metrics service API. The comments also now link to detailed info about the metrics service API.

* Generate separate HTML page per proto under networking (#811)

* Generate separate pages for each networking proto

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* update

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* tweaks

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* Fix interdoc references

* separate doc and go gen

* change dash to underscore

* fix

* more fixes

* makefile fix

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* remove bad target

* Revert "change dash to underscore"

This reverts commit 7fbced66f6.

* final update

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* Revert "Generate separate HTML page per proto under networking (#811)"

This reverts commit 5f14eadd since it breaks the ability
to generate reference docs in istio.io

* Update to latest tools.

* Revert "Update to latest tools."

This reverts commit 231fadc5 which I accidentally pushed to the
wrong place.

* fix mcp update error diagram (#810)

* update istio/tools (#815)

* Revert "Revert "Generate separate HTML page per proto under networking (#811)"" (#818)

* Minor updates for building docker images. (#817)

* Add spell checking for docs. (#819)

* Add a bunch of words to the custom dictionary.

* Document exportTo restrictions (#820)

* Doc fixes. (#821)

* Proxy config: Add tls_certs_to_watch field (#824)

* Proxy config: Add tls_certs_to_watch field

* Address PR comment

* Revert "Proxy config: Add tls_certs_to_watch field (#824)" (#825)

This reverts commit e613e358ae.

* Update gateway and sidecar hosts doc (#826)

* Update gateway and sidecar hosts doc

* regen

* review comments

* Update API docs (service entry, gateway, sidecar) (#831)

* Update sidecar and gateway docs

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* gen docs

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* update service entry

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* updates

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* add configurable dns refresh rate to mesh for strict dns cluster,  (#832)

* add configurable dns refresh rate to mesh for strict dns cluster, issue #12181

* add lock file

* Hosts are not ignored in ServiceEntry for HTTPs (#833)

* Hosts are not ignored in ServiceEntry for HTTPs

* Clarify

* Reword

* Generate protos

* Address code review comments

* Fix typo

* generate

* make mixer config marshal deterministic (#846)

Signed-off-by: Kuat Yessenov <kuat@google.com>

* Fix some doc errors. (#854)

This started out to just fix a bad link to unblock work on
istio.io, but I ended up fixing a bunch of typos/incorrect format
throughout.

* Fix two more broken links. (#856)

* Fix CRD examples for release-1.1 (#859)

* fix MeshNetworks demo (#841)

* fix MeshNetworks demo

* generate

* update

* last minute doc fixes (#865)

Signed-off-by: Shriram Rajagopalan <rshriram@gmail.com>

* Clarify comment for server_name field in Mixer oop auth config (#800)

* add mixerclient config to istio.io reference docs (#827)

* Envoyfilter docs fix (#867)

* Tweaks to get the mixer client config docs to be published. (#868)

* Change where the Mixer client docs are published.
2019-03-21 13:54:42 -07:00
Ozben Evren 5a79ba0ecb Merge release-1.1 to master (#840)
* Doc fixes.

* Add high-level overview and diagrams for MCP (#805)

* document MCP

* add additional note on NACK behavior

* add a note about ignoring stale nonces

* Add envoy metrics service configuration to ProxyConfig (#803)

* Add envoy metrics service configuration to ProxyConfig

Similar to the statsd sink config, this change is in preparation for adding support for the envoy metrics service API.

* Update proto.lock

* Reorder metrics_service_address just after statsd_udp_address

* Update comment in the authN API to match with 1.1 behavior (#808)

* Rename metrics_service_address to clarify that it is for Envoy's API (#809)

Since "metrics service" is so ambiguous, this change specifically denotes that the config is for Envoy's metrics service API. The comments also now link to detailed info about the metrics service API.

* Generate separate HTML page per proto under networking (#811)

* Generate separate pages for each networking proto

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* update

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* tweaks

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* Fix interdoc references

* separate doc and go gen

* change dash to underscore

* fix

* more fixes

* makefile fix

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* remove bad target

* Revert "change dash to underscore"

This reverts commit 7fbced66f6.

* final update

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* Revert "Generate separate HTML page per proto under networking (#811)"

This reverts commit 5f14eadd since it breaks the ability
to generate reference docs in istio.io

* Update to latest tools.

* Revert "Update to latest tools."

This reverts commit 231fadc5 which I accidentally pushed to the
wrong place.

* fix mcp update error diagram (#810)

* update istio/tools (#815)

* Revert "Revert "Generate separate HTML page per proto under networking (#811)"" (#818)

* Minor updates for building docker images. (#817)

* Add spell checking for docs. (#819)

* Add a bunch of words to the custom dictionary.

* Document exportTo restrictions (#820)

* Doc fixes. (#821)

* Proxy config: Add tls_certs_to_watch field (#824)

* Proxy config: Add tls_certs_to_watch field

* Address PR comment

* Revert "Proxy config: Add tls_certs_to_watch field (#824)" (#825)

This reverts commit e613e358ae.

* Update gateway and sidecar hosts doc (#826)

* Update gateway and sidecar hosts doc

* regen

* review comments

* Update API docs (service entry, gateway, sidecar) (#831)

* Update sidecar and gateway docs

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* gen docs

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* update service entry

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* updates

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* add configurable dns refresh rate to mesh for strict dns cluster,  (#832)

* add configurable dns refresh rate to mesh for strict dns cluster, issue #12181

* add lock file

* Post-merge generation
2019-03-09 07:47:29 -08:00
Yangmin Zhu 5f7cfed842 Add jwks to JWT policy to allow using public key for token validation. (#829)
* Add jwks to allow using public key directly in JWT policy.

Signed-off-by: Yangmin Zhu <ymzhu@google.com>

* do not use oneof

* fix build
2019-03-05 11:31:32 -08:00
louiscryan 823a224f0b Merge branch 'release-1.1' into Merge11ToMaster 2019-02-20 16:27:40 -08:00
Caleb Gilmour f6b6c4168d Add Datadog tracing to proxy config (#797)
Signed-off-by: Caleb Gilmour <caleb.gilmour@datadoghq.com>
2019-02-18 13:47:25 -08:00
Pengyuan Bian 5945a02236 add server_name to mixer remote handler tls / mtls (#789)
* add server_name to mixer remote handler tls / mtls

* proto.lock
2019-02-15 10:47:28 -05:00
Joshua Blatt 07829e06ca Add transport error retry config to mixer client. (#792) 2019-02-10 21:19:52 -05:00
Andra Cismaru 3094619c84 Add subject_alt_names field in ServiceEntry (#785)
* Add service_accounts field in ServiceEntry

* Ran make proto-commit

* Added example with format

* Rename to subject_alt_names

* Move example out of the message definition

* Added a period

* Remove hide_from_docs
2019-02-05 13:26:00 -08:00
Shriram Rajagopalan e3015e7a46 Fixing SDS field/semantics in the gateway (#780)
* Enabling SDS in the gateway

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* lint

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* nits

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* cleanups

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* update

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* updates

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* protolock

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
2019-01-31 15:56:14 -08:00
Shriram Rajagopalan d5da499b61
revert sds name (#781)
Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
2019-01-30 20:15:20 -05:00
Douglas Reid 1b0a034631 Add way to signal encoding used for CompressedAttributes to Mixer (#770)
* Add mechanism to signal encoding used for CompressedAttributes to mixer proto

* Update proto.lock
2019-01-30 11:02:42 -08:00
Shriram Rajagopalan 5c6aec28eb
Revert "Enabling SDS in the gateway (#778)" (#779)
This reverts commit 3c7e31a648.
2019-01-29 19:40:38 -05:00
Shriram Rajagopalan 3c7e31a648
Enabling SDS in the gateway (#778)
* Enabling SDS in the gateway

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* lint

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
2019-01-29 19:38:36 -05:00
Louis Ryan b524b1eb29 Replace 'scope' with 'export_to' namespace (#758)
* Replace public/private scoping with namespace scoped exports
Add flags to control scopeTo defaults
Update doc for locality weighted LB

* Hide from docs and other misc fixes
2019-01-28 15:31:48 -05:00
Jimmy Chen b2beb75c6b Add sds_name into gateway config. (#772)
* Add sds_name into gateway config

* Update comment

* Update comment
2019-01-24 10:28:51 -08:00
Kuat 0dd68ef13c add response headers (#769)
Signed-off-by: Kuat Yessenov <kuat@google.com>
2019-01-22 12:08:18 -08:00
Kuat 91619d730f policy: add direct response (#765)
* add direct response

Signed-off-by: Kuat Yessenov <kuat@google.com>

* linter

Signed-off-by: Kuat Yessenov <kuat@google.com>

* linter

Signed-off-by: Kuat Yessenov <kuat@google.com>

* some commit

Signed-off-by: Kuat Yessenov <kuat@google.com>

* silly

Signed-off-by: Kuat Yessenov <kuat@google.com>

* silly

Signed-off-by: Kuat Yessenov <kuat@google.com>
2019-01-22 08:24:58 -08:00
Zhonghu Xu 6286ff0e63 Locality LB failover api (#760)
* mesh wide locality loadbalancer api

* generate

* generate
2019-01-20 17:49:56 -08:00
Diem Vu aec9db9d9a Add option to select worload using lables for authn policy. (#755)
* Add option to select workload using labels for authn policy

* Make proto-commit
2019-01-16 12:55:48 -08:00
Jason Young 2dadb9eaaf add optional incremental flag to ResponseSink and ResourceSource services (#762) 2019-01-16 09:24:49 -08:00
Jason Young aa7083e882 Introduce forward looking MCP enhancements (#741)
* Introduce forward looking MCP enhancements

The initial version of Mesh Configuration Protocol (MCP) was
introduced to decouple Pilot/Mixer from the k8s kube-apiserver. These
enhancements address additional forward looking requirements as we
bring Galley and the MCP API to beta quality.

* Enable alternative control topologies where the source of
  configuration is not publicly accessible.

* Provide a feedback mechanism to report the observed config state to
  the user (e.g via CRD status).

* Improve performance at scale (e.g. Enterprise use case)

* Rationalize the resource model

The intent is to introduce these backwards incompatible API changes
now before Galley and MCP ship as beta quality and on-by-default.

Rationalization of the resource model and incremental improvements can
be implemented immediately as they effect the contract between Pilot
and Galley. Alternative control topologies and feedback/status are
inherently new features and can be implemented later with the same
APIs without concerns of breaking compatibility.

Design proposal: https://goo.gl/RTKMwF

* fix linter error

* add missing generated file

* proto-commit

* remove python/istio_api/mcp/v1alpha1/envelope_pb2.py

* s/envelope/resource

* s/client/node

* make proto-commit

* fix comments

* add system_version_info for compatibility with non-incremental MCP

* address review comments

* s/node/sink_node

* address more review comments

* update resource name documentation
2019-01-09 10:31:45 -08:00
Shriram Rajagopalan 448faa9b3c Sidecar config resource (#742)
* renaming

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* Sidecar

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* gateway updates

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* tweaks

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* update protolock

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* add workloadSelector to EnvoyFilter

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* update comments

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* feedback

* tweaks

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* capture mode

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* nits

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
2019-01-07 13:10:44 -08:00
Pengyuan Bian d793e6c907 rename report_session_affinity. (#747) 2019-01-04 09:53:50 -05:00
Pengyuan Bian 4238d2d87b Add Mixer Report Session Affinity into Mesh Config (#746)
* add session affinity option.

* proto lock
2019-01-03 09:45:42 -08:00
Vadim Eisenberg ab6f375bdc remove deprecated from OutboundTrafficPolicy. REGISTRY_ONLY and ALLOW_ALL (#744)
* add allow_traffic_to_unknown_ports flag to meshconfig

related to https://github.com/istio/istio/issues/10330

* update proto.lock

* Revert "update proto.lock"

This reverts commit d1d3a0275a.

* Revert "add allow_traffic_to_unknown_ports flag to meshconfig"

This reverts commit e6fd415e2f.

* remove deprecated from OutboundTrafficPolicy. REGISTRY_ONLY and ALLOW_ALL

* remove deprecated from Mode and outbound_traffic_policy
2019-01-01 10:57:15 -05:00
Zhonghu Xu 08a19da534 Add per service locality weight setting (#726)
* Add locality weight setting

* generate

* Add locality weight setting

* generate

* Add locality weight setting

* make proto commit
2018-12-28 23:41:20 -05:00
Pengyuan Bian 80aff01d40 oop adapter connection auth config (#606)
* grpc adapter connection auth.

* proto.lock.
2018-12-14 14:34:47 -08:00
Quanjie Lin b1978437bd add enable_sds_k8s_sa_jwt flag to meshconfig (#729)
* add enable_sds_k8s_sa_jwt flag to meshconfig

* fix build

* update comment and rename
2018-12-11 14:05:28 -08:00
Shriram Rajagopalan 49946a7daf
rename NetworkScope to ServiceDependency (#720)
* rename NetworkScope to ServiceDependency

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* update

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
2018-11-28 22:24:25 -05:00
Shriram Rajagopalan 4f643c9854
NetworkScopes (#719)
* default network scope

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* protolock

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* doc update

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* NetworkScopes

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* proto lock

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* updates

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* default network scope

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* doc updates

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* updates

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* rename

* nits and final updates

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
2018-11-28 15:09:16 -05:00
Itay Shakury 1a7788d738 allow setting headers (#709)
* refactor headers

* proto-commit

* settle num entries with 1.1 state
2018-11-25 19:40:04 -08:00
Shakti Das fd493665dc API changes to enable TCP keepalive configuration. (#718)
* API changes to enable TCP keepalive configuration.

Signed-off-by: Shakti <shaktiprakash.das@salesforce.com>

* Added probes configuration to tcp_keepalive.

Signed-off-by: Shakti <shaktiprakash.das@salesforce.com>

* Updated description to 'time duration'.

Signed-off-by: Shakti <shaktiprakash.das@salesforce.com>
2018-11-25 07:48:03 -08:00
Gregory Hanson a48276b531 add access log encoding (#713) 2018-11-19 14:56:02 -08:00
Gregory Hanson 44363fb191 Revert "fix naming convention between access log format vs encoding (#711)" (#712)
This reverts commit 60483a526b.
2018-11-19 14:36:02 -08:00
Gregory Hanson 60483a526b fix naming convention between access log format vs encoding (#711) 2018-11-19 12:53:01 -08:00
Shriram Rajagopalan afb4e0828e Merge remote-tracking branch 'origin/master' into release-1.1 2018-11-14 10:00:45 -05:00
Shriram Rajagopalan 56c82136df
Adding weights to service entry endpoints (#704)
* add dynamic state to attribute list

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* Adding weights to service entry endpoints

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* undo
2018-11-12 12:20:59 -05:00
Shriram Rajagopalan c5d2d4fdf9 Merge remote-tracking branch 'origin/release-1.1' into r11tom 2018-11-08 16:04:40 -05:00
Kevin Conner d03e770930 Add support for healthy panic threshold (#486) (#496) 2018-11-08 16:04:04 -05:00
Shriram Rajagopalan 072d625e0b Merge remote-tracking branch 'origin/release-1.1' into r11tom 2018-11-08 13:53:09 -05:00