mirror of https://github.com/istio/istio.io.git
Automator: update istio.io@ reference docs (#10931)
This commit is contained in:
Istio Automation
GitHub
parent
1399f22067
commit
e18e7a28f4
|
|
@ -966,12 +966,6 @@ These environment variables affect the behavior of the <code>install-cni</code>
|
|||
<td>Determines whether or not trace spans generated by Envoy will include Istio-specific tags.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_K8S_SELECT_WORKLOAD_ENTRIES</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>true</code></td>
|
||||
<td>If enabled, Kubernetes services with selectors will select workload entries with matching labels. It is safe to disable it if you are quite sure you don't need this feature</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_LEGACY_AUTO_PASSTHROUGH</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>false</code></td>
|
||||
|
|
@ -1038,12 +1032,6 @@ These environment variables affect the behavior of the <code>install-cni</code>
|
|||
<td>If true, Pilot will merge virtual hosts with the same routes into a single virtual host, as an optimization.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_SERVICEENTRY_SELECT_PODS</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>true</code></td>
|
||||
<td>If enabled, service entries with selectors will select pods from the cluster. It is safe to disable it if you are quite sure you don't need this feature</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_STATUS</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>false</code></td>
|
||||
|
|
|
|||
|
|
@ -7351,12 +7351,6 @@ These environment variables affect the behavior of the <code>istioctl</code> com
|
|||
<td>Determines whether or not trace spans generated by Envoy will include Istio-specific tags.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_K8S_SELECT_WORKLOAD_ENTRIES</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>true</code></td>
|
||||
<td>If enabled, Kubernetes services with selectors will select workload entries with matching labels. It is safe to disable it if you are quite sure you don't need this feature</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_LEGACY_AUTO_PASSTHROUGH</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>false</code></td>
|
||||
|
|
@ -7423,12 +7417,6 @@ These environment variables affect the behavior of the <code>istioctl</code> com
|
|||
<td>If true, Pilot will merge virtual hosts with the same routes into a single virtual host, as an optimization.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_SERVICEENTRY_SELECT_PODS</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>true</code></td>
|
||||
<td>If enabled, service entries with selectors will select pods from the cluster. It is safe to disable it if you are quite sure you don't need this feature</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_STATUS</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>false</code></td>
|
||||
|
|
|
|||
|
|
@ -600,12 +600,6 @@ These environment variables affect the behavior of the <code>operator</code> com
|
|||
<td>Determines whether or not trace spans generated by Envoy will include Istio-specific tags.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_K8S_SELECT_WORKLOAD_ENTRIES</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>true</code></td>
|
||||
<td>If enabled, Kubernetes services with selectors will select workload entries with matching labels. It is safe to disable it if you are quite sure you don't need this feature</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_LEGACY_AUTO_PASSTHROUGH</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>false</code></td>
|
||||
|
|
@ -672,12 +666,6 @@ These environment variables affect the behavior of the <code>operator</code> com
|
|||
<td>If true, Pilot will merge virtual hosts with the same routes into a single virtual host, as an optimization.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_SERVICEENTRY_SELECT_PODS</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>true</code></td>
|
||||
<td>If enabled, service entries with selectors will select pods from the cluster. It is safe to disable it if you are quite sure you don't need this feature</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_STATUS</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>false</code></td>
|
||||
|
|
|
|||
|
|
@ -1486,12 +1486,6 @@ These environment variables affect the behavior of the <code>pilot-agent</code>
|
|||
<td>Determines whether or not trace spans generated by Envoy will include Istio-specific tags.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_K8S_SELECT_WORKLOAD_ENTRIES</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>true</code></td>
|
||||
<td>If enabled, Kubernetes services with selectors will select workload entries with matching labels. It is safe to disable it if you are quite sure you don't need this feature</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_LEGACY_AUTO_PASSTHROUGH</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>false</code></td>
|
||||
|
|
@ -1558,12 +1552,6 @@ These environment variables affect the behavior of the <code>pilot-agent</code>
|
|||
<td>If true, Pilot will merge virtual hosts with the same routes into a single virtual host, as an optimization.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_SERVICEENTRY_SELECT_PODS</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>true</code></td>
|
||||
<td>If enabled, service entries with selectors will select pods from the cluster. It is safe to disable it if you are quite sure you don't need this feature</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_STATUS</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>false</code></td>
|
||||
|
|
|
|||
|
|
@ -847,12 +847,6 @@ These environment variables affect the behavior of the <code>pilot-discovery</co
|
|||
<td>Determines whether or not trace spans generated by Envoy will include Istio-specific tags.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_K8S_SELECT_WORKLOAD_ENTRIES</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>true</code></td>
|
||||
<td>If enabled, Kubernetes services with selectors will select workload entries with matching labels. It is safe to disable it if you are quite sure you don't need this feature</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_LEGACY_AUTO_PASSTHROUGH</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>false</code></td>
|
||||
|
|
@ -919,12 +913,6 @@ These environment variables affect the behavior of the <code>pilot-discovery</co
|
|||
<td>If true, Pilot will merge virtual hosts with the same routes into a single virtual host, as an optimization.</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_SERVICEENTRY_SELECT_PODS</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>true</code></td>
|
||||
<td>If enabled, service entries with selectors will select pods from the cluster. It is safe to disable it if you are quite sure you don't need this feature</td>
|
||||
</tr>
|
||||
<tr>
|
||||
<td><code>PILOT_ENABLE_STATUS</code></td>
|
||||
<td>Boolean</td>
|
||||
<td><code>false</code></td>
|
||||
|
|
|
|||
|
|
@ -1508,6 +1508,26 @@ https://istio.io/latest/docs/reference/config/security/authorization-policy/#Rul
|
|||
- Prefix match: “abc<em>” will match on value “abc” and “abcd”.
|
||||
- Suffix match: “</em>abc” will match on value “abc” and “xabc”.</p>
|
||||
|
||||
</td>
|
||||
<td>
|
||||
No
|
||||
</td>
|
||||
</tr>
|
||||
<tr id="MeshConfig-ExtensionProvider-EnvoyExternalAuthorizationHttpProvider-headers_to_downstream_on_allow">
|
||||
<td><code>headersToDownstreamOnAllow</code></td>
|
||||
<td><code>string[]</code></td>
|
||||
<td>
|
||||
<p>List of headers from the authorization service that should be forwarded to downstream when the authorization
|
||||
check result is allowed (HTTP code 200).
|
||||
If not specified, the original response will not be modified and forwarded to downstream as-is.
|
||||
Note, any existing headers will be overridden.</p>
|
||||
|
||||
<p>Exact, prefix and suffix matches are supported (similar to the authorization policy rule syntax except the presence match
|
||||
https://istio.io/latest/docs/reference/config/security/authorization-policy/#Rule):
|
||||
- Exact match: “abc” will match on value “abc”.
|
||||
- Prefix match: “abc<em>” will match on value “abc” and “abcd”.
|
||||
- Suffix match: “</em>abc” will match on value “abc” and “xabc”.</p>
|
||||
|
||||
</td>
|
||||
<td>
|
||||
No
|
||||
|
|
|
|||
Loading…
Reference in New Issue