diff --git a/_docs/reference/api/istio.mixer.v1.html b/_docs/reference/api/istio.mixer.v1.html
index a06fd45632..1636374e94 100644
--- a/_docs/reference/api/istio.mixer.v1.html
+++ b/_docs/reference/api/istio.mixer.v1.html
@@ -92,7 +92,7 @@ Following places may use this message:
attributes |
-map<string, Attributes.AttributeValue> |
+map<string,Attributes.AttributeValue> |
A map of attribute name to its value.
@@ -196,7 +196,7 @@ Following places may use this message:
|
entries |
-map<string, string> |
+map<string,string> |
Holds a set of name/value pairs.
@@ -250,7 +250,7 @@ per call, where the same UUID is used for retries of the same call.
|
quotas |
-map<string, CheckRequest.QuotaParams> |
+map<string,CheckRequest.QuotaParams> |
The individual quotas to allocate
@@ -314,7 +314,7 @@ per call, where the same UUID is used for retries of the same call.
|
quotas |
-map<string, CheckResponse.QuotaResult> |
+map<string,CheckResponse.QuotaResult> |
The resulting quota, one entry per requested quota.
@@ -457,7 +457,7 @@ configuration.
|
strings |
-map<int32, int32> |
+map<int32,int32> |
Holds attributes of type STRING, DNSNAME, EMAILADDRESS, URI
@@ -465,7 +465,7 @@ configuration.
|
int64s |
-map<int32, int64> |
+map<int32,int64> |
Holds attributes of type INT64
@@ -473,7 +473,7 @@ configuration.
|
doubles |
-map<int32, double> |
+map<int32,double> |
Holds attributes of type DOUBLE
@@ -481,7 +481,7 @@ configuration.
|
bools |
-map<int32, bool> |
+map<int32,bool> |
Holds attributes of type BOOL
@@ -489,7 +489,7 @@ configuration.
|
timestamps |
-map<int32, google.protobuf.Timestamp> |
+map<int32,google.protobuf.Timestamp> |
Holds attributes of type TIMESTAMP
@@ -497,7 +497,7 @@ configuration.
|
durations |
-map<int32, google.protobuf.Duration> |
+map<int32,google.protobuf.Duration> |
Holds attributes of type DURATION
@@ -505,7 +505,7 @@ configuration.
|
bytes |
-map<int32, bytes> |
+map<int32,bytes> |
Holds attributes of type BYTES
@@ -513,7 +513,7 @@ configuration.
|
stringMaps |
-map<int32, StringMap> |
+map<int32,StringMap> |
Holds attributes of type STRING_MAP
@@ -740,7 +740,7 @@ indices (see the Attributes message for an e
|
entries |
-map<int32, int32> |
+map<int32,int32> |
Holds a set of name/value pairs.
diff --git a/_docs/reference/commands/istio_ca.html b/_docs/reference/commands/istio_ca.html
index e6868dde12..4245a7e2fb 100644
--- a/_docs/reference/commands/istio_ca.html
+++ b/_docs/reference/commands/istio_ca.html
@@ -170,9 +170,19 @@ number_of_entries: 3
| comma-separated list of pattern=N settings for file-filtered logging (default ``) |
+--workload-cert-grace-period-ratio <float32> |
+ |
+The workload certificate rotation grace period, as a ratio of the workload certificate TTL. (default `0.5`) |
+
+
+--workload-cert-min-grace-period <duration> |
+ |
+The minimum workload certificate rotation grace period. (default `10m0s`) |
+
+
--workload-cert-ttl <duration> |
|
-The TTL of issued workload certificates (default `1h0m0s`) |
+The TTL of issued workload certificates (default `19h0m0s`) |
diff --git a/_docs/reference/commands/istioctl.html b/_docs/reference/commands/istioctl.html
index d251bd032e..482fdd1d53 100644
--- a/_docs/reference/commands/istioctl.html
+++ b/_docs/reference/commands/istioctl.html
@@ -1046,8 +1046,8 @@ Support for other environments to follow.
Examples
- # Retrieve config for productpage-v1-bb8d5cbc7-k7qbm pod
- istioctl proxy-config productpage-v1-bb8d5cbc7-k7qbm
+# Retrieve config for productpage-v1-bb8d5cbc7-k7qbm pod
+istioctl proxy-config productpage-v1-bb8d5cbc7-k7qbm
istioctl register
Registers a service instance (e.g. VM) joining the mesh
diff --git a/_docs/reference/commands/node_agent.html b/_docs/reference/commands/node_agent.html
index fd52f3b741..76c6ecd37b 100644
--- a/_docs/reference/commands/node_agent.html
+++ b/_docs/reference/commands/node_agent.html
@@ -112,7 +112,7 @@ number_of_entries: 3
--workload-cert-ttl <duration> |
|
-The requested TTL for the workload (default `12h0m0s`) |
+The requested TTL for the workload (default `19h0m0s`) |
diff --git a/_docs/reference/commands/pilot-agent.html b/_docs/reference/commands/pilot-agent.html
index 6ccb90ef7c..3e04853895 100644
--- a/_docs/reference/commands/pilot-agent.html
+++ b/_docs/reference/commands/pilot-agent.html
@@ -101,6 +101,11 @@ number_of_entries: 4
Use bootstrap v2 |
+--concurrency <int> |
+ |
+number of worker threads to run (default `0`) |
+
+
--configPath <string> |
|
Path to the generated configuration file directory (default `/etc/istio/proxy`) |
diff --git a/_docs/reference/commands/sidecar-injector.html b/_docs/reference/commands/sidecar-injector.html
index 669d852b4b..078ce7a076 100644
--- a/_docs/reference/commands/sidecar-injector.html
+++ b/_docs/reference/commands/sidecar-injector.html
@@ -2,7 +2,7 @@
title: sidecar-injector
overview: Kubernetes webhook for automatic Istio sidecar injection
layout: pkg-collateral-docs
-number_of_entries: 3
+number_of_entries: 4
---
Kubernetes webhook for automatic Istio sidecar injection
sidecar-injector [flags]
@@ -15,6 +15,16 @@ number_of_entries: 3
+--healthCheckFile <string> |
+ |
+File that should be periodically updated if health checking is enabled (default ``) |
+
+
+--healthCheckInterval <duration> |
+ |
+Configure how frequently the health check file specified by --healhCheckFile should be updated (default `0s`) |
+
+
--injectConfig <string> |
|
File containing the Istio sidecar injection configuration and template (default `/etc/istio/inject/config`) |
@@ -101,6 +111,124 @@ number_of_entries: 3
+sidecar-injector probe
+Check the liveness or readiness of a locally-running server
+sidecar-injector probe [flags]
+
+
+
+Flags |
+Shorthand |
+Description |
+
+
+
+--healthCheckFile <string> |
+ |
+File that should be periodically updated if health checking is enabled (default ``) |
+
+
+--healthCheckInterval <duration> |
+ |
+Configure how frequently the health check file specified by --healhCheckFile should be updated (default `0s`) |
+
+
+--injectConfig <string> |
+ |
+File containing the Istio sidecar injection configuration and template (default `/etc/istio/inject/config`) |
+
+
+--interval <duration> |
+ |
+Duration used for checking the target file's last modified time. (default `0s`) |
+
+
+--log_as_json |
+ |
+Whether to format output as JSON or in plain console-friendly format |
+
+
+--log_backtrace_at <traceLocation> |
+ |
+when logging hits line file:N, emit a stack trace (default `:0`) |
+
+
+--log_callers |
+ |
+Include caller information, useful for debugging |
+
+
+--log_output_level <string> |
+ |
+The minimum logging level of messages to output, can be one of "debug", "info", "warn", "error", or "none" (default `info`) |
+
+
+--log_rotate <string> |
+ |
+The path for the optional rotating log file (default ``) |
+
+
+--log_rotate_max_age <int> |
+ |
+The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default `30`) |
+
+
+--log_rotate_max_backups <int> |
+ |
+The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default `1000`) |
+
+
+--log_rotate_max_size <int> |
+ |
+The maximum size in megabytes of a log file beyond which the file is rotated (default `104857600`) |
+
+
+--log_stacktrace_level <string> |
+ |
+The minimum logging level at which stack traces are captured, can be one of "debug", "info", "warn", "error", or "none" (default `none`) |
+
+
+--log_target <stringArray> |
+ |
+The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default `[stdout]`) |
+
+
+--meshConfig <string> |
+ |
+File containing the Istio mesh configuration (default `/etc/istio/config/mesh`) |
+
+
+--port <int> |
+ |
+Webhook port (default `443`) |
+
+
+--probe-path <string> |
+ |
+Path of the file for checking the availability. (default ``) |
+
+
+--tlsCertFile <string> |
+ |
+File containing the x509 Certificate for HTTPS. (default `/etc/istio/certs/cert.pem`) |
+
+
+--tlsKeyFile <string> |
+ |
+File containing the x509 private key matching --tlsCertFile. (default `/etc/istio/certs/key.pem`) |
+
+
+--v <Level> |
+-v |
+log level for V logs (default `0`) |
+
+
+--vmodule <moduleSpec> |
+ |
+comma-separated list of pattern=N settings for file-filtered logging (default ``) |
+
+
+
sidecar-injector version
Prints out build version information
sidecar-injector version [flags]
@@ -113,6 +241,16 @@ number_of_entries: 3
+--healthCheckFile <string> |
+ |
+File that should be periodically updated if health checking is enabled (default ``) |
+
+
+--healthCheckInterval <duration> |
+ |
+Configure how frequently the health check file specified by --healhCheckFile should be updated (default `0s`) |
+
+
--injectConfig <string> |
|
File containing the Istio sidecar injection configuration and template (default `/etc/istio/inject/config`) |
diff --git a/_docs/reference/config/adapters/memquota.html b/_docs/reference/config/adapters/memquota.html
index 6aa78d9c14..b4a69f31c9 100644
--- a/_docs/reference/config/adapters/memquota.html
+++ b/_docs/reference/config/adapters/memquota.html
@@ -58,7 +58,7 @@ be lost.
dimensions |
-map<string, string> |
+map<string, string> |
The specific dimensions for which this override applies.
String representation of instance dimensions is used to check against configured dimensions.
diff --git a/_docs/reference/config/adapters/redisquota.html b/_docs/reference/config/adapters/redisquota.html
index 72d3d55e41..e8b274e935 100644
--- a/_docs/reference/config/adapters/redisquota.html
+++ b/_docs/reference/config/adapters/redisquota.html
@@ -15,7 +15,7 @@ rolling window algorithm. And it is using Redis as a shared data storage.
Example configuration:
-redisServerUrl: localhost:6379
+ redisServerUrl: localhost:6379
connectionPoolSize: 10
quotas:
- name: requestCount.quota.istio-system
@@ -30,7 +30,8 @@ quotas:
maxAmount: 12
- dimensions:
destination: reviews
- maxAmount: 5
+ maxAmount: 5
+
@@ -83,7 +84,7 @@ Default is 10 connections per every CPU as reported by runtime.NumCPU.
dimensions |
-map<string, string> |
+map<string, string> |
The specific dimensions for which this override applies.
String representation of instance dimensions is used to check against configured dimensions.
diff --git a/_docs/reference/config/adapters/solarwinds.html b/_docs/reference/config/adapters/solarwinds.html
index 4f3a57bb56..d68af8492a 100644
--- a/_docs/reference/config/adapters/solarwinds.html
+++ b/_docs/reference/config/adapters/solarwinds.html
@@ -118,7 +118,7 @@ of a network failure. Default value is 1 hour.
|
metrics |
-map<string, Params.MetricInfo> |
+map<string, Params.MetricInfo> |
A map of Istio metric name to solarwinds metric info.
@@ -126,7 +126,7 @@ of a network failure. Default value is 1 hour.
|
logs |
-map<string, Params.LogInfo> |
+map<string, Params.LogInfo> |
A map of Istio logentry name to solarwinds log info.
diff --git a/_docs/reference/config/adapters/stackdriver.html b/_docs/reference/config/adapters/stackdriver.html
index dc645088e7..427a1dbd5a 100644
--- a/_docs/reference/config/adapters/stackdriver.html
+++ b/_docs/reference/config/adapters/stackdriver.html
@@ -78,7 +78,7 @@ or ./testdata/my-test-account-creds.json .
|
metricInfo |
-map<string, Params.MetricInfo> |
+map<string, Params.MetricInfo> |
A map of Istio metric name to Stackdriver metric info.
@@ -86,7 +86,7 @@ or ./testdata/my-test-account-creds.json .
|
logInfo |
-map<string, Params.LogInfo> |
+map<string, Params.LogInfo> |
A map of Istio LogEntry name to Stackdriver log info.
diff --git a/_docs/reference/config/adapters/statsd.html b/_docs/reference/config/adapters/statsd.html
index 8ab327a0f9..fc1754acc9 100644
--- a/_docs/reference/config/adapters/statsd.html
+++ b/_docs/reference/config/adapters/statsd.html
@@ -65,7 +65,7 @@ same (private) network 1432 bytes is recommended for better performance.
|
metrics |
-map<string, Params.MetricInfo> |
+map<string, Params.MetricInfo> |
Map of metric name -> info. If a metric’s name is not in the map then the metric will not be exported to statsd.
diff --git a/_docs/reference/config/adapters/stdio.html b/_docs/reference/config/adapters/stdio.html
index d7aae76b30..9fff59a104 100644
--- a/_docs/reference/config/adapters/stdio.html
+++ b/_docs/reference/config/adapters/stdio.html
@@ -36,7 +36,7 @@ STDERR is the default Stream.
|
severityLevels |
-map<string, Params.Level> |
+map<string, Params.Level> |
Maps from severity strings as specified in LogEntry instances to
the set of levels supported by this adapter. This defaults to a map of
diff --git a/_docs/reference/config/istio.mesh.v1alpha1.html b/_docs/reference/config/istio.mesh.v1alpha1.html
index 75ae2c6a7d..f6d80d17f8 100644
--- a/_docs/reference/config/istio.mesh.v1alpha1.html
+++ b/_docs/reference/config/istio.mesh.v1alpha1.html
@@ -60,20 +60,31 @@ Istio service mesh.
|
-
-egressProxyAddress |
+
+mixerCheckServer |
string |
- Address of the egress Envoy service (e.g. istio-egress:80).
+Address of the server that will be used by the proxies for policy
+check calls (e.g. istio-mixer:15004). By using different names for
+mixerCheckServer and mixerReportServer, it is possible to have one set
+of mixer servers handle policy check calls, while another set of mixer
+servers handle telemetry calls.
+
+NOTE: Omitting mixerCheckServer while specifying mixerReportServer is
+equivalent to setting disablePolicyChecks to true.
|
-
-mixerAddress |
+
+mixerReportServer |
string |
- Address of the mixer service (e.g. istio-mixer:15004).
-Empty value disables Mixer checks and telemetry.
+Address of the server that will be used by the proxies as an Istio
+telemetry sink (access logs, API/connection metrics)
+(e.g. istio-mixer:15004). By using different names for
+mixerCheckServer and mixerReportServer, it is possible to have one set
+of mixer servers handle policy check calls, while another set of mixer
+servers handle telemetry calls.
|
@@ -81,8 +92,7 @@ Empty value disables Mixer checks and telemetry.
disablePolicyChecks |
bool |
- Disable policy checks by the mixer service. Metrics will still be
-reported to the mixer for HTTP requests and TCP connections. Default
+ Disable policy checks by the mixer service. Default
is false, i.e. mixer policy check is enabled by default.
|
@@ -197,6 +207,15 @@ It has no effect if the authentication policy is already ‘NONE’.
DO NOT use this setting for services that are managed by Istio (i.e. using Istio sidecar).
Instead, use service-level annotations to overwrite the authentication policy.
+
+
+
+mixerAddress |
+string |
+
+ DEPRECATED. Mixer address. This option will be removed soon. Please
+use mixercheckserver and mixerreportserver.
+
|
diff --git a/_docs/reference/config/istio.mixer.v1.config.client.html b/_docs/reference/config/istio.mixer.v1.config.client.html
index d05d974c54..5cc3f20e37 100644
--- a/_docs/reference/config/istio.mixer.v1.config.client.html
+++ b/_docs/reference/config/istio.mixer.v1.config.client.html
@@ -87,7 +87,7 @@ Cookie: X-API-KEY=abcdef12345
clause |
-map<string, StringMatch> |
+map<string,StringMatch> |
Map of attribute names to StringMatch type.
Each map element specifies one condition to match.
@@ -507,7 +507,7 @@ HTTPAPISpecBinding’s metadata namespace field.
|
serviceConfigs |
-map<string, ServiceConfig> |
+map<string,ServiceConfig> |
Map of control configuration indexed by destination.service. This
is used to support per-service configuration for cases where a
@@ -595,7 +595,7 @@ The FQDN of the service is composed from the name, namespace, and implementation
|
labels |
-map<string, string> |
+map<string,string> |
Optional one or more labels that uniquely identify the service version.
@@ -1270,7 +1270,7 @@ Following places may use this message:
|
attributes |
-map<string, istio.mixer.v1.Attributes.AttributeValue> |
+map<string,istio.mixer.v1.Attributes.AttributeValue> |
A map of attribute name to its value.
diff --git a/_docs/reference/config/istio.mixer.v1.config.html b/_docs/reference/config/istio.mixer.v1.config.html
index 48667a2ccc..3067dae281 100644
--- a/_docs/reference/config/istio.mixer.v1.config.html
+++ b/_docs/reference/config/istio.mixer.v1.config.html
@@ -84,7 +84,7 @@ the proxy (with the canonical name “istio-proxy”) or the name of an
|
attributes |
-map<string, AttributeManifest.AttributeInfo> |
+map<string,AttributeManifest.AttributeInfo> |
The set of attributes this Istio component will be responsible for producing at runtime.
We map from attribute name to the attribute’s specification. The name of an attribute,
@@ -370,7 +370,7 @@ with the proto support for the language.
|
fields |
-map<string, google.protobuf.Value> |
+map<string,google.protobuf.Value> |
Unordered map of dynamically typed values.
diff --git a/_docs/reference/config/istio.rbac.v1alpha1.html b/_docs/reference/config/istio.rbac.v1alpha1.html
index bcefdc887e..83cfbed8bb 100644
--- a/_docs/reference/config/istio.rbac.v1alpha1.html
+++ b/_docs/reference/config/istio.rbac.v1alpha1.html
@@ -319,7 +319,7 @@ the “properties” in the “subject” part of the “aut
|
properties |
-map<string, string> |
+map<string,string> |
Optional. The set of properties that identify the subject.
In the above ServiceRoleBinding example, the second subject has two properties:
diff --git a/_docs/reference/config/istio.routing.v1alpha1.html b/_docs/reference/config/istio.routing.v1alpha1.html
index 1246332b58..e1d4f685cb 100644
--- a/_docs/reference/config/istio.routing.v1alpha1.html
+++ b/_docs/reference/config/istio.routing.v1alpha1.html
@@ -456,7 +456,7 @@ specified, the value is inherited from the parent route rule.
|
labels |
-map<string, string> |
+map<string,string> |
Sometimes required. Service version identifier for the destination service.
(– N.B. The map is used instead of pstruct due to lack of serialization support
@@ -1213,7 +1213,7 @@ The FQDN of the service is composed from the name, namespace, and implementation
|
labels |
-map<string, string> |
+map<string,string> |
Optional one or more labels that uniquely identify the service version.
@@ -1581,7 +1581,7 @@ request header must be specified.
|
properties |
-map<string, istio.mixer.v1.template.Value> |
+map<string, istio.mixer.v1.template.Value> |
Additional data about the action for use in policy.
@@ -99,7 +99,7 @@ the template.
|
properties |
-map<string, istio.mixer.v1.template.Value> |
+map<string, istio.mixer.v1.template.Value> |
Additional attributes about the subject.
diff --git a/_docs/reference/config/template/kubernetes.html b/_docs/reference/config/template/kubernetes.html
index 192ed3e5cf..733102c27d 100644
--- a/_docs/reference/config/template/kubernetes.html
+++ b/_docs/reference/config/template/kubernetes.html
@@ -40,7 +40,7 @@ to assign values to the generated attributes using the $out.<field name
|
sourceLabels |
-map<string, string> |
+map<string, string> |
Refers to source pod labels. attributebindings can refer to this field using $out.sourcelabels
@@ -96,7 +96,7 @@ to assign values to the generated attributes using the $out.<field name
|
destinationLabels |
-map<string, string> |
+map<string, string> |
Refers to destination pod labels. attributebindings can refer to this field using $out.destinationlabels
@@ -152,7 +152,7 @@ to assign values to the generated attributes using the $out.<field name
|
originLabels |
-map<string, string> |
+map<string, string> |
Refers to origin pod labels. attributebindings can refer to this field using $out.originlabels
diff --git a/_docs/reference/config/template/logentry.html b/_docs/reference/config/template/logentry.html
index 8a1c74138f..9c27d985a6 100644
--- a/_docs/reference/config/template/logentry.html
+++ b/_docs/reference/config/template/logentry.html
@@ -50,7 +50,7 @@ spec:
|
variables |
-map<string, istio.mixer.v1.template.Value> |
+map<string, istio.mixer.v1.template.Value> |
Variables that are delivered for each log entry.
@@ -84,7 +84,7 @@ Otherwise these fields will be ignored by the adapter.
|
monitoredResourceDimensions |
-map<string, istio.mixer.v1.template.Value> |
+map<string, istio.mixer.v1.template.Value> |
Optional. A set of expressions that will form the dimensions of the monitored resource this log entry is being
recorded on. If the logging backend supports monitored resources, these fields are used to populate that resource.
diff --git a/_docs/reference/config/template/metric.html b/_docs/reference/config/template/metric.html
index a53d65fc10..ab04ba3217 100644
--- a/_docs/reference/config/template/metric.html
+++ b/_docs/reference/config/template/metric.html
@@ -53,7 +53,7 @@ spec:
|
dimensions |
-map<string, istio.mixer.v1.template.Value> |
+map<string, istio.mixer.v1.template.Value> |
The unique identity of the particular metric to report.
@@ -71,7 +71,7 @@ these fields will be ignored by the adapter.
|
monitoredResourceDimensions |
-map<string, istio.mixer.v1.template.Value> |
+map<string, istio.mixer.v1.template.Value> |
Optional. A set of expressions that will form the dimensions of the monitored resource this metric is being reported on.
If the metric backend supports monitored resources, these fields are used to populate that resource. Otherwise
diff --git a/_docs/reference/config/template/quota.html b/_docs/reference/config/template/quota.html
index e7701bcf1c..326dfc9e82 100644
--- a/_docs/reference/config/template/quota.html
+++ b/_docs/reference/config/template/quota.html
@@ -41,7 +41,7 @@ spec:
|
dimensions |
-map<string, istio.mixer.v1.template.Value> |
+map<string, istio.mixer.v1.template.Value> |
The unique identity of the particular quota to manipulate.
| |