From a5ed8a06f5cfa7a1a3ebafbd6ecdcaf4e08919bb Mon Sep 17 00:00:00 2001 From: Martin Taillefer Date: Wed, 29 Aug 2018 09:01:03 -0700 Subject: [PATCH] Update reference docs (#2459) --- .../docs/reference/commands/galley/index.html | 527 ++++++++++-------- .../reference/commands/istio_ca/index.html | 6 +- .../reference/commands/istioctl/index.html | 148 ++--- .../docs/reference/commands/mixs/index.html | 29 +- .../reference/commands/node_agent/index.html | 2 +- .../reference/commands/pilot-agent/index.html | 2 +- .../commands/pilot-discovery/index.html | 14 +- .../commands/sidecar-injector/index.html | 2 +- .../istio.authentication.v1alpha1/index.html | 55 +- .../istio.networking.v1alpha3/index.html | 81 ++- .../config/istio.string.v1alpha1/index.html | 59 -- .../adapters/apigee/index.html | 4 +- .../adapters/cloudmonitor/index.html | 83 +++ .../istio.policy.v1beta1/index.html | 104 +++- .../templates/analytics/index.html | 4 +- .../templates/reportnothing/index.html | 5 +- 16 files changed, 710 insertions(+), 415 deletions(-) delete mode 100644 content/docs/reference/config/istio.string.v1alpha1/index.html create mode 100644 content/docs/reference/config/policy-and-telemetry/adapters/cloudmonitor/index.html diff --git a/content/docs/reference/commands/galley/index.html b/content/docs/reference/commands/galley/index.html index 37cab6b6eb..b9cb0741ff 100644 --- a/content/docs/reference/commands/galley/index.html +++ b/content/docs/reference/commands/galley/index.html @@ -2,128 +2,10 @@ title: galley description: Galley provides configuration management services for Istio. generator: pkg-collateral-docs -number_of_entries: 6 +number_of_entries: 4 ---

Galley provides configuration management services for Istio.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
FlagsDescription
--kubeconfig <string>Use a Kubernetes configuration file instead of in-cluster configuration (default ``)
--log_as_jsonWhether to format output as JSON or in plain console-friendly format
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot] and level can be one of [debug, info, warn, error, none] (default `default:info`)
--log_rotate <string>The path for the optional rotating log file (default ``)
--log_rotate_max_age <int>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default `30`)
--log_rotate_max_backups <int>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default `1000`)
--log_rotate_max_size <int>The maximum size in megabytes of a log file beyond which the file is rotated (default `104857600`)
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot] and level can be one of [debug, info, warn, error, none] (default `default:none`)
--log_target <stringArray>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default `[stdout]`)
--resyncPeriod <duration>Resync period for rescanning Kubernetes resources (default `0s`)
-

galley probe

-

Check the liveness or readiness of a locally-running server

-
galley probe [flags]
-
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
FlagsDescription
--interval <duration>Duration used for checking the target file's last modified time. (default `0s`)
--kubeconfig <string>Use a Kubernetes configuration file instead of in-cluster configuration (default ``)
--log_as_jsonWhether to format output as JSON or in plain console-friendly format
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot] (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot] and level can be one of [debug, info, warn, error, none] (default `default:info`)
--log_rotate <string>The path for the optional rotating log file (default ``)
--log_rotate_max_age <int>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default `30`)
--log_rotate_max_backups <int>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default `1000`)
--log_rotate_max_size <int>The maximum size in megabytes of a log file beyond which the file is rotated (default `104857600`)
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot] and level can be one of [debug, info, warn, error, none] (default `default:none`)
--log_target <stringArray>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default `[stdout]`)
--probe-path <string>Path of the file for checking the availability. (default ``)
--resyncPeriod <duration>Resync period for rescanning Kubernetes resources (default `0s`)
-

galley server

-

Starts Galley as a server

-
galley server [flags]
+
galley [flags]
 

 
@@ -136,16 +18,8 @@ number_of_entries: 6
 
-
-
-
-
-
-
-
-
-
+
@@ -156,102 +30,6 @@ number_of_entries: 6
 
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-

 
The access list yaml file that contains the allowd mTLS peer ids.  (default `/etc/istio/config/accesslist.yaml`)
 

 
--address <string>Address to use for Galley's gRPC API, e.g. tcp://127.0.0.1:9092 or unix:///path/to/file  (default `tcp://0.0.0.0:9901`)

 --caCertFile <string>The location of the certificate file for the root certificate authority  (default `/etc/istio/certs/root-cert.pem`)
--certFile <string>The location of the certificate file for mutual TLS  (default `/etc/istio/certs/cert-chain.pem`)File containing the caBundle that signed the cert/key specified by --tlsCertFile and --tlsKeyFile.  (default `/etc/istio/certs/root-cert.pem`)
 

 

 --ctrlz_address <string>The IP port to use for the ControlZ introspection facility  (default `9876`)
 

 
--insecureUse insecure gRPC communication 
--keyFile <string>The location of the key file for mutual TLS  (default `/etc/istio/certs/key.pem`)
--kubeConfig <string>Path to the Kube config file  (default ``)
--kubeconfig <string>Use a Kubernetes configuration file instead of in-cluster configuration  (default ``)
--livenessProbeInterval <duration>Interval of updating file for the liveness probe.  (default `0s`)
--livenessProbePath <string>Path to the file for the liveness probe.  (default ``)
--log_as_jsonWhether to format output as JSON or in plain console-friendly format 
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot]  (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
--log_rotate <string>The path for the optional rotating log file  (default ``)
--log_rotate_max_age <int>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit)  (default `30`)
--log_rotate_max_backups <int>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit)  (default `1000`)
--log_rotate_max_size <int>The maximum size in megabytes of a log file beyond which the file is rotated  (default `104857600`)
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
--log_target <stringArray>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr  (default `[stdout]`)
--maxConcurrentStreams <uint>Maximum number of outstanding RPCs per connection  (default `1024`)
--maxReceivedMessageSize <uint>Maximum size of individual gRPC messages  (default `1048576`)
--readinessProbeInterval <duration>Interval of updating file for the readiness probe.  (default `0s`)
--readinessProbePath <string>Path to the file for the readiness probe.  (default ``)
--resyncPeriod <duration>Resync period for rescanning Kubernetes resources  (default `0s`)

-
galley validator

-
Runs an https server for Istio configuration validation. Uses k8s validating webhooks to validate Pilot and Mixer configuration.

-
galley validator [flags]
-

-
-
-
-
-
-
-
-
-
-
-
@@ -260,18 +38,30 @@ number_of_entries: 6
 
-
-
+
+
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
@@ -312,14 +102,30 @@ number_of_entries: 6
 
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
@@ -328,7 +134,159 @@ number_of_entries: 6
 
-
+
+
+
+
+
+
+
+
+
FlagsDescription
--caCertFile <string>File containing the caBundle that signed the cert/key specified by --tlsCertFile and --tlsKeyFile.  (default `/etc/istio/certs/root-cert.pem`)

 --deployment-name <string>
 Name of the deployment for the validation pod  (default `istio-galley`)
 
Namespace of the deployment for the validation pod  (default `istio-system`)
 

 
--healthCheckFile <string>File that should be periodically updated if health checking is enabled  (default ``)--enable-serverRun galley server mode 
 

 
--healthCheckInterval <duration>Configure how frequently the health check file specified by --healthCheckFile should be updated  (default `0s`)--enable-validationRun galley validation mode 
--insecureUse insecure gRPC communication 
 

 

 --kubeconfig <string>
 Use a Kubernetes configuration file instead of in-cluster configuration  (default ``)
 

 
--livenessProbeInterval <duration>Interval of updating file for the Galley liveness probe.  (default `2s`)
--livenessProbePath <string>Path to the file for the Galley liveness probe.  (default `/healthLiveness`)

 --log_as_json
 Whether to format output as JSON or in plain console-friendly format 
 
Port to use for the exposing self-monitoring information  (default `9093`)
 

 
--port <uint>HTTPS port of the validation service. Must be 443 if service has more than one port   (default `443`)--readinessProbeInterval <duration>Interval of updating file for the Galley readiness probe.  (default `2s`)
--readinessProbePath <string>Path to the file for the Galley readiness probe.  (default `/healthReadiness`)
 

 

 --resyncPeriod <duration>
 Resync period for rescanning Kubernetes resources  (default `0s`)
 

 
--server-address <string>Address to use for Galley's gRPC API, e.g. tcp://127.0.0.1:9092 or unix:///path/to/file  (default `tcp://0.0.0.0:9901`)
--server-maxConcurrentStreams <uint>Maximum number of outstanding RPCs per connection  (default `1024`)
--server-maxReceivedMessageSize <uint>Maximum size of individual gRPC messages  (default `1048576`)

 --tlsCertFile <string>
 File containing the x509 Certificate for HTTPS.  (default `/etc/istio/certs/cert-chain.pem`)
 
File containing the x509 private key matching --tlsCertFile.  (default `/etc/istio/certs/key.pem`)
 

 
--webhook-config-file <string>--validation-port <uint>HTTPS port of the validation service. Must be 443 if service has more than one port   (default `443`)
--validation-webhook-config-file <string>File that contains k8s validatingwebhookconfiguration yaml. Validation is disabled if file is not specified  (default ``)

+
galley probe

+
Check the liveness or readiness of a locally-running server

+
galley probe [flags]
+

+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
@@ -345,11 +303,66 @@ number_of_entries: 6
 
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
@@ -395,14 +408,64 @@ number_of_entries: 6
 
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
FlagsDescription
--accessListFile <string>The access list yaml file that contains the allowd mTLS peer ids.  (default `/etc/istio/config/accesslist.yaml`)
--caCertFile <string>File containing the caBundle that signed the cert/key specified by --tlsCertFile and --tlsKeyFile.  (default `/etc/istio/certs/root-cert.pem`)
--ctrlz_address <string>The IP Address to listen on for the ControlZ introspection facility. Use '*' to indicate all addresses.  (default `127.0.0.1`)
--ctrlz_port <uint16>The IP port to use for the ControlZ introspection facility  (default `9876`)
--deployment-name <string>Name of the deployment for the validation pod  (default `istio-galley`)
--deployment-namespace <string>Namespace of the deployment for the validation pod  (default `istio-system`)
--enable-serverRun galley server mode 
--enable-validationRun galley validation mode 
--insecureUse insecure gRPC communication 
--interval <duration>Duration used for checking the target file's last modified time.  (default `0s`)
--kubeconfig <string>Use a Kubernetes configuration file instead of in-cluster configuration  (default ``)
--livenessProbeInterval <duration>Interval of updating file for the Galley liveness probe.  (default `2s`)
--livenessProbePath <string>Path to the file for the Galley liveness probe.  (default `/healthLiveness`)
--log_as_jsonWhether to format output as JSON or in plain console-friendly format 
--log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot]  (default ``)
--log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
--log_rotate <string>The path for the optional rotating log file  (default ``)
--log_rotate_max_age <int>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit)  (default `30`)
--log_rotate_max_backups <int>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit)  (default `1000`)
--log_rotate_max_size <int>The maximum size in megabytes of a log file beyond which the file is rotated  (default `104857600`)
--log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [attributes, default, grpcAdapter, kube-source, mcp, mcp-creds, model, runtime, snapshot] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
--log_target <stringArray>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr  (default `[stdout]`)
--monitoringPort <uint>Port to use for the exposing self-monitoring information  (default `9093`)
--probe-path <string>Path of the file for checking the availability.  (default ``)
--readinessProbeInterval <duration>Interval of updating file for the Galley readiness probe.  (default `2s`)
--readinessProbePath <string>Path to the file for the Galley readiness probe.  (default `/healthReadiness`)
--resyncPeriod <duration>Resync period for rescanning Kubernetes resources  (default `0s`)
--server-address <string>Address to use for Galley's gRPC API, e.g. tcp://127.0.0.1:9092 or unix:///path/to/file  (default `tcp://0.0.0.0:9901`)
--server-maxConcurrentStreams <uint>Maximum number of outstanding RPCs per connection  (default `1024`)
--server-maxReceivedMessageSize <uint>Maximum size of individual gRPC messages  (default `1048576`)
--tlsCertFile <string>File containing the x509 Certificate for HTTPS.  (default `/etc/istio/certs/cert-chain.pem`)
--tlsKeyFile <string>File containing the x509 private key matching --tlsCertFile.  (default `/etc/istio/certs/key.pem`)
--validation-port <uint>HTTPS port of the validation service. Must be 443 if service has more than one port   (default `443`)
--validation-webhook-config-file <string>
 File that contains k8s validatingwebhookconfiguration yaml. Validation is disabled if file is not specified  (default ``)
 

 
 
 
--accessListFile <string>The access list yaml file that contains the allowd mTLS peer ids.  (default `/etc/istio/config/accesslist.yaml`)
--caCertFile <string>File containing the caBundle that signed the cert/key specified by --tlsCertFile and --tlsKeyFile.  (default `/etc/istio/certs/root-cert.pem`)
--ctrlz_address <string>The IP Address to listen on for the ControlZ introspection facility. Use '*' to indicate all addresses.  (default `127.0.0.1`)
--ctrlz_port <uint16>The IP port to use for the ControlZ introspection facility  (default `9876`)
--deployment-name <string>Name of the deployment for the validation pod  (default `istio-galley`)
--deployment-namespace <string>Namespace of the deployment for the validation pod  (default `istio-system`)
--enable-serverRun galley server mode 
--enable-validationRun galley validation mode 
--insecureUse insecure gRPC communication 

 --kubeconfig <string>
 
 Use a Kubernetes configuration file instead of in-cluster configuration  (default ``)
 

 
--livenessProbeInterval <duration>Interval of updating file for the Galley liveness probe.  (default `2s`)
--livenessProbePath <string>Path to the file for the Galley liveness probe.  (default `/healthLiveness`)

 --log_as_json
 
 Whether to format output as JSON or in plain console-friendly format The set of paths where to output the log. This can be any path as well as the special values stdout and stderr  (default `[stdout]`)
 

 
--monitoringPort <uint>Port to use for the exposing self-monitoring information  (default `9093`)
--readinessProbeInterval <duration>Interval of updating file for the Galley readiness probe.  (default `2s`)
--readinessProbePath <string>Path to the file for the Galley readiness probe.  (default `/healthReadiness`)

 --resyncPeriod <duration>
 
 Resync period for rescanning Kubernetes resources  (default `0s`)
 

 
--server-address <string>Address to use for Galley's gRPC API, e.g. tcp://127.0.0.1:9092 or unix:///path/to/file  (default `tcp://0.0.0.0:9901`)
--server-maxConcurrentStreams <uint>Maximum number of outstanding RPCs per connection  (default `1024`)
--server-maxReceivedMessageSize <uint>Maximum size of individual gRPC messages  (default `1048576`)

 --short
 -s
 Displays a short form of the version information 
 
--tlsCertFile <string>File containing the x509 Certificate for HTTPS.  (default `/etc/istio/certs/cert-chain.pem`)
--tlsKeyFile <string>File containing the x509 private key matching --tlsCertFile.  (default `/etc/istio/certs/key.pem`)
--validation-port <uint>HTTPS port of the validation service. Must be 443 if service has more than one port   (default `443`)
--validation-webhook-config-file <string>File that contains k8s validatingwebhookconfiguration yaml. Validation is disabled if file is not specified  (default ``)

 
 

diff --git a/content/docs/reference/commands/istio_ca/index.html b/content/docs/reference/commands/istio_ca/index.html
index edcb9c43d0..6a45be05f7 100644
--- a/content/docs/reference/commands/istio_ca/index.html
+++ b/content/docs/reference/commands/istio_ca/index.html
@@ -4,7 +4,7 @@ description: Istio Certificate Authority (CA).
 generator: pkg-collateral-docs
 number_of_entries: 4
 ---
-
Istio Certificate Authority (CA)

+
Istio Certificate Authority (CA).

 
istio_ca [flags]
 

 
@@ -50,10 +50,6 @@ number_of_entries: 4
 
-
-
-
-
diff --git a/content/docs/reference/commands/istioctl/index.html b/content/docs/reference/commands/istioctl/index.html
index 50705b4df9..441c7e663f 100644
--- a/content/docs/reference/commands/istioctl/index.html
+++ b/content/docs/reference/commands/istioctl/index.html
@@ -42,12 +42,12 @@ system.

-
+
-
+
@@ -72,7 +72,7 @@ system.

-
+
@@ -126,12 +126,12 @@ A group of commands used to interact with Istio authentication policies.
 
-
+
-
+
@@ -156,7 +156,7 @@ A group of commands used to interact with Istio authentication policies.
 
-
+
@@ -216,12 +216,12 @@ service registry, and check if TLS settings are compatible between them.
 
-
+
-
+
@@ -246,7 +246,7 @@ service registry, and check if TLS settings are compatible between them.
 
-
+
@@ -313,12 +313,12 @@ istioctl authn tls-check foo.bar.svc.cluster.local
 
-
+
-
+
@@ -343,7 +343,7 @@ istioctl authn tls-check foo.bar.svc.cluster.local
 
-
+
@@ -406,12 +406,12 @@ istioctl context-create --api-server http://127.0.0.1:8080
 
-
+
-
+
@@ -436,7 +436,7 @@ istioctl context-create --api-server http://127.0.0.1:8080
 
-
+
@@ -497,12 +497,12 @@ istioctl context-create --api-server http://127.0.0.1:8080
 
-
+
-
+
@@ -527,7 +527,7 @@ istioctl context-create --api-server http://127.0.0.1:8080
 
-
+
@@ -588,12 +588,12 @@ istioctl delete virtualservice bookinfo
 
-
+
-
+
@@ -618,7 +618,7 @@ istioctl delete virtualservice bookinfo
 
-
+
@@ -669,12 +669,12 @@ istioctl delete virtualservice bookinfo
 
-
+
-
+
@@ -699,7 +699,7 @@ istioctl delete virtualservice bookinfo
 
-
+
@@ -757,12 +757,12 @@ istioctl delete virtualservice bookinfo
 
-
+
-
+
@@ -787,7 +787,7 @@ istioctl delete virtualservice bookinfo
 
-
+
@@ -817,10 +817,10 @@ istioctl delete virtualservice bookinfo
 
istioctl experimental metrics

 Prints the metrics for the specified service(s) when running in Kubernetes.

-
This command finds a Prometheus pod running in the specified istio system
+
This command finds a Prometheus pod running in the specified istio system 
 namespace. It then executes a series of queries per requested workload to
 find the following top-level workload metrics: total requests per second,
-error rate, and request latency at p50, p90, and p99 percentiles. The
+error rate, and request latency at p50, p90, and p99 percentiles. The 
 query results are printed to the console, organized by workload name.
All metrics returned are from server-side reports. This means that latencies
 and error rates are from the perspective of the service itself and not of an
@@ -859,12 +859,12 @@ calculated over a time interval of 1 minute.
 

-
+
-
+
@@ -889,7 +889,7 @@ calculated over a time interval of 1 minute.
 
-
+
@@ -951,12 +951,12 @@ request is allowed or denied under the current Istio RBAC policies.

-
+
-
+
@@ -981,7 +981,7 @@ request is allowed or denied under the current Istio RBAC policies.

-
+
@@ -1054,12 +1054,12 @@ is being taken on. PATH is the HTTP path within the service.

-
+
-
+
@@ -1084,7 +1084,7 @@ is being taken on. PATH is the HTTP path within the service.

-
+
@@ -1179,12 +1179,12 @@ istioctl experimental rbac can -s service=product-page POST rating /data -a vers
 
-
+
-
+
@@ -1209,7 +1209,7 @@ istioctl experimental rbac can -s service=product-page POST rating /data -a vers
 
-
+
@@ -1275,12 +1275,12 @@ istioctl experimental rbac can -s service=product-page POST rating /data -a vers
 
-
+
-
+
@@ -1305,7 +1305,7 @@ istioctl experimental rbac can -s service=product-page POST rating /data -a vers
 
-
+
@@ -1407,12 +1407,12 @@ file/configmap created with a new Istio release.
 
-
+
-
+
@@ -1437,7 +1437,7 @@ file/configmap created with a new Istio release.
 
-
+
@@ -1520,12 +1520,12 @@ istioctl kube-inject -f deployment.yaml -o deployment-injected.yaml --injectConf
 
-
+
-
+
@@ -1550,7 +1550,7 @@ istioctl kube-inject -f deployment.yaml -o deployment-injected.yaml --injectConf
 
-
+
@@ -1612,12 +1612,12 @@ istioctl kube-inject -f deployment.yaml -o deployment-injected.yaml --injectConf
 
-
+
-
+
@@ -1642,7 +1642,7 @@ istioctl kube-inject -f deployment.yaml -o deployment-injected.yaml --injectConf
 
-
+
@@ -1715,12 +1715,12 @@ istioctl kube-inject -f deployment.yaml -o deployment-injected.yaml --injectConf
 
-
+
-
+
@@ -1745,7 +1745,7 @@ istioctl kube-inject -f deployment.yaml -o deployment-injected.yaml --injectConf
 
-
+
@@ -1829,12 +1829,12 @@ istioctl kube-inject -f deployment.yaml -o deployment-injected.yaml --injectConf
 
-
+
-
+
@@ -1859,7 +1859,7 @@ istioctl kube-inject -f deployment.yaml -o deployment-injected.yaml --injectConf
 
-
+
@@ -1938,12 +1938,12 @@ istioctl kube-inject -f deployment.yaml -o deployment-injected.yaml --injectConf
 
-
+
-
+
@@ -1968,7 +1968,7 @@ istioctl kube-inject -f deployment.yaml -o deployment-injected.yaml --injectConf
 
-
+
@@ -2044,12 +2044,12 @@ Retrieves last sent and last acknowledged xDS sync from Pilot to each Envoy in t
 
-
+
-
+
@@ -2074,7 +2074,7 @@ Retrieves last sent and last acknowledged xDS sync from Pilot to each Envoy in t
 
-
+
@@ -2145,12 +2145,12 @@ Retrieves last sent and last acknowledged xDS sync from Pilot to each Envoy in t
 
-
+
-
+
@@ -2175,7 +2175,7 @@ Retrieves last sent and last acknowledged xDS sync from Pilot to each Envoy in t
 
-
+
@@ -2238,12 +2238,12 @@ Retrieves last sent and last acknowledged xDS sync from Pilot to each Envoy in t
 
-
+
-
+
@@ -2268,7 +2268,7 @@ Retrieves last sent and last acknowledged xDS sync from Pilot to each Envoy in t
 
-
+
@@ -2324,12 +2324,12 @@ Retrieves last sent and last acknowledged xDS sync from Pilot to each Envoy in t
 
-
+
-
+
@@ -2354,7 +2354,7 @@ Retrieves last sent and last acknowledged xDS sync from Pilot to each Envoy in t
 
-
+
diff --git a/content/docs/reference/commands/mixs/index.html b/content/docs/reference/commands/mixs/index.html
index 16efe23b86..312432bc48 100644
--- a/content/docs/reference/commands/mixs/index.html
+++ b/content/docs/reference/commands/mixs/index.html
@@ -40,11 +40,11 @@ nexus for policy evaluation and telemetry reporting.

-
+
-
+
@@ -64,7 +64,7 @@ nexus for policy evaluation and telemetry reporting.

-
+
@@ -103,6 +103,16 @@ nexus for policy evaluation and telemetry reporting.

+
+
+
+
+
+
+
+
+
+
@@ -110,7 +120,7 @@ nexus for policy evaluation and telemetry reporting.

-
+
@@ -123,6 +133,11 @@ nexus for policy evaluation and telemetry reporting.

+
+
+
+
+
@@ -140,12 +155,12 @@ nexus for policy evaluation and telemetry reporting.

-
+
-
+
@@ -170,7 +185,7 @@ nexus for policy evaluation and telemetry reporting.

-
+
diff --git a/content/docs/reference/commands/node_agent/index.html b/content/docs/reference/commands/node_agent/index.html
index 12482b45de..9f4e3a214c 100644
--- a/content/docs/reference/commands/node_agent/index.html
+++ b/content/docs/reference/commands/node_agent/index.html
@@ -4,7 +4,7 @@ description: Istio security per-node agent.
 generator: pkg-collateral-docs
 number_of_entries: 3
 ---
-
Istio security per-node agent

+
Istio security per-node agent.
node_agent [flags]
 
The list of hostnames for istio ca server, separated by comma.  (default `istio-ca,istio-citadel`)
 

 
--grpc-hostname <string>DEPRECATED, use --grpc-host-identities.  (default `istio-ca`)

 --grpc-port <int>
 The port number for Citadel GRPC server. If unspecified, Citadel will not serve GRPC requests.  (default `8060`)
 

 

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>
 

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>
 
 

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>
 

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>
 

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>
 

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>
 

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, model, rbac]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, default, mcp, mcp-creds, model, rbac]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, default, mcp, mcp-creds, model, rbac] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>
 

 

 --log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [adapters, api, attributes, default, grpcAdapter, mcp]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds]  (default ``)
 

 

 --log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>
 

 

 --log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>
 Max number of goroutines in the API worker pool  (default `1024`)
 

 
--caCertFile <string>The location of the certificate file for the root certificate authority  (default `/etc/istio/certs/root-cert.pem`)
--certFile <string>The location of the certificate file for mutual TLS  (default `/etc/istio/certs/cert-chain.pem`)

 --configDefaultNamespace <string>
 
 Namespace used to store mesh wide configuration.  (default `istio-system`)
 

 --configStoreURL <string>
 URL of the config store. Use k8s://path_to_kubeconfig or fs:// for file system. If path_to_kubeconfig is empty, in-cluster kubeconfig is used.  (default ``)URL of the config store. Use k8s://path_to_kubeconfig, fs:// for file system, or mcp://<address> for MCP/Galley. If path_to_kubeconfig is empty, in-cluster kubeconfig is used.  (default ``)
 

 

 --ctrlz_address <string>
 The IP port to use for the ControlZ introspection facility  (default `9876`)
 

 
--keyFile <string>The location of the key file for mutual TLS  (default `/etc/istio/certs/key.pem`)

 --livenessProbeInterval <duration>
 
 Interval of updating file for the liveness probe.  (default `0s`)
 

 --log_caller <string>
 Comma-separated list of scopes for which to include caller information, scopes can be any of [adapters, api, attributes, default, grpcAdapter, mcp]  (default ``)Comma-separated list of scopes for which to include caller information, scopes can be any of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds]  (default ``)
 

 

 --log_output_level <string>
 Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp] and level can be one of [debug, info, warn, error, none]  (default `default:info`)Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds] and level can be one of [debug, info, warn, error, none]  (default `default:info`)
 

 

 --log_rotate <string>
 

 --log_stacktrace_level <string>
 Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp] and level can be one of [debug, info, warn, error, none]  (default `default:none`)Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [adapters, api, attributes, default, grpcAdapter, mcp, mcp-creds] and level can be one of [debug, info, warn, error, none]  (default `default:none`)
 

 

 --log_target <stringArray>
 
 

diff --git a/content/docs/reference/commands/pilot-agent/index.html b/content/docs/reference/commands/pilot-agent/index.html
index 249b376f0d..e7013d07de 100644
--- a/content/docs/reference/commands/pilot-agent/index.html
+++ b/content/docs/reference/commands/pilot-agent/index.html
@@ -4,7 +4,7 @@ description: Istio Pilot agent.
 generator: pkg-collateral-docs
 number_of_entries: 5
 ---
-
Istio Pilot agent runs in the side car or gateway container and bootstraps envoy.

+
Istio Pilot agent runs in the sidecar or gateway container and bootstraps Envoy.

 

diff --git a/content/docs/reference/commands/pilot-discovery/index.html b/content/docs/reference/commands/pilot-discovery/index.html
index 1dcf12d7d6..1b3caf2d9b 100644
--- a/content/docs/reference/commands/pilot-discovery/index.html
+++ b/content/docs/reference/commands/pilot-discovery/index.html
@@ -58,7 +58,7 @@ number_of_entries: 5
 

 
 
Flags
 

 
pilot-discovery discovery

-
Start Istio proxy discovery service

+
Start Istio proxy discovery service.

 
pilot-discovery discovery [flags]
 

 
@@ -114,7 +114,7 @@ number_of_entries: 5
 
-
+
@@ -184,6 +184,11 @@ number_of_entries: 5
 
+
+
+
+
+
@@ -223,11 +228,6 @@ number_of_entries: 5
 
-
-
-
-
-
The IP port to use for the ControlZ introspection facility  (default `9876`)
 

 
--discovery_cache--discoveryCache
 
 Enable caching discovery service responses 
 
The set of paths where to output the log. This can be any path as well as the special values stdout and stderr  (default `[stdout]`)
 

 
--mcpServerAddrs <stringSlice>comma separated list of mesh config protocol server addresses  (default `[]`)

 --meshConfig <string>
 
 File name for Istio mesh configuration. If not specified, a default mesh will be used.  (default `/etc/istio/config/mesh`)
 Discovery service grpc address, with https  (default `:15012`)
 
--webhookEndpoint <string>Webhook API endpoint (supports http://sockethost, and unix:///absolute/path/to/socket  (default ``)

 
 

 
pilot-discovery request

diff --git a/content/docs/reference/commands/sidecar-injector/index.html b/content/docs/reference/commands/sidecar-injector/index.html
index 04628018a5..526ebadd36 100644
--- a/content/docs/reference/commands/sidecar-injector/index.html
+++ b/content/docs/reference/commands/sidecar-injector/index.html
@@ -4,7 +4,7 @@ description: Kubernetes webhook for automatic Istio sidecar injection.
 generator: pkg-collateral-docs
 number_of_entries: 4
 ---
-
Kubernetes webhook for automatic Istio sidecar injection

+
Kubernetes webhook for automatic Istio sidecar injection.

 
sidecar-injector [flags]
 

 
diff --git a/content/docs/reference/config/istio.authentication.v1alpha1/index.html b/content/docs/reference/config/istio.authentication.v1alpha1/index.html
index 089d857fba..62d228e5fe 100644
--- a/content/docs/reference/config/istio.authentication.v1alpha1/index.html
+++ b/content/docs/reference/config/istio.authentication.v1alpha1/index.html
@@ -4,7 +4,7 @@ description: Authentication policy for Istio services.
 location: https://istio.io/docs/reference/config/istio.authentication.v1alpha1.html
 layout: protoc-gen-docs
 generator: protoc-gen-docs
-number_of_entries: 10
+number_of_entries: 11
 ---
 
This package defines user-facing authentication policy.

 
@@ -176,7 +176,7 @@ and only if both rules, excludedpaths and includepaths are satisfied.
-
+
-
+
+
+
+

 

 excludedPathsistio.common.v1alpha1.StringMatch[]StringMatch[]
 
 
List of paths to be excluded from the request. The rule is satisfied if
 request path does not match to any of the path in this list.

@@ -185,7 +185,7 @@ request path does not match to any of the path in this list.

 

 

 includedPathsistio.common.v1alpha1.StringMatch[]StringMatch[]
 
 
List of paths that the request must include. If the list is not empty, the
 rule is satisfied if request path matches at least one of the path in the list.
@@ -507,6 +507,55 @@ networking API to avoid dependency.

 		
 
Principal will be set to the identity from origin authentication.

 
+

+
+
StringMatch

+

+
Describes how to match a given string. Match is case-sensitive.

+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/content/docs/reference/config/istio.networking.v1alpha3/index.html b/content/docs/reference/config/istio.networking.v1alpha3/index.html
index 7c0c4e5783..967ac1c6fd 100644
--- a/content/docs/reference/config/istio.networking.v1alpha3/index.html
+++ b/content/docs/reference/config/istio.networking.v1alpha3/index.html
@@ -6,7 +6,7 @@ layout: protoc-gen-docs
 generator: protoc-gen-docs
 aliases:
   - /docs/reference/config/istio.routing.v1alpha1/
-number_of_entries: 49
+number_of_entries: 50
 ---
 
Configuration affecting traffic routing. Here are a few terms useful to define
 in the context of traffic routing.

@@ -1274,8 +1274,8 @@ service, giving the impression that the upstream service is faulty.
HTTPFaultInjection.Abort

 
Abort specification is used to prematurely abort a request with a
-pre-specified error code. The following example will return an HTTP
-400 error code for 10% of the requests to the “ratings” service “v1”.

+pre-specified error code. The following example will return an HTTP 400
+error code for 1 out of every 1000 requests to the “ratings” service “v1”.

 
 
apiVersion: networking.istio.io/v1alpha3
 kind: VirtualService
@@ -1291,14 +1291,15 @@ spec:
         subset: v1
     fault:
       abort:
-        percent: 10
+        percentage:
+          value: 0.001
         httpStatus: 400
 

 
 
The httpStatus field is used to indicate the HTTP status code to
-return to the caller. The optional percent field, a value between 0
-and 100, is used to only abort a certain percentage of requests. If
-not specified, all requests are aborted.

+return to the caller. The optional percentage field can be used to only
+abort a certain percentage of requests. If not specified, all requests are
+aborted.

 
 
FieldTypeDescription
exactstring (oneof)
+
exact string match.

+
+
prefixstring (oneof)
+
prefix-based match.

+
+
suffixstring (oneof)
+
suffix-based match.

+
+
regexstring (oneof)
+
ECMAscript style regex-based match as defined by EDCA-262.
+Example: “^/pets/(.*?)?”

+
 		
 

 
 
 

@@ -1309,11 +1310,13 @@ not specified, all requests are aborted.

-
+
@@ -1323,6 +1326,14 @@ not specified, all requests are aborted.

+
+
+
+
+
@@ -1332,7 +1343,7 @@ not specified, all requests are aborted.

 
Delay specification is used to inject latency into the request
 forwarding path. The following example will introduce a 5 second delay
-in 10% of the requests to the “v1” version of the “reviews”
+in 1 out of every 1000 requests to the “v1” version of the “reviews”
 service from all pods with label env: prod

 
 
apiVersion: networking.istio.io/v1alpha3
@@ -1352,14 +1363,14 @@ spec:
         subset: v1
     fault:
       delay:
-        percent: 10
+        percentage:
+          value: 0.001
         fixedDelay: 5s
 

 
-
The fixedDelay field is used to indicate the amount of delay in
-seconds. An optional percent field, a value between 0 and 100, can
-be used to only delay a certain percentage of requests. If left
-unspecified, all request will be delayed.

+
The fixedDelay field is used to indicate the amount of delay in seconds.
+The optional percentage field can be used to only delay a certain
+percentage of requests. If left unspecified, all request will be delayed.

 
 

 
 
 
 

 percent
 int32
 
-
Percentage of requests to be aborted with the error code provided (0-100).

+
Percentage of requests to be aborted with the error code provided (0-100).
+Use of integer percent value is deprecated. Use the double percentage
+field instead.

 
 		
 

 

 
REQUIRED. HTTP status code to use to abort the Http request.

 
+
percentagePercent
+
Percentage of requests to be aborted with the error code provided.

+
 		
 

 
 

@@ -1370,11 +1381,13 @@ unspecified, all request will be delayed.

-
+
@@ -1385,6 +1398,14 @@ unspecified, all request will be delayed.
REQUIRED. Add a fixed delay before forwarding the request. Format:
 1h/1m/1s/1ms. MUST be >=1ms.

 
+
+
+
+
+
+
@@ -2156,8 +2177,8 @@ spec:
 
@@ -2190,6 +2211,28 @@ servers. format: 1h/1m/1s/1ms. MUST BE >=1ms. Default is 30s.
Maximum % of hosts in the load balancing pool for the upstream
 service that can be ejected. Defaults to 10%.

 
+
+
+
+

 
 
 
 

 percent
 int32
 
-
Percentage of requests on which the delay will be injected (0-100).

+
Percentage of requests on which the delay will be injected (0-100).
+Use of integer percent value is deprecated. Use the double percentage
+field instead.

 
 		
 

 
percentagePercent
+
Percentage of requests on which the delay will be injected.

+
 		
 

 

 
Number of errors before a host is ejected from the connection
 pool. Defaults to 5. When the upstream host is accessed over HTTP, a
-5xx return code qualifies as an error. When the upstream host is
-accessed over an opaque TCP connection, connect timeouts and
+502, 503 or 504 return code qualifies as an error. When the upstream host
+is accessed over an opaque TCP connection, connect timeouts and
 connection error/failure events qualify as an error.

 
 		
 

+

+
Percent

+

+
Percent specifies a percentage in the range of [0.0, 100.0].

+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/content/docs/reference/config/istio.string.v1alpha1/index.html b/content/docs/reference/config/istio.string.v1alpha1/index.html
deleted file mode 100644
index a30172480f..0000000000
--- a/content/docs/reference/config/istio.string.v1alpha1/index.html
+++ /dev/null
@@ -1,59 +0,0 @@
----
-title: String
-description: String protos for Istio API.
-location: https://istio.io/docs/reference/config/istio.string.v1alpha1.html
-layout: protoc-gen-docs
-generator: protoc-gen-docs
-number_of_entries: 1
----
-
This package defines common string protos.

-
-
StringMatch

-

-
Describes how to match a given string. Match is case-sensitive.

-
-
FieldTypeDescription
valuedouble
 
 

 

-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
FieldTypeDescription
exactstring (oneof)
-
exact string match.

-
-
prefixstring (oneof)
-
prefix-based match.

-
-
suffixstring (oneof)
-
suffix-based match.

-
-
regexstring (oneof)
-
ECMAscript style regex-based match as defined by EDCA-262.
-Example: “^/pets/(.*?)?”

-
-

-

diff --git a/content/docs/reference/config/policy-and-telemetry/adapters/apigee/index.html b/content/docs/reference/config/policy-and-telemetry/adapters/apigee/index.html
index 1ec95ed5be..ab071a22d3 100644
--- a/content/docs/reference/config/policy-and-telemetry/adapters/apigee/index.html
+++ b/content/docs/reference/config/policy-and-telemetry/adapters/apigee/index.html
@@ -8,7 +8,9 @@ number_of_entries: 3
 ---
 
The Apigee Mixer adapter provides Apigee’s distributed authentication and quota policy checks
 as well as the ingestion of Istio telemetry for analysis and reporting.
-For additional information or support please contact anchor-prega-support@google.com.

+Complete Apigee documentation on the concepts and usage of this adapter is also available on the
+Apigee Adapter for Istio site.
+For more information and product support, please contact Apigee support.

 
 
This adapter supports the authorization template
 and Apigee’s analytics template.

diff --git a/content/docs/reference/config/policy-and-telemetry/adapters/cloudmonitor/index.html b/content/docs/reference/config/policy-and-telemetry/adapters/cloudmonitor/index.html
new file mode 100644
index 0000000000..85121f7e6d
--- /dev/null
+++ b/content/docs/reference/config/policy-and-telemetry/adapters/cloudmonitor/index.html
@@ -0,0 +1,83 @@
+---
+title: CloudMonitor
+description: Adapter for cloudmonitor metrics.
+location: https://istio.io/docs/reference/config/policy-and-telemetry/adapters/cloudmonitor.html
+layout: protoc-gen-docs
+generator: protoc-gen-docs
+aliases:
+  - /docs/reference/config/adapters/cloudmonitor.html
+number_of_entries: 2
+---
+
The CloudMonitor adapter enables Istio to deliver metrics to
+AliCloud CloudMonitor.

+
+
To push metrics to CloudMonitor using this adapter you must provide AliCloud credentials the AliCloud SDK.
+(see AliCloud official SDK).

+
+
The handler configuration must contain the same metrics as the instance configuration.
+The metrics specified in both instance and handler configurations will be sent to CloudMonitor.

+
+
This adapter supports the metric template.

+
+
Params

+

+
Configuration for the cloudmonitor adapter.

+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
FieldTypeDescription
regiondIdstring
+
The Id of one region where the AliCloud Cloud Monitor service instance is located

+
+
accessKeyIdstring
+
The access key Id of AliCloud access account

+
+
accessKeySecretstring
+
The access key secret of AliCloud access account

+
+
groupIdint64
+
The Id of application group within AliCloud Cloud Monitor service instance

+
+
metricInfomap<string, Params.MetricList>
+
A map of Istio metric name to CloudMonitor metric info.

+
+

+

+
Params.MetricList

+

+
CloudMonitor metric format.
+CloudMonitor Custom Metric Request

+
+

diff --git a/content/docs/reference/config/policy-and-telemetry/istio.policy.v1beta1/index.html b/content/docs/reference/config/policy-and-telemetry/istio.policy.v1beta1/index.html
index 37c2253141..623be9a244 100644
--- a/content/docs/reference/config/policy-and-telemetry/istio.policy.v1beta1/index.html
+++ b/content/docs/reference/config/policy-and-telemetry/istio.policy.v1beta1/index.html
@@ -4,7 +4,7 @@ description: Describes the rules used to configure Mixer's policy and telemetry
 location: https://istio.io/docs/reference/config/policy-and-telemetry/istio.policy.v1beta1.html
 layout: protoc-gen-docs
 generator: protoc-gen-docs
-number_of_entries: 15
+number_of_entries: 17
 ---
 
Describes the rules used to configure Mixer’s policy and telemetry features.

 
@@ -47,6 +47,14 @@ Must match the name of a Handler.

 Referenced instances are evaluated by resolving the attributes/literals for all the fields.
 The constructed objects are then passed to the handler referenced within this action.

 
+
+
+
+name
+string
+
+
Optional. A handle to refer to the results of the action.

+
 
 
 
@@ -559,6 +567,100 @@ name starts with “ratings”
 
 
Optional. The actions that will be executed when match evaluates to true.

 
+
+
+
+requestHeaderOperations
+Rule.HeaderOperationTemplate[]
+
+
Optional. Templatized operations on the request headers using attributes produced by the
+rule actions.

+
+
+
+
+responseHeaderOperations
+Rule.HeaderOperationTemplate[]
+
+
Optional. Templatized operations on the response headers using attributes produced by the
+rule actions.

+
+
+
+
+
+
+
Rule.HeaderOperationTemplate

+

+
A template for an HTTP header manipulation.

+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
FieldTypeDescription
namestring
+
Required. Header name.

+
+
valuesstring[]
+
Optional. Header values to replace or append.

+
+
operationRule.HeaderOperationTemplate.Operation
+
Optional. Header operation type. Default operation is to replace the value of the header by name.

+
+

+

+
Rule.HeaderOperationTemplate.Operation

+

+
Header operation type.

+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/content/docs/reference/config/policy-and-telemetry/templates/analytics/index.html b/content/docs/reference/config/policy-and-telemetry/templates/analytics/index.html
index 176174e457..e609c60c78 100644
--- a/content/docs/reference/config/policy-and-telemetry/templates/analytics/index.html
+++ b/content/docs/reference/config/policy-and-telemetry/templates/analytics/index.html
@@ -7,7 +7,9 @@ generator: protoc-gen-docs
 number_of_entries: 1
 ---
 
The analytics template represents a single request reported to Apigee’s analytics processing system.
-For additional information or support please contact anchor-prega-support@google.com.

+Complete Apigee documentation on the concepts and usage of this adapter is also available on the
+Apigee Adapter for Istio site.
+For more information and product support, please contact Apigee support.
Example config:

 
diff --git a/content/docs/reference/config/policy-and-telemetry/templates/reportnothing/index.html b/content/docs/reference/config/policy-and-telemetry/templates/reportnothing/index.html
index 958ffd1e3a..30530317f1 100644
--- a/content/docs/reference/config/policy-and-telemetry/templates/reportnothing/index.html
+++ b/content/docs/reference/config/policy-and-telemetry/templates/reportnothing/index.html
@@ -13,14 +13,13 @@ in different testing scenarios.
Example config:

 
-
yaml
-apiVersion: "config.istio.io/v1alpha2"
+
apiVersion: "config.istio.io/v1alpha2"
 kind: reportnothing
 metadata:
   name: reportrequest
   namespace: istio-system
 spec:
-

+
Template


NameDescription
REPLACE
+
replaces the header with the given name

+
+
REMOVE
+
removes the header with the given name (the value is ignored)

+
+
APPEND
+
appends the values to the existing values (preserving existing values)

+