diff --git a/content/en/docs/reference/commands/install-cni/index.html b/content/en/docs/reference/commands/install-cni/index.html index b7c859113e..4ce5834fe5 100644 --- a/content/en/docs/reference/commands/install-cni/index.html +++ b/content/en/docs/reference/commands/install-cni/index.html @@ -1522,6 +1522,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected If enabled, addition runtime asserts will be performed. These checks are both expensive and panic on failure. As a result, this should be used only for testing. +USE_CACERTS_FOR_SELF_SIGNED_CA +Boolean +false +If enabled, istiod will use a secret named cacerts to store its self-signed istio-generated root certificate. + + VALIDATION_WEBHOOK_CONFIG_NAME String istio-istio-system diff --git a/content/en/docs/reference/commands/istioctl/index.html b/content/en/docs/reference/commands/istioctl/index.html index 50bfc4603c..a75531e488 100644 --- a/content/en/docs/reference/commands/istioctl/index.html +++ b/content/en/docs/reference/commands/istioctl/index.html @@ -5424,7 +5424,7 @@ istioctl proxy-config l [<type>/]<name>[.<namespace>] [flags] --level <string> -Comma-separated minimum per-logger level of messages to output, in the form of [<logger>:]<level>,[<logger>:]<level>,... where logger components can be listed by running "istioctl proxy-config log <pod-name[.namespace]>"or referred from https://github.com/envoyproxy/envoy/blob/main/source/common/common/logger.h, and level can be one of [trace, debug, info, warning, error, critical, off] (default ``) +Comma-separated minimum per-logger level of messages to output, in the form of [<logger>:]<level>,[<logger>:]<level>,... or <level> to change all active loggers, where logger components can be listed by running "istioctl proxy-config log <pod-name[.namespace]>"or referred from https://github.com/envoyproxy/envoy/blob/main/source/common/common/logger.h, and level can be one of [trace, debug, info, warning, error, critical, off] (default ``) --namespace <string> @@ -7424,6 +7424,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected If enabled, addition runtime asserts will be performed. These checks are both expensive and panic on failure. As a result, this should be used only for testing. +USE_CACERTS_FOR_SELF_SIGNED_CA +Boolean +false +If enabled, istiod will use a secret named cacerts to store its self-signed istio-generated root certificate. + + VALIDATION_WEBHOOK_CONFIG_NAME String istio-istio-system diff --git a/content/en/docs/reference/commands/operator/index.html b/content/en/docs/reference/commands/operator/index.html index 2f9a33ee64..00570aa407 100644 --- a/content/en/docs/reference/commands/operator/index.html +++ b/content/en/docs/reference/commands/operator/index.html @@ -1143,6 +1143,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected If enabled, addition runtime asserts will be performed. These checks are both expensive and panic on failure. As a result, this should be used only for testing. +USE_CACERTS_FOR_SELF_SIGNED_CA +Boolean +false +If enabled, istiod will use a secret named cacerts to store its self-signed istio-generated root certificate. + + VALIDATION_WEBHOOK_CONFIG_NAME String istio-istio-system diff --git a/content/en/docs/reference/commands/pilot-agent/index.html b/content/en/docs/reference/commands/pilot-agent/index.html index 07cb43cbac..2e649c4b4f 100644 --- a/content/en/docs/reference/commands/pilot-agent/index.html +++ b/content/en/docs/reference/commands/pilot-agent/index.html @@ -2099,6 +2099,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected If enabled, addition runtime asserts will be performed. These checks are both expensive and panic on failure. As a result, this should be used only for testing. +USE_CACERTS_FOR_SELF_SIGNED_CA +Boolean +false +If enabled, istiod will use a secret named cacerts to store its self-signed istio-generated root certificate. + + USE_EXTERNAL_WORKLOAD_SDS Boolean false diff --git a/content/en/docs/reference/commands/pilot-discovery/index.html b/content/en/docs/reference/commands/pilot-discovery/index.html index a08cb5327a..5393e520e6 100644 --- a/content/en/docs/reference/commands/pilot-discovery/index.html +++ b/content/en/docs/reference/commands/pilot-discovery/index.html @@ -1359,6 +1359,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected If enabled, addition runtime asserts will be performed. These checks are both expensive and panic on failure. As a result, this should be used only for testing. +USE_CACERTS_FOR_SELF_SIGNED_CA +Boolean +false +If enabled, istiod will use a secret named cacerts to store its self-signed istio-generated root certificate. + + USE_REMOTE_CERTS Boolean false diff --git a/content/zh/docs/reference/commands/install-cni/index.html b/content/zh/docs/reference/commands/install-cni/index.html index b7c859113e..4ce5834fe5 100644 --- a/content/zh/docs/reference/commands/install-cni/index.html +++ b/content/zh/docs/reference/commands/install-cni/index.html @@ -1522,6 +1522,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected If enabled, addition runtime asserts will be performed. These checks are both expensive and panic on failure. As a result, this should be used only for testing. +USE_CACERTS_FOR_SELF_SIGNED_CA +Boolean +false +If enabled, istiod will use a secret named cacerts to store its self-signed istio-generated root certificate. + + VALIDATION_WEBHOOK_CONFIG_NAME String istio-istio-system diff --git a/content/zh/docs/reference/commands/istioctl/index.html b/content/zh/docs/reference/commands/istioctl/index.html index 50bfc4603c..a75531e488 100644 --- a/content/zh/docs/reference/commands/istioctl/index.html +++ b/content/zh/docs/reference/commands/istioctl/index.html @@ -5424,7 +5424,7 @@ istioctl proxy-config l [<type>/]<name>[.<namespace>] [flags] --level <string> -Comma-separated minimum per-logger level of messages to output, in the form of [<logger>:]<level>,[<logger>:]<level>,... where logger components can be listed by running "istioctl proxy-config log <pod-name[.namespace]>"or referred from https://github.com/envoyproxy/envoy/blob/main/source/common/common/logger.h, and level can be one of [trace, debug, info, warning, error, critical, off] (default ``) +Comma-separated minimum per-logger level of messages to output, in the form of [<logger>:]<level>,[<logger>:]<level>,... or <level> to change all active loggers, where logger components can be listed by running "istioctl proxy-config log <pod-name[.namespace]>"or referred from https://github.com/envoyproxy/envoy/blob/main/source/common/common/logger.h, and level can be one of [trace, debug, info, warning, error, critical, off] (default ``) --namespace <string> @@ -7424,6 +7424,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected If enabled, addition runtime asserts will be performed. These checks are both expensive and panic on failure. As a result, this should be used only for testing. +USE_CACERTS_FOR_SELF_SIGNED_CA +Boolean +false +If enabled, istiod will use a secret named cacerts to store its self-signed istio-generated root certificate. + + VALIDATION_WEBHOOK_CONFIG_NAME String istio-istio-system diff --git a/content/zh/docs/reference/commands/operator/index.html b/content/zh/docs/reference/commands/operator/index.html index 2f9a33ee64..00570aa407 100644 --- a/content/zh/docs/reference/commands/operator/index.html +++ b/content/zh/docs/reference/commands/operator/index.html @@ -1143,6 +1143,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected If enabled, addition runtime asserts will be performed. These checks are both expensive and panic on failure. As a result, this should be used only for testing. +USE_CACERTS_FOR_SELF_SIGNED_CA +Boolean +false +If enabled, istiod will use a secret named cacerts to store its self-signed istio-generated root certificate. + + VALIDATION_WEBHOOK_CONFIG_NAME String istio-istio-system diff --git a/content/zh/docs/reference/commands/pilot-agent/index.html b/content/zh/docs/reference/commands/pilot-agent/index.html index 07cb43cbac..2e649c4b4f 100644 --- a/content/zh/docs/reference/commands/pilot-agent/index.html +++ b/content/zh/docs/reference/commands/pilot-agent/index.html @@ -2099,6 +2099,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected If enabled, addition runtime asserts will be performed. These checks are both expensive and panic on failure. As a result, this should be used only for testing. +USE_CACERTS_FOR_SELF_SIGNED_CA +Boolean +false +If enabled, istiod will use a secret named cacerts to store its self-signed istio-generated root certificate. + + USE_EXTERNAL_WORKLOAD_SDS Boolean false diff --git a/content/zh/docs/reference/commands/pilot-discovery/index.html b/content/zh/docs/reference/commands/pilot-discovery/index.html index a08cb5327a..5393e520e6 100644 --- a/content/zh/docs/reference/commands/pilot-discovery/index.html +++ b/content/zh/docs/reference/commands/pilot-discovery/index.html @@ -1359,6 +1359,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected If enabled, addition runtime asserts will be performed. These checks are both expensive and panic on failure. As a result, this should be used only for testing. +USE_CACERTS_FOR_SELF_SIGNED_CA +Boolean +false +If enabled, istiod will use a secret named cacerts to store its self-signed istio-generated root certificate. + + USE_REMOTE_CERTS Boolean false