diff --git a/_docs/reference/api/istio.mixer.v1.html b/_docs/reference/api/istio.mixer.v1.html index a06fd45632..1636374e94 100644 --- a/_docs/reference/api/istio.mixer.v1.html +++ b/_docs/reference/api/istio.mixer.v1.html @@ -92,7 +92,7 @@ Following places may use this message: attributes -map<string, Attributes.AttributeValue> +map<string,Attributes.AttributeValue>

A map of attribute name to its value.

@@ -196,7 +196,7 @@ Following places may use this message: entries -map<string, string> +map<string,string>

Holds a set of name/value pairs.

@@ -250,7 +250,7 @@ per call, where the same UUID is used for retries of the same call.

quotas -map<string, CheckRequest.QuotaParams> +map<string,CheckRequest.QuotaParams>

The individual quotas to allocate

@@ -314,7 +314,7 @@ per call, where the same UUID is used for retries of the same call.

quotas -map<string, CheckResponse.QuotaResult> +map<string,CheckResponse.QuotaResult>

The resulting quota, one entry per requested quota.

@@ -457,7 +457,7 @@ configuration.

strings -map<int32, int32> +map<int32,int32>

Holds attributes of type STRING, DNSNAME, EMAILADDRESS, URI

@@ -465,7 +465,7 @@ configuration.

int64s -map<int32, int64> +map<int32,int64>

Holds attributes of type INT64

@@ -473,7 +473,7 @@ configuration.

doubles -map<int32, double> +map<int32,double>

Holds attributes of type DOUBLE

@@ -481,7 +481,7 @@ configuration.

bools -map<int32, bool> +map<int32,bool>

Holds attributes of type BOOL

@@ -489,7 +489,7 @@ configuration.

timestamps -map<int32, google.protobuf.Timestamp> +map<int32,google.protobuf.Timestamp>

Holds attributes of type TIMESTAMP

@@ -497,7 +497,7 @@ configuration.

durations -map<int32, google.protobuf.Duration> +map<int32,google.protobuf.Duration>

Holds attributes of type DURATION

@@ -505,7 +505,7 @@ configuration.

bytes -map<int32, bytes> +map<int32,bytes>

Holds attributes of type BYTES

@@ -513,7 +513,7 @@ configuration.

stringMaps -map<int32, StringMap> +map<int32,StringMap>

Holds attributes of type STRING_MAP

@@ -740,7 +740,7 @@ indices (see the Attributes message for an e entries -map<int32, int32> +map<int32,int32>

Holds a set of name/value pairs.

diff --git a/_docs/reference/commands/istio_ca.html b/_docs/reference/commands/istio_ca.html index e6868dde12..4245a7e2fb 100644 --- a/_docs/reference/commands/istio_ca.html +++ b/_docs/reference/commands/istio_ca.html @@ -170,9 +170,19 @@ number_of_entries: 3 comma-separated list of pattern=N settings for file-filtered logging (default ``) +--workload-cert-grace-period-ratio <float32> + +The workload certificate rotation grace period, as a ratio of the workload certificate TTL. (default `0.5`) + + +--workload-cert-min-grace-period <duration> + +The minimum workload certificate rotation grace period. (default `10m0s`) + + --workload-cert-ttl <duration> -The TTL of issued workload certificates (default `1h0m0s`) +The TTL of issued workload certificates (default `19h0m0s`) diff --git a/_docs/reference/commands/istioctl.html b/_docs/reference/commands/istioctl.html index d251bd032e..482fdd1d53 100644 --- a/_docs/reference/commands/istioctl.html +++ b/_docs/reference/commands/istioctl.html @@ -1046,8 +1046,8 @@ Support for other environments to follow.

Examples

-
  # Retrieve config for productpage-v1-bb8d5cbc7-k7qbm pod
-  istioctl proxy-config productpage-v1-bb8d5cbc7-k7qbm
+
# Retrieve config for productpage-v1-bb8d5cbc7-k7qbm pod
+istioctl proxy-config productpage-v1-bb8d5cbc7-k7qbm
 

istioctl register

Registers a service instance (e.g. VM) joining the mesh

diff --git a/_docs/reference/commands/node_agent.html b/_docs/reference/commands/node_agent.html index fd52f3b741..76c6ecd37b 100644 --- a/_docs/reference/commands/node_agent.html +++ b/_docs/reference/commands/node_agent.html @@ -112,7 +112,7 @@ number_of_entries: 3 --workload-cert-ttl <duration> -The requested TTL for the workload (default `12h0m0s`) +The requested TTL for the workload (default `19h0m0s`) diff --git a/_docs/reference/commands/pilot-agent.html b/_docs/reference/commands/pilot-agent.html index 6ccb90ef7c..3e04853895 100644 --- a/_docs/reference/commands/pilot-agent.html +++ b/_docs/reference/commands/pilot-agent.html @@ -101,6 +101,11 @@ number_of_entries: 4 Use bootstrap v2 +--concurrency <int> + +number of worker threads to run (default `0`) + + --configPath <string> Path to the generated configuration file directory (default `/etc/istio/proxy`) diff --git a/_docs/reference/commands/sidecar-injector.html b/_docs/reference/commands/sidecar-injector.html index 669d852b4b..078ce7a076 100644 --- a/_docs/reference/commands/sidecar-injector.html +++ b/_docs/reference/commands/sidecar-injector.html @@ -2,7 +2,7 @@ title: sidecar-injector overview: Kubernetes webhook for automatic Istio sidecar injection layout: pkg-collateral-docs -number_of_entries: 3 +number_of_entries: 4 ---

Kubernetes webhook for automatic Istio sidecar injection

sidecar-injector [flags]
@@ -15,6 +15,16 @@ number_of_entries: 3
 
 
 
+--healthCheckFile <string>
+
+File that should be periodically updated if health checking is enabled  (default ``)
+
+
+--healthCheckInterval <duration>
+
+Configure how frequently the health check file specified by --healhCheckFile should be updated  (default `0s`)
+
+
 --injectConfig <string>
 
 File containing the Istio sidecar injection configuration and template  (default `/etc/istio/inject/config`)
@@ -101,6 +111,124 @@ number_of_entries: 3
 
 
 
+

sidecar-injector probe

+

Check the liveness or readiness of a locally-running server

+
sidecar-injector probe [flags]
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
FlagsShorthandDescription
--healthCheckFile <string>File that should be periodically updated if health checking is enabled (default ``)
--healthCheckInterval <duration>Configure how frequently the health check file specified by --healhCheckFile should be updated (default `0s`)
--injectConfig <string>File containing the Istio sidecar injection configuration and template (default `/etc/istio/inject/config`)
--interval <duration>Duration used for checking the target file's last modified time. (default `0s`)
--log_as_jsonWhether to format output as JSON or in plain console-friendly format
--log_backtrace_at <traceLocation>when logging hits line file:N, emit a stack trace (default `:0`)
--log_callersInclude caller information, useful for debugging
--log_output_level <string>The minimum logging level of messages to output, can be one of "debug", "info", "warn", "error", or "none" (default `info`)
--log_rotate <string>The path for the optional rotating log file (default ``)
--log_rotate_max_age <int>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default `30`)
--log_rotate_max_backups <int>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default `1000`)
--log_rotate_max_size <int>The maximum size in megabytes of a log file beyond which the file is rotated (default `104857600`)
--log_stacktrace_level <string>The minimum logging level at which stack traces are captured, can be one of "debug", "info", "warn", "error", or "none" (default `none`)
--log_target <stringArray>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default `[stdout]`)
--meshConfig <string>File containing the Istio mesh configuration (default `/etc/istio/config/mesh`)
--port <int>Webhook port (default `443`)
--probe-path <string>Path of the file for checking the availability. (default ``)
--tlsCertFile <string>File containing the x509 Certificate for HTTPS. (default `/etc/istio/certs/cert.pem`)
--tlsKeyFile <string>File containing the x509 private key matching --tlsCertFile. (default `/etc/istio/certs/key.pem`)
--v <Level>-vlog level for V logs (default `0`)
--vmodule <moduleSpec>comma-separated list of pattern=N settings for file-filtered logging (default ``)

sidecar-injector version

Prints out build version information

sidecar-injector version [flags]
@@ -113,6 +241,16 @@ number_of_entries: 3
 
 
 
+--healthCheckFile <string>
+
+File that should be periodically updated if health checking is enabled  (default ``)
+
+
+--healthCheckInterval <duration>
+
+Configure how frequently the health check file specified by --healhCheckFile should be updated  (default `0s`)
+
+
 --injectConfig <string>
 
 File containing the Istio sidecar injection configuration and template  (default `/etc/istio/inject/config`)
diff --git a/_docs/reference/config/adapters/memquota.html b/_docs/reference/config/adapters/memquota.html
index 6aa78d9c14..b4a69f31c9 100644
--- a/_docs/reference/config/adapters/memquota.html
+++ b/_docs/reference/config/adapters/memquota.html
@@ -58,7 +58,7 @@ be lost.

dimensions -map<string, string> +map<string, string>

The specific dimensions for which this override applies. String representation of instance dimensions is used to check against configured dimensions.

diff --git a/_docs/reference/config/adapters/redisquota.html b/_docs/reference/config/adapters/redisquota.html index 72d3d55e41..e8b274e935 100644 --- a/_docs/reference/config/adapters/redisquota.html +++ b/_docs/reference/config/adapters/redisquota.html @@ -15,7 +15,7 @@ rolling window algorithm. And it is using Redis as a shared data storage.

Example configuration:

-

redisServerUrl: localhost:6379 +

redisServerUrl: localhost:6379
 connectionPoolSize: 10
 quotas:
   - name: requestCount.quota.istio-system
@@ -30,7 +30,8 @@ quotas:
         maxAmount: 12
       - dimensions:
           destination: reviews
-        maxAmount: 5

+ maxAmount: 5 +
@@ -83,7 +84,7 @@ Default is 10 connections per every CPU as reported by runtime.NumCPU.

- + - + - + - + - + - + - + - - + + - - + + @@ -81,8 +92,7 @@ Empty value disables Mixer checks and telemetry.

@@ -197,6 +207,15 @@ It has no effect if the authentication policy is already ‘NONE’. DO NOT use this setting for services that are managed by Istio (i.e. using Istio sidecar). Instead, use service-level annotations to overwrite the authentication policy.

+ + + + + + diff --git a/_docs/reference/config/istio.mixer.v1.config.client.html b/_docs/reference/config/istio.mixer.v1.config.client.html index d05d974c54..5cc3f20e37 100644 --- a/_docs/reference/config/istio.mixer.v1.config.client.html +++ b/_docs/reference/config/istio.mixer.v1.config.client.html @@ -87,7 +87,7 @@ Cookie: X-API-KEY=abcdef12345 - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - + - +
dimensionsmap<string, string>map<string, string>

The specific dimensions for which this override applies. String representation of instance dimensions is used to check against configured dimensions. diff --git a/_docs/reference/config/adapters/solarwinds.html b/_docs/reference/config/adapters/solarwinds.html index 4f3a57bb56..d68af8492a 100644 --- a/_docs/reference/config/adapters/solarwinds.html +++ b/_docs/reference/config/adapters/solarwinds.html @@ -118,7 +118,7 @@ of a network failure. Default value is 1 hour.

metricsmap<string, Params.MetricInfo>map<string, Params.MetricInfo>

A map of Istio metric name to solarwinds metric info.

@@ -126,7 +126,7 @@ of a network failure. Default value is 1 hour.

logsmap<string, Params.LogInfo>map<string, Params.LogInfo>

A map of Istio logentry name to solarwinds log info.

diff --git a/_docs/reference/config/adapters/stackdriver.html b/_docs/reference/config/adapters/stackdriver.html index dc645088e7..427a1dbd5a 100644 --- a/_docs/reference/config/adapters/stackdriver.html +++ b/_docs/reference/config/adapters/stackdriver.html @@ -78,7 +78,7 @@ or ./testdata/my-test-account-creds.json.

metricInfomap<string, Params.MetricInfo>map<string, Params.MetricInfo>

A map of Istio metric name to Stackdriver metric info.

@@ -86,7 +86,7 @@ or ./testdata/my-test-account-creds.json.

logInfomap<string, Params.LogInfo>map<string, Params.LogInfo>

A map of Istio LogEntry name to Stackdriver log info.

diff --git a/_docs/reference/config/adapters/statsd.html b/_docs/reference/config/adapters/statsd.html index 8ab327a0f9..fc1754acc9 100644 --- a/_docs/reference/config/adapters/statsd.html +++ b/_docs/reference/config/adapters/statsd.html @@ -65,7 +65,7 @@ same (private) network 1432 bytes is recommended for better performance.

metricsmap<string, Params.MetricInfo>map<string, Params.MetricInfo>

Map of metric name -> info. If a metric’s name is not in the map then the metric will not be exported to statsd.

diff --git a/_docs/reference/config/adapters/stdio.html b/_docs/reference/config/adapters/stdio.html index d7aae76b30..9fff59a104 100644 --- a/_docs/reference/config/adapters/stdio.html +++ b/_docs/reference/config/adapters/stdio.html @@ -36,7 +36,7 @@ STDERR is the default Stream.

severityLevelsmap<string, Params.Level>map<string, Params.Level>

Maps from severity strings as specified in LogEntry instances to the set of levels supported by this adapter. This defaults to a map of

diff --git a/_docs/reference/config/istio.mesh.v1alpha1.html b/_docs/reference/config/istio.mesh.v1alpha1.html index 75ae2c6a7d..f6d80d17f8 100644 --- a/_docs/reference/config/istio.mesh.v1alpha1.html +++ b/_docs/reference/config/istio.mesh.v1alpha1.html @@ -60,20 +60,31 @@ Istio service mesh.

egressProxyAddress
mixerCheckServer string -

Address of the egress Envoy service (e.g. istio-egress:80).

+

Address of the server that will be used by the proxies for policy +check calls (e.g. istio-mixer:15004). By using different names for +mixerCheckServer and mixerReportServer, it is possible to have one set +of mixer servers handle policy check calls, while another set of mixer +servers handle telemetry calls.

+ +

NOTE: Omitting mixerCheckServer while specifying mixerReportServer is +equivalent to setting disablePolicyChecks to true.

mixerAddress
mixerReportServer string -

Address of the mixer service (e.g. istio-mixer:15004). -Empty value disables Mixer checks and telemetry.

+

Address of the server that will be used by the proxies as an Istio +telemetry sink (access logs, API/connection metrics) +(e.g. istio-mixer:15004). By using different names for +mixerCheckServer and mixerReportServer, it is possible to have one set +of mixer servers handle policy check calls, while another set of mixer +servers handle telemetry calls.

disablePolicyChecks bool -

Disable policy checks by the mixer service. Metrics will still be -reported to the mixer for HTTP requests and TCP connections. Default +

Disable policy checks by the mixer service. Default is false, i.e. mixer policy check is enabled by default.

mixerAddressstring +

DEPRECATED. Mixer address. This option will be removed soon. Please +use mixercheckserver and mixerreportserver.

+
clausemap<string, StringMatch>map<string,StringMatch>

Map of attribute names to StringMatch type. Each map element specifies one condition to match.

@@ -507,7 +507,7 @@ HTTPAPISpecBinding’s metadata namespace field.

serviceConfigsmap<string, ServiceConfig>map<string,ServiceConfig>

Map of control configuration indexed by destination.service. This is used to support per-service configuration for cases where a @@ -595,7 +595,7 @@ The FQDN of the service is composed from the name, namespace, and implementation

labelsmap<string, string>map<string,string>

Optional one or more labels that uniquely identify the service version.

@@ -1270,7 +1270,7 @@ Following places may use this message:
attributesmap<string, istio.mixer.v1.Attributes.AttributeValue>map<string,istio.mixer.v1.Attributes.AttributeValue>

A map of attribute name to its value.

diff --git a/_docs/reference/config/istio.mixer.v1.config.html b/_docs/reference/config/istio.mixer.v1.config.html index 48667a2ccc..3067dae281 100644 --- a/_docs/reference/config/istio.mixer.v1.config.html +++ b/_docs/reference/config/istio.mixer.v1.config.html @@ -84,7 +84,7 @@ the proxy (with the canonical name “istio-proxy”) or the name of an
attributesmap<string, AttributeManifest.AttributeInfo>map<string,AttributeManifest.AttributeInfo>

The set of attributes this Istio component will be responsible for producing at runtime. We map from attribute name to the attribute’s specification. The name of an attribute, @@ -370,7 +370,7 @@ with the proto support for the language.

fieldsmap<string, google.protobuf.Value>map<string,google.protobuf.Value>

Unordered map of dynamically typed values.

diff --git a/_docs/reference/config/istio.rbac.v1alpha1.html b/_docs/reference/config/istio.rbac.v1alpha1.html index bcefdc887e..83cfbed8bb 100644 --- a/_docs/reference/config/istio.rbac.v1alpha1.html +++ b/_docs/reference/config/istio.rbac.v1alpha1.html @@ -319,7 +319,7 @@ the “properties” in the “subject” part of the “aut
propertiesmap<string, string>map<string,string>

Optional. The set of properties that identify the subject. In the above ServiceRoleBinding example, the second subject has two properties: diff --git a/_docs/reference/config/istio.routing.v1alpha1.html b/_docs/reference/config/istio.routing.v1alpha1.html index 1246332b58..e1d4f685cb 100644 --- a/_docs/reference/config/istio.routing.v1alpha1.html +++ b/_docs/reference/config/istio.routing.v1alpha1.html @@ -456,7 +456,7 @@ specified, the value is inherited from the parent route rule.

labelsmap<string, string>map<string,string>

Sometimes required. Service version identifier for the destination service. (– N.B. The map is used instead of pstruct due to lack of serialization support @@ -1213,7 +1213,7 @@ The FQDN of the service is composed from the name, namespace, and implementation

labelsmap<string, string>map<string,string>

Optional one or more labels that uniquely identify the service version.

@@ -1581,7 +1581,7 @@ request header must be specified.

headersmap<string, StringMatch>map<string,StringMatch>

Set of HTTP match conditions based on HTTP/1.1, HTTP/2, GRPC request metadata, such as uri, scheme, authority. The header keys must be @@ -1780,7 +1780,7 @@ further details about cross origin resource sharing.

appendHeadersmap<string, string>map<string,string>

Additional HTTP headers to add before forwarding a request to the destnation service.

diff --git a/_docs/reference/config/template/authorization.html b/_docs/reference/config/template/authorization.html index b56d9731a2..32a8110c1c 100644 --- a/_docs/reference/config/template/authorization.html +++ b/_docs/reference/config/template/authorization.html @@ -55,7 +55,7 @@ enforcement within Istio. It is primarily concerned with enabling Mixer

propertiesmap<string, istio.mixer.v1.template.Value>map<string, istio.mixer.v1.template.Value>

Additional data about the action for use in policy.

@@ -99,7 +99,7 @@ the template.

propertiesmap<string, istio.mixer.v1.template.Value>map<string, istio.mixer.v1.template.Value>

Additional attributes about the subject.

diff --git a/_docs/reference/config/template/kubernetes.html b/_docs/reference/config/template/kubernetes.html index 192ed3e5cf..733102c27d 100644 --- a/_docs/reference/config/template/kubernetes.html +++ b/_docs/reference/config/template/kubernetes.html @@ -40,7 +40,7 @@ to assign values to the generated attributes using the $out.<field name
sourceLabelsmap<string, string>map<string, string>

Refers to source pod labels. attributebindings can refer to this field using $out.sourcelabels

@@ -96,7 +96,7 @@ to assign values to the generated attributes using the $out.<field name
destinationLabelsmap<string, string>map<string, string>

Refers to destination pod labels. attributebindings can refer to this field using $out.destinationlabels

@@ -152,7 +152,7 @@ to assign values to the generated attributes using the $out.<field name
originLabelsmap<string, string>map<string, string>

Refers to origin pod labels. attributebindings can refer to this field using $out.originlabels

diff --git a/_docs/reference/config/template/logentry.html b/_docs/reference/config/template/logentry.html index 8a1c74138f..9c27d985a6 100644 --- a/_docs/reference/config/template/logentry.html +++ b/_docs/reference/config/template/logentry.html @@ -50,7 +50,7 @@ spec:
variablesmap<string, istio.mixer.v1.template.Value>map<string, istio.mixer.v1.template.Value>

Variables that are delivered for each log entry.

@@ -84,7 +84,7 @@ Otherwise these fields will be ignored by the adapter.

monitoredResourceDimensionsmap<string, istio.mixer.v1.template.Value>map<string, istio.mixer.v1.template.Value>

Optional. A set of expressions that will form the dimensions of the monitored resource this log entry is being recorded on. If the logging backend supports monitored resources, these fields are used to populate that resource. diff --git a/_docs/reference/config/template/metric.html b/_docs/reference/config/template/metric.html index a53d65fc10..ab04ba3217 100644 --- a/_docs/reference/config/template/metric.html +++ b/_docs/reference/config/template/metric.html @@ -53,7 +53,7 @@ spec:

dimensionsmap<string, istio.mixer.v1.template.Value>map<string, istio.mixer.v1.template.Value>

The unique identity of the particular metric to report.

@@ -71,7 +71,7 @@ these fields will be ignored by the adapter.

monitoredResourceDimensionsmap<string, istio.mixer.v1.template.Value>map<string, istio.mixer.v1.template.Value>

Optional. A set of expressions that will form the dimensions of the monitored resource this metric is being reported on. If the metric backend supports monitored resources, these fields are used to populate that resource. Otherwise diff --git a/_docs/reference/config/template/quota.html b/_docs/reference/config/template/quota.html index e7701bcf1c..326dfc9e82 100644 --- a/_docs/reference/config/template/quota.html +++ b/_docs/reference/config/template/quota.html @@ -41,7 +41,7 @@ spec:

dimensionsmap<string, istio.mixer.v1.template.Value>map<string, istio.mixer.v1.template.Value>

The unique identity of the particular quota to manipulate.