* Add service_accounts field in ServiceEntry
* Ran make proto-commit
* Added example with format
* Rename to subject_alt_names
* Move example out of the message definition
* Added a period
* Remove hide_from_docs
* Replace public/private scoping with namespace scoped exports
Add flags to control scopeTo defaults
Update doc for locality weighted LB
* Hide from docs and other misc fixes
* add direct response
Signed-off-by: Kuat Yessenov <kuat@google.com>
* linter
Signed-off-by: Kuat Yessenov <kuat@google.com>
* linter
Signed-off-by: Kuat Yessenov <kuat@google.com>
* some commit
Signed-off-by: Kuat Yessenov <kuat@google.com>
* silly
Signed-off-by: Kuat Yessenov <kuat@google.com>
* silly
Signed-off-by: Kuat Yessenov <kuat@google.com>
* Introduce forward looking MCP enhancements
The initial version of Mesh Configuration Protocol (MCP) was
introduced to decouple Pilot/Mixer from the k8s kube-apiserver. These
enhancements address additional forward looking requirements as we
bring Galley and the MCP API to beta quality.
* Enable alternative control topologies where the source of
configuration is not publicly accessible.
* Provide a feedback mechanism to report the observed config state to
the user (e.g via CRD status).
* Improve performance at scale (e.g. Enterprise use case)
* Rationalize the resource model
The intent is to introduce these backwards incompatible API changes
now before Galley and MCP ship as beta quality and on-by-default.
Rationalization of the resource model and incremental improvements can
be implemented immediately as they effect the contract between Pilot
and Galley. Alternative control topologies and feedback/status are
inherently new features and can be implemented later with the same
APIs without concerns of breaking compatibility.
Design proposal: https://goo.gl/RTKMwF
* fix linter error
* add missing generated file
* proto-commit
* remove python/istio_api/mcp/v1alpha1/envelope_pb2.py
* s/envelope/resource
* s/client/node
* make proto-commit
* fix comments
* add system_version_info for compatibility with non-incremental MCP
* address review comments
* s/node/sink_node
* address more review comments
* update resource name documentation
* add allow_traffic_to_unknown_ports flag to meshconfig
related to https://github.com/istio/istio/issues/10330
* update proto.lock
* Revert "update proto.lock"
This reverts commit d1d3a0275a.
* Revert "add allow_traffic_to_unknown_ports flag to meshconfig"
This reverts commit e6fd415e2f.
* remove deprecated from OutboundTrafficPolicy. REGISTRY_ONLY and ALLOW_ALL
* remove deprecated from Mode and outbound_traffic_policy
* add dynamic state to attribute list
Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
* Adding weights to service entry endpoints
Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>
* undo
This commit adds a TcpClusterRewrite proto to be used in the upcoming
TCP cluster rewrite filter on istio/proxy.
Signed-off-by: Venil Noronha <veniln@vmware.com>
* add missing APA attribute bindings
Signed-off-by: Kuat Yessenov <kuat@google.com>
* review
Signed-off-by: Kuat Yessenov <kuat@google.com>
* rename to output
Signed-off-by: Kuat Yessenov <kuat@google.com>
* Add option to use LightStep as a tracing backend.
* Update docs: LightstepCollector takes precedence over zipkin conf
* Add parameter for cacert to use when authenticating LightStep Satellite
* Add more detail to ca cert comment
* Consolidate tracing config into its own message
* add arena allocation for mixer client proto
Signed-off-by: Wayne Zhang <qiwzhang@google.com>
* add generated files
Signed-off-by: Wayne Zhang <qiwzhang@google.com>
We think it's too early to deprecate these fkags as some users are
using them. The previous deprecation change is on master branch only
and not included in the Istio 1.0 documentation.
* add incremental mcp based on incremental xds
Extend the MCP to include support for incremental configuration
pushes. This is *heavily* derived from the new incremental xDS
protocol.
xref: https://github.com/envoyproxy/data-plane-api/blob/master/XDS_PROTOCOL.md#incremental-xds
* document initial_resource_versions should only be included in first request
* move resource version into metadata
* Deprecate int percent in favor of FractionalPercent
This commit deprecates the integer percent field in Delay and Abort
types in favor of the new FractionalPercent type which allows finer
control.
Signed-off-by: Venil Noronha <veniln@vmware.com>
* Remove FractionalPercent and use double for percentage
Signed-off-by: Venil Noronha <veniln@vmware.com>
* Fix docs related to the percentage field
Signed-off-by: Venil Noronha <veniln@vmware.com>
* Copy envoy.type.Percent proto definition
* The "type" in envoy.type.Percent is renamed to "types" in
istio.envoy.types.Percent to avoid a keyword conflict in Golang.
* The Makefile splits the *.pb.go file generation for v2alpha1/*.proto
and types/*.proto in order to avoid the "inconsistent package names"
error in protoc-gen-go.
Signed-off-by: Venil Noronha <veniln@vmware.com>
* Use istio.envoy.types.Percent for percentage
Signed-off-by: Venil Noronha <veniln@vmware.com>
* Revert copy envoy.type.Percent and its usage
Signed-off-by: Venil Noronha <veniln@vmware.com>
* Add and use Percent type in virtual_service.proto
Signed-off-by: Venil Noronha <veniln@vmware.com>
* Add a Readme.md file for the MCP protocol. (#565)
* Add a Readme.md file for the MCP protocol.
* Add a link to the XDS protocol.
* source_ip field is bool (#568)
* source_ip field is bool
- on the envoy side the source_ip field is
used as an indicator to determine whether or not
to use it as the hash value.
2c3c3e7546/api/envoy/api/v2/route/route.proto (L535)
* field now called use_source_ip
* Fix typos in comments. (#571)
* Add a Readme.md file for the MCP protocol.
* Move config/mcp to mcp. This does not include fixups.
* Complete the move config/mcp => mcp.
Fixup names, and regenerate code/documents.
* Add missing Python files.
* update cookie to use time.Duration
destination rule should use time.Duration for its cookie to be
consistent with Envoy's api.
* update envoy_filter
* update destination_rule python as well
* RemoveResponseHeaders should be a repeated string instead of a map
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
* Add removeResponseHeaders generated code
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
* Add the Mesh Configuration Protocol (MCP) service.
The MCP service is to be used as a environment neutral downward API
for some Istio runtime components. Motivation for the MCP service
along with high-level design proposals are documented in the following
two docs:
* Pilot Decomposition (see https://goo.gl/qAsEQx)
* Galley component config distirbution (see https://goo.gl/EJu5hg)
MCP is conceptually aligned with envoy project's xDS protocol and ADS
service (see
https://github.com/envoyproxy/data-plane-api/blob/master/XDS_PROTOCOL.md). The
proto definitions are derived from the envoy API definitions with
unnecessary or envoy specific messages and fields removed. Names have
also been changed to make it unambiguous with xDS protocol.
* add missing generated files
* re-generate files
* address @geeknoid review comments
* update client comment
* add enable_sds flag to MeshConfig proto definition
* address comments -
1. update boolean(sds_enable) to string(uds path)
2. add sds_refresh_delay field
* address comment
* client side check option
Signed-off-by: Kuat Yessenov <kuat@google.com>
* regenerate
Signed-off-by: Kuat Yessenov <kuat@google.com>
* build is bad
Signed-off-by: Kuat Yessenov <kuat@google.com>
Pengyuan Bian