diff --git a/content/en/docs/reference/commands/install-cni/index.html b/content/en/docs/reference/commands/install-cni/index.html
index 17f477738b..6a31e574bb 100644
--- a/content/en/docs/reference/commands/install-cni/index.html
+++ b/content/en/docs/reference/commands/install-cni/index.html
@@ -60,6 +60,10 @@ remove_toc_prefix: 'install-cni '
| The IP port to use for the ControlZ introspection facility (default `9876`) |
+--ebpf-enabled |
+Whether ebpf redirection is enabled |
+
+
--kube-ca-file <string> |
CA file for kubeconfig. Defaults to the same as install-cni pod (default ``) |
@@ -85,11 +89,11 @@ remove_toc_prefix: 'install-cni '
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -109,7 +113,7 @@ remove_toc_prefix: 'install-cni '
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -215,11 +219,11 @@ See each sub-command's help for details on how to use the generated script.
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -239,7 +243,7 @@ See each sub-command's help for details on how to use the generated script.
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -284,11 +288,11 @@ If it is not installed already, you can install it via your OS's package man
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -308,7 +312,7 @@ If it is not installed already, you can install it via your OS's package man
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -352,11 +356,11 @@ If it is not installed already, you can install it via your OS's package man
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -376,7 +380,7 @@ If it is not installed already, you can install it via your OS's package man
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -419,11 +423,11 @@ to your powershell profile.
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -443,7 +447,7 @@ to your powershell profile.
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -493,11 +497,11 @@ to enable it. You can execute the following once:
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -517,7 +521,7 @@ to enable it. You can execute the following once:
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -560,12 +564,12 @@ to enable it. You can execute the following once:
--log_caller <string> |
|
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
|
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -590,7 +594,7 @@ to enable it. You can execute the following once:
--log_stacktrace_level <string> |
|
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -694,6 +698,12 @@ These environment variables affect the behavior of the install-cni
Directory on the host where CNI network plugins are installed |
+EBPF_ENABLED |
+Boolean |
+false |
+Whether ebpf redirection is enabled |
+
+
ENABLE_AUTO_MTLS_CHECK_POLICIES |
Boolean |
true |
@@ -874,6 +884,12 @@ These environment variables affect the behavior of the install-cni
Sets the maximum number of concurrent grpc streams. |
+ISTIO_METADATA_DISCOVERY |
+Boolean |
+false |
+Enables proxy discovery of the workload metadata to back-fill the telemetry reports. |
+
+
ISTIO_MULTIROOT_MESH |
Boolean |
false |
@@ -1388,6 +1404,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected
The amount of time an auto-registered workload can remain disconnected from all Pilot instances before the associated WorkloadEntry is cleaned up. |
+PILOT_XDS_CACHE_INDEX_CLEAR_INTERVAL |
+Time Duration |
+5s |
+The interval for xds cache index clearing. |
+
+
PILOT_XDS_CACHE_SIZE |
Integer |
60000 |
diff --git a/content/en/docs/reference/commands/istioctl/index.html b/content/en/docs/reference/commands/istioctl/index.html
index 74e150bbfc..53cf70a9c0 100644
--- a/content/en/docs/reference/commands/istioctl/index.html
+++ b/content/en/docs/reference/commands/istioctl/index.html
@@ -4,7 +4,7 @@ source_repo: https://github.com/istio/istio
title: istioctl
description: Istio control interface.
generator: pkg-collateral-docs
-number_of_entries: 107
+number_of_entries: 108
max_toc_level: 2
remove_toc_prefix: 'istioctl '
---
@@ -4177,6 +4177,61 @@ istioctl x version --xds-label istio.io/rev=default
Examples
# Apply a waypoint to the current namespace
istioctl x waypoint apply
+
+ # Apply a waypoint to a specific namespace for a specific service account
+ istioctl x waypoint apply --service-account something --namespace default
+
+istioctl experimental waypoint delete
+Delete a waypoint configuration from the cluster
+istioctl experimental waypoint delete [flags]
+
+
+
+
+| Flags |
+Shorthand |
+Description |
+
+
+
+
+--context <string> |
+ |
+The name of the kubeconfig context to use (default ``) |
+
+
+--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) |
+
+
+--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) |
+
+
+--namespace <string> |
+-n |
+Config namespace (default ``) |
+
+
+--service-account <string> |
+-s |
+service account to create a waypoint for (default ``) |
+
+
+--vklog <Level> |
+ |
+number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) |
+
+
+
+Examples
+ # Delete a waypoint from the current namespace
+ istioctl x waypoint delete
+
+ # Delete a waypoint from a specific namespace for a specific service account
+ istioctl x waypoint delete --service-account something --namespace default
istioctl experimental waypoint generate
Generate a waypoint configuration as YAML
@@ -7228,7 +7283,7 @@ If set to true, the user is not prompted and a Yes response is assumed in all ca
--filename <stringSlice> |
-f |
-Names of files to validate (default `[]`) |
+Inputs of files to validate (default `[]`) |
--istioNamespace <string> |
@@ -7720,6 +7775,12 @@ These environment variables affect the behavior of the istioctl com
Sets the maximum number of concurrent grpc streams. |
+ISTIO_METADATA_DISCOVERY |
+Boolean |
+false |
+Enables proxy discovery of the workload metadata to back-fill the telemetry reports. |
+
+
ISTIO_MULTIROOT_MESH |
Boolean |
false |
@@ -8188,6 +8249,12 @@ These environment variables affect the behavior of the istioctl com
The amount of time an auto-registered workload can remain disconnected from all Pilot instances before the associated WorkloadEntry is cleaned up. |
+PILOT_XDS_CACHE_INDEX_CLEAR_INTERVAL |
+Time Duration |
+5s |
+The interval for xds cache index clearing. |
+
+
PILOT_XDS_CACHE_SIZE |
Integer |
60000 |
diff --git a/content/en/docs/reference/commands/operator/index.html b/content/en/docs/reference/commands/operator/index.html
index a8fff11d47..9ee9a29819 100644
--- a/content/en/docs/reference/commands/operator/index.html
+++ b/content/en/docs/reference/commands/operator/index.html
@@ -557,6 +557,12 @@ These environment variables affect the behavior of the operator com
Sets the maximum number of concurrent grpc streams. |
+ISTIO_METADATA_DISCOVERY |
+Boolean |
+false |
+Enables proxy discovery of the workload metadata to back-fill the telemetry reports. |
+
+
ISTIO_MULTIROOT_MESH |
Boolean |
false |
@@ -1025,6 +1031,12 @@ These environment variables affect the behavior of the operator com
The amount of time an auto-registered workload can remain disconnected from all Pilot instances before the associated WorkloadEntry is cleaned up. |
+PILOT_XDS_CACHE_INDEX_CLEAR_INTERVAL |
+Time Duration |
+5s |
+The interval for xds cache index clearing. |
+
+
PILOT_XDS_CACHE_SIZE |
Integer |
60000 |
diff --git a/content/en/docs/reference/commands/pilot-agent/index.html b/content/en/docs/reference/commands/pilot-agent/index.html
index 2fe29e537e..8fe551b04f 100644
--- a/content/en/docs/reference/commands/pilot-agent/index.html
+++ b/content/en/docs/reference/commands/pilot-agent/index.html
@@ -1405,6 +1405,12 @@ These environment variables affect the behavior of the pilot-agent
|
+ISTIO_METADATA_DISCOVERY |
+Boolean |
+false |
+Enables proxy discovery of the workload metadata to back-fill the telemetry reports. |
+
+
ISTIO_META_CERT_SIGNER |
String |
|
@@ -1925,6 +1931,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected
The amount of time an auto-registered workload can remain disconnected from all Pilot instances before the associated WorkloadEntry is cleaned up. |
+PILOT_XDS_CACHE_INDEX_CLEAR_INTERVAL |
+Time Duration |
+5s |
+The interval for xds cache index clearing. |
+
+
PILOT_XDS_CACHE_SIZE |
Integer |
60000 |
diff --git a/content/en/docs/reference/commands/pilot-discovery/index.html b/content/en/docs/reference/commands/pilot-discovery/index.html
index 184d8bbd23..61c6572c34 100644
--- a/content/en/docs/reference/commands/pilot-discovery/index.html
+++ b/content/en/docs/reference/commands/pilot-discovery/index.html
@@ -725,6 +725,12 @@ These environment variables affect the behavior of the pilot-discoverySets the maximum number of concurrent grpc streams.
+ISTIO_METADATA_DISCOVERY |
+Boolean |
+false |
+Enables proxy discovery of the workload metadata to back-fill the telemetry reports. |
+
+
ISTIO_MULTIROOT_MESH |
Boolean |
false |
@@ -1217,6 +1223,12 @@ These environment variables affect the behavior of the pilot-discoveryThe amount of time an auto-registered workload can remain disconnected from all Pilot instances before the associated WorkloadEntry is cleaned up.
+PILOT_XDS_CACHE_INDEX_CLEAR_INTERVAL |
+Time Duration |
+5s |
+The interval for xds cache index clearing. |
+
+
PILOT_XDS_CACHE_SIZE |
Integer |
60000 |
diff --git a/content/en/docs/reference/config/networking/destination-rule/index.html b/content/en/docs/reference/config/networking/destination-rule/index.html
index c3d7510038..8582424c9c 100644
--- a/content/en/docs/reference/config/networking/destination-rule/index.html
+++ b/content/en/docs/reference/config/networking/destination-rule/index.html
@@ -1069,6 +1069,8 @@ The secret (of type generic)should contain the
following keys and values: key: <privateKey>,
cert: <clientCert>, cacert: <CACertificate>.
Here CACertificate is used to verify the server certificate.
+For mutual TLS, cacert: <CACertificate> can be provided in the
+same secret or a separate secret named <secret>-cacert.
Secret of type tls for client certificates along with
ca.crt key for CA certificates is also supported.
Only one of client certificates and CA certificate
diff --git a/content/en/docs/reference/config/networking/virtual-service/index.html b/content/en/docs/reference/config/networking/virtual-service/index.html
index 717a47a70e..6c2da6f92d 100644
--- a/content/en/docs/reference/config/networking/virtual-service/index.html
+++ b/content/en/docs/reference/config/networking/virtual-service/index.html
@@ -216,8 +216,8 @@ No
HTTPRoute[] |
An ordered list of route rules for HTTP traffic. HTTP routes will be
-applied to platform service ports named ‘http-’/‘http2-’/‘grpc-*’, gateway
-ports with protocol HTTP/HTTP2/GRPC/ TLS-terminated-HTTPS and service
+applied to platform service ports using HTTP/HTTP2/GRPC protocols, gateway
+ports with protocol HTTP/HTTP2/GRPC/TLS-terminated-HTTPS and service
entry ports using HTTP/HTTP2/GRPC protocols. The first rule matching
an incoming request is used.
diff --git a/content/zh/docs/reference/commands/install-cni/index.html b/content/zh/docs/reference/commands/install-cni/index.html
index 17f477738b..6a31e574bb 100644
--- a/content/zh/docs/reference/commands/install-cni/index.html
+++ b/content/zh/docs/reference/commands/install-cni/index.html
@@ -60,6 +60,10 @@ remove_toc_prefix: 'install-cni '
| The IP port to use for the ControlZ introspection facility (default `9876`) |
+--ebpf-enabled |
+Whether ebpf redirection is enabled |
+
+
--kube-ca-file <string> |
CA file for kubeconfig. Defaults to the same as install-cni pod (default ``) |
@@ -85,11 +89,11 @@ remove_toc_prefix: 'install-cni '
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -109,7 +113,7 @@ remove_toc_prefix: 'install-cni '
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -215,11 +219,11 @@ See each sub-command's help for details on how to use the generated script.
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -239,7 +243,7 @@ See each sub-command's help for details on how to use the generated script.
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -284,11 +288,11 @@ If it is not installed already, you can install it via your OS's package man
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -308,7 +312,7 @@ If it is not installed already, you can install it via your OS's package man
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -352,11 +356,11 @@ If it is not installed already, you can install it via your OS's package man
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -376,7 +380,7 @@ If it is not installed already, you can install it via your OS's package man
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -419,11 +423,11 @@ to your powershell profile.
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -443,7 +447,7 @@ to your powershell profile.
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -493,11 +497,11 @@ to enable it. You can execute the following once:
--log_caller <string> |
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -517,7 +521,7 @@ to enable it. You can execute the following once:
--log_stacktrace_level <string> |
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -560,12 +564,12 @@ to enable it. You can execute the following once:
--log_caller <string> |
|
-Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
+Comma-separated list of scopes for which to include caller information, scopes can be any of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] (default ``) |
--log_output_level <string> |
|
-Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
+Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`) |
--log_rotate <string> |
@@ -590,7 +594,7 @@ to enable it. You can execute the following once:
--log_stacktrace_level <string> |
|
-Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
+Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [all, ambient, authorization, cni, controllers, default, ebpf, install, klog, model, proxyconfig, repair, spiffe, telemetry, trustBundle, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`) |
--log_target <stringArray> |
@@ -694,6 +698,12 @@ These environment variables affect the behavior of the install-cni
Directory on the host where CNI network plugins are installed |
+EBPF_ENABLED |
+Boolean |
+false |
+Whether ebpf redirection is enabled |
+
+
ENABLE_AUTO_MTLS_CHECK_POLICIES |
Boolean |
true |
@@ -874,6 +884,12 @@ These environment variables affect the behavior of the install-cni
Sets the maximum number of concurrent grpc streams. |
+ISTIO_METADATA_DISCOVERY |
+Boolean |
+false |
+Enables proxy discovery of the workload metadata to back-fill the telemetry reports. |
+
+
ISTIO_MULTIROOT_MESH |
Boolean |
false |
@@ -1388,6 +1404,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected
The amount of time an auto-registered workload can remain disconnected from all Pilot instances before the associated WorkloadEntry is cleaned up. |
+PILOT_XDS_CACHE_INDEX_CLEAR_INTERVAL |
+Time Duration |
+5s |
+The interval for xds cache index clearing. |
+
+
PILOT_XDS_CACHE_SIZE |
Integer |
60000 |
diff --git a/content/zh/docs/reference/commands/istioctl/index.html b/content/zh/docs/reference/commands/istioctl/index.html
index 74e150bbfc..53cf70a9c0 100644
--- a/content/zh/docs/reference/commands/istioctl/index.html
+++ b/content/zh/docs/reference/commands/istioctl/index.html
@@ -4,7 +4,7 @@ source_repo: https://github.com/istio/istio
title: istioctl
description: Istio control interface.
generator: pkg-collateral-docs
-number_of_entries: 107
+number_of_entries: 108
max_toc_level: 2
remove_toc_prefix: 'istioctl '
---
@@ -4177,6 +4177,61 @@ istioctl x version --xds-label istio.io/rev=default
Examples
# Apply a waypoint to the current namespace
istioctl x waypoint apply
+
+ # Apply a waypoint to a specific namespace for a specific service account
+ istioctl x waypoint apply --service-account something --namespace default
+
+istioctl experimental waypoint delete
+Delete a waypoint configuration from the cluster
+istioctl experimental waypoint delete [flags]
+
+
+
+
+| Flags |
+Shorthand |
+Description |
+
+
+
+
+--context <string> |
+ |
+The name of the kubeconfig context to use (default ``) |
+
+
+--istioNamespace <string> |
+-i |
+Istio system namespace (default `istio-system`) |
+
+
+--kubeconfig <string> |
+-c |
+Kubernetes configuration file (default ``) |
+
+
+--namespace <string> |
+-n |
+Config namespace (default ``) |
+
+
+--service-account <string> |
+-s |
+service account to create a waypoint for (default ``) |
+
+
+--vklog <Level> |
+ |
+number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`) |
+
+
+
+Examples
+ # Delete a waypoint from the current namespace
+ istioctl x waypoint delete
+
+ # Delete a waypoint from a specific namespace for a specific service account
+ istioctl x waypoint delete --service-account something --namespace default
istioctl experimental waypoint generate
Generate a waypoint configuration as YAML
@@ -7228,7 +7283,7 @@ If set to true, the user is not prompted and a Yes response is assumed in all ca
--filename <stringSlice> |
-f |
-Names of files to validate (default `[]`) |
+Inputs of files to validate (default `[]`) |
--istioNamespace <string> |
@@ -7720,6 +7775,12 @@ These environment variables affect the behavior of the istioctl com
Sets the maximum number of concurrent grpc streams. |
+ISTIO_METADATA_DISCOVERY |
+Boolean |
+false |
+Enables proxy discovery of the workload metadata to back-fill the telemetry reports. |
+
+
ISTIO_MULTIROOT_MESH |
Boolean |
false |
@@ -8188,6 +8249,12 @@ These environment variables affect the behavior of the istioctl com
The amount of time an auto-registered workload can remain disconnected from all Pilot instances before the associated WorkloadEntry is cleaned up. |
+PILOT_XDS_CACHE_INDEX_CLEAR_INTERVAL |
+Time Duration |
+5s |
+The interval for xds cache index clearing. |
+
+
PILOT_XDS_CACHE_SIZE |
Integer |
60000 |
diff --git a/content/zh/docs/reference/commands/operator/index.html b/content/zh/docs/reference/commands/operator/index.html
index a8fff11d47..9ee9a29819 100644
--- a/content/zh/docs/reference/commands/operator/index.html
+++ b/content/zh/docs/reference/commands/operator/index.html
@@ -557,6 +557,12 @@ These environment variables affect the behavior of the operator com
Sets the maximum number of concurrent grpc streams. |
+ISTIO_METADATA_DISCOVERY |
+Boolean |
+false |
+Enables proxy discovery of the workload metadata to back-fill the telemetry reports. |
+
+
ISTIO_MULTIROOT_MESH |
Boolean |
false |
@@ -1025,6 +1031,12 @@ These environment variables affect the behavior of the operator com
The amount of time an auto-registered workload can remain disconnected from all Pilot instances before the associated WorkloadEntry is cleaned up. |
+PILOT_XDS_CACHE_INDEX_CLEAR_INTERVAL |
+Time Duration |
+5s |
+The interval for xds cache index clearing. |
+
+
PILOT_XDS_CACHE_SIZE |
Integer |
60000 |
diff --git a/content/zh/docs/reference/commands/pilot-agent/index.html b/content/zh/docs/reference/commands/pilot-agent/index.html
index 2fe29e537e..8fe551b04f 100644
--- a/content/zh/docs/reference/commands/pilot-agent/index.html
+++ b/content/zh/docs/reference/commands/pilot-agent/index.html
@@ -1405,6 +1405,12 @@ These environment variables affect the behavior of the pilot-agent
|
+ISTIO_METADATA_DISCOVERY |
+Boolean |
+false |
+Enables proxy discovery of the workload metadata to back-fill the telemetry reports. |
+
+
ISTIO_META_CERT_SIGNER |
String |
|
@@ -1925,6 +1931,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected
The amount of time an auto-registered workload can remain disconnected from all Pilot instances before the associated WorkloadEntry is cleaned up. |
+PILOT_XDS_CACHE_INDEX_CLEAR_INTERVAL |
+Time Duration |
+5s |
+The interval for xds cache index clearing. |
+
+
PILOT_XDS_CACHE_SIZE |
Integer |
60000 |
diff --git a/content/zh/docs/reference/commands/pilot-discovery/index.html b/content/zh/docs/reference/commands/pilot-discovery/index.html
index 184d8bbd23..61c6572c34 100644
--- a/content/zh/docs/reference/commands/pilot-discovery/index.html
+++ b/content/zh/docs/reference/commands/pilot-discovery/index.html
@@ -725,6 +725,12 @@ These environment variables affect the behavior of the pilot-discoverySets the maximum number of concurrent grpc streams.
+ISTIO_METADATA_DISCOVERY |
+Boolean |
+false |
+Enables proxy discovery of the workload metadata to back-fill the telemetry reports. |
+
+
ISTIO_MULTIROOT_MESH |
Boolean |
false |
@@ -1217,6 +1223,12 @@ These environment variables affect the behavior of the pilot-discoveryThe amount of time an auto-registered workload can remain disconnected from all Pilot instances before the associated WorkloadEntry is cleaned up.
+PILOT_XDS_CACHE_INDEX_CLEAR_INTERVAL |
+Time Duration |
+5s |
+The interval for xds cache index clearing. |
+
+
PILOT_XDS_CACHE_SIZE |
Integer |
60000 |
diff --git a/content/zh/docs/reference/config/networking/destination-rule/index.html b/content/zh/docs/reference/config/networking/destination-rule/index.html
index 291d4072ea..33d18a117c 100644
--- a/content/zh/docs/reference/config/networking/destination-rule/index.html
+++ b/content/zh/docs/reference/config/networking/destination-rule/index.html
@@ -1069,6 +1069,8 @@ The secret (of type generic)should contain the
following keys and values: key: <privateKey>,
cert: <clientCert>, cacert: <CACertificate>.
Here CACertificate is used to verify the server certificate.
+For mutual TLS, cacert: <CACertificate> can be provided in the
+same secret or a separate secret named <secret>-cacert.
Secret of type tls for client certificates along with
ca.crt key for CA certificates is also supported.
Only one of client certificates and CA certificate
diff --git a/content/zh/docs/reference/config/networking/virtual-service/index.html b/content/zh/docs/reference/config/networking/virtual-service/index.html
index 50f77ec124..7e9fd87141 100644
--- a/content/zh/docs/reference/config/networking/virtual-service/index.html
+++ b/content/zh/docs/reference/config/networking/virtual-service/index.html
@@ -216,8 +216,8 @@ No
HTTPRoute[] |
An ordered list of route rules for HTTP traffic. HTTP routes will be
-applied to platform service ports named ‘http-’/‘http2-’/‘grpc-*’, gateway
-ports with protocol HTTP/HTTP2/GRPC/ TLS-terminated-HTTPS and service
+applied to platform service ports using HTTP/HTTP2/GRPC protocols, gateway
+ports with protocol HTTP/HTTP2/GRPC/TLS-terminated-HTTPS and service
entry ports using HTTP/HTTP2/GRPC protocols. The first rule matching
an incoming request is used.
diff --git a/content/zh/docs/reference/config/proxy_extensions/attributegen/index.html b/content/zh/docs/reference/config/proxy_extensions/attributegen/index.html
deleted file mode 100644
index 3e1250e37d..0000000000
--- a/content/zh/docs/reference/config/proxy_extensions/attributegen/index.html
+++ /dev/null
@@ -1,261 +0,0 @@
----
-WARNING: THIS IS AN AUTO-GENERATED FILE, DO NOT EDIT. PLEASE MODIFY THE ORIGINAL SOURCE IN THE 'https://github.com/istio/proxy' REPO
-source_repo: https://github.com/istio/proxy
-title: AttributeGen Config
-description: Configuration for Attribute Generation plugin.
-location: https://istio.io/docs/reference/config/proxy_extensions/attributegen.html
-layout: protoc-gen-docs
-generator: protoc-gen-docs
-schema: istio.attributegen
-weight: 20
-number_of_entries: 3
----
-AttributeGen plugin uses builtin
-attributes
-as inputs and produces new attributes that can be used by downstream plugins.
-The following is an example of a configuration that produces one attribute
-named istio_operationId using request.url_path and request.method.
-{{}}
-{{}}
-{
- "attributes": [
- {
- "output_attribute": "istio_operationId",
- "match": [
- {
- "value": "ListBooks",
- "condition": "request.url_path == '/books' && request.method ==
- 'GET'"
- },
- {
- "value": "GetBook",
- "condition":
- "request.url_path.matches('^/shelves/[[:alnum:]]*/books/[[:alnum:]]*$')
- && request.method == 'GET'"
- },
- {
- "value": "CreateBook",
- "condition": "request.url_path == '/books/' && request.method ==
- 'POST'"
- }
- ]
- }
- ]
-}
-
-
-{{}}
-{{}}
-If the Stats plugin runs after AttributeGen, it can use istio_operationId
-to populate a dimension on a metric.
-The following is an example of response codes being mapped into a smaller
-number of response classes as the istio_responseClass attribute. For
-example, all response codes in 200s are mapped to 2xx.
-{{}}
-{{}}
-{
- "attributes": [
- {
- "output_attribute": "istio_responseClass",
- "match": [
- {
- "value": "2xx",
- "condition": "response.code >= 200 && response.code <= 299"
- },
- {
- "value": "3xx",
- "condition": "response.code >= 300 && response.code <= 399"
- },
- {
- "value": "404",
- "condition": "response.code == 404"
- },
- {
- "value": "429",
- "condition": "response.code == 429"
- },
- {
- "value": "503",
- "condition": "response.code == 503"
- },
- {
- "value": "5xx",
- "condition": "response.code >= 500 && response.code <= 599"
- },
- {
- "value": "4xx",
- "condition": "response.code >= 400 && response.code <= 499"
- }
- ]
- }
- ]
-}
-
-
-{{}}
-{{}}
-If multiple AttributeGen configurations produce the same attribute, the
-result of the last configuration will be visible to downstream filters.
-
-PluginConfig
-
-Top level configuration to generate new attributes based on attributes of the
-proxied traffic.
-
-
-
-
-| Field |
-Type |
-Description |
-Required |
-
-
-
-
-debug |
-bool |
-
- The following settings should be rarely used.
-Enable debug for this filter.
-
- |
-
-No
- |
-
-
-attributes |
-AttributeGeneration[] |
-
- Multiple independent attribute generation configurations.
-
- |
-
-No
- |
-
-
-
-
-AttributeGeneration
-
-AttributeGeneration define generation of one attribute.
-
-
-
-
-| Field |
-Type |
-Description |
-Required |
-
-
-
-
-output_attribute |
-string |
-
- The name of the attribute that is populated on a successful match.
-An attribute name SHOULD NOT contain a .. You may use underscores for
-namespacing instead.
-Example: istio_operationId
-istio_ attribute namespace is reserved by Istio.
-AttributeGeneration may fail to evaluate when an attribute is not
-available. For example, response.code may not be available when a request
-ends abruptly. When attribute generation fails, it will not populate the
-attribute.
-If the generated attribute is used by an authz plugin, it should account
-for the possibility that the attribute may be missing. Use
-has(attribute_name) function to check for presence of an attribute before
-using its value, and provide appropriate defaults. For example the
-following is a safe use of response.code
-has(response.code)?response.code:200
-
- |
-
-No
- |
-
-
-match |
-Match[] |
-
- Matches are evaluated in order until the first successful match.
-The value specified by the successful match is assgined to the
-output_attribute.
-
- |
-
-No
- |
-
-
-
-
-Match
-
-If the condition evaluates to true then the Match returns the specified
-value.
-
-
-
-
-| Field |
-Type |
-Description |
-Required |
-
-
-
-
-condition |
-string |
-
- The condition is a CEL
-expression
-that may use builtin
-attributes.
-Example:
-{{}}
-{{}}
- {
- "value": "GetBook",
- "condition":
- "request.url_path.matches('^/shelves/[[:alnum:]]*/books/[[:alnum:]]*$')
- && request.method == 'GET'"
- },
-
-Note: CEL uses re2 regex
-library. Use anchors {^, $} to ensure that the regex evaluates
-efficiently.
-Note: request.url_path is normalized and stripped of query params.
-a Read only operation on books
-{ "value": "ReadOnlyBooks",
- "condition": "request.url_path.startsWith('/books/') &&
- in(request.method, ['GET', 'HEAD'])"}
-
-{{}}
-{{}}
-An empty condition evaluates to true and should be used to provide a
-default value.
-
- |
-
-No
- |
-
-
-value |
-string |
-
- If condition evaluates to true, return the value.
-
- |
-
-No
- |
-
-
-
-
diff --git a/content/zh/docs/reference/config/proxy_extensions/stats/index.html b/content/zh/docs/reference/config/proxy_extensions/stats/index.html
deleted file mode 100644
index 5acd5cf810..0000000000
--- a/content/zh/docs/reference/config/proxy_extensions/stats/index.html
+++ /dev/null
@@ -1,271 +0,0 @@
----
-WARNING: THIS IS AN AUTO-GENERATED FILE, DO NOT EDIT. PLEASE MODIFY THE ORIGINAL SOURCE IN THE 'https://github.com/istio/proxy' REPO
-source_repo: https://github.com/istio/proxy
-title: Stats Config
-description: Configuration for Stats Filter.
-location: https://istio.io/docs/reference/config/proxy_extensions/stats.html
-layout: protoc-gen-docs
-generator: protoc-gen-docs
-weight: 20
-number_of_entries: 5
----
-MetricConfig
-
-Metric instance configuration overrides.
-The metric value and the metric type are optional and permit changing the
-reported value for an existing metric.
-The standard metrics are optimized and reported through a “fast-path”.
-The customizations allow full configurability, at the cost of a “slower”
-path.
-
-
-
-
-| Field |
-Type |
-Description |
-Required |
-
-
-
-
-dimensions |
-map<string, string> |
-
- (Optional) Collection of tag names and tag expressions to include in the
-metric. Conflicts are resolved by the tag name by overriding previously
-supplied values.
-
- |
-
-No
- |
-
-
-name |
-string |
-
- (Optional) Metric name to restrict the override to a metric. If not
-specified, applies to all.
-
- |
-
-No
- |
-
-
-tags_to_remove |
-string[] |
-
- (Optional) A list of tags to remove.
-
- |
-
-No
- |
-
-
-match |
-string |
-
- NOT IMPLEMENTED. (Optional) Conditional enabling the override.
-
- |
-
-No
- |
-
-
-drop |
-bool |
-
- (Optional) If this is set to true, the metric(s) selected by this
-configuration will not be generated or reported.
-
- |
-
-No
- |
-
-
-
-
-MetricDefinition
-
-
-
-
-| Field |
-Type |
-Description |
-Required |
-
-
-
-
-name |
-string |
-
- Metric name.
-
- |
-
-No
- |
-
-
-value |
-string |
-
- Metric value expression.
-
- |
-
-No
- |
-
-
-type |
-MetricType |
-
- NOT IMPLEMENTED (Optional) Metric type.
-
- |
-
-No
- |
-
-
-
-
-PluginConfig
-
-
-
-
-| Field |
-Type |
-Description |
-Required |
-
-
-
-
-
-tcp_reporting_duration |
-Duration |
-
- Optional. Allows configuration of the time between calls out to for TCP
-metrics reporting. The default duration is 15s.
-
- |
-
-No
- |
-
-
-metrics |
-MetricConfig[] |
-
- Metric overrides.
-
- |
-
-No
- |
-
-
-definitions |
-MetricDefinition[] |
-
- Metric definitions.
-
- |
-
-No
- |
-
-
-reporter |
-Reporter |
-
- Proxy deployment type.
-
- |
-
-No
- |
-
-
-
-
-MetricType
-
-
-
-
-| Name |
-Description |
-
-
-
-
-COUNTER |
-
- |
-
-
-GAUGE |
-
- |
-
-
-HISTOGRAM |
-
- |
-
-
-
-
-Reporter
-
-Specifies the proxy deployment type.
-
-
-
-
-| Name |
-Description |
-
-
-
-
-UNSPECIFIED |
-
- Default value is inferred from the listener direction, as either client or
-server sidecar.
-
- |
-
-
-SERVER_GATEWAY |
-
- Shared server gateway, e.g. “waypoint”.
-
- |
-
-
-
-
diff --git a/data/analysis.yaml b/data/analysis.yaml
index cb52dec618..03f7b9a991 100644
--- a/data/analysis.yaml
+++ b/data/analysis.yaml
@@ -618,3 +618,29 @@ messages:
args:
- name: podNames
type: "[]string"
+
+ - name: "ConflictingTelemetryWorkloadSelectors"
+ code: IST0159
+ level: Error
+ description: "A Telemetry resource selects the same workloads as another Telemetry resource"
+ template: "The Telemetries %v in namespace %q select the same workload pod %q, which can lead to undefined behavior."
+ url: "https://istio.io/latest/docs/reference/config/analysis/ist0159/"
+ args:
+ - name: conflictingTelemetries
+ type: "[]string"
+ - name: namespace
+ type: string
+ - name: workloadPod
+ type: string
+
+ - name: "MultipleTelemetriesWithoutWorkloadSelectors"
+ code: IST0160
+ level: Error
+ description: "More than one telemetry resource in a namespace has no workload selector"
+ template: "The Telemetries %v in namespace %q have no workload selector, which can lead to undefined behavior."
+ url: "https://istio.io/latest/docs/reference/config/analysis/ist0160/"
+ args:
+ - name: conflictingTelemetries
+ type: "[]string"
+ - name: namespace
+ type: string
diff --git a/data/features.yaml b/data/features.yaml
index bd66f5379d..8ca953de5d 100644
--- a/data/features.yaml
+++ b/data/features.yaml
@@ -166,6 +166,7 @@ features:
area: Observability
- name: "WebAssembly Extension"
id: "observability.webassembly"
+ link: "/docs/reference/config/proxy_extensions/wasm-plugin/"
level:
checklist: ""
maturity: Alpha
|