diff --git a/content/en/docs/reference/commands/install-cni/index.html b/content/en/docs/reference/commands/install-cni/index.html
index a8d19897e0..cd173d47b3 100644
--- a/content/en/docs/reference/commands/install-cni/index.html
+++ b/content/en/docs/reference/commands/install-cni/index.html
@@ -813,7 +813,7 @@ These environment variables affect the behavior of the install-cni
ISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH
true
ISTIO_GPRC_MAXRECVMSGSIZE
Command group used to interact with revision tags. Revision tags allow for the creation of mutable aliases +referring to control plane revisions for sidecar injection.
+With revision tags, rather than relabeling a namespace from "istio.io/rev=revision-a" to "istio.io/rev=revision-b" to +change which control plane revision handles injection, it's possible to create a revision tag "prod" and label our +namespace "istio.io/rev=prod". The "prod" revision tag could point to "1-7-6" initially and then be changed to point to "1-8-1" +at some later point.
+This allows operators to change which Istio control plane revision should handle injection for a namespace or set of namespaces +without manual relabeling of the "istio.io/rev" tag. +
+istioctl experimental revision tag [flags]
+
+Flags | +Shorthand | +Description | +
---|---|---|
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--manifests <string> |
+-d |
+Specify a path to a directory of charts and profiles +(e.g. ~/Downloads/istio-1.19.0/manifests). + (default ``) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--output <string> |
+-o |
+Output format for revision description (available formats: table,json) (default `table`) | +
--verbose |
+-v |
+Enable verbose output | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
Create a revision tag and output to the command's stdout. Tag an Istio control plane revision for use with namespace istio.io/rev +injection labels.
+istioctl experimental revision tag generate <revision-tag> [flags]
+
+Flags | +Shorthand | +Description | +
---|---|---|
--auto-inject-namespaces |
++ | If set to true, the sidecars should be automatically injected into all namespaces by default | +
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--manifests <string> |
+-d |
+Specify a path to a directory of charts and profiles +(e.g. ~/Downloads/istio-1.19.0/manifests). (default ``) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--output <string> |
+-o |
+Output format for revision description (available formats: table,json) (default `table`) | +
--overwrite |
++ | If true, allow revision tags to be overwritten, otherwise reject revision tag updates that +overwrite existing revision tags. | +
--revision <string> |
+-r |
+Control plane revision to reference from a given revision tag (default ``) | +
--skip-confirmation |
+-y |
+The skipConfirmation determines whether the user is prompted for confirmation. +If set to true, the user is not prompted and a Yes response is assumed in all cases. | +
--verbose |
+-v |
+Enable verbose output | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
--webhook-name <string> |
++ | Name to use for a revision tag's mutating webhook configuration. (default ``) | +
# Create a revision tag from the "1-8-0" revision
+ istioctl tag generate prod --revision 1-8-0 > tag.yaml
+
+ # Apply the tag to cluster
+ kubectl apply -f tag.yaml
+
+ # Point namespace "test-ns" at the revision pointed to by the "prod" revision tag
+ kubectl label ns test-ns istio.io/rev=prod
+
+ # Rollout namespace "test-ns" to update workloads to the "1-8-0" revision
+ kubectl rollout restart deployments -n test-ns
+
+
+List existing revision tags
+istioctl experimental revision tag list [flags]
+
+istioctl experimental revision tag show [flags]
+
Flags | +Shorthand | +Description | +
---|---|---|
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--manifests <string> |
+-d |
+Specify a path to a directory of charts and profiles +(e.g. ~/Downloads/istio-1.19.0/manifests). + (default ``) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--output <string> |
+-o |
+Output format for revision description (available formats: table,json) (default `table`) | +
--verbose |
+-v |
+Enable verbose output | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
istioctl tag list
+
+Remove Istio control plane revision tag.
+Removing a revision tag should be done with care. Removing a revision tag will disrupt sidecar injection in namespaces +that reference the tag in an "istio.io/rev" label. Verify that there are no remaining namespaces referencing a +revision tag before removing using the "istioctl tag list" command. +
+istioctl experimental revision tag remove <revision-tag> [flags]
+
+istioctl experimental revision tag delete <revision-tag> [flags]
+
Flags | +Shorthand | +Description | +
---|---|---|
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--manifests <string> |
+-d |
+Specify a path to a directory of charts and profiles +(e.g. ~/Downloads/istio-1.19.0/manifests). + (default ``) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--output <string> |
+-o |
+Output format for revision description (available formats: table,json) (default `table`) | +
--skip-confirmation |
+-y |
+The skipConfirmation determines whether the user is prompted for confirmation. +If set to true, the user is not prompted and a Yes response is assumed in all cases. | +
--verbose |
+-v |
+Enable verbose output | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
# Remove the revision tag "prod"
+ istioctl tag remove prod
+
+
+Create or modify revision tags. Tag an Istio control plane revision for use with namespace istio.io/rev +injection labels.
+istioctl experimental revision tag set <revision-tag> [flags]
+
+Flags | +Shorthand | +Description | +
---|---|---|
--auto-inject-namespaces |
++ | If set to true, the sidecars should be automatically injected into all namespaces by default | +
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--manifests <string> |
+-d |
+Specify a path to a directory of charts and profiles +(e.g. ~/Downloads/istio-1.19.0/manifests). (default ``) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--output <string> |
+-o |
+Output format for revision description (available formats: table,json) (default `table`) | +
--overwrite |
++ | If true, allow revision tags to be overwritten, otherwise reject revision tag updates that +overwrite existing revision tags. | +
--revision <string> |
+-r |
+Control plane revision to reference from a given revision tag (default ``) | +
--skip-confirmation |
+-y |
+The skipConfirmation determines whether the user is prompted for confirmation. +If set to true, the user is not prompted and a Yes response is assumed in all cases. | +
--verbose |
+-v |
+Enable verbose output | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
--webhook-name <string> |
++ | Name to use for a revision tag's mutating webhook configuration. (default ``) | +
# Create a revision tag from the "1-8-0" revision
+ istioctl tag set prod --revision 1-8-0
+
+ # Point namespace "test-ns" at the revision pointed to by the "prod" revision tag
+ kubectl label ns test-ns istio.io/rev=prod
+
+ # Change the revision tag to reference the "1-8-1" revision
+ istioctl tag set prod --revision 1-8-1 --overwrite
+
+ # Make revision "1-8-1" the default revision, both resulting in that revision handling injection for "istio-injection=enabled"
+ # and validating resources cluster-wide
+ istioctl tag set default --revision 1-8-1
+
+ # Rollout namespace "test-ns" to update workloads to the "1-8-1" revision
+ kubectl rollout restart deployments -n test-ns
+
Prints out build version information
@@ -6267,6 +6670,11 @@ If set to true, the user is not prompted and a Yes response is assumed in all ca--referential
-x
--vklog <Level>
istioctl
com
ISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH
true
ISTIO_GPRC_MAXRECVMSGSIZE
operator
com
ISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH
true
ISTIO_GPRC_MAXRECVMSGSIZE
pilot-agent
ISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH
true
ISTIO_ENVOY_ENABLE_CORE_DUMP
pilot-discoveryISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH
Boolean
true
-If enabled, Istiod will not push changes on arbitraty annotation change.
+If enabled, Istiod will not push changes on arbitrary annotation change.
ISTIO_GPRC_MAXRECVMSGSIZE
Connection timeout used by Envoy. (MUST BE >=1ms) Default timeout is 10s.
+ +protocolDetectionTimeout
Duration
Automatic protocol detection uses a set of heuristics to +determine whether the connection is using TLS or not (on the +server side), as well as the application protocol being used +(e.g., http vs tcp). These heuristics rely on the client sending +the first bits of data. For server first protocols like MySQL, +MongoDB, etc. Envoy will timeout on the protocol detection after +the specified period, defaulting to non mTLS plain TCP +traffic. Set this field to tweak the period that Envoy will wait +for the client to send the first bits of data. (MUST BE >=1ms or +0s to disable). Default detection timeout is 0s (no timeout).
+install-cni
ISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH
true
ISTIO_GPRC_MAXRECVMSGSIZE
Command group used to interact with revision tags. Revision tags allow for the creation of mutable aliases +referring to control plane revisions for sidecar injection.
+With revision tags, rather than relabeling a namespace from "istio.io/rev=revision-a" to "istio.io/rev=revision-b" to +change which control plane revision handles injection, it's possible to create a revision tag "prod" and label our +namespace "istio.io/rev=prod". The "prod" revision tag could point to "1-7-6" initially and then be changed to point to "1-8-1" +at some later point.
+This allows operators to change which Istio control plane revision should handle injection for a namespace or set of namespaces +without manual relabeling of the "istio.io/rev" tag. +
+istioctl experimental revision tag [flags]
+
+Flags | +Shorthand | +Description | +
---|---|---|
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--manifests <string> |
+-d |
+Specify a path to a directory of charts and profiles +(e.g. ~/Downloads/istio-1.19.0/manifests). + (default ``) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--output <string> |
+-o |
+Output format for revision description (available formats: table,json) (default `table`) | +
--verbose |
+-v |
+Enable verbose output | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
Create a revision tag and output to the command's stdout. Tag an Istio control plane revision for use with namespace istio.io/rev +injection labels.
+istioctl experimental revision tag generate <revision-tag> [flags]
+
+Flags | +Shorthand | +Description | +
---|---|---|
--auto-inject-namespaces |
++ | If set to true, the sidecars should be automatically injected into all namespaces by default | +
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--manifests <string> |
+-d |
+Specify a path to a directory of charts and profiles +(e.g. ~/Downloads/istio-1.19.0/manifests). (default ``) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--output <string> |
+-o |
+Output format for revision description (available formats: table,json) (default `table`) | +
--overwrite |
++ | If true, allow revision tags to be overwritten, otherwise reject revision tag updates that +overwrite existing revision tags. | +
--revision <string> |
+-r |
+Control plane revision to reference from a given revision tag (default ``) | +
--skip-confirmation |
+-y |
+The skipConfirmation determines whether the user is prompted for confirmation. +If set to true, the user is not prompted and a Yes response is assumed in all cases. | +
--verbose |
+-v |
+Enable verbose output | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
--webhook-name <string> |
++ | Name to use for a revision tag's mutating webhook configuration. (default ``) | +
# Create a revision tag from the "1-8-0" revision
+ istioctl tag generate prod --revision 1-8-0 > tag.yaml
+
+ # Apply the tag to cluster
+ kubectl apply -f tag.yaml
+
+ # Point namespace "test-ns" at the revision pointed to by the "prod" revision tag
+ kubectl label ns test-ns istio.io/rev=prod
+
+ # Rollout namespace "test-ns" to update workloads to the "1-8-0" revision
+ kubectl rollout restart deployments -n test-ns
+
+
+List existing revision tags
+istioctl experimental revision tag list [flags]
+
+istioctl experimental revision tag show [flags]
+
Flags | +Shorthand | +Description | +
---|---|---|
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--manifests <string> |
+-d |
+Specify a path to a directory of charts and profiles +(e.g. ~/Downloads/istio-1.19.0/manifests). + (default ``) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--output <string> |
+-o |
+Output format for revision description (available formats: table,json) (default `table`) | +
--verbose |
+-v |
+Enable verbose output | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
istioctl tag list
+
+Remove Istio control plane revision tag.
+Removing a revision tag should be done with care. Removing a revision tag will disrupt sidecar injection in namespaces +that reference the tag in an "istio.io/rev" label. Verify that there are no remaining namespaces referencing a +revision tag before removing using the "istioctl tag list" command. +
+istioctl experimental revision tag remove <revision-tag> [flags]
+
+istioctl experimental revision tag delete <revision-tag> [flags]
+
Flags | +Shorthand | +Description | +
---|---|---|
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--manifests <string> |
+-d |
+Specify a path to a directory of charts and profiles +(e.g. ~/Downloads/istio-1.19.0/manifests). + (default ``) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--output <string> |
+-o |
+Output format for revision description (available formats: table,json) (default `table`) | +
--skip-confirmation |
+-y |
+The skipConfirmation determines whether the user is prompted for confirmation. +If set to true, the user is not prompted and a Yes response is assumed in all cases. | +
--verbose |
+-v |
+Enable verbose output | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
# Remove the revision tag "prod"
+ istioctl tag remove prod
+
+
+Create or modify revision tags. Tag an Istio control plane revision for use with namespace istio.io/rev +injection labels.
+istioctl experimental revision tag set <revision-tag> [flags]
+
+Flags | +Shorthand | +Description | +
---|---|---|
--auto-inject-namespaces |
++ | If set to true, the sidecars should be automatically injected into all namespaces by default | +
--context <string> |
++ | Kubernetes configuration context (default ``) | +
--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) | +
--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) | +
--manifests <string> |
+-d |
+Specify a path to a directory of charts and profiles +(e.g. ~/Downloads/istio-1.19.0/manifests). (default ``) | +
--namespace <string> |
+-n |
+Kubernetes namespace (default ``) | +
--output <string> |
+-o |
+Output format for revision description (available formats: table,json) (default `table`) | +
--overwrite |
++ | If true, allow revision tags to be overwritten, otherwise reject revision tag updates that +overwrite existing revision tags. | +
--revision <string> |
+-r |
+Control plane revision to reference from a given revision tag (default ``) | +
--skip-confirmation |
+-y |
+The skipConfirmation determines whether the user is prompted for confirmation. +If set to true, the user is not prompted and a Yes response is assumed in all cases. | +
--verbose |
+-v |
+Enable verbose output | +
--vklog <Level> |
++ | number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) | +
--webhook-name <string> |
++ | Name to use for a revision tag's mutating webhook configuration. (default ``) | +
# Create a revision tag from the "1-8-0" revision
+ istioctl tag set prod --revision 1-8-0
+
+ # Point namespace "test-ns" at the revision pointed to by the "prod" revision tag
+ kubectl label ns test-ns istio.io/rev=prod
+
+ # Change the revision tag to reference the "1-8-1" revision
+ istioctl tag set prod --revision 1-8-1 --overwrite
+
+ # Make revision "1-8-1" the default revision, both resulting in that revision handling injection for "istio-injection=enabled"
+ # and validating resources cluster-wide
+ istioctl tag set default --revision 1-8-1
+
+ # Rollout namespace "test-ns" to update workloads to the "1-8-1" revision
+ kubectl rollout restart deployments -n test-ns
+
Prints out build version information
@@ -6267,6 +6670,11 @@ If set to true, the user is not prompted and a Yes response is assumed in all ca--referential
-x
--vklog <Level>
istioctl
com
ISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH
true
ISTIO_GPRC_MAXRECVMSGSIZE
operator
com
ISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH
true
ISTIO_GPRC_MAXRECVMSGSIZE
pilot-agent
ISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH
true
ISTIO_ENVOY_ENABLE_CORE_DUMP
pilot-discoveryISTIO_ENABLE_OPTIMIZED_SERVICE_PUSH
Boolean
true
-If enabled, Istiod will not push changes on arbitraty annotation change.
+If enabled, Istiod will not push changes on arbitrary annotation change.
ISTIO_GPRC_MAXRECVMSGSIZE
Connection timeout used by Envoy. (MUST BE >=1ms) Default timeout is 10s.
+ +protocolDetectionTimeout
Duration
Automatic protocol detection uses a set of heuristics to +determine whether the connection is using TLS or not (on the +server side), as well as the application protocol being used +(e.g., http vs tcp). These heuristics rely on the client sending +the first bits of data. For server first protocols like MySQL, +MongoDB, etc. Envoy will timeout on the protocol detection after +the specified period, defaulting to non mTLS plain TCP +traffic. Set this field to tweak the period that Envoy will wait +for the client to send the first bits of data. (MUST BE >=1ms or +0s to disable). Default detection timeout is 0s (no timeout).
+