--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray>--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray>--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray>--identity-domain <string>--key-size <int>--trust-domain <string>--upstream-ca-address <string>Istio configuration command line utility for service operators to debug and diagnose their Istio mesh. @@ -37,12 +37,12 @@ debug and diagnose their Istio mesh.
--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray>--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray>--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray>--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray>--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray>--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray>--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray>--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray>--groups <string>-g--istioNamespace <string>-i--log_caller <string>--log_output_level <string>--log_rotate <string>--log_stacktrace_level <string>--log_target <stringArray># Query if user test is allowed to GET /v1/health of service rating.
-istioctl experimental rbac can -u test GET rating /v1/health
+# Query if user "cluster.local/ns/default/sa/productpage" is allowed to GET /v1/health of service rating.
+istioctl experimental rbac can -u cluster.local/ns/default/sa/productpage GET rating /v1/health
-# Query if service product-page is allowed to POST to /data of service rating with label version=dev.
-istioctl experimental rbac can -s service=product-page POST rating /data -a version=dev
+# Query if namespace foo is allowed to POST to /data of service rating with label version=dev.
+istioctl experimental rbac can -s source.namespace=foo POST rating /data -a destination.labels[version]=dev
-istioctl gen-deploy
-istioctl gen-deploy produces deployment files to run the Istio.
-istioctl gen-deploy [flags]
+istioctl experimental verify-install
+
+ verify-install Verifies Istio Installation Status
+
+istioctl experimental verify-install [flags]
@@ -859,19 +856,9 @@ istioctl experimental rbac can -s service=product-page POST rating /data -a vers
The name of the kubeconfig context to use (default ``)
---debugIf true, uses debug images instead of release images
-
-
---helm-chart-dir <string>The directory to find the helm charts used to render Istio deployments. -o yaml uses these to render the helm chart locally. (default `.`)
-
-
---ingress-node-port <uint16>If provided, Istio ingress proxies will run as a NodePort service mapped to the port provided by this flag. Note that this flag is ignored unless the "ingress" feature flag is provided too. (default `0`)
+--filename <stringSlice>-f (default `[]`)
--istioNamespace <string>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>Istio host platform (default `kube`)
---values <string>Path to the Helm values.yaml file used to render YAML deployments locally when --out=yaml. Flag values are ignored in favor of using the file directly. (default ``)
+--recursive-RProcess the directory used in -f, --filename recursively. Useful when you want to manage related manifests organized within the same directory.
-Examples
-istioctl gen-deploy --values myvalues.yaml
+Examples
+
+istioctl verify-install -f istio-demo.yaml
+
istioctl kube-inject
@@ -1015,12 +1004,12 @@ file/configmap created with a new Istio release.
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, attributes, default, mcp, mcp-creds, model, rbac, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [adapters, api, attributes, default, grpcAdapter, mcp] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds, snapshot] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [adapters, api, attributes, default, grpcAdapter, mcp] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds, snapshot] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac] (default ``)
+Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)
--log_rotate <string>
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)
--log_target <stringArray>TLSSettings
-SSL/TLS related settings for upstream connections. See Envoy’s TLS
+SSL/TLS related settings for upstream connections. See Envoy’s TLS
context
for more details. These settings are common to both HTTP and TCP upstreams.
diff --git a/content/docs/reference/config/policy-and-telemetry/adapters/rbac/index.html b/content/docs/reference/config/policy-and-telemetry/adapters/rbac/index.html
deleted file mode 100644
index b02b1566c4..0000000000
--- a/content/docs/reference/config/policy-and-telemetry/adapters/rbac/index.html
+++ /dev/null
@@ -1,65 +0,0 @@
----
-title: RBAC
-description: Adapter that exposes Istio's Role-Based Access Control model.
-location: https://istio.io/docs/reference/config/policy-and-telemetry/adapters/rbac.html
-layout: protoc-gen-docs
-generator: protoc-gen-docs
-supported_templates: authorization
-aliases:
- - /docs/reference/config/adapters/rbac.html
-number_of_entries: 1
----
-The rbac adapter provides Role-Based Access Control (RBAC) functionality for
-for services within the Istio mesh.
-
-This adapter supports the authorization template.
-
-Params
-
-Configuration format for the rbac adapter.
-
-For example, the following configuration defines a RBAC handler with
-configuration store URL pointing to Kubernetes etcd (“k8s://”).
-If you want to run Mixer locally, you can set the configuration store
-URL to a local directory (e.g., “fs:///tmp/testdata/configroot”).
-
-apiVersion: "config.istio.io/v1alpha2"
-kind: rbac
-metadata:
- name: rbachandler
- namespace: istio-system
-spec:
- config_store_url: "fs:///tmp/testdata/config"
-
-
-
-
diff --git a/content_zh/about/notes/0.8/index.md b/content_zh/about/notes/0.8/index.md
index 322add9059..f822f5ce90 100644
--- a/content_zh/about/notes/0.8/index.md
+++ b/content_zh/about/notes/0.8/index.md
@@ -32,7 +32,7 @@ icon: notes
## 设置
-- **Istio 的按需安装**：Istio 具有丰富的功能，可能有用户并不需要使用所有功能，可以使用 Helm 或者 `istioctl gen-deploy` 工具，来满足按需安装的需要。例如用户可以只安装 Pilot 来对流量进行管理，而不去触及 Mixer 和 Citadel 方面的功能。[使用 Helm 进行定制](/docs/reference/config/installation-options/)以及 [`istioctl gen-deploy`](/docs/reference/commands/istioctl/#istioctl-gen-deploy) 两篇文档分别对这两种方式进行了解说。
+- **Istio 的按需安装**：Istio 具有丰富的功能，可能有用户并不需要使用所有功能，可以使用 Helm 或者 `istioctl gen-deploy` 工具，来满足按需安装的需要。例如用户可以只安装 Pilot 来对流量进行管理，而不去触及 Mixer 和 Citadel 方面的功能。
## Mixer 适配器
diff --git a/content_zh/about/notes/1.0.1/index.md b/content_zh/about/notes/1.0.1/index.md
index bafa317f71..a2785be299 100644
--- a/content_zh/about/notes/1.0.1/index.md
+++ b/content_zh/about/notes/1.0.1/index.md
@@ -14,7 +14,7 @@ icon: notes
- 添加了同一个主机内对 [合并多个 `VirtualService` 或 `DestinationRule` 定义](/help/ops/traffic-management/deploy-guidelines/#multiple-virtual-services-and-destination-rules-for-the-same-host) 的有限支持。
-- 允许在使用 HTTP 时，连续的出现 Gateway failures [outlier](https://www.envoyproxy.io/docs/envoy/latest/api-v1/cluster_manager/cluster_outlier_detection.html) 。
+- 允许在使用 HTTP 时，连续的出现 Gateway failures [outlier](https://www.envoyproxy.io/docs/envoy/latest/api-v2/api/v2/cluster/outlier_detection.proto) 。
## 环境
diff --git a/content_zh/docs/concepts/traffic-management/index.md b/content_zh/docs/concepts/traffic-management/index.md
index d42e205bf8..44160b962a 100644
--- a/content_zh/docs/concepts/traffic-management/index.md
+++ b/content_zh/docs/concepts/traffic-management/index.md
@@ -35,7 +35,7 @@ Pilot 负责管理通过 Istio 服务网格发布的 Envoy 实例的生命周期
如上图所示，在网格中 Pilot 维护了一个服务的规则表示并独立于底层平台。Pilot中的特定于平台的适配器负责适当地填充这个规范模型。例如，在 Pilot 中的 Kubernetes 适配器实现了必要的控制器，来观察 Kubernetes API 服务器，用于更改 pod 的注册信息、入口资源以及存储流量管理规则的第三方资源。这些数据被转换为规范表示。然后根据规范表示生成特定的 Envoy 的配置。
-Pilot 公开了用于[服务发现](https://www.envoyproxy.io/docs/envoy/latest/api-v1/cluster_manager/sds) 、[负载均衡池](https://www.envoyproxy.io/docs/envoy/latest/configuration/cluster_manager/cds)和[路由表](https://www.envoyproxy.io/docs/envoy/latest/configuration/http_conn_man/rds)的动态更新的 API。
+Pilot 公开了用于服务发现 、负载均衡池和路由表的动态更新的 API。
运维人员可以通过 [Pilot 的 Rules API](/zh/docs/reference/config/istio.networking.v1alpha3/) 指定高级流量管理规则。这些规则被翻译成低级配置，并通过 discovery API 分发到 Envoy 实例。
diff --git a/content_zh/docs/reference/config/istio.networking.v1alpha3/index.md b/content_zh/docs/reference/config/istio.networking.v1alpha3/index.md
index f1f75d141e..d0d3d350e5 100644
--- a/content_zh/docs/reference/config/istio.networking.v1alpha3/index.md
+++ b/content_zh/docs/reference/config/istio.networking.v1alpha3/index.md
@@ -1399,7 +1399,7 @@ spec:
## `TLSSettings`
-SSL/TLS 相关的上游服务设置。参考 Envoy 的 [TLS 上下文](https://www.envoyproxy.io/docs/envoy/latest/api-v1/cluster_manager/cluster_ssl.html#config-cluster-manager-cluster-ssl)来获取更多细节。这些设置对 HTTP 和 TCP 上游服务都有效。
+SSL/TLS 相关的上游服务设置。参考 Envoy 的 [TLS 上下文](https://www.envoyproxy.io/docs/envoy/latest/api-v2/api/v2/auth/cert.proto.html)来获取更多细节。这些设置对 HTTP 和 TCP 上游服务都有效。
例如下面的规则配置，要求客户端使用双向 TLS 连接上游的数据库集群。