diff --git a/.spelling b/.spelling
index e9c8a58231..69e12e8395 100644
--- a/.spelling
+++ b/.spelling
@@ -1,12 +1,12 @@
-0-RTT
0.1.x
-0.2.x
0.20.0
+0.2.x
0.8.x
+0-RTT
+10ms
+10s
1.0.x
1.0.x.
-1.1.x
-1.1.x.
1.10.x
1.11.x
1.12.x
@@ -18,9 +18,10 @@
1.18.0
1.18.x
1.19.x
-1.2.x
-1.2.x.
+1.1.x
+1.1.x.
1.20.x
+123456789012.my
1.23.x
1.24.0
1.24.x
@@ -29,10 +30,15 @@
1.27.3
1.27.x
1.28.x
+12ms
+1.2.x
+1.2.x.
1.3.x
1.3.x.
+14.60
1.4.x
1.4.x.
+15.30
1.5.x
1.5.x.
1.6.x
@@ -41,25 +47,19 @@
1.7.x.
1.8.x
1.8.x.
-1.9.x
-1.x
-10ms
-10s
-123456789012.my
-12ms
-14.60
-15.30
18x
+1.9.x
1ms
1qps
1s
+1.x
1xx
-2.5s
2010s
20ms
22.99
24.13
25ms
+2.5s
2h
2ms
2s
@@ -78,8 +78,8 @@
5xx
6ms
6s
-7.5
72.96ms
+7.5
7Mb
7ms
7s
@@ -87,7 +87,6 @@
8ms
8x
9ms
-a.k.a.
Aakash2017
abc
abcde12345
@@ -102,6 +101,7 @@ Aeraki
AES-NI
Airbnb
Aizhamal
+a.k.a.
AKS
AKS-Engine
Alexa
@@ -121,14 +121,14 @@ Ansible
Ant
AntiAffinity
API
-api-server
Apigee
APIs
+api-server
apiVersion
Aporeto
AppOptics
-AppSwitch
appswitch
+AppSwitch
architected
ArgoCD
args.yaml
@@ -147,12 +147,12 @@ AuthorizationPolicy
authorizer
AuthPolicy
authz
-auto-sni
autoscaled
autoscaler
-Autoscalers
autoscalers
+Autoscalers
autoscaling
+auto-sni
AutoTrader
Avelar
AVX-512
@@ -178,8 +178,8 @@ Bluecore
BluePerf
boilerplates
bol.com
-Bookinfo
bookinfo
+Bookinfo
boolean
BoringSSL
bring-your-own-CA
@@ -187,10 +187,11 @@ bring-your-own-identity
Brooks
bt
Budinsky
+_build
buildah
bytecode
BytecodeAlliance
-c.f.
+_CA_
Cai
Cale
callout
@@ -202,24 +203,25 @@ CAs
CDNs
CentOS
Cernich
+c.f.
CFP
Chaomeng
checksum
Chrony
Chun
+Ciążyński
CIDRs
Cilium
CIOs
Circonus
-Ciążyński
-Cleartext
cleartext
+Cleartext
cli
CloudNativeCon
CloudWatch
-cluster.local
cluster1
cluster2
+cluster.local
ClusterSPIFFEID
CNCF-hosted
CNI
@@ -232,12 +234,12 @@ colocate
colocated
colocating
componentization
-Composability
composability
+Composability
composable
config
-ConfigMap
configmap
+ConfigMap
configmaps
configurability
conformant
@@ -263,8 +265,8 @@ CSPs
CSRs
Ctrl
Cusa
-Customizable
customizable
+Customizable
customTags
CVE
CVE-2019-12243
@@ -347,14 +349,15 @@ CVE-2023-35942
CVE-2023-35943
CVE-2023-35944
CVE-2023-35945
-CVEs
cves
+CVEs
cvss
cyber
cybersecurity
D2iQ
DaemonSet
DaoCloud
+_data
Datadog
datapath
dataplane
@@ -379,8 +382,8 @@ deserializing
DestinationRule
Deutsche
dev
-Devirtualization
devirtualization
+Devirtualization
devops
devstats
Dhir
@@ -388,8 +391,8 @@ Dhiyaulhaq
discoverability
discuss.istio.io
distro
-Distroless
distroless
+Distroless
Divya
DNS
DNS_AUTO_ALLOCATE
@@ -406,11 +409,11 @@ dual-stack
Dubbo
Duggirala
DynamoDB
-e.g.
e2e
eBPF
ECR
edition.cnn.com
+e.g.
Eitan
Elasticsearch
embeddable
@@ -426,8 +429,8 @@ etcd
Etezadi
events.istio.io
example.com
-exec-ing
ExecAction
+exec-ing
executables
Exfiltrating
exfiltration
@@ -488,8 +491,8 @@ GoTo
Grafana
grafana-istio-dashboard
Graphviz
-gRPC
grpc
+gRPC
h2c
Haidian
Harvey
@@ -504,17 +507,17 @@ hostnames
hotspots
HP
html
-HTTP
http
+HTTP
HTTP1.1
-HTTP2
http2
+HTTP2
httpbin
httpbin.foo.svc.cluster.local
httpbin.org
HTTPRoute
-HTTPS
https
+HTTPS
Hu
Huabing
Huailong
@@ -523,8 +526,8 @@ Huayuan
hyperkube
hypervisor
Hystrix
-i.e.
Idit
+i.e.
ILBs
incentivized
Incrementality
@@ -534,33 +537,44 @@ initializers
injector
Inkscape
int64
-Interdependencies
interdependencies
+Interdependencies
intermediation
interoperate
interoperation
intra-cluster
-intra-mesh
intrahost
+intra-mesh
intranode
Invasiveness
IOPs
ip
+ip_address
ipBlocks
IPs
iptables
IPv4
IPv6
-ip_address
Istio
istio-agent
+IstioBirthday
istio-cni
+IstioCon
istio-control
+istioctl
+istiod
+Istiod
+istioday
istio-discovery
istio-ecosystem
+Istiofied
istio-identity
+istio.io
+istio.io.
+IstioMesh
istio-mixer
istio-operator
+IstioOperator
istio-proxy
ISTIO-SECURITY-2019-003
ISTIO-SECURITY-2019-004
@@ -586,22 +600,11 @@ ISTIO-SECURITY-2023-001
ISTIO-SECURITY-2023-002
ISTIO-SECURITY-2023-003
istio-system
-istio.io
-istio.io.
-IstioBirthday
-IstioCon
-istioctl
-Istiod
-istiod
-istioday
-Istiofied
-IstioMesh
-IstioOperator
-IstioTurns4
istio_tcp_connections_closed_total
istio_tcp_connections_opened_total
istio_tcp_received_bytes_total
istio_tcp_sent_bytes_total
+IstioTurns4
iter8
Jannot
jason
@@ -618,8 +621,8 @@ jwcrypto
JWKS-URI
JWT
jwt.io
-JWTs
JWT_RULE
+JWTs
k3d
k3s
k6
@@ -632,8 +635,8 @@ Kebe
keepalive
Keepalived
Kenan
-key.pem
Keycloak
+key.pem
Khaliq
Kiali
Kibana
@@ -646,22 +649,22 @@ Krishnan
Kristián
Kuat
Kube
-kube-proxy
kubebuilder
KubeCon
kubeconfig
kubectl
-Kubelet
kubelet
+Kubelet
kubelogin
Kubenet
+kube-proxy
Kubernetes
kubernetes.default
KubeSphere
Kumar
Kustomization
-Kustomize
kustomize
+Kustomize
kyzy
L3-4
L4-L6
@@ -672,8 +675,8 @@ Leggett
Li
LibreSSL
lifecycle
-LightStep
Lightstep
+LightStep
Linkerd
linktitle
linter
@@ -700,22 +703,22 @@ Manolache
Marshalers
Mattix
MB
-Meetup
meetup
+Meetup
meetups
memcached
memcached-2's
Mengxue
-Merbridge
merbridge
+Merbridge
MeshConfig
Mesika
Mesos
mesos-dns
metadata
MetalLB
-MetaProtocol
metaprotocol
+MetaProtocol
MiB
MicroK8s
microservice
@@ -728,22 +731,22 @@ misconfiguration
misconfigurations
misconfigured
misordered
-Mitigations
mitigations
-MongoDB
+Mitigations
mongodb
+MongoDB
MOSN
mTLS
Multicast
-Multicloud
multicloud
-Multicluster
+Multicloud
multicluster
+Multicluster
mutex
mutual-tls
myapp
-MySQL
mysql
+MySQL
mysqldb
Nambiar
nameservers
@@ -767,8 +770,8 @@ Nikhita
Ning
NLBs
no-brainer
-Node.js
nodeAffinity
+Node.js
non-conformant
non-L4
non-mTLS
@@ -781,7 +784,6 @@ nsenter
NUL
NULs
Nurmamat
-O'Neal
oap
OAuth
OAuth2
@@ -789,10 +791,11 @@ oc
OCI-compliant
ok
Okta
-Onboard
onboard
-Onboarding
+Onboard
onboarding
+Onboarding
+O'Neal
OneCloud
onsite
onwards
@@ -802,8 +805,8 @@ OpenID
OpenID_Connect
OpenMetrics
OpenShift
-OpenSSL
openssl
+OpenSSL
OpenTelemetry
OpenTracing
openusage.org
@@ -822,8 +825,8 @@ PaaS
Padmanabhan
Papertrail
parenthesization
-Passthrough
passthrough
+Passthrough
PassthroughCluster
Patlevič
peek
@@ -834,8 +837,8 @@ performant
Pettit
Piotr
pipelined
-PKI
pki
+PKI
PKIs
plaintext
platform-specific
@@ -851,18 +854,18 @@ pprof
Pratima
pre-alpha
pre-ambient
-pre-connected
-pre-parsed
-pre-release
-pre-specified
precheck
preconfigured
+pre-connected
prefetching
preformatted
preload
+pre-parsed
prepend
prepending
prepends
+pre-release
+pre-specified
prober
programmatically
Prometheus
@@ -873,13 +876,13 @@ protoc
protos
proxied
proxy-config
-Proxy-wasm
-proxying
-Proxyless
-proxyless
proxy_http_version
-Pub/Sub
+proxying
+proxyless
+Proxyless
+Proxy-wasm
PubNub
+Pub/Sub
pwd
px.dev
Qin
@@ -896,26 +899,26 @@ ratelimit-handler
RawVM
rbac
RDS
-re-applied
-re-patch
reachability
+re-applied
rearchitect
rebalance
rebalances
recomposition
redeployments
-Redis
redis
+Redis
Redis-based
referer
-Registrator
registrator
+Registrator
reimplement
reimplemented
reinject
relabeling
remediate
remoteIpBlocks
+re-patch
repo
repurposed
requires_any
@@ -950,12 +953,12 @@ SDKs
sds
Searcy
Secura
-SecurityCon
security_bulletin
+SecurityCon
selinux
serverless
-service-apis
serviceaccount
+service-apis
ServiceEntries
ServiceEntry
ServiceGraph
@@ -966,8 +969,8 @@ ServiceMesher
sha256
Shamsher
sharded
-Sharding
sharding
+Sharding
Shi
Shilin
Shivanshu
@@ -1024,18 +1027,18 @@ subresource
subresources
substring
Superfeet
-Superset
superset
+Superset
supersets
svc
svc.com
svg
Sysdig
Taillefer
-TCP
tcp
-TCP-level
+TCP
Tcpdump
+TCP-level
team1
team1-ns
team2
@@ -1066,24 +1069,23 @@ TrafficPolicy
Trulia
trustability
tunneling
-U.S.
UID
UIDs
uint32
ulimit
-un-injecting
uncaptured
uncomment
uncommented
unconfigured
uncore
-Undeploy
undeploy
+Undeploy
undeployed
-Underutilization
underutilization
+Underutilization
unencrypted
unforgeable
+un-injecting
unmanaged
Unmarshalers
Unmarshaling
@@ -1091,14 +1093,15 @@ unnormalized
unsampled
untar
untrusted
-Upgradeability
upgradeability
+Upgradeability
upstreamed
upstreaming
upstreams
uptime
URIs
url
+U.S.
user
user1
usergroup
@@ -1119,9 +1122,12 @@ v1alpha3
v1beta1
v1beta1#MutatingWebhookConfiguration
v1dev1
-V2
+_v2_
+_V2_
v2
+V2
v2-mysql
+_v3_
v3
validatable
validator
@@ -1134,8 +1140,8 @@ versioning
veth-pair
vhost
vhosts
-Virtualization
virtualization
+Virtualization
VirtualService
virtualservices-destrules
VM
@@ -1156,8 +1162,8 @@ waypoints
WeaveWorks
WebAssembly
webhook
-Webhooks
webhooks
+Webhooks
WebSocket
Websockets
WebSphere
@@ -1177,12 +1183,12 @@ workgroup
workload
workstream
www.google.com
-x-envoy-upstream-rq-timeout-ms
X.509
X.509.
x509
x86
xDS
+x-envoy-upstream-rq-timeout-ms
Xeon
Xia
Xiao
@@ -1223,9 +1229,3 @@ Zsh
ztunnel
ztunnels
Zufar
-_build
-_CA_
-_data
-_V2_
-_v2_
-_v3_
diff --git a/Makefile.core.mk b/Makefile.core.mk
index f0a471eb3b..94c56bc9f7 100644
--- a/Makefile.core.mk
+++ b/Makefile.core.mk
@@ -27,7 +27,7 @@ export IN_BUILD_CONTAINER := $(IN_BUILD_CONTAINER)
# ISTIO_IMAGE_VERSION stores the prefix used by default for the Docker images for Istio.
# For example, a value of 1.6-alpha will assume a default TAG value of 1.6-dev.
@@ -2678,7 +2681,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
install-cni
ENABLE_EXTERNAL_NAME_ALIASBoolean
-
+falsetrueIf enabled, ExternalName Services will be treated as simple aliases: anywhere where we would match the concrete service, we also match the ExternalName. In general, this mirrors Kubernetes behavior more closely. However, it means that policies (routes and DestinationRule) cannot be applied to the ExternalName service. If disabled, ExternalName behaves in fairly unexpected manner. Port matters, while it does not in Kubernetes. If it is a TCP port, all traffic on that port will be matched, which can have disastrous consequences. Additionally, the destination is seen as an opaque destination; even if it is another service in the mesh, policies such as mTLS and load balancing will not be used when connecting to it.
diff --git a/content/en/docs/reference/commands/istioctl/index.html b/content/en/docs/reference/commands/istioctl/index.html
index 279c8941d0..a488dc6714 100644
--- a/content/en/docs/reference/commands/istioctl/index.html
+++ b/content/en/docs/reference/commands/istioctl/index.html
@@ -474,9 +474,9 @@ All names except label and annotation keys support '*' glob matching pat
Set a specific directory for output archive file. (default ``)
-
+--rps-limit <int>--rq-concurrency <int>
- Requests per second limit to the Kubernetes API server, defaults to 10.A higher limit can make bug report collection much faster. (default `0`)
+Set the concurrency limit of requests to the Kubernetes API server, defaults to 32. (default `0`)
@@ -594,9 +594,9 @@ All names except label and annotation keys support '*' glob matching pat
--start-time <string>Set a specific directory for output archive file. (default ``)
-
+--rps-limit <int>--rq-concurrency <int>
- Requests per second limit to the Kubernetes API server, defaults to 10.A higher limit can make bug report collection much faster. (default `0`)
+Set the concurrency limit of requests to the Kubernetes API server, defaults to 32. (default `0`)
@@ -926,7 +926,7 @@ to enable it. You can execute the following once:
--short--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests). (default ``)
+(e.g. ~/Downloads/istio-1.21.0/manifests). (default ``)
@@ -2380,6 +2380,9 @@ THIS COMMAND IS UNDER ACTIVE DEVELOPMENT AND NOT READY FOR PRODUCTION USE.
# (Select a specific control plane in an in-cluster canary Istio configuration.)
istioctl x internal-debug syncz --xds-label istio.io/rev=default
+ # Retrieve config dump for a single proxy
+ istioctl x internal-debug config_dump istio-ingressgateway-59585c5b9c-ndc59.istio-system
+
--name <string>istioctl experimental metrics
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -2735,7 +2738,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -2804,7 +2807,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -3671,7 +3674,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -3694,7 +3697,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
-sOverride an IstioOperator value, e.g. to choose a profile
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
-settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.20/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
+settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.21/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
@@ -4067,7 +4070,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--skip-confirmation--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4090,7 +4093,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
-sOverride an IstioOperator value, e.g. to choose a profile
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
-settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.20/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
+settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.21/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
@@ -4169,7 +4172,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--vklog <Level>--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4192,7 +4195,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
-sOverride an IstioOperator value, e.g. to choose a profile
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
-settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.20/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
+settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.21/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
@@ -4317,7 +4320,7 @@ could be secret list separated by comma, eg. '--imagePullSecrets imagePullSe
--skip-confirmation--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4416,7 +4419,7 @@ could be secret list separated by comma, eg. '--imagePullSecrets imagePullSe
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4649,7 +4652,7 @@ istioctl install --set profile=demo # Use a profile from the list
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4724,7 +4727,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4786,7 +4789,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -5883,7 +5886,7 @@ injection labels.
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests). (default ``)
+(e.g. ~/Downloads/istio-1.21.0/manifests). (default ``)
@@ -5970,6 +5973,11 @@ If set to true, the user is not prompted and a Yes response is assumed in all ca
--namespace <string>Kubernetes namespace (default ``)
+
+
+--output <string>
+-oOutput format for tag description (available formats: table,json) (default `table`)
+
--vklog <Level>
number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)
@@ -6075,7 +6083,7 @@ injection labels.
--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests). (default ``)
+(e.g. ~/Downloads/istio-1.21.0/manifests). (default ``)
@@ -6176,7 +6184,7 @@ If set to true, the user is not prompted and a Yes response is assumed in all ca
--namespace <string>--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -6199,7 +6207,7 @@ If set to true, the user is not prompted and a Yes response is assumed in all ca
-sOverride an IstioOperator value, e.g. to choose a profile
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
-settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.20/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
+settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.21/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
@@ -6282,7 +6290,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--skip-confirmation--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -6305,7 +6313,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
-sOverride an IstioOperator value, e.g. to choose a profile
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
-settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.20/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
+settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.21/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
@@ -6439,7 +6447,7 @@ istioctl experimental precheck.
--skip-confirmation--manifests <string>-dSpecify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests). (default ``)
+(e.g. ~/Downloads/istio-1.21.0/manifests). (default ``)
@@ -6594,7 +6602,7 @@ These environment variables affect the behavior of the --namespace <string>istioctl com
ENABLE_EXTERNAL_NAME_ALIASBoolean
-
+falsetrueIf enabled, ExternalName Services will be treated as simple aliases: anywhere where we would match the concrete service, we also match the ExternalName. In general, this mirrors Kubernetes behavior more closely. However, it means that policies (routes and DestinationRule) cannot be applied to the ExternalName service. If disabled, ExternalName behaves in fairly unexpected manner. Port matters, while it does not in Kubernetes. If it is a TCP port, all traffic on that port will be matched, which can have disastrous consequences. Additionally, the destination is seen as an opaque destination; even if it is another service in the mesh, policies such as mTLS and load balancing will not be used when connecting to it.
diff --git a/content/en/docs/reference/commands/operator/index.html b/content/en/docs/reference/commands/operator/index.html
index bcd23fb45e..524f46f910 100644
--- a/content/en/docs/reference/commands/operator/index.html
+++ b/content/en/docs/reference/commands/operator/index.html
@@ -221,11 +221,11 @@ to enable it. You can execute the following once:
---log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, adsc, all, analysis, authn, authorization, ca, controllers, controlleruntime, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] (default ``)
---log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, controlleruntime, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
@@ -245,7 +245,7 @@ to enable it. You can execute the following once:
--log_rotate <string>
---log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, controlleruntime, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
@@ -367,7 +367,7 @@ These environment variables affect the behavior of the --log_target <stringArray>operator com
ENABLE_EXTERNAL_NAME_ALIASBoolean
-
+falsetrueIf enabled, ExternalName Services will be treated as simple aliases: anywhere where we would match the concrete service, we also match the ExternalName. In general, this mirrors Kubernetes behavior more closely. However, it means that policies (routes and DestinationRule) cannot be applied to the ExternalName service. If disabled, ExternalName behaves in fairly unexpected manner. Port matters, while it does not in Kubernetes. If it is a TCP port, all traffic on that port will be matched, which can have disastrous consequences. Additionally, the destination is seen as an opaque destination; even if it is another service in the mesh, policies such as mTLS and load balancing will not be used when connecting to it.
diff --git a/content/en/docs/reference/commands/pilot-agent/index.html b/content/en/docs/reference/commands/pilot-agent/index.html
index 0d2c456bc8..e3084dcccc 100644
--- a/content/en/docs/reference/commands/pilot-agent/index.html
+++ b/content/en/docs/reference/commands/pilot-agent/index.html
@@ -395,12 +395,12 @@ to enable it. You can execute the following once:
--dry-run
--nDo not call any external dependencies like iptables
+Do not call any external dependencies like iptables.
--istio-inbound-interception-mode <string>
--mThe mode used to redirect inbound connections to Envoy, either "REDIRECT" or "TPROXY" (default ``)
+The mode used to redirect inbound connections to Envoy, either "REDIRECT" or "TPROXY". (default ``)
@@ -455,17 +455,17 @@ to enable it. You can execute the following once:
--istio-inbound-tproxy-mark <string>
--proxy-gid <string>
--gSpecify the GID of the user for which the redirection is not applied. (same default value as -u param) (default ``)
+Specify the GID of the user for which the redirection is not applied (same default value as -u param). (default ``)
--proxy-uid <string>
--uSpecify the UID of the user for which the redirection is not applied. Typically, this is the UID of the proxy container (default ``)
+Specify the UID of the user for which the redirection is not applied. Typically, this is the UID of the proxy container. (default ``)
--redirect-dns
- Enable capture of dns traffic by istio-agent
+Enable capture of dns traffic by istio-agent.
@@ -515,20 +515,20 @@ to enable it. You can execute the following once:
--vklog <Level>
--envoy-port <string>
--pSpecify the envoy port to which redirect all TCP traffic (default $ENVOY_PORT = 15001). (default ``)
+Specify the envoy port to which redirect all TCP traffic. (default `15001`)
--inbound-capture-port <string>
--zPort to which all inbound TCP traffic to the pod/VM should be redirected to (default $INBOUND_CAPTURE_PORT = 15006). (default ``)
+Port to which all inbound TCP traffic to the pod/VM should be redirected to. (default `15006`)
--inbound-tunnel-port <string>
--eSpecify the istio tunnel port for inbound tcp traffic (default $INBOUND_TUNNEL_PORT = 15008). (default ``)
+Specify the istio tunnel port for inbound tcp traffic. (default `15008`)
-
@@ -560,17 +560,17 @@ to enable it. You can execute the following once:
+--iptables-probe-port <string>--iptables-probe-port <uint16>
Set listen port for failure detection. (default `15002`)
--istio-inbound-tproxy-mark <string>-t--istio-inbound-tproxy-route-table <string>-r--istio-local-exclude-ports <string>-d--istio-local-outbound-ports-exclude <string>--istio-service-exclude-cidr <string>-x--kube-virt-interfaces <string>pilot-agent
ENABLE_EXTERNAL_NAME_ALIASfalsetruepilot-agent
INVALID_DROPfalseIPTABLES_TRACE_LOGGINGfalseMINIMUM_DRAIN_DURATION5sMUTEX_PROFILE_FRACTIONcert_expiry_secondsLastValuecontroller_sync_errors_totalSumdns_requests_totalSumdns_upstream_failures_totalSumdns_upstream_failures_totalSumdns_upstream_request_duration_secondsDistributiondns_upstream_requests_totalSumendpoint_no_podLastValuepilot-discovery
ENABLE_EXTERNAL_NAME_ALIAS
Boolean
-false
+true
If enabled, ExternalName Services will be treated as simple aliases: anywhere where we would match the concrete service, we also match the ExternalName. In general, this mirrors Kubernetes behavior more closely. However, it means that policies (routes and DestinationRule) cannot be applied to the ExternalName service. If disabled, ExternalName behaves in fairly unexpected manner. Port matters, while it does not in Kubernetes. If it is a TCP port, all traffic on that port will be matched, which can have disastrous consequences. Additionally, the destination is seen as an opaque destination; even if it is another service in the mesh, policies such as mTLS and load balancing will not be used when connecting to it.
diff --git a/content/en/docs/reference/config/istio.mesh.v1alpha1/index.html b/content/en/docs/reference/config/istio.mesh.v1alpha1/index.html
index 3509773774..6a3118df9d 100644
--- a/content/en/docs/reference/config/istio.mesh.v1alpha1/index.html
+++ b/content/en/docs/reference/config/istio.mesh.v1alpha1/index.html
@@ -632,7 +632,7 @@ No
TLSConfig
Configuration of TLS for all traffic except for ISTIO_MUTUAL mode.
-Currently, this supports configuration of ecdh_curves only.
+Currently, this supports configuration of ecdh_curves and cipher_suites only.
For ISTIO_MUTUAL TLS settings, use meshMTLS configuration.
diff --git a/content/en/docs/reference/config/networking/gateway/index.html b/content/en/docs/reference/config/networking/gateway/index.html
index 3bb7fcc5d3..690cccb3c1 100644
--- a/content/en/docs/reference/config/networking/gateway/index.html
+++ b/content/en/docs/reference/config/networking/gateway/index.html
@@ -620,7 +620,7 @@ Yes
string
The protocol exposed on the port.
-MUST BE one of HTTP|HTTPS|GRPC|HTTP2|MONGO|TCP|TLS.
+MUST BE one of HTTP|HTTPS|GRPC|GRPC-WEB|HTTP2|MONGO|TCP|TLS.
TLS can be either used to terminate non-HTTP based connections on a specific port
or to route traffic based on SNI header to the destination without terminating the TLS connection.
diff --git a/content/en/docs/reference/config/networking/virtual-service/index.html b/content/en/docs/reference/config/networking/virtual-service/index.html
index dfd362a196..e62025e33c 100644
--- a/content/en/docs/reference/config/networking/virtual-service/index.html
+++ b/content/en/docs/reference/config/networking/virtual-service/index.html
@@ -1270,7 +1270,7 @@ values are case-sensitive and formatted as follows:
Note: Case-insensitive matching could be enabled via the
-ignore_uri_case flag.
+ignoreUriCase flag.
diff --git a/content/en/docs/reference/config/telemetry/index.html b/content/en/docs/reference/config/telemetry/index.html
index baed344696..921762339f 100644
--- a/content/en/docs/reference/config/telemetry/index.html
+++ b/content/en/docs/reference/config/telemetry/index.html
@@ -727,7 +727,7 @@ No
-No
+Yes
@@ -753,7 +753,7 @@ No
-No
+Yes
@@ -791,7 +791,7 @@ No
-No
+Yes
diff --git a/content/en/docs/setup/additional-setup/getting-started/snips.sh b/content/en/docs/setup/additional-setup/getting-started/snips.sh
index 0bfb8ae9fa..e713c43e9a 100644
--- a/content/en/docs/setup/additional-setup/getting-started/snips.sh
+++ b/content/en/docs/setup/additional-setup/getting-started/snips.sh
@@ -23,7 +23,7 @@ source "content/en/boilerplates/snips/trace-generation.sh"
snip__1() {
kubectl get crd gateways.gateway.networking.k8s.io &> /dev/null || \
- { kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd?ref=v1.0.0" | kubectl apply -f -; }
+ { kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd?ref=004e14bfe016cbbe6aaecd0489558326ea244de5" | kubectl apply -f -; }
}
snip_download_istio_1() {
@@ -31,7 +31,7 @@ curl -L https://istio.io/downloadIstio | sh -
}
snip_download_istio_2() {
-curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.20.0 TARGET_ARCH=x86_64 sh -
+curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.21.0 TARGET_ARCH=x86_64 sh -
}
snip_download_istio_4() {
@@ -182,9 +182,9 @@ kubectl label namespace default istio-injection-
}
snip_uninstall_4() {
-kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd/experimental?ref=v1.0.0" | kubectl delete -f -
+kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd/experimental?ref=004e14bfe016cbbe6aaecd0489558326ea244de5" | kubectl delete -f -
}
snip_uninstall_5() {
-kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd?ref=v1.0.0" | kubectl delete -f -
+kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd?ref=004e14bfe016cbbe6aaecd0489558326ea244de5" | kubectl delete -f -
}
diff --git a/content/en/docs/setup/getting-started/snips.sh b/content/en/docs/setup/getting-started/snips.sh
index 571a56fab7..378e4b15e9 100644
--- a/content/en/docs/setup/getting-started/snips.sh
+++ b/content/en/docs/setup/getting-started/snips.sh
@@ -26,7 +26,7 @@ curl -L https://istio.io/downloadIstio | sh -
}
snip_download_istio_2() {
-curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.20.0 TARGET_ARCH=x86_64 sh -
+curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.21.0 TARGET_ARCH=x86_64 sh -
}
snip_download_istio_4() {
diff --git a/content/en/docs/setup/install/external-controlplane/snips.sh b/content/en/docs/setup/install/external-controlplane/snips.sh
index 829d3cea8b..6f1411cd28 100644
--- a/content/en/docs/setup/install/external-controlplane/snips.sh
+++ b/content/en/docs/setup/install/external-controlplane/snips.sh
@@ -411,7 +411,7 @@ ENDSNIP
snip_install_crds() {
kubectl get crd gateways.gateway.networking.k8s.io --context="${CTX_REMOTE_CLUSTER}" &> /dev/null || \
- { kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd?ref=v1.0.0" | kubectl apply -f - --context="${CTX_REMOTE_CLUSTER}"; }
+ { kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd?ref=004e14bfe016cbbe6aaecd0489558326ea244de5" | kubectl apply -f - --context="${CTX_REMOTE_CLUSTER}"; }
}
snip_configure_and_test_an_ingress_gateway_3() {
diff --git a/content/en/docs/setup/install/operator/snips.sh b/content/en/docs/setup/install/operator/snips.sh
index 87055f1dfc..6352c01c2d 100644
--- a/content/en/docs/setup/install/operator/snips.sh
+++ b/content/en/docs/setup/install/operator/snips.sh
@@ -124,11 +124,11 @@ kubectl get pods --namespace istio-system \
}
snip_download_istio_previous_version() {
-curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.19.0 sh -
+curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.20.0 sh -
}
snip_deploy_operator_previous_version() {
-istio-1.19.0/bin/istioctl operator init
+istio-1.20.0/bin/istioctl operator init
}
snip_install_istio_previous_version() {
@@ -137,7 +137,7 @@ apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
namespace: istio-system
- name: example-istiocontrolplane-1-19-0
+ name: example-istiocontrolplane-1-20-0
spec:
profile: default
EOF
@@ -149,15 +149,15 @@ kubectl get iop --all-namespaces
! read -r -d '' snip_verify_operator_cr_out <<\ENDSNIP
NAMESPACE NAME REVISION STATUS AGE
-istio-system example-istiocontrolplane1-19-0 HEALTHY 11m
+istio-system example-istiocontrolplane1-20-0 HEALTHY 11m
ENDSNIP
snip_canary_upgrade_init() {
-istio-1.20.0/bin/istioctl operator init --revision 1-20-0
+istio-1.21.0/bin/istioctl operator init --revision 1-21-0
}
snip_cat_operator_yaml() {
-cat example-istiocontrolplane-1-20-0.yaml
+cat example-istiocontrolplane-1-21-0.yaml
}
! read -r -d '' snip_cat_operator_yaml_out <<\ENDSNIP
@@ -165,9 +165,9 @@ apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
namespace: istio-system
- name: example-istiocontrolplane-1-20-0
+ name: example-istiocontrolplane-1-21-0
spec:
- revision: 1-20-0
+ revision: 1-21-0
profile: default
ENDSNIP
@@ -177,7 +177,7 @@ kubectl get pod -n istio-system -l app=istiod
! read -r -d '' snip_get_pods_istio_system_out <<\ENDSNIP
NAME READY STATUS RESTARTS AGE
-istiod-1-20-0-597475f4f6-bgtcz 1/1 Running 0 64s
+istiod-1-21-0-597475f4f6-bgtcz 1/1 Running 0 64s
istiod-6ffcc65b96-bxzv5 1/1 Running 0 2m11s
ENDSNIP
@@ -188,7 +188,7 @@ kubectl get services -n istio-system -l app=istiod
! read -r -d '' snip_get_svc_istio_system_out <<\ENDSNIP
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
istiod ClusterIP 10.104.129.150 15010/TCP,15012/TCP,443/TCP,15014/TCP,853/TCP 2m35s
-istiod-1-20-0 ClusterIP 10.111.17.49 15010/TCP,15012/TCP,443/TCP,15014/TCP 88s
+istiod-1-21-0 ClusterIP 10.111.17.49 15010/TCP,15012/TCP,443/TCP,15014/TCP 88s
ENDSNIP
snip_delete_example_istiocontrolplane() {
diff --git a/content/en/docs/setup/upgrade/canary/snips.sh b/content/en/docs/setup/upgrade/canary/snips.sh
index 1bb0a60f23..a9266ab513 100644
--- a/content/en/docs/setup/upgrade/canary/snips.sh
+++ b/content/en/docs/setup/upgrade/canary/snips.sh
@@ -41,7 +41,7 @@ kubectl get pods -n istio-system -l app=istiod
! read -r -d '' snip_control_plane_2_out <<\ENDSNIP
NAME READY STATUS RESTARTS AGE
-istiod-1-19-1-bdf5948d5-htddg 1/1 Running 0 47s
+istiod-1-20-1-bdf5948d5-htddg 1/1 Running 0 47s
istiod-canary-84c8d4dcfb-skcfv 1/1 Running 0 25s
ENDSNIP
@@ -51,7 +51,7 @@ kubectl get svc -n istio-system -l app=istiod
! read -r -d '' snip_control_plane_3_out <<\ENDSNIP
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
-istiod-1-19-1 ClusterIP 10.96.93.151 15010/TCP,15012/TCP,443/TCP,15014/TCP 109s
+istiod-1-20-1 ClusterIP 10.96.93.151 15010/TCP,15012/TCP,443/TCP,15014/TCP 109s
istiod-canary ClusterIP 10.104.186.250 15010/TCP,15012/TCP,443/TCP,15014/TCP 87s
ENDSNIP
@@ -61,7 +61,7 @@ kubectl get mutatingwebhookconfigurations
! read -r -d '' snip_control_plane_4_out <<\ENDSNIP
NAME WEBHOOKS AGE
-istio-sidecar-injector-1-19-1 2 2m16s
+istio-sidecar-injector-1-20-1 2 2m16s
istio-sidecar-injector-canary 2 114s
ENDSNIP
@@ -98,13 +98,13 @@ istioctl proxy-status | grep "\.test-ns "
}
snip_usage_1() {
-istioctl install --set values.pilot.env.PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING=true --revision=1-19-1 --set profile=minimal --skip-confirmation
-istioctl install --set values.pilot.env.PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING=true --revision=1-20-0 --set profile=minimal --skip-confirmation
+istioctl install --set values.pilot.env.PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING=true --revision=1-20-1 --set profile=minimal --skip-confirmation
+istioctl install --set values.pilot.env.PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING=true --revision=1-21-0 --set profile=minimal --skip-confirmation
}
snip_usage_2() {
-istioctl tag set prod-stable --revision 1-19-1
-istioctl tag set prod-canary --revision 1-20-0
+istioctl tag set prod-stable --revision 1-20-1
+istioctl tag set prod-canary --revision 1-21-0
}
snip_usage_3() {
@@ -128,13 +128,13 @@ istioctl ps
! read -r -d '' snip_usage_5_out <<\ENDSNIP
NAME CLUSTER CDS LDS EDS RDS ECDS ISTIOD VERSION
-sleep-78ff5975c6-62pzf.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-20-0-7f6fc6cfd6-s8zfg 1.20.0
-sleep-78ff5975c6-8kxpl.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-19-1-bdf5948d5-n72r2 1.19.1
-sleep-78ff5975c6-8q7m6.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-19-1-bdf5948d5-n72r2 1-19.1
+sleep-78ff5975c6-62pzf.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-21-0-7f6fc6cfd6-s8zfg 1.21.0
+sleep-78ff5975c6-8kxpl.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-20-1-bdf5948d5-n72r2 1.20.1
+sleep-78ff5975c6-8q7m6.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-20-1-bdf5948d5-n72r2 1-20.1
ENDSNIP
snip_usage_6() {
-istioctl tag set prod-stable --revision 1-20-0 --overwrite
+istioctl tag set prod-stable --revision 1-21-0 --overwrite
}
snip_usage_7() {
@@ -148,17 +148,17 @@ istioctl ps
! read -r -d '' snip_usage_8_out <<\ENDSNIP
NAME CLUSTER CDS LDS EDS RDS ECDS ISTIOD VERSION
-sleep-5984f48bc7-kmj6x.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-20-0-7f6fc6cfd6-jsktb 1.20.0
-sleep-78ff5975c6-jldk4.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-20-0-7f6fc6cfd6-jsktb 1.20.0
-sleep-7cdd8dccb9-5bq5n.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-20-0-7f6fc6cfd6-jsktb 1.20.0
+sleep-5984f48bc7-kmj6x.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-21-0-7f6fc6cfd6-jsktb 1.21.0
+sleep-78ff5975c6-jldk4.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-21-0-7f6fc6cfd6-jsktb 1.21.0
+sleep-7cdd8dccb9-5bq5n.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-21-0-7f6fc6cfd6-jsktb 1.21.0
ENDSNIP
snip_default_tag_1() {
-istioctl tag set default --revision 1-20-0
+istioctl tag set default --revision 1-21-0
}
snip_uninstall_old_control_plane_1() {
-istioctl uninstall --revision 1-19-1 -y
+istioctl uninstall --revision 1-20-1 -y
}
snip_uninstall_old_control_plane_2() {
diff --git a/content/en/docs/setup/upgrade/helm/snips.sh b/content/en/docs/setup/upgrade/helm/snips.sh
index 42c16a6eff..95ca1e1541 100644
--- a/content/en/docs/setup/upgrade/helm/snips.sh
+++ b/content/en/docs/setup/upgrade/helm/snips.sh
@@ -77,16 +77,16 @@ helm upgrade istio-base istio/base --set defaultRevision=canary -n istio-system
}
snip_usage_1() {
-helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-19-1 -n istio-system | kubectl apply -f -
-helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-canary}" --set revision=1-20-0 -n istio-system | kubectl apply -f -
+helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-20-1 -n istio-system | kubectl apply -f -
+helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-canary}" --set revision=1-21-0 -n istio-system | kubectl apply -f -
}
snip_usage_2() {
-helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-20-0 -n istio-system | kubectl apply -f -
+helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-21-0 -n istio-system | kubectl apply -f -
}
snip_default_tag_1() {
-helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{default}" --set revision=1-20-0 -n istio-system | kubectl apply -f -
+helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{default}" --set revision=1-21-0 -n istio-system | kubectl apply -f -
}
snip_in_place_upgrade_1() {
diff --git a/content/en/docs/tasks/observability/distributed-tracing/opencensusagent/snips.sh b/content/en/docs/tasks/observability/distributed-tracing/opencensusagent/snips.sh
index 8e1fc2bd6c..36e4c9c854 100644
--- a/content/en/docs/tasks/observability/distributed-tracing/opencensusagent/snips.sh
+++ b/content/en/docs/tasks/observability/distributed-tracing/opencensusagent/snips.sh
@@ -173,7 +173,7 @@ killall istioctl
}
snip_cleanup_2() {
-kubectl delete -f https://raw.githubusercontent.com/istio/istio/release-1.20/samples/addons/jaeger.yaml
+kubectl delete -f https://raw.githubusercontent.com/istio/istio/master/samples/addons/jaeger.yaml
}
snip_cleanup_3() {
diff --git a/content/en/docs/tasks/security/authentication/authn-policy/snips.sh b/content/en/docs/tasks/security/authentication/authn-policy/snips.sh
index eecb65bf0b..d14d126917 100644
--- a/content/en/docs/tasks/security/authentication/authn-policy/snips.sh
+++ b/content/en/docs/tasks/security/authentication/authn-policy/snips.sh
@@ -298,7 +298,7 @@ spec:
istio: ingressgateway
jwtRules:
- issuer: "testing@secure.istio.io"
- jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/jwks.json"
+ jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
EOF
}
@@ -315,7 +315,7 @@ spec:
istio.io/gateway-name: httpbin-gateway
jwtRules:
- issuer: "testing@secure.istio.io"
- jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/jwks.json"
+ jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
EOF
}
@@ -336,7 +336,7 @@ curl --header "Authorization: Bearer deadbeef" "$INGRESS_HOST:$INGRESS_PORT/head
ENDSNIP
snip_enduser_authentication_9() {
-TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/demo.jwt -s)
+TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s)
curl --header "Authorization: Bearer $TOKEN" "$INGRESS_HOST:$INGRESS_PORT/headers" -s -o /dev/null -w "%{http_code}\n"
}
@@ -345,11 +345,11 @@ curl --header "Authorization: Bearer $TOKEN" "$INGRESS_HOST:$INGRESS_PORT/header
ENDSNIP
snip_enduser_authentication_10() {
-wget --no-verbose https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/gen-jwt.py
+wget --no-verbose https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/gen-jwt.py
}
snip_enduser_authentication_11() {
-wget --no-verbose https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/key.pem
+wget --no-verbose https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/key.pem
}
snip_enduser_authentication_12() {
diff --git a/content/en/docs/tasks/security/authentication/claim-to-header/snips.sh b/content/en/docs/tasks/security/authentication/claim-to-header/snips.sh
index 9e7f754f8a..ba97dba943 100644
--- a/content/en/docs/tasks/security/authentication/claim-to-header/snips.sh
+++ b/content/en/docs/tasks/security/authentication/claim-to-header/snips.sh
@@ -48,7 +48,7 @@ spec:
app: httpbin
jwtRules:
- issuer: "testing@secure.istio.io"
- jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/jwks.json"
+ jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
outputClaimToHeaders:
- header: "x-jwt-claim-foo"
claim: "foo"
@@ -64,7 +64,7 @@ kubectl exec "$(kubectl get pod -l app=sleep -n foo -o jsonpath={.items..metadat
ENDSNIP
snip_allow_requests_with_valid_jwt_and_listtyped_claims_3() {
-TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode -
+TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode -
}
! read -r -d '' snip_allow_requests_with_valid_jwt_and_listtyped_claims_3_out <<\ENDSNIP
diff --git a/content/en/docs/tasks/security/authentication/jwt-route/snips.sh b/content/en/docs/tasks/security/authentication/jwt-route/snips.sh
index f84525246e..811167b47d 100644
--- a/content/en/docs/tasks/security/authentication/jwt-route/snips.sh
+++ b/content/en/docs/tasks/security/authentication/jwt-route/snips.sh
@@ -47,7 +47,7 @@ spec:
istio: ingressgateway
jwtRules:
- issuer: "testing@secure.istio.io"
- jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/jwks.json"
+ jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
EOF
}
@@ -97,7 +97,7 @@ HTTP/1.1 401 Unauthorized
ENDSNIP
snip_validating_ingress_routing_based_on_jwt_claims_3() {
-TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode
+TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode
}
! read -r -d '' snip_validating_ingress_routing_based_on_jwt_claims_3_out <<\ENDSNIP
@@ -114,7 +114,7 @@ HTTP/1.1 200 OK
ENDSNIP
snip_validating_ingress_routing_based_on_jwt_claims_5() {
-TOKEN_NO_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN_NO_GROUP" | cut -d '.' -f2 - | base64 --decode
+TOKEN_NO_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN_NO_GROUP" | cut -d '.' -f2 - | base64 --decode
}
! read -r -d '' snip_validating_ingress_routing_based_on_jwt_claims_5_out <<\ENDSNIP
diff --git a/content/en/docs/tasks/security/authorization/authz-custom/snips.sh b/content/en/docs/tasks/security/authorization/authz-custom/snips.sh
index 21c0b190bc..de7f68c548 100644
--- a/content/en/docs/tasks/security/authorization/authz-custom/snips.sh
+++ b/content/en/docs/tasks/security/authorization/authz-custom/snips.sh
@@ -36,7 +36,7 @@ kubectl exec "$(kubectl get pod -l app=sleep -n foo -o jsonpath={.items..metadat
ENDSNIP
snip_deploy_the_external_authorizer_1() {
-kubectl apply -n foo -f https://raw.githubusercontent.com/istio/istio/release-1.20/samples/extauthz/ext-authz.yaml
+kubectl apply -n foo -f https://raw.githubusercontent.com/istio/istio/master/samples/extauthz/ext-authz.yaml
}
! read -r -d '' snip_deploy_the_external_authorizer_1_out <<\ENDSNIP
diff --git a/content/en/docs/tasks/security/authorization/authz-jwt/snips.sh b/content/en/docs/tasks/security/authorization/authz-jwt/snips.sh
index 4bb514ff0a..5d99f2942e 100644
--- a/content/en/docs/tasks/security/authorization/authz-jwt/snips.sh
+++ b/content/en/docs/tasks/security/authorization/authz-jwt/snips.sh
@@ -47,7 +47,7 @@ spec:
app: httpbin
jwtRules:
- issuer: "testing@secure.istio.io"
- jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/jwks.json"
+ jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
EOF
}
@@ -87,7 +87,7 @@ EOF
}
snip_allow_requests_with_valid_jwt_and_listtyped_claims_5() {
-TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode -
+TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode -
}
! read -r -d '' snip_allow_requests_with_valid_jwt_and_listtyped_claims_5_out <<\ENDSNIP
@@ -133,7 +133,7 @@ EOF
}
snip_allow_requests_with_valid_jwt_and_listtyped_claims_9() {
-TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/release-1.20/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode -
+TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode -
}
! read -r -d '' snip_allow_requests_with_valid_jwt_and_listtyped_claims_9_out <<\ENDSNIP
diff --git a/content/en/docs/tasks/traffic-management/ingress/gateway-api/snips.sh b/content/en/docs/tasks/traffic-management/ingress/gateway-api/snips.sh
index 3df19e0839..ec285bdebb 100644
--- a/content/en/docs/tasks/traffic-management/ingress/gateway-api/snips.sh
+++ b/content/en/docs/tasks/traffic-management/ingress/gateway-api/snips.sh
@@ -22,7 +22,7 @@
snip_setup_1() {
kubectl get crd gateways.gateway.networking.k8s.io &> /dev/null || \
- { kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd?ref=v1.0.0" | kubectl apply -f -; }
+ { kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd?ref=004e14bfe016cbbe6aaecd0489558326ea244de5" | kubectl apply -f -; }
}
snip_setup_2() {
@@ -247,5 +247,5 @@ kubectl delete ns istio-ingress
}
snip_cleanup_2() {
-kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd?ref=v1.0.0" | kubectl delete -f -
+kubectl kustomize "github.com/kubernetes-sigs/gateway-api/config/crd?ref=004e14bfe016cbbe6aaecd0489558326ea244de5" | kubectl delete -f -
}
diff --git a/content/zh/docs/reference/commands/install-cni/index.html b/content/zh/docs/reference/commands/install-cni/index.html
index cf19c2f4d2..b07f948995 100644
--- a/content/zh/docs/reference/commands/install-cni/index.html
+++ b/content/zh/docs/reference/commands/install-cni/index.html
@@ -692,7 +692,7 @@ These environment variables affect the behavior of the install-cni
ENABLE_EXTERNAL_NAME_ALIAS
Boolean
-false
+true
If enabled, ExternalName Services will be treated as simple aliases: anywhere where we would match the concrete service, we also match the ExternalName. In general, this mirrors Kubernetes behavior more closely. However, it means that policies (routes and DestinationRule) cannot be applied to the ExternalName service. If disabled, ExternalName behaves in fairly unexpected manner. Port matters, while it does not in Kubernetes. If it is a TCP port, all traffic on that port will be matched, which can have disastrous consequences. Additionally, the destination is seen as an opaque destination; even if it is another service in the mesh, policies such as mTLS and load balancing will not be used when connecting to it.
diff --git a/content/zh/docs/reference/commands/istioctl/index.html b/content/zh/docs/reference/commands/istioctl/index.html
index 279c8941d0..a488dc6714 100644
--- a/content/zh/docs/reference/commands/istioctl/index.html
+++ b/content/zh/docs/reference/commands/istioctl/index.html
@@ -474,9 +474,9 @@ All names except label and annotation keys support '*' glob matching pat
Set a specific directory for output archive file. (default ``)
---rps-limit <int>
+--rq-concurrency <int>
-Requests per second limit to the Kubernetes API server, defaults to 10.A higher limit can make bug report collection much faster. (default `0`)
+Set the concurrency limit of requests to the Kubernetes API server, defaults to 32. (default `0`)
--start-time <string>
@@ -594,9 +594,9 @@ All names except label and annotation keys support '*' glob matching pat
Set a specific directory for output archive file. (default ``)
---rps-limit <int>
+--rq-concurrency <int>
-Requests per second limit to the Kubernetes API server, defaults to 10.A higher limit can make bug report collection much faster. (default `0`)
+Set the concurrency limit of requests to the Kubernetes API server, defaults to 32. (default `0`)
--short
@@ -926,7 +926,7 @@ to enable it. You can execute the following once:
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests). (default ``)
+(e.g. ~/Downloads/istio-1.21.0/manifests). (default ``)
--name <string>
@@ -2380,6 +2380,9 @@ THIS COMMAND IS UNDER ACTIVE DEVELOPMENT AND NOT READY FOR PRODUCTION USE.
# (Select a specific control plane in an in-cluster canary Istio configuration.)
istioctl x internal-debug syncz --xds-label istio.io/rev=default
+ # Retrieve config dump for a single proxy
+ istioctl x internal-debug config_dump istio-ingressgateway-59585c5b9c-ndc59.istio-system
+
istioctl experimental metrics
@@ -2678,7 +2681,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -2735,7 +2738,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -2804,7 +2807,7 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -3671,7 +3674,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -3694,7 +3697,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
-s
Override an IstioOperator value, e.g. to choose a profile
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
-settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.20/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
+settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.21/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
--skip-confirmation
@@ -4067,7 +4070,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4090,7 +4093,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
-s
Override an IstioOperator value, e.g. to choose a profile
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
-settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.20/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
+settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.21/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
--vklog <Level>
@@ -4169,7 +4172,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4192,7 +4195,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
-s
Override an IstioOperator value, e.g. to choose a profile
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
-settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.20/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
+settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.21/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
--skip-confirmation
@@ -4317,7 +4320,7 @@ could be secret list separated by comma, eg. '--imagePullSecrets imagePullSe
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4416,7 +4419,7 @@ could be secret list separated by comma, eg. '--imagePullSecrets imagePullSe
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4649,7 +4652,7 @@ istioctl install --set profile=demo # Use a profile from the list
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4724,7 +4727,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -4786,7 +4789,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -5883,7 +5886,7 @@ injection labels.
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests). (default ``)
+(e.g. ~/Downloads/istio-1.21.0/manifests). (default ``)
--namespace <string>
@@ -5970,6 +5973,11 @@ If set to true, the user is not prompted and a Yes response is assumed in all ca
Kubernetes namespace (default ``)
+--output <string>
+-o
+Output format for tag description (available formats: table,json) (default `table`)
+
+
--vklog <Level>
number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)
@@ -6075,7 +6083,7 @@ injection labels.
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests). (default ``)
+(e.g. ~/Downloads/istio-1.21.0/manifests). (default ``)
--namespace <string>
@@ -6176,7 +6184,7 @@ If set to true, the user is not prompted and a Yes response is assumed in all ca
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -6199,7 +6207,7 @@ If set to true, the user is not prompted and a Yes response is assumed in all ca
-s
Override an IstioOperator value, e.g. to choose a profile
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
-settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.20/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
+settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.21/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
--skip-confirmation
@@ -6282,7 +6290,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests).
+(e.g. ~/Downloads/istio-1.21.0/manifests).
(default ``)
@@ -6305,7 +6313,7 @@ This flag can be specified multiple times to overlay multiple files. Multiple fi
-s
Override an IstioOperator value, e.g. to choose a profile
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
-settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.20/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
+settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.21/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)
--skip-confirmation
@@ -6439,7 +6447,7 @@ istioctl experimental precheck.
--manifests <string>
-d
Specify a path to a directory of charts and profiles
-(e.g. ~/Downloads/istio-1.20.0/manifests). (default ``)
+(e.g. ~/Downloads/istio-1.21.0/manifests). (default ``)
--namespace <string>
@@ -6594,7 +6602,7 @@ These environment variables affect the behavior of the istioctl com
ENABLE_EXTERNAL_NAME_ALIAS
Boolean
-false
+true
If enabled, ExternalName Services will be treated as simple aliases: anywhere where we would match the concrete service, we also match the ExternalName. In general, this mirrors Kubernetes behavior more closely. However, it means that policies (routes and DestinationRule) cannot be applied to the ExternalName service. If disabled, ExternalName behaves in fairly unexpected manner. Port matters, while it does not in Kubernetes. If it is a TCP port, all traffic on that port will be matched, which can have disastrous consequences. Additionally, the destination is seen as an opaque destination; even if it is another service in the mesh, policies such as mTLS and load balancing will not be used when connecting to it.
diff --git a/content/zh/docs/reference/commands/operator/index.html b/content/zh/docs/reference/commands/operator/index.html
index bcd23fb45e..524f46f910 100644
--- a/content/zh/docs/reference/commands/operator/index.html
+++ b/content/zh/docs/reference/commands/operator/index.html
@@ -221,11 +221,11 @@ to enable it. You can execute the following once:
--log_caller <string>
-Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, adsc, all, analysis, authn, authorization, ca, controllers, controlleruntime, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] (default ``)
--log_output_level <string>
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, controlleruntime, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
@@ -245,7 +245,7 @@ to enable it. You can execute the following once:
--log_stacktrace_level <string>
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, controlleruntime, default, delta, file, gateway, grpcgen, ingress status, installer, klog, kube, model, monitoring, patch, processing, retry, security, serviceentry, spiffe, status, tpath, translator, trustBundle, util, validation, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
@@ -367,7 +367,7 @@ These environment variables affect the behavior of the operator com
ENABLE_EXTERNAL_NAME_ALIAS
Boolean
-false
+true
If enabled, ExternalName Services will be treated as simple aliases: anywhere where we would match the concrete service, we also match the ExternalName. In general, this mirrors Kubernetes behavior more closely. However, it means that policies (routes and DestinationRule) cannot be applied to the ExternalName service. If disabled, ExternalName behaves in fairly unexpected manner. Port matters, while it does not in Kubernetes. If it is a TCP port, all traffic on that port will be matched, which can have disastrous consequences. Additionally, the destination is seen as an opaque destination; even if it is another service in the mesh, policies such as mTLS and load balancing will not be used when connecting to it.
diff --git a/content/zh/docs/reference/commands/pilot-agent/index.html b/content/zh/docs/reference/commands/pilot-agent/index.html
index 0d2c456bc8..e3084dcccc 100644
--- a/content/zh/docs/reference/commands/pilot-agent/index.html
+++ b/content/zh/docs/reference/commands/pilot-agent/index.html
@@ -395,12 +395,12 @@ to enable it. You can execute the following once:
--dry-run
-n
-Do not call any external dependencies like iptables
+Do not call any external dependencies like iptables.
--istio-inbound-interception-mode <string>
-m
-The mode used to redirect inbound connections to Envoy, either "REDIRECT" or "TPROXY" (default ``)
+The mode used to redirect inbound connections to Envoy, either "REDIRECT" or "TPROXY". (default ``)
--istio-inbound-tproxy-mark <string>
@@ -455,17 +455,17 @@ to enable it. You can execute the following once:
--proxy-gid <string>
-g
-Specify the GID of the user for which the redirection is not applied. (same default value as -u param) (default ``)
+Specify the GID of the user for which the redirection is not applied (same default value as -u param). (default ``)
--proxy-uid <string>
-u
-Specify the UID of the user for which the redirection is not applied. Typically, this is the UID of the proxy container (default ``)
+Specify the UID of the user for which the redirection is not applied. Typically, this is the UID of the proxy container. (default ``)
--redirect-dns
-Enable capture of dns traffic by istio-agent
+Enable capture of dns traffic by istio-agent.
--vklog <Level>
@@ -515,20 +515,20 @@ to enable it. You can execute the following once:
--envoy-port <string>
-p
-Specify the envoy port to which redirect all TCP traffic (default $ENVOY_PORT = 15001). (default ``)
+Specify the envoy port to which redirect all TCP traffic. (default `15001`)
--inbound-capture-port <string>
-z
-Port to which all inbound TCP traffic to the pod/VM should be redirected to (default $INBOUND_CAPTURE_PORT = 15006). (default ``)
+Port to which all inbound TCP traffic to the pod/VM should be redirected to. (default `15006`)
--inbound-tunnel-port <string>
-e
-Specify the istio tunnel port for inbound tcp traffic (default $INBOUND_TUNNEL_PORT = 15008). (default ``)
+Specify the istio tunnel port for inbound tcp traffic. (default `15008`)
---iptables-probe-port <string>
+--iptables-probe-port <uint16>
Set listen port for failure detection. (default `15002`)
@@ -560,17 +560,17 @@ to enable it. You can execute the following once:
--istio-inbound-tproxy-mark <string>
-t
- (default ``)
+ (default `1337`)
--istio-inbound-tproxy-route-table <string>
-r
- (default ``)
+ (default `133`)
--istio-local-exclude-ports <string>
-d
-Comma separated list of inbound ports to be excluded from redirection to Envoy (optional). Only applies when all inbound traffic (i.e. "*") is being redirected (default to $ISTIO_LOCAL_EXCLUDE_PORTS). (default ``)
+Comma separated list of inbound ports to be excluded from redirection to Envoy (optional). Only applies when all inbound traffic (i.e. "*") is being redirected. (default ``)
--istio-local-outbound-ports-exclude <string>
@@ -590,7 +590,7 @@ to enable it. You can execute the following once:
--istio-service-exclude-cidr <string>
-x
-Comma separated list of IP ranges in CIDR form to be excluded from redirection. Only applies when all outbound traffic (i.e. "*") is being redirected (default to $ISTIO_SERVICE_EXCLUDE_CIDR). (default ``)
+Comma separated list of IP ranges in CIDR form to be excluded from redirection. Only applies when all outbound traffic (i.e. "*") is being redirected. (default ``)
--kube-virt-interfaces <string>
@@ -1125,7 +1125,7 @@ These environment variables affect the behavior of the pilot-agent
ENABLE_EXTERNAL_NAME_ALIAS
Boolean
-false
+true
If enabled, ExternalName Services will be treated as simple aliases: anywhere where we would match the concrete service, we also match the ExternalName. In general, this mirrors Kubernetes behavior more closely. However, it means that policies (routes and DestinationRule) cannot be applied to the ExternalName service. If disabled, ExternalName behaves in fairly unexpected manner. Port matters, while it does not in Kubernetes. If it is a TCP port, all traffic on that port will be matched, which can have disastrous consequences. Additionally, the destination is seen as an opaque destination; even if it is another service in the mesh, policies such as mTLS and load balancing will not be used when connecting to it.
@@ -1315,12 +1315,6 @@ These environment variables affect the behavior of the pilot-agent
-INVALID_DROP
-Boolean
-false
-If set to true, enable the invalid drop iptables rule, default false will cause iptables reset out of window packets
-
-
IPTABLES_TRACE_LOGGING
Boolean
false
@@ -1556,7 +1550,7 @@ Only applies when traffic from all groups (i.e. "*") is being redirected
MINIMUM_DRAIN_DURATION
Time Duration
5s
-The minimum duration for which agent waits before it checks for active connections and terminates proxywhen number of active connections become zero
+The minimum duration for which agent waits before it checks for active connections and terminates proxy when number of active connections become zero
MUTEX_PROFILE_FRACTION
@@ -2222,7 +2216,7 @@ Only applies when traffic from all groups (i.e. "*") is being redirected
cert_expiry_secondsLastValueThe time remaining, in seconds, before the certificate chain will expire. A negative value indicates the cert is expired.
controller_sync_errors_totalSumTotal number of errorMetric syncing controllers.
dns_requests_totalSumTotal number of DNS requests.
-dns_upstream_failures_totalSumTotal number of DNS requests forwarded to upstream.
+dns_upstream_failures_totalSumTotal number of DNS failures.
dns_upstream_request_duration_secondsDistributionTotal time in seconds Istio takes to get DNS response from upstream.
dns_upstream_requests_totalSumTotal number of DNS requests forwarded to upstream.
endpoint_no_podLastValueEndpoints without an associated pod.
diff --git a/content/zh/docs/reference/commands/pilot-discovery/index.html b/content/zh/docs/reference/commands/pilot-discovery/index.html
index 809d192ce2..09a483a378 100644
--- a/content/zh/docs/reference/commands/pilot-discovery/index.html
+++ b/content/zh/docs/reference/commands/pilot-discovery/index.html
@@ -523,7 +523,7 @@ These environment variables affect the behavior of the pilot-discovery
ENABLE_EXTERNAL_NAME_ALIAS
Boolean
-false
+true
If enabled, ExternalName Services will be treated as simple aliases: anywhere where we would match the concrete service, we also match the ExternalName. In general, this mirrors Kubernetes behavior more closely. However, it means that policies (routes and DestinationRule) cannot be applied to the ExternalName service. If disabled, ExternalName behaves in fairly unexpected manner. Port matters, while it does not in Kubernetes. If it is a TCP port, all traffic on that port will be matched, which can have disastrous consequences. Additionally, the destination is seen as an opaque destination; even if it is another service in the mesh, policies such as mTLS and load balancing will not be used when connecting to it.
diff --git a/content/zh/docs/reference/config/istio.mesh.v1alpha1/index.html b/content/zh/docs/reference/config/istio.mesh.v1alpha1/index.html
index 629f0a21f9..ff8147c26a 100644
--- a/content/zh/docs/reference/config/istio.mesh.v1alpha1/index.html
+++ b/content/zh/docs/reference/config/istio.mesh.v1alpha1/index.html
@@ -632,7 +632,7 @@ No
TLSConfig
Configuration of TLS for all traffic except for ISTIO_MUTUAL mode.
-Currently, this supports configuration of ecdh_curves only.
+Currently, this supports configuration of ecdh_curves and cipher_suites only.
For ISTIO_MUTUAL TLS settings, use meshMTLS configuration.
diff --git a/content/zh/docs/reference/config/networking/gateway/index.html b/content/zh/docs/reference/config/networking/gateway/index.html
index baebc16e0c..b619ce08b9 100644
--- a/content/zh/docs/reference/config/networking/gateway/index.html
+++ b/content/zh/docs/reference/config/networking/gateway/index.html
@@ -620,7 +620,7 @@ Yes
string
The protocol exposed on the port.
-MUST BE one of HTTP|HTTPS|GRPC|HTTP2|MONGO|TCP|TLS.
+MUST BE one of HTTP|HTTPS|GRPC|GRPC-WEB|HTTP2|MONGO|TCP|TLS.
TLS can be either used to terminate non-HTTP based connections on a specific port
or to route traffic based on SNI header to the destination without terminating the TLS connection.
diff --git a/content/zh/docs/reference/config/networking/virtual-service/index.html b/content/zh/docs/reference/config/networking/virtual-service/index.html
index b57cdd2bdb..1f1ec2e406 100644
--- a/content/zh/docs/reference/config/networking/virtual-service/index.html
+++ b/content/zh/docs/reference/config/networking/virtual-service/index.html
@@ -1270,7 +1270,7 @@ values are case-sensitive and formatted as follows:
Note: Case-insensitive matching could be enabled via the
-ignore_uri_case flag.
+ignoreUriCase flag.
diff --git a/content/zh/docs/reference/config/telemetry/index.html b/content/zh/docs/reference/config/telemetry/index.html
index 958dc9bc14..127324ec88 100644
--- a/content/zh/docs/reference/config/telemetry/index.html
+++ b/content/zh/docs/reference/config/telemetry/index.html
@@ -727,7 +727,7 @@ No
-No
+Yes
@@ -753,7 +753,7 @@ No
-No
+Yes
@@ -791,7 +791,7 @@ No
-No
+Yes
diff --git a/data/args.yml b/data/args.yml
index 71c15cc5e4..49e7900667 100644
--- a/data/args.yml
+++ b/data/args.yml
@@ -1,11 +1,11 @@
# The primary Istio version identifier the docs describe, used throughout the site
-version: "1.20"
+version: "1.21"
# The full Istio version identifier the docs describe
-full_version: "1.20.0"
+full_version: "1.21.0"
# The previous Istio version identifier the docs describe, used for upgrade documentation
-previous_version: "1.19"
+previous_version: "1.20"
# The year to display in copyright notices
copyright_year: 2023
@@ -25,7 +25,7 @@ archive_date: YYYY-MM-DD
archive_search_refinement: "V1.1"
# GitHub branch names used when the docs have links to GitHub
-source_branch_name: release-1.20
+source_branch_name: master
doc_branch_name: master
####### Static values
@@ -49,4 +49,4 @@ supported_languages:
code: "zh"
# Kubernetes Gateway API
-k8s_gateway_api_version: "v1.0.0"
+k8s_gateway_api_version: "004e14bfe016cbbe6aaecd0489558326ea244de5"
diff --git a/go.mod b/go.mod
index e311190ba1..31ec54a239 100644
--- a/go.mod
+++ b/go.mod
@@ -11,16 +11,16 @@ replace github.com/imdario/mergo => github.com/imdario/mergo v0.3.5
require (
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
golang.org/x/sync v0.4.0
- istio.io/istio v0.0.0-20231109034306-486c6ca3836d
+ istio.io/istio v0.0.0-20231114153917-0d5f530188df
k8s.io/apimachinery v0.28.3
k8s.io/client-go v0.28.3
)
require (
- cloud.google.com/go/compute v1.23.0 // indirect
+ cloud.google.com/go/compute v1.23.1 // indirect
cloud.google.com/go/compute/metadata v0.2.3 // indirect
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
- github.com/BurntSushi/toml v1.2.1 // indirect
+ github.com/BurntSushi/toml v1.3.2 // indirect
github.com/MakeNowJust/heredoc v1.0.0 // indirect
github.com/Masterminds/goutils v1.1.1 // indirect
github.com/Masterminds/semver/v3 v3.2.1 // indirect
@@ -34,18 +34,18 @@ require (
github.com/chai2010/gettext-go v1.0.2 // indirect
github.com/cheggaaa/pb/v3 v3.1.4 // indirect
github.com/cncf/udpa/go v0.0.0-20220112060539-c52dc94e7fbe // indirect
- github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4 // indirect
+ github.com/cncf/xds/go v0.0.0-20231016030527-8bd2eac9fb4a // indirect
github.com/containerd/stargz-snapshotter/estargz v0.14.3 // indirect
github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
github.com/cyphar/filepath-securejoin v0.2.4 // indirect
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0 // indirect
- github.com/docker/cli v24.0.5+incompatible // indirect
+ github.com/docker/cli v24.0.6+incompatible // indirect
github.com/docker/distribution v2.8.2+incompatible // indirect
github.com/docker/docker v24.0.7+incompatible // indirect
github.com/docker/docker-credential-helpers v0.7.0 // indirect
github.com/emicklei/go-restful/v3 v3.11.0 // indirect
- github.com/envoyproxy/go-control-plane v0.11.2-0.20231019082134-6e4589f570e1 // indirect
+ github.com/envoyproxy/go-control-plane v0.11.2-0.20231110162159-d6f21225f8ea // indirect
github.com/envoyproxy/protoc-gen-validate v1.0.2 // indirect
github.com/evanphx/json-patch v5.7.0+incompatible // indirect
github.com/evanphx/json-patch/v5 v5.7.0 // indirect
@@ -64,7 +64,6 @@ require (
github.com/goccy/go-json v0.10.2 // indirect
github.com/gogo/protobuf v1.3.2 // indirect
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
- github.com/golang/mock v1.6.0 // indirect
github.com/golang/protobuf v1.5.3 // indirect
github.com/google/btree v1.1.2 // indirect
github.com/google/cel-go v0.16.1 // indirect
@@ -75,7 +74,7 @@ require (
github.com/google/pprof v0.0.0-20230926050212-f7f687d19a98 // indirect
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
github.com/google/uuid v1.3.1 // indirect
- github.com/gorilla/websocket v1.5.0 // indirect
+ github.com/gorilla/websocket v1.5.1 // indirect
github.com/grafana/regexp v0.0.0-20221122212121-6b5c0a4cb7fd // indirect
github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 // indirect
@@ -83,7 +82,7 @@ require (
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-multierror v1.1.1 // indirect
github.com/hashicorp/go-version v1.6.0 // indirect
- github.com/hashicorp/golang-lru/v2 v2.0.5 // indirect
+ github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
github.com/hashicorp/hcl v1.0.0 // indirect
github.com/huandu/xstrings v1.4.0 // indirect
github.com/imdario/mergo v1.0.0 // indirect
@@ -95,7 +94,7 @@ require (
github.com/kr/text v0.2.0 // indirect
github.com/kylelemons/godebug v1.1.0 // indirect
github.com/lestrrat-go/backoff/v2 v2.0.8 // indirect
- github.com/lestrrat-go/blackmagic v1.0.1 // indirect
+ github.com/lestrrat-go/blackmagic v1.0.2 // indirect
github.com/lestrrat-go/httpcc v1.0.1 // indirect
github.com/lestrrat-go/iter v1.0.2 // indirect
github.com/lestrrat-go/jwx v1.2.26 // indirect
@@ -104,7 +103,7 @@ require (
github.com/magiconair/properties v1.8.7 // indirect
github.com/mailru/easyjson v0.7.7 // indirect
github.com/mattn/go-colorable v0.1.13 // indirect
- github.com/mattn/go-isatty v0.0.19 // indirect
+ github.com/mattn/go-isatty v0.0.20 // indirect
github.com/mattn/go-runewidth v0.0.14 // indirect
github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 // indirect
github.com/miekg/dns v1.1.56 // indirect
@@ -114,16 +113,16 @@ require (
github.com/mitchellh/mapstructure v1.5.0 // indirect
github.com/mitchellh/reflectwalk v1.0.2 // indirect
github.com/moby/spdystream v0.2.0 // indirect
- github.com/moby/term v0.0.0-20221205130635-1aeaba878587 // indirect
+ github.com/moby/term v0.5.0 // indirect
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
github.com/modern-go/reflect2 v1.0.2 // indirect
github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00 // indirect
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
- github.com/onsi/ginkgo/v2 v2.11.0 // indirect
+ github.com/onsi/ginkgo/v2 v2.12.0 // indirect
github.com/opencontainers/go-digest v1.0.0 // indirect
- github.com/opencontainers/image-spec v1.1.0-rc3 // indirect
- github.com/openshift/api v0.0.0-20230823114715-5fdd7511b790 // indirect
- github.com/pelletier/go-toml/v2 v2.0.8 // indirect
+ github.com/opencontainers/image-spec v1.1.0-rc5 // indirect
+ github.com/openshift/api v0.0.0-20231019121755-0c5924392281 // indirect
+ github.com/pelletier/go-toml/v2 v2.1.0 // indirect
github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
github.com/pires/go-proxyproto v0.7.0 // indirect
github.com/pkg/errors v0.9.1 // indirect
@@ -133,8 +132,8 @@ require (
github.com/prometheus/procfs v0.12.0 // indirect
github.com/prometheus/prometheus v0.48.0-rc.1 // indirect
github.com/quic-go/qpack v0.4.0 // indirect
- github.com/quic-go/qtls-go1-20 v0.3.2 // indirect
- github.com/quic-go/quic-go v0.38.0 // indirect
+ github.com/quic-go/qtls-go1-20 v0.3.4 // indirect
+ github.com/quic-go/quic-go v0.39.1 // indirect
github.com/rivo/uniseg v0.4.3 // indirect
github.com/rogpeppe/go-internal v1.10.0 // indirect
github.com/russross/blackfriday/v2 v2.1.0 // indirect
@@ -142,14 +141,14 @@ require (
github.com/shopspring/decimal v1.3.1 // indirect
github.com/sirupsen/logrus v1.9.3 // indirect
github.com/spaolacci/murmur3 v1.1.0 // indirect
- github.com/spf13/afero v1.9.5 // indirect
+ github.com/spf13/afero v1.10.0 // indirect
github.com/spf13/cast v1.5.1 // indirect
github.com/spf13/cobra v1.7.0 // indirect
github.com/spf13/jwalterweatherman v1.1.0 // indirect
github.com/spf13/pflag v1.0.5 // indirect
github.com/spf13/viper v1.16.0 // indirect
github.com/stoewer/go-strcase v1.3.0 // indirect
- github.com/subosito/gotenv v1.4.2 // indirect
+ github.com/subosito/gotenv v1.6.0 // indirect
github.com/vbatts/tar-split v0.11.3 // indirect
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
@@ -160,14 +159,15 @@ require (
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.19.0 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.19.0 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.19.0 // indirect
- go.opentelemetry.io/otel/exporters/prometheus v0.39.1-0.20230714155235-03b8c47770f2 // indirect
+ go.opentelemetry.io/otel/exporters/prometheus v0.42.0 // indirect
go.opentelemetry.io/otel/metric v1.19.0 // indirect
go.opentelemetry.io/otel/sdk v1.19.0 // indirect
- go.opentelemetry.io/otel/sdk/metric v0.39.0 // indirect
+ go.opentelemetry.io/otel/sdk/metric v1.19.0 // indirect
go.opentelemetry.io/otel/trace v1.19.0 // indirect
go.opentelemetry.io/proto/otlp v1.0.0 // indirect
go.starlark.net v0.0.0-20230525235612-a134d8f9ddca // indirect
go.uber.org/atomic v1.11.0 // indirect
+ go.uber.org/mock v0.3.0 // indirect
go.uber.org/multierr v1.11.0 // indirect
go.uber.org/zap v1.26.0 // indirect
golang.org/x/crypto v0.14.0 // indirect
@@ -182,10 +182,10 @@ require (
golang.org/x/tools v0.14.0 // indirect
gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
google.golang.org/appengine v1.6.8 // indirect
- google.golang.org/genproto v0.0.0-20231002182017-d307bd883b97 // indirect
- google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a // indirect
- google.golang.org/genproto/googleapis/rpc v0.0.0-20231009173412-8bfb1ae86b6c // indirect
- google.golang.org/grpc v1.58.3 // indirect
+ google.golang.org/genproto v0.0.0-20231016165738-49dd2c1f3d0b // indirect
+ google.golang.org/genproto/googleapis/api v0.0.0-20231016165738-49dd2c1f3d0b // indirect
+ google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b // indirect
+ google.golang.org/grpc v1.59.0 // indirect
google.golang.org/protobuf v1.31.0 // indirect
gopkg.in/inf.v0 v0.9.1 // indirect
gopkg.in/ini.v1 v1.67.0 // indirect
@@ -193,20 +193,20 @@ require (
gopkg.in/square/go-jose.v2 v2.6.0 // indirect
gopkg.in/yaml.v2 v2.4.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
- helm.sh/helm/v3 v3.12.3 // indirect
- istio.io/api v1.20.0-beta.0.0.20231031143729-871b2914253f // indirect
- istio.io/client-go v1.20.0-beta.0.0.20231031144329-30f00b62f7e9 // indirect
+ helm.sh/helm/v3 v3.13.1 // indirect
+ istio.io/api v1.20.0-rc.0 // indirect
+ istio.io/client-go v1.20.0-rc.0 // indirect
k8s.io/api v0.28.3 // indirect
k8s.io/apiextensions-apiserver v0.28.3 // indirect
k8s.io/apiserver v0.28.3 // indirect
- k8s.io/cli-runtime v0.28.0 // indirect
+ k8s.io/cli-runtime v0.28.3 // indirect
k8s.io/component-base v0.28.3 // indirect
k8s.io/klog/v2 v2.100.1 // indirect
k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 // indirect
- k8s.io/kubectl v0.28.0 // indirect
+ k8s.io/kubectl v0.28.3 // indirect
k8s.io/utils v0.0.0-20230726121419-3b25d923346b // indirect
sigs.k8s.io/controller-runtime v0.16.3 // indirect
- sigs.k8s.io/gateway-api v1.0.0 // indirect
+ sigs.k8s.io/gateway-api v1.0.1-0.20231102234152-004e14bfe016 // indirect
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
sigs.k8s.io/kustomize/api v0.13.5-0.20230601165947-6ce0bf390ce3 // indirect
sigs.k8s.io/kustomize/kyaml v0.14.3 // indirect
diff --git a/go.sum b/go.sum
index 28f72c85f0..94d80b344a 100644
--- a/go.sum
+++ b/go.sum
@@ -23,8 +23,8 @@ cloud.google.com/go/bigquery v1.4.0/go.mod h1:S8dzgnTigyfTmLBfrtrhyYhwRxG72rYxvf
cloud.google.com/go/bigquery v1.5.0/go.mod h1:snEHRnqQbz117VIFhE8bmtwIDY80NLUZUMb4Nv6dBIg=
cloud.google.com/go/bigquery v1.7.0/go.mod h1://okPTzCYNXSlb24MZs83e2Do+h+VXtc4gLoIoXIAPc=
cloud.google.com/go/bigquery v1.8.0/go.mod h1:J5hqkt3O0uAFnINi6JXValWIb1v0goeZM77hZzJN/fQ=
-cloud.google.com/go/compute v1.23.0 h1:tP41Zoavr8ptEqaW6j+LQOnyBBhO7OkOMAGrgLopTwY=
-cloud.google.com/go/compute v1.23.0/go.mod h1:4tCnrn48xsqlwSAiLf1HXMQk8CONslYbdiEZc9FEIbM=
+cloud.google.com/go/compute v1.23.1 h1:V97tBoDaZHb6leicZ1G6DLK2BAaZLJ/7+9BB/En3hR0=
+cloud.google.com/go/compute v1.23.1/go.mod h1:CqB3xpmPKKt3OJpW2ndFIXnA9A4xAy/F3Xp1ixncW78=
cloud.google.com/go/compute/metadata v0.2.3 h1:mg4jlk7mCAj6xXp9UJ4fjI9VUI5rubuGBW5aJ7UnBMY=
cloud.google.com/go/compute/metadata v0.2.3/go.mod h1:VAV5nSsACxMJvgaAuX6Pk2AawlZn8kiOGuCv6gTkwuA=
cloud.google.com/go/datastore v1.0.0/go.mod h1:LXYbyblFSglQ5pkeyhO+Qmw7ukd3C+pD7TKLgZqpHYE=
@@ -53,8 +53,9 @@ github.com/Azure/go-autorest/autorest/mocks v0.2.0/go.mod h1:OTyCOPRA2IgIlWxVYxB
github.com/Azure/go-autorest/logger v0.1.0/go.mod h1:oExouG+K6PryycPJfVSxi/koC6LSNgds39diKLz7Vrc=
github.com/Azure/go-autorest/tracing v0.5.0/go.mod h1:r/s2XiOKccPW3HrqB+W0TQzfbtp2fGCgRFtBroKn4Dk=
github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
-github.com/BurntSushi/toml v1.2.1 h1:9F2/+DoOYIOksmaJFPw1tGFy1eDnIJXg+UHjuD8lTak=
github.com/BurntSushi/toml v1.2.1/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
+github.com/BurntSushi/toml v1.3.2 h1:o7IhLm0Msx3BaB+n3Ag7L8EVlByGnpq14C4YWiu/gL8=
+github.com/BurntSushi/toml v1.3.2/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
github.com/MakeNowJust/heredoc v1.0.0 h1:cXCdzVdstXyiTqTvfqk9SDHpKNjxuom+DOlyEeQ4pzQ=
github.com/MakeNowJust/heredoc v1.0.0/go.mod h1:mG5amYoWBHf8vpLOuehzbGGw0EHxpZZ6lCpQ4fNJ8LE=
@@ -120,8 +121,8 @@ github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod h1:WmhPx2Nbnht
github.com/cncf/udpa/go v0.0.0-20220112060539-c52dc94e7fbe h1:QQ3GSy+MqSHxm/d8nCtnAiZdYFd45cYZPs8vOOIYKfk=
github.com/cncf/udpa/go v0.0.0-20220112060539-c52dc94e7fbe/go.mod h1:6pvJx4me5XPnfI9Z40ddWsdw2W/uZgQLFXToKeRcDiI=
github.com/cncf/xds/go v0.0.0-20210922020428-25de7278fc84/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
-github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4 h1:/inchEIKaYC1Akx+H+gqO04wryn5h75LSazbRlnya1k=
-github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
+github.com/cncf/xds/go v0.0.0-20231016030527-8bd2eac9fb4a h1:SZL0tarhuhoN0kvo5pfO4i6vxYghwzXUo9w0WHIjI4k=
+github.com/cncf/xds/go v0.0.0-20231016030527-8bd2eac9fb4a/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
github.com/cockroachdb/datadriven v0.0.0-20190809214429-80d97fb3cbaa/go.mod h1:zn76sxSg3SzpJ0PPJaLDCu+Bu0Lg3sKTORVIj19EIF8=
github.com/containerd/stargz-snapshotter/estargz v0.14.3 h1:OqlDCK3ZVUO6C3B/5FSkDwbkEETK84kQgEeFwDC+62k=
github.com/containerd/stargz-snapshotter/estargz v0.14.3/go.mod h1:KY//uOCIkSuNAHhJogcZtrNHdKrA99/FCCRjE3HD36o=
@@ -155,8 +156,8 @@ github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0 h1:8UrgZ3GkP4i/CLijOJx79Yu+etly
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0/go.mod h1:v57UDF4pDQJcEfFUCRop3lJL149eHGSe9Jvczhzjo/0=
github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ=
github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod h1:vAd38F8PWV+bWy6jNmig1y/TA+kYO4g3RSRF0IAv0no=
-github.com/docker/cli v24.0.5+incompatible h1:WeBimjvS0eKdH4Ygx+ihVq1Q++xg36M/rMi4aXAvodc=
-github.com/docker/cli v24.0.5+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
+github.com/docker/cli v24.0.6+incompatible h1:fF+XCQCgJjjQNIMjzaSmiKJSCcfcXb3TWTcc7GAneOY=
+github.com/docker/cli v24.0.6+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
github.com/docker/distribution v2.8.2+incompatible h1:T3de5rq0dB1j30rp0sA2rER+m322EBzniBPB6ZIzuh8=
github.com/docker/distribution v2.8.2+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
github.com/docker/docker v0.7.3-0.20190327010347-be7ac8be2ae0/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
@@ -180,8 +181,8 @@ github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.m
github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
github.com/envoyproxy/go-control-plane v0.9.7/go.mod h1:cwu0lG7PUMfa9snN8LXBig5ynNVH9qI8YYLbd1fK2po=
github.com/envoyproxy/go-control-plane v0.9.9-0.20201210154907-fd9021fe5dad/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk=
-github.com/envoyproxy/go-control-plane v0.11.2-0.20231019082134-6e4589f570e1 h1:i/XN+pZrv2iM+Czc4o4tP6UzUJoOxjNI9gQdE1vIjd0=
-github.com/envoyproxy/go-control-plane v0.11.2-0.20231019082134-6e4589f570e1/go.mod h1:3X10o7QcAVxP4y/hnTLgkXLwuZV2DxAEh6uaYD5PoxI=
+github.com/envoyproxy/go-control-plane v0.11.2-0.20231110162159-d6f21225f8ea h1:w2Hs1eviOYrMXpOml5qQXGPGEShqKj/2ZxiRXhBRnDo=
+github.com/envoyproxy/go-control-plane v0.11.2-0.20231110162159-d6f21225f8ea/go.mod h1:3X10o7QcAVxP4y/hnTLgkXLwuZV2DxAEh6uaYD5PoxI=
github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
github.com/envoyproxy/protoc-gen-validate v1.0.2 h1:QkIBuU5k+x7/QXPvPPnWXWlCdaBFApVqftFV6k087DA=
github.com/envoyproxy/protoc-gen-validate v1.0.2/go.mod h1:GpiZQP3dDbg4JouG/NNS7QWXpgx6x8QiMKdmN72jogE=
@@ -294,8 +295,8 @@ github.com/gogo/protobuf v1.3.1/go.mod h1:SlYgWuQ5SjCEi6WLHjHCa1yvBfUnHcTbrrZtXP
github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
-github.com/golang/glog v1.1.0 h1:/d3pCKDPWNnvIWe0vVUpNP32qc8U3PDVxySP/y360qE=
-github.com/golang/glog v1.1.0/go.mod h1:pfYeQZ3JWZoXTV5sFc986z3HTpwQs9At6P4ImfuP3NQ=
+github.com/golang/glog v1.1.2 h1:DVjP2PbBOzHyzA+dn3WhHIq4NdVu3Q+pvivFICf/7fo=
+github.com/golang/glog v1.1.2/go.mod h1:zR+okUeTbrL6EL3xHUDxZuEtGv04p5shwip1+mL/rLQ=
github.com/golang/groupcache v0.0.0-20160516000752-02826c3e7903/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
github.com/golang/groupcache v0.0.0-20190129154638-5b532d6fd5ef/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
github.com/golang/groupcache v0.0.0-20190702054246-869f871628b6/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
@@ -310,8 +311,6 @@ github.com/golang/mock v1.4.0/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt
github.com/golang/mock v1.4.1/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw=
github.com/golang/mock v1.4.3/go.mod h1:UOMv5ysSaYNkG+OFQykRIcU/QvvxJf3p21QfJ2Bt3cw=
github.com/golang/mock v1.4.4/go.mod h1:l3mdAwkq5BuhzHwde/uurv3sEJeZMXNpwsxVWU71h+4=
-github.com/golang/mock v1.6.0 h1:ErTB+efbowRARo13NNdxyJji2egdxLGQhRaY+DUumQc=
-github.com/golang/mock v1.6.0/go.mod h1:p6yTPP+5HYm5mzsMV8JkE6ZKdX+/wYM6Hr+LicevLPs=
github.com/golang/protobuf v0.0.0-20161109072736-4bd1920723d7/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
@@ -388,13 +387,13 @@ github.com/googleapis/gnostic v0.1.0/go.mod h1:sJBsCZ4ayReDTBIg8b9dl28c5xFWyhBTV
github.com/googleapis/gnostic v0.3.1/go.mod h1:on+2t9HRStVgn95RSsFWFz+6Q0Snyqv1awfrALZdbtU=
github.com/googleapis/google-cloud-go-testing v0.0.0-20200911160855-bcd43fbb19e8/go.mod h1:dvDLG8qkwmyD9a/MJJN3XJcT3xFxOKAvTZGvuZmac9g=
github.com/gophercloud/gophercloud v0.1.0/go.mod h1:vxM41WHh5uqHVBMZHzuwNOHh8XEoIEcSTewFxm1c5g8=
-github.com/gorilla/mux v1.8.0 h1:i40aqfkR1h2SlN9hojwV5ZA91wcXFOvkdNIeFDP5koI=
-github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB71So=
+github.com/gorilla/mux v1.8.1 h1:TuBL49tXwgrFYWhqrNgrUNEY92u81SPhu7sTdzQEiWY=
+github.com/gorilla/mux v1.8.1/go.mod h1:AKf9I4AEqPTmMytcMc0KkNouC66V3BtZ4qD5fmWSiMQ=
github.com/gorilla/websocket v0.0.0-20170926233335-4201258b820c/go.mod h1:E7qHFY5m1UJ88s3WnNqhKjPHQ0heANvMoAMk2YaljkQ=
github.com/gorilla/websocket v1.4.0/go.mod h1:E7qHFY5m1UJ88s3WnNqhKjPHQ0heANvMoAMk2YaljkQ=
github.com/gorilla/websocket v1.4.2/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
-github.com/gorilla/websocket v1.5.0 h1:PPwGk2jz7EePpoHN/+ClbZu8SPxiqlu12wZP/3sWmnc=
-github.com/gorilla/websocket v1.5.0/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
+github.com/gorilla/websocket v1.5.1 h1:gmztn0JnHVt9JZquRuzLw3g4wouNVzKL15iLr/zn/QY=
+github.com/gorilla/websocket v1.5.1/go.mod h1:x3kM2JMyaluk02fnUJpQuwD2dCS5NDG2ZHL0uE0tcaY=
github.com/grafana/regexp v0.0.0-20221122212121-6b5c0a4cb7fd h1:PpuIBO5P3e9hpqBD0O/HjhShYuM6XE0i/lbE6J94kww=
github.com/grafana/regexp v0.0.0-20221122212121-6b5c0a4cb7fd/go.mod h1:M5qHK+eWfAv8VR/265dIuEpL3fNfeC21tXXp9itM24A=
github.com/gregjones/httpcache v0.0.0-20180305231024-9cad4c3443a7/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA=
@@ -419,8 +418,8 @@ github.com/hashicorp/go-version v1.6.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09
github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
github.com/hashicorp/golang-lru v0.5.1/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
github.com/hashicorp/golang-lru v0.5.4/go.mod h1:iADmTwqILo4mZ8BN3D2Q6+9jd8WM5uGBxy+E8yxSoD4=
-github.com/hashicorp/golang-lru/v2 v2.0.5 h1:wW7h1TG88eUIJ2i69gaE3uNVtEPIagzhGvHgwfx2Vm4=
-github.com/hashicorp/golang-lru/v2 v2.0.5/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
+github.com/hashicorp/golang-lru/v2 v2.0.7 h1:a+bsQ5rvGLjzHuww6tVxozPZFVghXaHOwFs4luLUK2k=
+github.com/hashicorp/golang-lru/v2 v2.0.7/go.mod h1:QeFd9opnmA6QUJc5vARoKUSoFhyfM2/ZepoAG6RGpeM=
github.com/hashicorp/hcl v1.0.0 h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4=
github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ=
github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
@@ -471,8 +470,9 @@ github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0
github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
github.com/lestrrat-go/backoff/v2 v2.0.8 h1:oNb5E5isby2kiro9AgdHLv5N5tint1AnDVVf2E2un5A=
github.com/lestrrat-go/backoff/v2 v2.0.8/go.mod h1:rHP/q/r9aT27n24JQLa7JhSQZCKBBOiM/uP402WwN8Y=
-github.com/lestrrat-go/blackmagic v1.0.1 h1:lS5Zts+5HIC/8og6cGHb0uCcNCa3OUt1ygh3Qz2Fe80=
github.com/lestrrat-go/blackmagic v1.0.1/go.mod h1:UrEqBzIR2U6CnzVyUtfM6oZNMt/7O7Vohk2J0OGSAtU=
+github.com/lestrrat-go/blackmagic v1.0.2 h1:Cg2gVSc9h7sz9NOByczrbUvLopQmXrfFx//N+AkAr5k=
+github.com/lestrrat-go/blackmagic v1.0.2/go.mod h1:UrEqBzIR2U6CnzVyUtfM6oZNMt/7O7Vohk2J0OGSAtU=
github.com/lestrrat-go/httpcc v1.0.1 h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE=
github.com/lestrrat-go/httpcc v1.0.1/go.mod h1:qiltp3Mt56+55GPVCbTdM9MlqhvzyuL6W/NMDA8vA5E=
github.com/lestrrat-go/iter v1.0.2 h1:gMXo1q4c2pHmC3dn8LzRhJfP1ceCbgSiT9lUydIzltI=
@@ -503,8 +503,8 @@ github.com/mattn/go-isatty v0.0.4/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNx
github.com/mattn/go-isatty v0.0.8/go.mod h1:Iq45c/XA43vh69/j3iqttzPXn0bhXyGjM0Hdxcsrc5s=
github.com/mattn/go-isatty v0.0.12/go.mod h1:cbi8OIDigv2wuxKPP5vlRcQ1OAZbq2CE4Kysco4FUpU=
github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
-github.com/mattn/go-isatty v0.0.19 h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=
-github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
github.com/mattn/go-runewidth v0.0.2/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU=
github.com/mattn/go-runewidth v0.0.14 h1:+xnbZSEeDbOIg5/mE6JF0w6n9duR1l3/WmbinWVwUuU=
github.com/mattn/go-runewidth v0.0.14/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w=
@@ -528,8 +528,8 @@ github.com/mitchellh/reflectwalk v1.0.2 h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zx
github.com/mitchellh/reflectwalk v1.0.2/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
github.com/moby/spdystream v0.2.0 h1:cjW1zVyyoiM0T7b6UoySUFqzXMoqRckQtXwGPiBhOM8=
github.com/moby/spdystream v0.2.0/go.mod h1:f7i0iNDQJ059oMTcWxx8MA/zKFIuD/lY+0GqbN2Wy8c=
-github.com/moby/term v0.0.0-20221205130635-1aeaba878587 h1:HfkjXDfhgVaN5rmueG8cL8KKeFNecRCXFhaJ2qZ5SKA=
-github.com/moby/term v0.0.0-20221205130635-1aeaba878587/go.mod h1:8FzsFHVUBGZdbDsJw/ot+X+d5HLUbvklYLJ9uGfcI3Y=
+github.com/moby/term v0.5.0 h1:xt8Q1nalod/v7BqbG21f8mQPqH+xAaC9C3N3wfWbVP0=
+github.com/moby/term v0.5.0/go.mod h1:8FzsFHVUBGZdbDsJw/ot+X+d5HLUbvklYLJ9uGfcI3Y=
github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
@@ -554,27 +554,27 @@ github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+W
github.com/onsi/ginkgo v1.11.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
github.com/onsi/ginkgo v1.12.1/go.mod h1:zj2OWP4+oCPe1qIXoGWkgMRwljMUYCdkwsT2108oapk=
github.com/onsi/ginkgo v1.14.0/go.mod h1:iSB4RoI2tjJc9BBv4NKIKWKya62Rps+oPG/Lv9klQyY=
-github.com/onsi/ginkgo/v2 v2.11.0 h1:WgqUCUt/lT6yXoQ8Wef0fsNn5cAuMK7+KT9UFRz2tcU=
-github.com/onsi/ginkgo/v2 v2.11.0/go.mod h1:ZhrRA5XmEE3x3rhlzamx/JJvujdZoJ2uvgI7kR0iZvM=
+github.com/onsi/ginkgo/v2 v2.12.0 h1:UIVDowFPwpg6yMUpPjGkYvf06K3RAiJXUhCxEwQVHRI=
+github.com/onsi/ginkgo/v2 v2.12.0/go.mod h1:ZNEzXISYlqpb8S36iN71ifqLi3vVD1rVJGvWRCJOUpQ=
github.com/onsi/gomega v0.0.0-20170829124025-dcabb60a477c/go.mod h1:C1qb7wdrVGGVU+Z6iS04AVkA3Q65CEZX59MT0QO5uiA=
github.com/onsi/gomega v1.7.0/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7JYyY=
github.com/onsi/gomega v1.8.1/go.mod h1:Ho0h+IUsWyvy1OpqCwxlQ/21gkhVunqlU8fDGcoTdcA=
github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo=
-github.com/onsi/gomega v1.27.10 h1:naR28SdDFlqrG6kScpT8VWpu1xWY5nJRCF3XaYyBjhI=
-github.com/onsi/gomega v1.27.10/go.mod h1:RsS8tutOdbdgzbPtzzATp12yT7kM5I5aElG3evPbQ0M=
+github.com/onsi/gomega v1.28.0 h1:i2rg/p9n/UqIDAMFUJ6qIUUMcsqOuUHgbpbu235Vr1c=
+github.com/onsi/gomega v1.28.0/go.mod h1:A1H2JE76sI14WIP57LMKj7FVfCHx3g3BcZVjJG8bjX8=
github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
-github.com/opencontainers/image-spec v1.1.0-rc3 h1:fzg1mXZFj8YdPeNkRXMg+zb88BFV0Ys52cJydRwBkb8=
-github.com/opencontainers/image-spec v1.1.0-rc3/go.mod h1:X4pATf0uXsnn3g5aiGIsVnJBR4mxhKzfwmvK/B2NTm8=
-github.com/openshift/api v0.0.0-20230823114715-5fdd7511b790 h1:e3zIxk67/kiABxGFfFVECqJ4FcQRG5DPF8lgDV9f+MM=
-github.com/openshift/api v0.0.0-20230823114715-5fdd7511b790/go.mod h1:yimSGmjsI+XF1mr+AKBs2//fSXIOhhetHGbMlBEfXbs=
+github.com/opencontainers/image-spec v1.1.0-rc5 h1:Ygwkfw9bpDvs+c9E34SdgGOj41dX/cbdlwvlWt0pnFI=
+github.com/opencontainers/image-spec v1.1.0-rc5/go.mod h1:X4pATf0uXsnn3g5aiGIsVnJBR4mxhKzfwmvK/B2NTm8=
+github.com/openshift/api v0.0.0-20231019121755-0c5924392281 h1:49ccho6DQLZpqxlFWyXpHRoLsQl0KVma+Ir+2zC9qSY=
+github.com/openshift/api v0.0.0-20231019121755-0c5924392281/go.mod h1:qNtV0315F+f8ld52TLtPvrfivZpdimOzTi3kn9IVbtU=
github.com/opentracing/opentracing-go v1.1.0/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
github.com/pborman/uuid v1.2.0/go.mod h1:X/NO0urCmaxf9VXbdlT7C2Yzkj2IKimNn4k+gtPdI/k=
github.com/pelletier/go-toml v1.2.0/go.mod h1:5z9KED0ma1S8pY6P1sdut58dfprrGBbd/94hg7ilaic=
github.com/pelletier/go-toml v1.7.0/go.mod h1:vwGMzjaWMwyfHwgIBhI2YUM4fB6nL6lVAvS1LBMMhTE=
-github.com/pelletier/go-toml/v2 v2.0.8 h1:0ctb6s9mE31h0/lhu+J6OPmVeDxJn+kYnJc2jZR9tGQ=
-github.com/pelletier/go-toml/v2 v2.0.8/go.mod h1:vuYfssBdrU2XDZ9bYydBu6t+6a6PYNcZljzZR9VXg+4=
+github.com/pelletier/go-toml/v2 v2.1.0 h1:FnwAJ4oYMvbT/34k9zzHuZNrhlz48GB3/s6at6/MHO4=
+github.com/pelletier/go-toml/v2 v2.1.0/go.mod h1:tJU2Z3ZkXwnxa4DPO899bsyIoywizdUvyaeZurnPPDc=
github.com/peterbourgon/diskv v2.0.1+incompatible h1:UBdAOUP5p4RWqPBg048CAvpKN+vxiaj6gdUUzhl4XmI=
github.com/peterbourgon/diskv v2.0.1+incompatible/go.mod h1:uqqh8zWWbv1HBMNONnaR/tNboyR3/BZd58JJSHlUSCU=
github.com/pires/go-proxyproto v0.7.0 h1:IukmRewDQFWC7kfnb66CSomk2q/seBuilHBYFwyq0Hs=
@@ -616,10 +616,10 @@ github.com/prometheus/prometheus v0.48.0-rc.1/go.mod h1:SRw624aMAxTfryAcP8rOjg4S
github.com/prometheus/tsdb v0.7.1/go.mod h1:qhTCs0VvXwvX/y3TZrWD7rabWM+ijKTux40TwIPHuXU=
github.com/quic-go/qpack v0.4.0 h1:Cr9BXA1sQS2SmDUWjSofMPNKmvF6IiIfDRmgU0w1ZCo=
github.com/quic-go/qpack v0.4.0/go.mod h1:UZVnYIfi5GRk+zI9UMaCPsmZ2xKJP7XBUvVyT1Knj9A=
-github.com/quic-go/qtls-go1-20 v0.3.2 h1:rRgN3WfnKbyik4dBV8A6girlJVxGand/d+jVKbQq5GI=
-github.com/quic-go/qtls-go1-20 v0.3.2/go.mod h1:X9Nh97ZL80Z+bX/gUXMbipO6OxdiDi58b/fMC9mAL+k=
-github.com/quic-go/quic-go v0.38.0 h1:T45lASr5q/TrVwt+jrVccmqHhPL2XuSyoCLVCpfOSLc=
-github.com/quic-go/quic-go v0.38.0/go.mod h1:MPCuRq7KBK2hNcfKj/1iD1BGuN3eAYMeNxp3T42LRUg=
+github.com/quic-go/qtls-go1-20 v0.3.4 h1:MfFAPULvst4yoMgY9QmtpYmfij/em7O8UUi+bNVm7Cg=
+github.com/quic-go/qtls-go1-20 v0.3.4/go.mod h1:X9Nh97ZL80Z+bX/gUXMbipO6OxdiDi58b/fMC9mAL+k=
+github.com/quic-go/quic-go v0.39.1 h1:d/m3oaN/SD2c+f7/yEjZxe2zEVotXprnrCCJ2y/ZZFE=
+github.com/quic-go/quic-go v0.39.1/go.mod h1:T09QsDQWjLiQ74ZmacDfqZmhY/NLnw5BC40MANNNZ1Q=
github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
github.com/rivo/uniseg v0.4.3 h1:utMvzDsuh3suAEnhH0RdHmoPbU648o6CvXxTx4SBMOw=
github.com/rivo/uniseg v0.4.3/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
@@ -652,8 +652,8 @@ github.com/spaolacci/murmur3 v1.1.0 h1:7c1g84S4BPRrfL5Xrdp6fOJ206sU9y293DDHaoy0b
github.com/spaolacci/murmur3 v1.1.0/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA=
github.com/spf13/afero v1.1.2/go.mod h1:j4pytiNVoe2o6bmDsKpLACNPDBIoEAkihy7loJ1B0CQ=
github.com/spf13/afero v1.2.2/go.mod h1:9ZxEEn6pIJ8Rxe320qSDBk6AsU0r9pR7Q4OcevTdifk=
-github.com/spf13/afero v1.9.5 h1:stMpOSZFs//0Lv29HduCmli3GUfpFoF3Y1Q/aXj/wVM=
-github.com/spf13/afero v1.9.5/go.mod h1:UBogFpq8E9Hx+xc5CNTTEpTnuHVmXDwZcZcE1eb/UhQ=
+github.com/spf13/afero v1.10.0 h1:EaGW2JJh15aKOejeuJ+wpFSHnbd7GE6Wvp3TsNhb6LY=
+github.com/spf13/afero v1.10.0/go.mod h1:UBogFpq8E9Hx+xc5CNTTEpTnuHVmXDwZcZcE1eb/UhQ=
github.com/spf13/cast v1.3.0/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
github.com/spf13/cast v1.3.1/go.mod h1:Qx5cxh0v+4UWYiBimWS+eyWzqEqokIECu5etghLkUJE=
github.com/spf13/cast v1.5.1 h1:R+kOtfhWQE6TVQzY+4D7wJLBgkdVasCEFxSUBYBYIlA=
@@ -692,11 +692,10 @@ github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/
github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
-github.com/stretchr/testify v1.8.3/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
-github.com/subosito/gotenv v1.4.2 h1:X1TuBLAMDFbaTAChgCBLu3DU3UPyELpnF2jjJ2cz/S8=
-github.com/subosito/gotenv v1.4.2/go.mod h1:ayKnFf/c6rvx/2iiLrJUk1e6plDbT3edrFNGqEflhK0=
+github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8=
+github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU=
github.com/tidwall/pretty v1.0.0/go.mod h1:XNkn88O1ChpSDQmQeStsy+sBenx6DDtFZJxhVysOjyk=
github.com/tmc/grpc-websocket-proxy v0.0.0-20170815181823-89b8d40f7ca8/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U=
github.com/tmc/grpc-websocket-proxy v0.0.0-20190109142713-0ad062ec5ee5/go.mod h1:ncp9v5uamzpCO7NfCPTXjqaC+bZgJeR0sMTm6dMHP7U=
@@ -724,7 +723,6 @@ github.com/yuin/goldmark v1.1.25/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9de
github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
github.com/yuin/goldmark v1.1.32/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
-github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
go.etcd.io/bbolt v1.3.2/go.mod h1:IbVyRI1SCnLcuJnV2u8VeU0CEYM7e686BmAb1XKL+uU=
go.etcd.io/bbolt v1.3.3/go.mod h1:IbVyRI1SCnLcuJnV2u8VeU0CEYM7e686BmAb1XKL+uU=
@@ -746,14 +744,14 @@ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.19.0 h1:3d+S2
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.19.0/go.mod h1:0+KuTDyKL4gjKCF75pHOX4wuzYDUZYfAQdSu43o+Z2I=
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.19.0 h1:IeMeyr1aBvBiPVYihXIaeIZba6b8E1bYp7lbdxK8CQg=
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.19.0/go.mod h1:oVdCUtjq9MK9BlS7TtucsQwUcXcymNiEDjgDD2jMtZU=
-go.opentelemetry.io/otel/exporters/prometheus v0.39.1-0.20230714155235-03b8c47770f2 h1:Aph2X1/DxO5WvT1uZ+4XijVu/zzv3HsEmgWOskU2gOA=
-go.opentelemetry.io/otel/exporters/prometheus v0.39.1-0.20230714155235-03b8c47770f2/go.mod h1:38vyoWXIF54R5KmBjqAer6ib6+kY6EOhRo10wXRN6ek=
+go.opentelemetry.io/otel/exporters/prometheus v0.42.0 h1:jwV9iQdvp38fxXi8ZC+lNpxjK16MRcZlpDYvbuO1FiA=
+go.opentelemetry.io/otel/exporters/prometheus v0.42.0/go.mod h1:f3bYiqNqhoPxkvI2LrXqQVC546K7BuRDL/kKuxkujhA=
go.opentelemetry.io/otel/metric v1.19.0 h1:aTzpGtV0ar9wlV4Sna9sdJyII5jTVJEvKETPiOKwvpE=
go.opentelemetry.io/otel/metric v1.19.0/go.mod h1:L5rUsV9kM1IxCj1MmSdS+JQAcVm319EUrDVLrt7jqt8=
go.opentelemetry.io/otel/sdk v1.19.0 h1:6USY6zH+L8uMH8L3t1enZPR3WFEmSTADlqldyHtJi3o=
go.opentelemetry.io/otel/sdk v1.19.0/go.mod h1:NedEbbS4w3C6zElbLdPJKOpJQOrGUJ+GfzpjUvI0v1A=
-go.opentelemetry.io/otel/sdk/metric v0.39.0 h1:Kun8i1eYf48kHH83RucG93ffz0zGV1sh46FAScOTuDI=
-go.opentelemetry.io/otel/sdk/metric v0.39.0/go.mod h1:piDIRgjcK7u0HCL5pCA4e74qpK/jk3NiUoAHATVAmiI=
+go.opentelemetry.io/otel/sdk/metric v1.19.0 h1:EJoTO5qysMsYCa+w4UghwFV/ptQgqSL/8Ni+hx+8i1k=
+go.opentelemetry.io/otel/sdk/metric v1.19.0/go.mod h1:XjG0jQyFJrv2PbMvwND7LwCEhsJzCzV5210euduKcKY=
go.opentelemetry.io/otel/trace v1.19.0 h1:DFVQmlVbfVeOuBRrwdtaehRrWiL1JoVs9CPIQ1Dzxpg=
go.opentelemetry.io/otel/trace v1.19.0/go.mod h1:mfaSyvGyEJEI0nyV2I4qhNQnbBOUUmYZpYojqMnX2vo=
go.opentelemetry.io/proto/otlp v1.0.0 h1:T0TX0tmXU8a3CbNXzEKGeU5mIVOdf0oykP+u2lIVU/I=
@@ -768,6 +766,8 @@ go.uber.org/atomic v1.11.0/go.mod h1:LUxbIzbOniOlMKjJjyPfpl4v+PKK2cNJn91OQbhoJI0
go.uber.org/goleak v1.1.10/go.mod h1:8a7PlsEVH3e/a/GLqe5IIrQx6GzcnRmZEufDUTk4A7A=
go.uber.org/goleak v1.2.1 h1:NBol2c7O1ZokfZ0LEU9K6Whx/KnwvepVetCUhtKja4A=
go.uber.org/goleak v1.2.1/go.mod h1:qlT2yGI9QafXHhZZLxlSuNsMw3FFLxBr+tBRlmO1xH4=
+go.uber.org/mock v0.3.0 h1:3mUxI1No2/60yUYax92Pt8eNOEecx2D3lcXZh2NEZJo=
+go.uber.org/mock v0.3.0/go.mod h1:a6FSlNadKUHUa9IP5Vyt1zh4fC7uAwxMutEAscFbkZc=
go.uber.org/multierr v1.1.0/go.mod h1:wR5kodmAFQ0UK8QlbwjlSNy0Z68gJhDJUG5sjR94q/0=
go.uber.org/multierr v1.6.0/go.mod h1:cdWPpRnG4AhwMwsgIHip0KRBQjJy5kYEpYjJxpXp9iU=
go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
@@ -830,7 +830,6 @@ golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
golang.org/x/mod v0.4.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
golang.org/x/mod v0.4.1/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
-golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
golang.org/x/mod v0.13.0 h1:I/DsJXRlw/8l/0c24sM9yb0T4z9liZTduXvdAWYiysY=
@@ -878,7 +877,6 @@ golang.org/x/net v0.0.0-20201031054903-ff519b6c9102/go.mod h1:sp8m0HH+o8qH0wwXwY
golang.org/x/net v0.0.0-20201209123823-ac852fbbde11/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
golang.org/x/net v0.0.0-20201224014010-6772e930b67b/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
-golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM=
golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
@@ -907,7 +905,6 @@ golang.org/x/sync v0.0.0-20200317015054-43a5402ce75a/go.mod h1:RxMgew5VJxzue5/jJ
golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.4.0 h1:zxkM55ReGkDlKSM+Fu41A+zmbZuaPVbGMzvvdUPznYQ=
@@ -963,10 +960,8 @@ golang.org/x/sys v0.0.0-20201201145000-ef89a241ccb3/go.mod h1:h1NjWce9XRLGQEsW7w
golang.org/x/sys v0.0.0-20210104204734-6f8348627aad/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20210119212857-b64e53b001e4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20210225134936-a50acf3fe073/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
golang.org/x/sys v0.0.0-20210423185535-09eb48e85fd7/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -1067,7 +1062,6 @@ golang.org/x/tools v0.0.0-20210105154028-b0ab187a4818/go.mod h1:emZCQorbCU4vsT4f
golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
golang.org/x/tools v0.0.0-20210108195828-e2f9c7f1fc8e/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
golang.org/x/tools v0.1.0/go.mod h1:xkSsbof2nBLbhDlRMhhhyNLN/zl3eTqcnHD5viDpcZ0=
-golang.org/x/tools v0.1.1/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
golang.org/x/tools v0.14.0 h1:jvNa2pY0M4r62jkRQ6RwEZZyPcymeL9XZMLBbV7U2nc=
@@ -1144,12 +1138,12 @@ google.golang.org/genproto v0.0.0-20201210142538-e3217bee35cc/go.mod h1:FWY/as6D
google.golang.org/genproto v0.0.0-20201214200347-8c77b98c765d/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
google.golang.org/genproto v0.0.0-20210108203827-ffc7fda8c3d7/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
google.golang.org/genproto v0.0.0-20210226172003-ab064af71705/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no=
-google.golang.org/genproto v0.0.0-20231002182017-d307bd883b97 h1:SeZZZx0cP0fqUyA+oRzP9k7cSwJlvDFiROO72uwD6i0=
-google.golang.org/genproto v0.0.0-20231002182017-d307bd883b97/go.mod h1:t1VqOqqvce95G3hIDCT5FeO3YUc6Q4Oe24L/+rNMxRk=
-google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a h1:myvhA4is3vrit1a6NZCWBIwN0kNEnX21DJOJX/NvIfI=
-google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a/go.mod h1:SUBoKXbI1Efip18FClrQVGjWcyd0QZd8KkvdP34t7ww=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20231009173412-8bfb1ae86b6c h1:jHkCUWkseRf+W+edG5hMzr/Uh1xkDREY4caybAq4dpY=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20231009173412-8bfb1ae86b6c/go.mod h1:4cYg8o5yUbm77w8ZX00LhMVNl/YVBFJRYWDc0uYWMs0=
+google.golang.org/genproto v0.0.0-20231016165738-49dd2c1f3d0b h1:+YaDE2r2OG8t/z5qmsh7Y+XXwCbvadxxZ0YY6mTdrVA=
+google.golang.org/genproto v0.0.0-20231016165738-49dd2c1f3d0b/go.mod h1:CgAqfJo+Xmu0GwA0411Ht3OU3OntXwsGmrmjI8ioGXI=
+google.golang.org/genproto/googleapis/api v0.0.0-20231016165738-49dd2c1f3d0b h1:CIC2YMXmIhYw6evmhPxBKJ4fmLbOFtXQN/GV3XOZR8k=
+google.golang.org/genproto/googleapis/api v0.0.0-20231016165738-49dd2c1f3d0b/go.mod h1:IBQ646DjkDkvUIsVq/cc03FUFQ9wbZu7yE396YcL870=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b/go.mod h1:swOH3j0KzcDDgGUWr+SNpyTen5YrXjS3eyPzFYKc6lc=
google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
google.golang.org/grpc v1.20.1/go.mod h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38=
google.golang.org/grpc v1.21.0/go.mod h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM=
@@ -1168,8 +1162,8 @@ google.golang.org/grpc v1.31.1/go.mod h1:N36X2cJ7JwdamYAgDz+s+rVMFjt3numwzf/HckM
google.golang.org/grpc v1.33.2/go.mod h1:JMHMWHQWaTccqQQlmk3MJZS+GWXOdAesneDmEnv2fbc=
google.golang.org/grpc v1.34.0/go.mod h1:WotjhfgOW/POjDeRt8vscBtXq+2VjORFy659qA51WJ8=
google.golang.org/grpc v1.35.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU=
-google.golang.org/grpc v1.58.3 h1:BjnpXut1btbtgN/6sp+brB2Kbm2LjNXnidYujAVbSoQ=
-google.golang.org/grpc v1.58.3/go.mod h1:tgX3ZQDlNJGU96V6yHh1T/JeoBQ2TXdr43YbYSsCJk0=
+google.golang.org/grpc v1.59.0 h1:Z5Iec2pjwb+LEOqzpB2MR12/eKFhDPhuqW91O+4bwUk=
+google.golang.org/grpc v1.59.0/go.mod h1:aUPDwccQo6OTjy7Hct4AfBPD1GptF4fyUjIkQ9YtF98=
google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
@@ -1223,8 +1217,8 @@ gotest.tools v2.2.0+incompatible h1:VsBPFP1AI068pPrMxtb/S8Zkgf9xEmTLJjfM+P5UIEo=
gotest.tools v2.2.0+incompatible/go.mod h1:DsYFclhRJ6vuDpmuTbkuFWG+y2sxOXAzmJt81HFBacw=
gotest.tools/v3 v3.0.3 h1:4AuOwCGf4lLR9u3YOe2awrHygurzhO/HeQ6laiA6Sx0=
gotest.tools/v3 v3.0.3/go.mod h1:Z7Lb0S5l+klDB31fvDQX8ss/FlKDxtlFlw3Oa8Ymbl8=
-helm.sh/helm/v3 v3.12.3 h1:5y1+Sbty12t48T/t/CGNYUIME5BJ0WKfmW/sobYqkFg=
-helm.sh/helm/v3 v3.12.3/go.mod h1:KPKQiX9IP5HX7o5YnnhViMnNuKiL/lJBVQ47GHe1R0k=
+helm.sh/helm/v3 v3.13.1 h1:DG+XLGzBJeZvMLlMbm6bPDLV1dGaVW9eZsDoUd1/LM0=
+helm.sh/helm/v3 v3.13.1/go.mod h1:TdQRMiq46CSWcc68Hb0uVhvAWusaN90YwAV54cz6JzU=
honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
honnef.co/go/tools v0.0.0-20190418001031-e561f6794a2a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
@@ -1232,12 +1226,12 @@ honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWh
honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k=
-istio.io/api v1.20.0-beta.0.0.20231031143729-871b2914253f h1:tsD3dRCPpcATJmW/ymGBdi5+PgIAd9eEEO2tyyutkPs=
-istio.io/api v1.20.0-beta.0.0.20231031143729-871b2914253f/go.mod h1:hm1PE/mGdIAsjCDkTIAplP53H7TjO5LUQCiVvF26SVg=
-istio.io/client-go v1.20.0-beta.0.0.20231031144329-30f00b62f7e9 h1:U1eP7bqtXXiJ6n5xknAM445PfHZOaCR6fKDUisKBxKo=
-istio.io/client-go v1.20.0-beta.0.0.20231031144329-30f00b62f7e9/go.mod h1:6D76gZsdjz8JtVeIarUYdOn3WA8Zh+j8fIv2+2K3M+Q=
-istio.io/istio v0.0.0-20231109034306-486c6ca3836d h1:/9wfZzpIKdKFvbCWXgHVLb10ZKPOyRk/2tWzZxeOsRo=
-istio.io/istio v0.0.0-20231109034306-486c6ca3836d/go.mod h1:q5C1vHKFRGSSPUqIYBzQSo6/gc11BgCBoUcpw2/iRYA=
+istio.io/api v1.20.0-rc.0 h1:iRe7ZSS98bCKqXPZLkc0nYbTZefs69VjdDppR865Fsg=
+istio.io/api v1.20.0-rc.0/go.mod h1:hm1PE/mGdIAsjCDkTIAplP53H7TjO5LUQCiVvF26SVg=
+istio.io/client-go v1.20.0-rc.0 h1:Dm2YNG/RBFnuMpfQGEPEp6bVTPFKxWlDYVSsuR15tSs=
+istio.io/client-go v1.20.0-rc.0/go.mod h1:6D76gZsdjz8JtVeIarUYdOn3WA8Zh+j8fIv2+2K3M+Q=
+istio.io/istio v0.0.0-20231114153917-0d5f530188df h1:H7GDMYQmc64UmI7Zff+eVdLB5fGZB7mHYza7PERRmXk=
+istio.io/istio v0.0.0-20231114153917-0d5f530188df/go.mod h1:jKBk2xxSAZDNeWgItHo+4FvhBPiStFSu2K4a98DrR+E=
k8s.io/api v0.18.2/go.mod h1:SJCWI7OLzhZSvbY7U8zwNl9UA4o1fizoug34OV/2r78=
k8s.io/api v0.18.4/go.mod h1:lOIQAKYgai1+vz9J7YcDZwC26Z0zQewYOGWdyIPUUQ4=
k8s.io/api v0.28.3 h1:Gj1HtbSdB4P08C8rs9AR94MfSGpRhJgsS+GF9V26xMM=
@@ -1254,8 +1248,8 @@ k8s.io/apiserver v0.18.2/go.mod h1:Xbh066NqrZO8cbsoenCwyDJ1OSi8Ag8I2lezeHxzwzw=
k8s.io/apiserver v0.18.4/go.mod h1:q+zoFct5ABNnYkGIaGQ3bcbUNdmPyOCoEBcg51LChY8=
k8s.io/apiserver v0.28.3 h1:8Ov47O1cMyeDzTXz0rwcfIIGAP/dP7L8rWbEljRcg5w=
k8s.io/apiserver v0.28.3/go.mod h1:YIpM+9wngNAv8Ctt0rHG4vQuX/I5rvkEMtZtsxW2rNM=
-k8s.io/cli-runtime v0.28.0 h1:Tcz1nnccXZDNIzoH6EwjCs+7ezkUGhorzCweEvlVOFg=
-k8s.io/cli-runtime v0.28.0/go.mod h1:U+ySmOKBm/JUCmebhmecXeTwNN1RzI7DW4+OM8Oryas=
+k8s.io/cli-runtime v0.28.3 h1:lvuJYVkwCqHEvpS6KuTZsUVwPePFjBfSGvuaLl2SxzA=
+k8s.io/cli-runtime v0.28.3/go.mod h1:jeX37ZPjIcENVuXDDTskG3+FnVuZms5D9omDXS/2Jjc=
k8s.io/client-go v0.18.2/go.mod h1:Xcm5wVGXX9HAA2JJ2sSBUn3tCJ+4SVlCbl2MNNv+CIU=
k8s.io/client-go v0.18.4/go.mod h1:f5sXwL4yAZRkAtzOxRWUhA/N8XzGCb+nPZI8PfobZ9g=
k8s.io/client-go v0.28.3 h1:2OqNb72ZuTZPKCl+4gTKvqao0AMOl9f3o2ijbAj3LI4=
@@ -1278,8 +1272,8 @@ k8s.io/kube-openapi v0.0.0-20200121204235-bf4fb3bd569c/go.mod h1:GRQhZsXIAJ1xR0C
k8s.io/kube-openapi v0.0.0-20200410145947-61e04a5be9a6/go.mod h1:GRQhZsXIAJ1xR0C9bd8UpWHZ5plfAS9fzPjJuQ6JL3E=
k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 h1:aVUu9fTY98ivBPKR9Y5w/AuzbMm96cd3YHRTU83I780=
k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00/go.mod h1:AsvuZPBlUDVuCdzJ87iajxtXuR9oktsTctW/R9wwouA=
-k8s.io/kubectl v0.28.0 h1:qhfju0OaU+JGeBlToPeeIg2UJUWP++QwTkpio6nlPKg=
-k8s.io/kubectl v0.28.0/go.mod h1:1We+E5nSX3/TVoSQ6y5Bzld5OhTBHZHlKEYl7g/NaTk=
+k8s.io/kubectl v0.28.3 h1:H1Peu1O3EbN9zHkJCcvhiJ4NUj6lb88sGPO5wrWIM6k=
+k8s.io/kubectl v0.28.3/go.mod h1:RDAudrth/2wQ3Sg46fbKKl4/g+XImzvbsSRZdP2RiyE=
k8s.io/utils v0.0.0-20200324210504-a9aa75ae1b89/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
k8s.io/utils v0.0.0-20200603063816-c1c6865ac451/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
k8s.io/utils v0.0.0-20230726121419-3b25d923346b h1:sgn3ZU783SCgtaSJjpcVVlRqd6GSnlTLKgpAAttJvpI=
@@ -1292,8 +1286,8 @@ sigs.k8s.io/controller-runtime v0.6.1/go.mod h1:XRYBPdbf5XJu9kpS84VJiZ7h/u1hF3gE
sigs.k8s.io/controller-runtime v0.16.3 h1:2TuvuokmfXvDUamSx1SuAOO3eTyye+47mJCigwG62c4=
sigs.k8s.io/controller-runtime v0.16.3/go.mod h1:j7bialYoSn142nv9sCOJmQgDXQXxnroFU4VnX/brVJ0=
sigs.k8s.io/controller-tools v0.3.0/go.mod h1:enhtKGfxZD1GFEoMgP8Fdbu+uKQ/cq1/WGJhdVChfvI=
-sigs.k8s.io/gateway-api v1.0.0 h1:iPTStSv41+d9p0xFydll6d7f7MOBGuqXM6p2/zVYMAs=
-sigs.k8s.io/gateway-api v1.0.0/go.mod h1:4cUgr0Lnp5FZ0Cdq8FdRwCvpiWws7LVhLHGIudLlf4c=
+sigs.k8s.io/gateway-api v1.0.1-0.20231102234152-004e14bfe016 h1:ovFzI+PB1mdbfAyR+Olnhc+HSys1z9IXSYqNfSdUUf0=
+sigs.k8s.io/gateway-api v1.0.1-0.20231102234152-004e14bfe016/go.mod h1:4cUgr0Lnp5FZ0Cdq8FdRwCvpiWws7LVhLHGIudLlf4c=
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
sigs.k8s.io/kind v0.8.1/go.mod h1:oNKTxUVPYkV9lWzY6CVMNluVq8cBsyq+UgPJdvA3uu4=