istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
istio.io/archive/v1.1/docs/reference/config/installation-options-changes/index.html

21 lines
101 KiB
HTML
Raw Permalink Blame History

<!doctype html><html lang=en itemscope itemtype=https://schema.org/WebPage><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=theme-color content=#466BB0><meta name=title content="Installation Options Changes"><meta name=description content="Details the Helm chart installation options differences between release-1.0 and release-1.1."><meta name=keywords content=microservices,services,mesh,kubernetes,helm,install,options><meta property=og:title content="Installation Options Changes"><meta property=og:type content=website><meta property=og:description content="Details the Helm chart installation options differences between release-1.0 and release-1.1."><meta property=og:url content=/v1.1/docs/reference/config/installation-options-changes/><meta property=og:image content=/v1.1/img/istio-whitelogo-bluebackground-framed.svg><meta property=og:image:alt content="Istio Logo"><meta property=og:image:width content=112><meta property=og:image:height content=150><meta property=og:site_name content=Istio><meta name=twitter:card content=summary><meta name=twitter:site content=@IstioMesh><title>Istioldie 1.1 / Installation Options Changes</title><script async src="https://www.googletagmanager.com/gtag/js?id=UA-98480406-2"></script><script>window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}
gtag('js',new Date());gtag('config','UA-98480406-2');</script><link rel=alternate type=application/rss+xml title="Istio Blog" href=/v1.1/feed.xml><link rel="shortcut icon" href=/v1.1/favicons/favicon.ico><link rel=apple-touch-icon href=/v1.1/favicons/apple-touch-icon-180x180.png sizes=180x180><link rel=icon type=image/png href=/v1.1/favicons/favicon-16x16.png sizes=16x16><link rel=icon type=image/png href=/v1.1/favicons/favicon-32x32.png sizes=32x32><link rel=icon type=image/png href=/v1.1/favicons/android-36x36.png sizes=36x36><link rel=icon type=image/png href=/v1.1/favicons/android-48x48.png sizes=48x48><link rel=icon type=image/png href=/v1.1/favicons/android-72x72.png sizes=72x72><link rel=icon type=image/png href=/v1.1/favicons/android-96x96.png sizes=96xW96><link rel=icon type=image/png href=/v1.1/favicons/android-144x144.png sizes=144x144><link rel=icon type=image/png href=/v1.1/favicons/android-192x192.png sizes=192x192><link rel=manifest href=/v1.1/manifest.json><meta name=apple-mobile-web-app-title content=Istio><meta name=application-name content=Istio><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Work+Sans:400|Chivo:400|Work+Sans:500,300,600,300italic,400italic,500italic,600italic|Chivo:500,300,600,300italic,400italic,500italic,600italic"><link rel=stylesheet href=/v1.1/css/all.css></head><body class="language-unknown archive-site"><script src=/v1.1/js/themes_init.min.js></script><script>const branchName="release-1.1";const docTitle="Installation Options Changes";const iconFile="\/v1.1/img/icons.svg";const buttonCopy='Copy to clipboard';const buttonPrint='Print';const buttonDownload='Download';</script><script src="https://www.google.com/cse/brand?form=search-form" defer></script><script src=/v1.1/js/all.min.js data-manual defer></script><header><nav><a id=brand href=/v1.1/><span class=logo><svg viewBox="0 0 300 300"><circle cx="150" cy="150" r="146" stroke-width="2" /><path d="M65 240H225L125 270z"/><path d="M65 230l60-10V110z"/><path d="M135 220l90 10L135 30z"/></svg></span><span class=name>Istioldie 1.1</span></a><div id=hamburger><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#hamburger"/></svg></div><div id=header-links><span title="Learn how to deploy, use, and operate Istio.">Docs</span>
<a title="Posts about using Istio." href=/v1.1/blog/2019/announcing-1.1.9/>Blog</a>
<a title="A bunch of resources to help you deploy, configure and use Istio." href=/v1.1/help/>Help</a>
<a title="Get a bit more in-depth info about the Istio project." href=/v1.1/about/>About</a><div class=menu><button id=gearDropdownButton class=menu-trigger title="Options and settings" aria-label="Options and Settings" aria-controls=gearDropdownContent><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#gear"/></svg></button><div id=gearDropdownContent class=menu-content aria-labelledby=gearDropdownButton role=menu><a tabindex=-1 role=menuitem lang=en id=switch-lang-en class=active>English</a>
<a tabindex=-1 role=menuitem lang=zh id=switch-lang-zh>中文</a><div role=separator></div><a tabindex=-1 role=menuitem class=active id=light-theme-item>Light Theme</a>
<a tabindex=-1 role=menuitem id=dark-theme-item>Dark Theme</a><div role=separator></div><a tabindex=-1 role=menuitem id=syntax-coloring-item>Color Examples</a><div role=separator></div><h6>Other versions of this site</h6><a tabindex=-1 role=menuitem onclick="navigateToUrlOrRoot('https://istio.io/docs\/reference\/config\/installation-options-changes\/');return false;">Current Release</a>
<a tabindex=-1 role=menuitem onclick="navigateToUrlOrRoot('https://preliminary.istio.io/docs\/reference\/config\/installation-options-changes\/');return false;">Next Release</a>
<a tabindex=-1 role=menuitem href=https://archive.istio.io>Older Releases</a></div></div><button id=search-show title="Search this site" aria-label=Search><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#magnifier"/></svg></button></div><form id=search-form name=cse role=search><input type=hidden name=cx value=013699703217164175118:iwwf17ikgf4>
<input type=hidden name=ie value=utf-8>
<input type=hidden name=hl value=en>
<input type=hidden id=search-page-url value=/v1.1/search.html>
<input id=search-textbox class=form-control name=q type=search aria-label="Search this site">
<button id=search-close title="Cancel search" type=reset aria-label="Cancel search"><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#cancel-x"/></svg></button></form></nav></header><main class=primary><div id=sidebar-container class="sidebar-container sidebar-offcanvas"><nav id=sidebar aria-label="Section Navigation"><div class=directory><div class=card><button class="header dynamic" id=card19 title="Learn about the different parts of the Istio system and the abstractions it uses." aria-controls=card19-body><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#concepts"/></svg>Concepts</button><div class=body aria-labelledby=card19 role=region id=card19-body><ul role=tree aria-expanded=true class=leaf-section aria-labelledby=card19><li role=none><a role=treeitem title="Introduces Istio, the problems it solves, its high-level architecture and design goals." href=/v1.1/docs/concepts/what-is-istio/>What is Istio?</a></li><li role=none><a role=treeitem title="Describes the various Istio features focused on traffic routing and control." href=/v1.1/docs/concepts/traffic-management/>Traffic Management</a></li><li role=none><a role=treeitem title="Describes Istio's authorization and authentication functionality." href=/v1.1/docs/concepts/security/>Security</a></li><li role=none><a role=treeitem title="Describes the policy enforcement and telemetry mechanisms." href=/v1.1/docs/concepts/policies-and-telemetry/>Policies and Telemetry</a></li><li role=none><a role=treeitem title="Introduces performance and scalability for Istio." href=/v1.1/docs/concepts/performance-and-scalability/>Performance and Scalability</a></li><li role=none><a role=treeitem title="Describes how a service mesh can be configured to include services from more than one cluster." href=/v1.1/docs/concepts/multicluster-deployments/>Multicluster Deployments</a></li></ul></div></div><div class=card><button class="header dynamic" id=card39 title="How to deploy and upgrade Istio in various environments such as Kubernetes and Consul." aria-controls=card39-body><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#setup"/></svg>Setup</button><div class=body aria-labelledby=card39 role=region id=card39-body><ul role=tree aria-expanded=true aria-labelledby=card39><li role=treeitem aria-label=Kubernetes><button aria-hidden=true></button><a title="Instructions for installing the Istio control plane on Kubernetes and adding virtual machines into the mesh." href=/v1.1/docs/setup/kubernetes/>Kubernetes</a><ul role=group aria-expanded=false><li role=treeitem aria-label=Prepare><button aria-hidden=true></button><a title="Getting ready for Istio." href=/v1.1/docs/setup/kubernetes/prepare/>Prepare</a><ul role=group aria-expanded=false><li role=none><a role=treeitem title="Prepare your Kubernetes pods and services to run in an Istio-enabled cluster." href=/v1.1/docs/setup/kubernetes/prepare/requirements/>Pods and Services</a></li><li role=treeitem aria-label="Platform Setup"><button aria-hidden=true></button><a title="How to prepare various Kubernetes platforms before installing Istio." href=/v1.1/docs/setup/kubernetes/prepare/platform-setup/>Platform Setup</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Instructions to setup an Alibaba Cloud Kubernetes cluster for Istio." href=/v1.1/docs/setup/kubernetes/prepare/platform-setup/alicloud/>Alibaba Cloud</a></li><li role=none><a role=treeitem title="Instructions to setup an Azure cluster for Istio." href=/v1.1/docs/setup/kubernetes/prepare/platform-setup/azure/>Azure</a></li><li role=none><a role=treeitem title="Instructions to setup Docker For Desktop for use with Istio." href=/v1.1/docs/setup/kubernetes/prepare/platform-setup/docker/>Docker For Desktop</a></li><li role=none><a role=treeitem title="Instructions to setup a Google Kubernetes Engine cluster for Istio." href=/v1.1/docs/setup/kubernetes/prepare/platform-setup/gke/>Google Kubernetes Engine</a></li><li role=none><a role=treeitem title="Instructions to setup an IBM Cloud cluster for Istio." href=/v1.1/docs/setup/kubernetes/prepare/platform-setup/ibm/>IBM Cloud</a></li><li role=none><a role=treeitem title="Instructions to setup Minikube for use with Istio." href=/v1.1/docs/setup/kubernetes/prepare/platform-setup/minikube/>Minikube</a></li><li role=none><a role=treeitem title="Instructions to setup an OpenShift cluster for Istio." href=/v1.1/docs/setup/kubernetes/prepare/platform-setup/openshift/>OpenShift</a></li><li role=none><a role=treeitem title="Instructions to setup an OKE cluster for Istio." href=/v1.1/docs/setup/kubernetes/prepare/platform-setup/oci/>Oracle Cloud Infrastructure</a></li></ul></li></ul></li><li role=none><a role=treeitem title="Download the Istio release and prepare for installation." href=/v1.1/docs/setup/kubernetes/download/>Download</a></li><li role=treeitem aria-label=Install><button aria-hidden=true></button><a title="Choose the flows that best suit your needs and platform." href=/v1.1/docs/setup/kubernetes/install/>Install</a><ul role=group aria-expanded=false><li role=none><a role=treeitem title="Instructions to install and configure an Istio mesh in a Kubernetes cluster for evaluation." href=/v1.1/docs/setup/kubernetes/install/kubernetes/>Quick Start Evaluation Install</a></li><li role=none><a role=treeitem title="Instructions to install Istio using a Helm chart." href=/v1.1/docs/setup/kubernetes/install/helm/>Customizable Install with Helm</a></li><li role=treeitem aria-label="Multicluster Installation"><button aria-hidden=true></button><a title="Configure an Istio mesh spanning multiple Kubernetes clusters." href=/v1.1/docs/setup/kubernetes/install/multicluster/>Multicluster Installation</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Install an Istio mesh across multiple Kubernetes clusters using Istio Gateway to reach remote pods." href=/v1.1/docs/setup/kubernetes/install/multicluster/gateways/>Gateway Connectivity</a></li><li role=none><a role=treeitem title="Install an Istio mesh across multiple Kubernetes clusters with direct network access to remote pods." href=/v1.1/docs/setup/kubernetes/install/multicluster/vpn/>VPN Connectivity</a></li></ul></li><li role=treeitem aria-label="Platform-specific Instructions"><button aria-hidden=true></button><a title="Additional installation flows for the supported Kubernetes platforms." href=/v1.1/docs/setup/kubernetes/install/platform/>Platform-specific Instructions</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Instructions to install Istio using the Alibaba Cloud Kubernetes Container Service." href=/v1.1/docs/setup/kubernetes/install/platform/alicloud/>Alibaba Cloud</a></li><li role=none><a role=treeitem title="Instructions to install Istio using the Google Kubernetes Engine (GKE)." href=/v1.1/docs/setup/kubernetes/install/platform/gke/>Google Kubernetes Engine</a></li><li role=none><a role=treeitem title="Instructions to install Istio using IBM Cloud Public or IBM Cloud Private." href=/v1.1/docs/setup/kubernetes/install/platform/ibm/>IBM Cloud</a></li></ul></li></ul></li><li role=treeitem aria-label=Upgrade><button aria-hidden=true></button><a title="Information on upgrading Istio." href=/v1.1/docs/setup/kubernetes/upgrade/>Upgrade</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Important changes operators must understand before upgrading to Istio 1.1." href=/v1.1/docs/setup/kubernetes/upgrade/notice/>1.1 Upgrade Notice</a></li><li role=none><a role=treeitem title="Upgrade the Istio control plane and data plane independently." href=/v1.1/docs/setup/kubernetes/upgrade/steps/>Upgrade Steps</a></li></ul></li><li role=treeitem aria-label="More Guides"><button aria-hidden=true></button><a title="More information on additional setup tasks." href=/v1.1/docs/setup/kubernetes/additional-setup/>More Guides</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Describes the built-in Istio installation configuration profiles." href=/v1.1/docs/setup/kubernetes/additional-setup/config-profiles/>Installation Configuration Profiles</a></li><li role=none><a role=treeitem title="Install the Istio sidecar in application pods automatically using the sidecar injector webhook or manually using istioctl CLI." href=/v1.1/docs/setup/kubernetes/additional-setup/sidecar-injection/>Installing the Sidecar</a></li><li role=none><a role=treeitem title="Install and use Istio with the Istio CNI plugin, allowing operators to deploy services with lower privilege." href=/v1.1/docs/setup/kubernetes/additional-setup/cni/>Install Istio with the Istio CNI plugin</a></li><li role=none><a role=treeitem title="Integrate VMs and bare metal hosts into an Istio mesh deployed on Kubernetes." href=/v1.1/docs/setup/kubernetes/additional-setup/mesh-expansion/>Mesh Expansion</a></li></ul></li></ul></li><li role=treeitem aria-label="Nomad &amp; Consul"><button aria-hidden=true></button><a title="Instructions for installing the Istio control plane in a Consul based environment, with or without Nomad." href=/v1.1/docs/setup/consul/>Nomad &amp; Consul</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Quick Start instructions to setup the Istio service mesh with Docker Compose." href=/v1.1/docs/setup/consul/quick-start/>Quick Start on Docker</a></li><li role=none><a role=treeitem title="Instructions for installing the Istio control plane in a Consul-based environment, with or without Nomad." href=/v1.1/docs/setup/consul/install/>Installation</a></li></ul></li></ul></div></div><div class=card><button class="header dynamic" id=card57 title="How to do single specific targeted activities with the Istio system." aria-controls=card57-body><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#tasks"/></svg>Tasks</button><div class=body aria-labelledby=card57 role=region id=card57-body><ul role=tree aria-expanded=true aria-labelledby=card57><li role=treeitem aria-label="Traffic Management"><button aria-hidden=true></button><a title="Tasks that demonstrate Istio's traffic routing features." href=/v1.1/docs/tasks/traffic-management/>Traffic Management</a><ul role=group aria-expanded=false><li role=none><a role=treeitem title="This task shows you how to configure dynamic request routing to multiple versions of a microservice." href=/v1.1/docs/tasks/traffic-management/request-routing/>Configuring Request Routing</a></li><li role=none><a role=treeitem title="This task shows you how to inject faults to test the resiliency of your application." href=/v1.1/docs/tasks/traffic-management/fault-injection/>Fault Injection</a></li><li role=none><a role=treeitem title="Shows you how to migrate traffic from an old to new version of a service." href=/v1.1/docs/tasks/traffic-management/traffic-shifting/>Traffic Shifting</a></li><li role=none><a role=treeitem title="Shows you how to migrate TCP traffic from an old to new version of a TCP service." href=/v1.1/docs/tasks/traffic-management/tcp-traffic-shifting/>TCP Traffic Shifting</a></li><li role=none><a role=treeitem title="This task shows you how to setup request timeouts in Envoy using Istio." href=/v1.1/docs/tasks/traffic-management/request-timeouts/>Setting Request Timeouts</a></li><li role=none><a role=treeitem title="Describes how to configure Istio to expose a service outside of the service mesh." href=/v1.1/docs/tasks/traffic-management/ingress/>Control Ingress Traffic</a></li><li role=treeitem aria-label="Securing Ingress Gateway"><button aria-hidden=true></button><a title="Secure ingress gateway controllers using various approaches." href=/v1.1/docs/tasks/traffic-management/secure-ingress/>Securing Ingress Gateway</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Expose a service outside of the service mesh over TLS or mTLS." href=/v1.1/docs/tasks/traffic-management/secure-ingress/mount/>Securing Gateways with HTTPS With a File Mount-Based Approach</a></li><li role=none><a role=treeitem title="Describes how to configure Istio to expose a service outside of the service mesh, over TLS or Mutual TLS, using secret discovery service." href=/v1.1/docs/tasks/traffic-management/secure-ingress/sds/>Securing Gateways with HTTPS Using Secret Discovery Service</a></li></ul></li><li role=none><a role=treeitem title="Describes how to configure Istio to route traffic from services in the mesh to external services." href=/v1.1/docs/tasks/traffic-management/egress/>Control Egress Traffic</a></li><li role=none><a role=treeitem title="This task shows you how to configure circuit breaking for connections, requests, and outlier detection." href=/v1.1/docs/tasks/traffic-management/circuit-breaking/>Circuit Breaking</a></li><li role=none><a role=treeitem title="This task demonstrates the traffic mirroring/shadowing capabilities of Istio." href=/v1.1/docs/tasks/traffic-management/mirroring/>Mirroring</a></li></ul></li><li role=treeitem aria-label=Security><button aria-hidden=true></button><a title="Demonstrates how to secure the mesh." href=/v1.1/docs/tasks/security/>Security</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Shows you how to use Istio authentication policy to setup mutual TLS and basic end-user authentication." href=/v1.1/docs/tasks/security/authn-policy/>Authentication Policy</a></li><li role=none><a role=treeitem title="Shows how to set up role-based access control for HTTP services." href=/v1.1/docs/tasks/security/authz-http/>Authorization for HTTP Services</a></li><li role=none><a role=treeitem title="Shows how to set up role-based access control for TCP services." href=/v1.1/docs/tasks/security/authz-tcp/>Authorization for TCP Services</a></li><li role=none><a role=treeitem title="Tutorial on how to configure the groups-base authorization and configure the authorization of list-typed claims in Istio." href=/v1.1/docs/tasks/security/rbac-groups/>Authorization for groups and list claims</a></li><li role=none><a role=treeitem title="Shows how to use Authorization permissive mode." href=/v1.1/docs/tasks/security/authz-permissive/>Authorization permissive mode</a></li><li role=none><a role=treeitem title="This task shows you how to integrate a Vault Certificate Authority with Istio for mutual TLS." href=/v1.1/docs/tasks/security/vault-ca/>Istio Vault CA Integration</a></li><li role=none><a role=treeitem title="Shows you how to verify and test Istio's automatic mutual TLS authentication." href=/v1.1/docs/tasks/security/mutual-tls/>Mutual TLS Deep-Dive</a></li><li role=none><a role=treeitem title="Shows how operators can configure Citadel with existing root certificate, signing certificate and key." href=/v1.1/docs/tasks/security/plugin-ca-cert/>Plugging in External CA Key and Certificate</a></li><li role=none><a role=treeitem title="Shows how to enable Citadel health checking with Kubernetes." href=/v1.1/docs/tasks/security/health-check/>Citadel Health Checking</a></li><li role=none><a role=treeitem title="Shows how to enable SDS (secret discovery service) for Istio identity provisioning." href=/v1.1/docs/tasks/security/auth-sds/>Provisioning Identity through SDS</a></li><li role=none><a role=treeitem title="Shows you how to incrementally migrate your Istio services to mutual TLS." href=/v1.1/docs/tasks/security/mtls-migration/>Mutual TLS Migration</a></li><li role=none><a role=treeitem title="Shows how to enable mutual TLS on HTTPS services." href=/v1.1/docs/tasks/security/https-overlay/>Mutual TLS over HTTPS</a></li></ul></li><li role=treeitem aria-label=Policies><button aria-hidden=true></button><a title="Demonstrates policy enforcement features." href=/v1.1/docs/tasks/policy-enforcement/>Policies</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="This task shows you how to enable Istio policy enforcement." href=/v1.1/docs/tasks/policy-enforcement/enabling-policy/>Enabling Policy Enforcement</a></li><li role=none><a role=treeitem title="This task shows you how to use Istio to dynamically limit the traffic to a service." href=/v1.1/docs/tasks/policy-enforcement/rate-limiting/>Enabling Rate Limits</a></li><li role=none><a role=treeitem title="Shows how to modify request headers and routing using policy adapters." href=/v1.1/docs/tasks/policy-enforcement/control-headers/>Control Headers and Routing</a></li><li role=none><a role=treeitem title="Shows how to control access to a service using simple denials or white/black listing." href=/v1.1/docs/tasks/policy-enforcement/denial-and-list/>Denials and White/Black Listing</a></li></ul></li><li role=treeitem aria-label=Telemetry><button aria-hidden=true></button><a title="Demonstrates how to collect telemetry information from the mesh." href=/v1.1/docs/tasks/telemetry/>Telemetry</a><ul role=group aria-expanded=false><li role=treeitem aria-label=Metrics><button aria-hidden=true></button><a title="Demonstrates the configuration, collection, and processing of Istio mesh metrics." href=/v1.1/docs/tasks/telemetry/metrics/>Metrics</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="This task shows you how to configure Istio to collect and customize metrics." href=/v1.1/docs/tasks/telemetry/metrics/collecting-metrics/>Collecting Metrics</a></li><li role=none><a role=treeitem title="This task shows you how to configure Istio to collect metrics for TCP services." href=/v1.1/docs/tasks/telemetry/metrics/tcp-metrics/>Collecting Metrics for TCP services</a></li><li role=none><a role=treeitem title="This task shows you how to query for Istio Metrics using Prometheus." href=/v1.1/docs/tasks/telemetry/metrics/querying-metrics/>Querying Metrics from Prometheus</a></li><li role=none><a role=treeitem title="This task shows you how to setup and use the Istio Dashboard to monitor mesh traffic." href=/v1.1/docs/tasks/telemetry/metrics/using-istio-dashboard/>Visualizing Metrics with Grafana</a></li></ul></li><li role=treeitem aria-label=Logs><button aria-hidden=true></button><a title="Demonstrates the configuration, collection, and processing of Istio mesh logs." href=/v1.1/docs/tasks/telemetry/logs/>Logs</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="This task shows you how to configure Istio to collect and customize logs." href=/v1.1/docs/tasks/telemetry/logs/collecting-logs/>Collecting Logs</a></li><li role=none><a role=treeitem title="This task shows you how to configure Envoy proxies to print access log to their standard output." href=/v1.1/docs/tasks/telemetry/logs/access-log/>Getting Envoy&#39;s Access Logs</a></li><li role=none><a role=treeitem title="This task shows you how to configure Istio to log to a Fluentd daemon." href=/v1.1/docs/tasks/telemetry/logs/fluentd/>Logging with Fluentd</a></li></ul></li><li role=treeitem aria-label="Distributed Tracing"><button aria-hidden=true></button><a title="This task shows you how to configure Istio-enabled applications to collect trace spans." href=/v1.1/docs/tasks/telemetry/distributed-tracing/>Distributed Tracing</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Overview of distributed tracing in Istio." href=/v1.1/docs/tasks/telemetry/distributed-tracing/overview/>Overview</a></li><li role=none><a role=treeitem title="Learn how to configure the proxies to send tracing requests to Jaeger." href=/v1.1/docs/tasks/telemetry/distributed-tracing/jaeger/>Jaeger</a></li><li role=none><a role=treeitem title="Learn how to configure the proxies to send tracing requests to Zipkin." href=/v1.1/docs/tasks/telemetry/distributed-tracing/zipkin/>Zipkin</a></li><li role=none><a role=treeitem title="How to configure the proxies to send tracing requests to LightStep." href=/v1.1/docs/tasks/telemetry/distributed-tracing/lightstep/>LightStep</a></li></ul></li><li role=none><a role=treeitem title="This task shows you how to visualize your services within an Istio mesh." href=/v1.1/docs/tasks/telemetry/kiali/>Visualizing Your Mesh</a></li><li role=none><a role=treeitem title="This task shows you how to configure external access to the set of Istio telemetry addons." href=/v1.1/docs/tasks/telemetry/gateways/>Remotely Accessing Telemetry Addons</a></li></ul></li></ul></div></div><div class=card><button class="header dynamic" id=card72 title="A variety of fully working example uses for Istio that you can experiment with." aria-controls=card72-body><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#examples"/></svg>Examples</button><div class=body aria-labelledby=card72 role=region id=card72-body><ul role=tree aria-expanded=true aria-labelledby=card72><li role=none><a role=treeitem title="Deploys a sample application composed of four separate microservices used to demonstrate various Istio features." href=/v1.1/docs/examples/bookinfo/>Bookinfo Application</a></li><li role=none><a role=treeitem title="Explains how to manually integrate Google Cloud Endpoints services with Istio." href=/v1.1/docs/examples/endpoints/>Install Istio for Google Cloud Endpoints Services</a></li><li role=none><a role=treeitem title="Illustrates how to use Istio to control a Kubernetes cluster and raw VMs as a single mesh." href=/v1.1/docs/examples/integrating-vms/>Integrating Virtual Machines</a></li><li role=treeitem aria-label="Edge Traffic Management"><button aria-hidden=true></button><a title="A variety of advanced examples for managing traffic at the edge (i.e., ingress and egress traffic) of an Istio service mesh." href=/v1.1/docs/examples/advanced-gateways/>Edge Traffic Management</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Describes how to configure SNI passthrough for an ingress gateway." href=/v1.1/docs/examples/advanced-gateways/ingress-sni-passthrough/>Ingress Gateway without TLS Termination</a></li><li role=none><a role=treeitem title="Describes how to configure Istio to perform TLS origination for traffic to external services." href=/v1.1/docs/examples/advanced-gateways/egress-tls-origination/>TLS Origination for Egress Traffic</a></li><li role=none><a role=treeitem title="Describes how to configure Istio to direct traffic to external services through a dedicated gateway." href=/v1.1/docs/examples/advanced-gateways/egress-gateway/>Configure an Egress Gateway</a></li><li role=none><a role=treeitem title="Describes how to configure an Egress Gateway to perform TLS origination to external services." href=/v1.1/docs/examples/advanced-gateways/egress-gateway-tls-origination/>Egress Gateway with TLS Origination</a></li><li role=none><a role=treeitem title="Describes how to enable egress traffic for a set of hosts in a common domain, instead of configuring each and every host separately." href=/v1.1/docs/examples/advanced-gateways/wildcard-egress-hosts/>Configure Egress Traffic using Wildcard Hosts</a></li><li role=none><a role=treeitem title="Describes how to configure SNI monitoring and apply policies on TLS egress traffic." href=/v1.1/docs/examples/advanced-gateways/egress_sni_monitoring_and_policies/>SNI Monitoring and Policies for TLS Egress Traffic</a></li><li role=none><a role=treeitem title="Describes how to configure Istio to let applications use an external HTTPS proxy." href=/v1.1/docs/examples/advanced-gateways/http-proxy/>Connect to an External HTTPS Proxy</a></li><li role=none><a role=treeitem title="Demonstrates how to obtain Let's Encrypt TLS certificates for Kubernetes Ingress automatically using Cert-Manager." href=/v1.1/docs/examples/advanced-gateways/ingress-certmgr/>Securing Kubernetes Ingress with Cert-Manager</a></li></ul></li><li role=treeitem aria-label="Multicluster Service Mesh"><button aria-hidden=true></button><a title="A variety of fully working multicluster examples for Istio that you can experiment with." href=/v1.1/docs/examples/multicluster/>Multicluster Service Mesh</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Configuring remote services in a gateway-connected multicluster mesh." href=/v1.1/docs/examples/multicluster/gateways/>Gateway-Connected Clusters</a></li><li role=none><a role=treeitem title="Set up a multicluster mesh over two GKE clusters." href=/v1.1/docs/examples/multicluster/gke/>Google Kubernetes Engine</a></li><li role=none><a role=treeitem title="Example multicluster mesh over two IBM Cloud Private clusters." href=/v1.1/docs/examples/multicluster/icp/>IBM Cloud Private</a></li><li role=none><a role=treeitem title="Multicluster mesh between IBM Cloud Kubernetes Service and IBM Cloud Private." href=/v1.1/docs/examples/multicluster/iks-icp/>IBM Cloud Kubernetes Service &amp; IBM Cloud Private</a></li><li role=none><a role=treeitem title="Leveraging Istio's Split-horizon EDS to create a multicluster mesh." href=/v1.1/docs/examples/multicluster/split-horizon-eds/>Cluster-Aware Service Routing</a></li></ul></li></ul></div></div><div class=card><button class="header dynamic" id=card106 title="Detailed authoritative reference material such as command-line options, configuration options, and API calling parameters." aria-controls=card106-body><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#reference"/></svg>Reference</button><div class="body default" aria-labelledby=card106 role=region id=card106-body><ul role=tree aria-expanded=true aria-labelledby=card106><li role=treeitem aria-label=Configuration><button class=show aria-hidden=true></button><a title="Detailed information on configuration options." href=/v1.1/docs/reference/config/>Configuration</a><ul role=group aria-expanded=true><li role=treeitem aria-label="Traffic Management"><button aria-hidden=true></button><a title="Describes how to configure HTTP/TCP routing features." href=/v1.1/docs/reference/config/networking/>Traffic Management</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Configuration affecting load balancing, outlier detection, etc." href=/v1.1/docs/reference/config/networking/v1alpha3/destination-rule/>Destination Rule</a></li><li role=none><a role=treeitem title="Configuration affecting insertion of custom Envoy filters." href=/v1.1/docs/reference/config/networking/v1alpha3/envoy-filter/>Envoy Filter</a></li><li role=none><a role=treeitem title="Configuration affecting edge load balancer." href=/v1.1/docs/reference/config/networking/v1alpha3/gateway/>Gateway</a></li><li role=none><a role=treeitem title="Configuration affecting service registry." href=/v1.1/docs/reference/config/networking/v1alpha3/service-entry/>Service Entry</a></li><li role=none><a role=treeitem title="Configuration affecting network reachability of a sidecar." href=/v1.1/docs/reference/config/networking/v1alpha3/sidecar/>Sidecar</a></li><li role=none><a role=treeitem title="Configuration affecting label/content routing, sni routing, etc." href=/v1.1/docs/reference/config/networking/v1alpha3/virtual-service/>Virtual Service</a></li></ul></li><li role=treeitem aria-label=Authorization><button aria-hidden=true></button><a title="Describes how to configure Istio's authorization features." href=/v1.1/docs/reference/config/authorization/>Authorization</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Describes the supported constraints and properties." href=/v1.1/docs/reference/config/authorization/constraints-and-properties/>Constraints and Properties</a></li><li role=none><a role=treeitem title="Configuration for Role Based Access Control." href=/v1.1/docs/reference/config/authorization/istio.rbac.v1alpha1/>RBAC</a></li></ul></li><li role=none><a role=treeitem title="Describes the options available when installing Istio using the included Helm chart." href=/v1.1/docs/reference/config/installation-options/>Installation Options</a></li><li role=none><span role=treeitem class=current title="Details the Helm chart installation options differences between release-1.0 and release-1.1.">Installation Options Changes</span></li><li role=treeitem aria-label="Policies and Telemetry"><button aria-hidden=true></button><a title="Describes how to configure Istio's policy and telemetry features." href=/v1.1/docs/reference/config/policy-and-telemetry/>Policies and Telemetry</a><ul role=group aria-expanded=false><li role=none><a role=treeitem title="Describes the base attribute vocabulary used for policy and control." href=/v1.1/docs/reference/config/policy-and-telemetry/attribute-vocabulary/>Attribute Vocabulary</a></li><li role=none><a role=treeitem title="Mixer configuration expression language reference." href=/v1.1/docs/reference/config/policy-and-telemetry/expression-language/>Expression Language</a></li><li role=treeitem aria-label=Adapters><button aria-hidden=true></button><a title="Mixer adapters allow Istio to interface to a variety of infrastructure backends for such things as metrics and logs." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/>Adapters</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Adapter to deliver metrics to Apache SkyWalking." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/apache-skywalking/>Apache SkyWalking</a></li><li role=none><a role=treeitem title="Adapter for Apigee's distributed policy checks and analytics." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/apigee/>Apigee</a></li><li role=none><a role=treeitem title="Adapter for circonus.com's monitoring solution." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/circonus/>Circonus</a></li><li role=none><a role=treeitem title="Adapter for cloudmonitor metrics." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/cloudmonitor/>CloudMonitor</a></li><li role=none><a role=treeitem title="Adapter for cloudwatch metrics." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/cloudwatch/>CloudWatch</a></li><li role=none><a role=treeitem title="Adapter to deliver metrics to a dogstatsd agent for delivery to DataDog." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/datadog/>Datadog</a></li><li role=none><a role=treeitem title="Adapter that always returns a precondition denial." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/denier/>Denier</a></li><li role=none><a role=treeitem title="Adapter that delivers logs to a Fluentd daemon." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/fluentd/>Fluentd</a></li><li role=none><a role=treeitem title="Adapter that extracts information from a Kubernetes environment." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/kubernetesenv/>Kubernetes Env</a></li><li role=none><a role=treeitem title="Adapter that performs whitelist or blacklist checks." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/list/>List</a></li><li role=none><a role=treeitem title="Adapter for a simple in-memory quota management system." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/memquota/>Memory quota</a></li><li role=none><a role=treeitem title="Adapter that implements an Open Policy Agent engine." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/opa/>OPA</a></li><li role=none><a role=treeitem title="Adapter that exposes Istio metrics for ingestion by a Prometheus harvester." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/prometheus/>Prometheus</a></li><li role=none><a role=treeitem title="Adapter for a Redis-based quota management system." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/redisquota/>Redis Quota</a></li><li role=none><a role=treeitem title="Adapter that sends metrics to SignalFx." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/signalfx/>SignalFx</a></li><li role=none><a role=treeitem title="Adapter to deliver logs and metrics to Papertrail and AppOptics backends." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/solarwinds/>SolarWinds</a></li><li role=none><a role=treeitem title="Adapter to deliver logs, metrics, and traces to Stackdriver." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/stackdriver/>Stackdriver</a></li><li role=none><a role=treeitem title="Adapter to deliver metrics to a StatsD backend." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/statsd/>StatsD</a></li><li role=none><a role=treeitem title="Adapter to locally output logs and metrics." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/stdio/>Stdio</a></li><li role=none><a role=treeitem title="Adapter to deliver metrics to Wavefront by VMware." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/wavefront/>Wavefront by VMware</a></li><li role=none><a role=treeitem title="Adapter to deliver tracing data to Zipkin." href=/v1.1/docs/reference/config/policy-and-telemetry/adapters/zipkin/>Zipkin</a></li></ul></li><li role=none><a role=treeitem title="Default Metrics exported from Istio through Mixer." href=/v1.1/docs/reference/config/policy-and-telemetry/metrics/>Default Metrics</a></li><li role=treeitem aria-label=Templates><button aria-hidden=true></button><a title="Mixer templates are used to send data to individual adapters." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/>Templates</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="A template that represents a single API key." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/apikey/>API Key</a></li><li role=none><a role=treeitem title="The Analytics template is used to dispatch runtime telemetry to Apigee." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/analytics/>Analytics</a></li><li role=none><a role=treeitem title="A template used to represent an access control query." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/authorization/>Authorization</a></li><li role=none><a role=treeitem title="A template that carries no data, useful for testing." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/checknothing/>Check Nothing</a></li><li role=none><a role=treeitem title="A template designed to report observed communication edges between workloads." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/edge/>Edge</a></li><li role=none><a role=treeitem title="A template that is used to control the production of Kubernetes-specific attributes." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/kubernetes/>Kubernetes</a></li><li role=none><a role=treeitem title="A template designed to let you perform list checking operations." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/listentry/>List Entry</a></li><li role=none><a role=treeitem title="A template that represents a single runtime log entry." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/logentry/>Log Entry</a></li><li role=none><a role=treeitem title="A template that represents a single runtime metric." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/metric/>Metric</a></li><li role=none><a role=treeitem title="A template that represents a quota allocation request." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/quota/>Quota</a></li><li role=none><a role=treeitem title="A template that carries no data, useful for testing." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/reportnothing/>Report Nothing</a></li><li role=none><a role=treeitem title="A template that represents an individual span within a distributed trace." href=/v1.1/docs/reference/config/policy-and-telemetry/templates/tracespan/>Trace Span</a></li></ul></li><li role=none><a role=treeitem title="Configuration state for the Mixer client library." href=/v1.1/docs/reference/config/policy-and-telemetry/istio.mixer.v1.config.client/>Mixer Client</a></li><li role=none><a role=treeitem title="Describes the rules used to configure Mixer's policy and telemetry features." href=/v1.1/docs/reference/config/policy-and-telemetry/istio.policy.v1beta1/>Rules</a></li></ul></li><li role=none><a role=treeitem title="Authentication policy for Istio services." href=/v1.1/docs/reference/config/istio.authentication.v1alpha1/>Authentication Policy</a></li><li role=none><a role=treeitem title="Configuration affecting the service mesh as a whole." href=/v1.1/docs/reference/config/istio.mesh.v1alpha1/>Service Mesh</a></li></ul></li><li role=treeitem aria-label=Commands><button aria-hidden=true></button><a title="Describes usage and options of the Istio commands and utilities." href=/v1.1/docs/reference/commands/>Commands</a><ul role=group aria-expanded=false class=leaf-section><li role=none><a role=treeitem title="Galley provides configuration management services for Istio." href=/v1.1/docs/reference/commands/galley/>galley</a></li><li role=none><a role=treeitem title="Istio Certificate Authority (CA)." href=/v1.1/docs/reference/commands/istio_ca/>istio_ca</a></li><li role=none><a role=treeitem title="Istio control interface." href=/v1.1/docs/reference/commands/istioctl/>istioctl</a></li><li role=none><a role=treeitem title="Utility to trigger direct calls to Mixer's API." href=/v1.1/docs/reference/commands/mixc/>mixc</a></li><li role=none><a role=treeitem title="Mixer is Istio's abstraction on top of infrastructure backends." href=/v1.1/docs/reference/commands/mixs/>mixs</a></li><li role=none><a role=treeitem title="Istio security per-node agent." href=/v1.1/docs/reference/commands/node_agent/>node_agent</a></li><li role=none><a role=treeitem title="Istio Pilot agent." href=/v1.1/docs/reference/commands/pilot-agent/>pilot-agent</a></li><li role=none><a role=treeitem title="Istio Pilot." href=/v1.1/docs/reference/commands/pilot-discovery/>pilot-discovery</a></li><li role=none><a role=treeitem title="Kubernetes webhook for automatic Istio sidecar injection." href=/v1.1/docs/reference/commands/sidecar-injector/>sidecar-injector</a></li></ul></li></ul></div></div></div></nav></div><div class=article-container><button tabindex=-1 id=sidebar-toggler title="Toggle the navigation bar"><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#pull"/></svg></button><nav aria-label=Breadcrumb><ol><li><a href=/v1.1/ title="Connect, secure, control, and observe services.">Istio</a></li><li><a href=/v1.1/docs/ title="Learn how to deploy, use, and operate Istio.">Docs</a></li><li><a href=/v1.1/docs/reference/ title="Detailed authoritative reference material such as command-line options, configuration options, and API calling parameters.">Reference</a></li><li><a href=/v1.1/docs/reference/config/ title="Detailed information on configuration options.">Configuration</a></li><li>Installation Options Changes</li></ol></nav><article aria-labelledby=title><div class=title-area><div><h1 id=title>Installation Options Changes</h1><p class=byline><span title="1852 words"><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#clock"/></svg><span>&nbsp;</span>9 minute read</span></p></div></div><nav class=toc-inlined aria-label="Table of Contents"><div><hr><ol><li role=none aria-label="Modified configuration options"><a href=#modified-configuration-options>Modified configuration options</a><ol><li role=none aria-label="Modified servicegraph key/value pairs"><a href=#modified-servicegraph-key-value-pairs>Modified <code>servicegraph</code> key/value pairs</a><li role=none aria-label="Modified tracing key/value pairs"><a href=#modified-tracing-key-value-pairs>Modified <code>tracing</code> key/value pairs</a><li role=none aria-label="Modified global key/value pairs"><a href=#modified-global-key-value-pairs>Modified <code>global</code> key/value pairs</a><li role=none aria-label="Modified gateways key/value pairs"><a href=#modified-gateways-key-value-pairs>Modified <code>gateways</code> key/value pairs</a><li role=none aria-label="Modified certmanager key/value pairs"><a href=#modified-certmanager-key-value-pairs>Modified <code>certmanager</code> key/value pairs</a><li role=none aria-label="Modified kiali key/value pairs"><a href=#modified-kiali-key-value-pairs>Modified <code>kiali</code> key/value pairs</a><li role=none aria-label="Modified security key/value pairs"><a href=#modified-security-key-value-pairs>Modified <code>security</code> key/value pairs</a><li role=none aria-label="Modified pilot key/value pairs"><a href=#modified-pilot-key-value-pairs>Modified <code>pilot</code> key/value pairs</a></ol></li><li role=none aria-label="New configuration options"><a href=#new-configuration-options>New configuration options</a><ol><li role=none aria-label="New istio_cni key/value pairs"><a href=#new-istio-cni-key-value-pairs>New <code>istio_cni</code> key/value pairs</a><li role=none aria-label="New servicegraph key/value pairs"><a href=#new-servicegraph-key-value-pairs>New <code>servicegraph</code> key/value pairs</a><li role=none aria-label="New tracing key/value pairs"><a href=#new-tracing-key-value-pairs>New <code>tracing</code> key/value pairs</a><li role=none aria-label="New sidecarInjectorWebhook key/value pairs"><a href=#new-sidecarinjectorwebhook-key-value-pairs>New <code>sidecarInjectorWebhook</code> key/value pairs</a><li role=none aria-label="New global key/value pairs"><a href=#new-global-key-value-pairs>New <code>global</code> key/value pairs</a><li role=none aria-label="New mixer key/value pairs"><a href=#new-mixer-key-value-pairs>New <code>mixer</code> key/value pairs</a><li role=none aria-label="New grafana key/value pairs"><a href=#new-grafana-key-value-pairs>New <code>grafana</code> key/value pairs</a><li role=none aria-label="New prometheus key/value pairs"><a href=#new-prometheus-key-value-pairs>New <code>prometheus</code> key/value pairs</a><li role=none aria-label="New gateways key/value pairs"><a href=#new-gateways-key-value-pairs>New <code>gateways</code> key/value pairs</a><li role=none aria-label="New kiali key/value pairs"><a href=#new-kiali-key-value-pairs>New <code>kiali</code> key/value pairs</a><li role=none aria-label="New istiocoredns key/value pairs"><a href=#new-istiocoredns-key-value-pairs>New <code>istiocoredns</code> key/value pairs</a><li role=none aria-label="New security key/value pairs"><a href=#new-security-key-value-pairs>New <code>security</code> key/value pairs</a><li role=none aria-label="New nodeagent key/value pairs"><a href=#new-nodeagent-key-value-pairs>New <code>nodeagent</code> key/value pairs</a><li role=none aria-label="New pilot key/value pairs"><a href=#new-pilot-key-value-pairs>New <code>pilot</code> key/value pairs</a></ol></li><li role=none aria-label="Removed configuration options"><a href=#removed-configuration-options>Removed configuration options</a><ol><li role=none aria-label="Removed ingress key/value pairs"><a href=#removed-ingress-key-value-pairs>Removed <code>ingress</code> key/value pairs</a><li role=none aria-label="Removed servicegraph key/value pairs"><a href=#removed-servicegraph-key-value-pairs>Removed <code>servicegraph</code> key/value pairs</a><li role=none aria-label="Removed telemetry-gateway key/value pairs"><a href=#removed-telemetry-gateway-key-value-pairs>Removed <code>telemetry-gateway</code> key/value pairs</a><li role=none aria-label="Removed global key/value pairs"><a href=#removed-global-key-value-pairs>Removed <code>global</code> key/value pairs</a><li role=none aria-label="Removed mixer key/value pairs"><a href=#removed-mixer-key-value-pairs>Removed <code>mixer</code> key/value pairs</a><li role=none aria-label="Removed grafana key/value pairs"><a href=#removed-grafana-key-value-pairs>Removed <code>grafana</code> key/value pairs</a><li role=none aria-label="Removed gateways key/value pairs"><a href=#removed-gateways-key-value-pairs>Removed <code>gateways</code> key/value pairs</a><li role=none aria-label="Removed tracing key/value pairs"><a href=#removed-tracing-key-value-pairs>Removed <code>tracing</code> key/value pairs</a><li role=none aria-label="Removed kiali key/value pairs"><a href=#removed-kiali-key-value-pairs>Removed <code>kiali</code> key/value pairs</a><li role=none aria-label="Removed pilot key/value pairs"><a href=#removed-pilot-key-value-pairs>Removed <code>pilot</code> key/value pairs</a></ol></li><li role=none aria-label="See also"><a href=#see-also>See also</a></li></ol><hr></div></nav><p>The tables below show changes made to the installation options used to customize Istio install using Helm between release 1.0 and release 1.1. The tables are grouped in to three different categories:</p><ul><li>The installation options already in the previous release but whose values or descriptions have been modified in the new release.</li><li>The new installation options added in the new release.</li><li>The installation options removed from the new release.</li></ul><h2 id=modified-configuration-options>Modified configuration options</h2><h3 id=modified-servicegraph-key-value-pairs>Modified <code>servicegraph</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Old Default Value</th><th>New Default Value</th><th>Old Description</th><th>New Description</th></tr></thead><tbody><tr><td><code>servicegraph.ingress.hosts</code></td><td><code>servicegraph.local</code></td><td><code>servicegraph.local</code></td><td></td><td><code>Used to create an Ingress record.</code></td></tr></tbody></table><h3 id=modified-tracing-key-value-pairs>Modified <code>tracing</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Old Default Value</th><th>New Default Value</th><th>Old Description</th><th>New Description</th></tr></thead><tbody><tr><td><code>tracing.jaeger.tag</code></td><td><code>1.5</code></td><td><code>1.9</code></td><td></td><td></td></tr></tbody></table><h3 id=modified-global-key-value-pairs>Modified <code>global</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Old Default Value</th><th>New Default Value</th><th>Old Description</th><th>New Description</th></tr></thead><tbody><tr><td><code>global.hub</code></td><td><code>gcr.io/istio-release</code></td><td><code>gcr.io/istio-release</code></td><td></td><td><code>Default hub for Istio images.Releases are published to docker hub under 'istio' project.Daily builds from prow are on gcr.io, and nightly builds from circle on docker.io/istionightly</code></td></tr><tr><td><code>global.tag</code></td><td><code>release-1.0-latest-daily</code></td><td><code>release-1.1-latest-daily</code></td><td></td><td><code>Default tag for Istio images.</code></td></tr><tr><td><code>global.proxy.resources.requests.cpu</code></td><td><code>10m</code></td><td><code>100m</code></td><td></td><td></td></tr><tr><td><code>global.proxy.accessLogFile</code></td><td><code>&quot;/dev/stdout&quot;</code></td><td><code>&quot;&quot;</code></td><td></td><td></td></tr><tr><td><code>global.proxy.enableCoreDump</code></td><td><code>false</code></td><td><code>false</code></td><td></td><td><code>If set, newly injected sidecars will have core dumps enabled.</code></td></tr><tr><td><code>global.proxy.autoInject</code></td><td><code>enabled</code></td><td><code>enabled</code></td><td></td><td><code>This controls the 'policy' in the sidecar injector.</code></td></tr><tr><td><code>global.proxy.envoyStatsd.enabled</code></td><td><code>true</code></td><td><code>false</code></td><td></td><td><code>If enabled is set to true, host and port must also be provided. Istio no longer provides a statsd collector.</code></td></tr><tr><td><code>global.proxy.envoyStatsd.host</code></td><td><code>istio-statsd-prom-bridge</code></td><td>``</td><td></td><td><code>example: statsd-svc.istio-system</code></td></tr><tr><td><code>global.proxy.envoyStatsd.port</code></td><td><code>9125</code></td><td>``</td><td></td><td><code>example: 9125</code></td></tr><tr><td><code>global.proxy_init.image</code></td><td><code>proxy_init</code></td><td><code>proxy_init</code></td><td></td><td><code>Base name for the proxy_init container, used to configure iptables.</code></td></tr><tr><td><code>global.controlPlaneSecurityEnabled</code></td><td><code>false</code></td><td><code>false</code></td><td></td><td><code>controlPlaneMtls enabled. Will result in delays starting the pods while secrets arepropagated, not recommended for tests.</code></td></tr><tr><td><code>global.disablePolicyChecks</code></td><td><code>false</code></td><td><code>true</code></td><td></td><td><code>disablePolicyChecks disables mixer policy checks.if mixer.policy.enabled==true then disablePolicyChecks has affect.Will set the value with same name in istio config map - pilot needs to be restarted to take effect.</code></td></tr><tr><td><code>global.enableTracing</code></td><td><code>true</code></td><td><code>true</code></td><td></td><td><code>EnableTracing sets the value with same name in istio config map, requires pilot restart to take effect.</code></td></tr><tr><td><code>global.mtls.enabled</code></td><td><code>false</code></td><td><code>false</code></td><td></td><td><code>Default setting for service-to-service mtls. Can be set explicitly usingdestination rules or service annotations.</code></td></tr><tr><td><code>global.oneNamespace</code></td><td><code>false</code></td><td><code>false</code></td><td></td><td><code>Whether to restrict the applications namespace the controller manages;If not set, controller watches all namespaces</code></td></tr><tr><td><code>global.configValidation</code></td><td><code>true</code></td><td><code>true</code></td><td></td><td><code>Whether to perform server-side validation of configuration.</code></td></tr></tbody></table><h3 id=modified-gateways-key-value-pairs>Modified <code>gateways</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Old Default Value</th><th>New Default Value</th><th>Old Description</th><th>New Description</th></tr></thead><tbody><tr><td><code>gateways.istio-ingressgateway.type</code></td><td><code>LoadBalancer #change to NodePort, ClusterIP or LoadBalancer if need be</code></td><td><code>LoadBalancer</code></td><td></td><td><code>change to NodePort, ClusterIP or LoadBalancer if need be</code></td></tr><tr><td><code>gateways.istio-egressgateway.enabled</code></td><td><code>true</code></td><td><code>false</code></td><td></td><td></td></tr><tr><td><code>gateways.istio-egressgateway.type</code></td><td><code>ClusterIP #change to NodePort or LoadBalancer if need be</code></td><td><code>ClusterIP</code></td><td></td><td><code>change to NodePort or LoadBalancer if need be</code></td></tr></tbody></table><h3 id=modified-certmanager-key-value-pairs>Modified <code>certmanager</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Old Default Value</th><th>New Default Value</th><th>Old Description</th><th>New Description</th></tr></thead><tbody><tr><td><code>certmanager.tag</code></td><td><code>v0.3.1</code></td><td><code>v0.6.2</code></td><td></td><td></td></tr></tbody></table><h3 id=modified-kiali-key-value-pairs>Modified <code>kiali</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Old Default Value</th><th>New Default Value</th><th>Old Description</th><th>New Description</th></tr></thead><tbody><tr><td><code>kiali.tag</code></td><td><code>istio-release-1.0</code></td><td><code>v0.14</code></td><td></td><td></td></tr></tbody></table><h3 id=modified-security-key-value-pairs>Modified <code>security</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Old Default Value</th><th>New Default Value</th><th>Old Description</th><th>New Description</th></tr></thead><tbody><tr><td><code>security.selfSigned</code></td><td><code>true # indicate if self-signed CA is used.</code></td><td><code>true</code></td><td></td><td><code>indicate if self-signed CA is used.</code></td></tr></tbody></table><h3 id=modified-pilot-key-value-pairs>Modified <code>pilot</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Old Default Value</th><th>New Default Value</th><th>Old Description</th><th>New Description</th></tr></thead><tbody><tr><td><code>pilot.autoscaleMax</code></td><td><code>1</code></td><td><code>5</code></td><td></td><td></td></tr><tr><td><code>pilot.traceSampling</code></td><td><code>100.0</code></td><td><code>1.0</code></td><td></td><td></td></tr></tbody></table><h2 id=new-configuration-options>New configuration options</h2><h3 id=new-istio-cni-key-value-pairs>New <code>istio_cni</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>istio_cni.enabled</code></td><td><code>false</code></td><td></td></tr></tbody></table><h3 id=new-servicegraph-key-value-pairs>New <code>servicegraph</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>servicegraph.nodeSelector</code></td><td><code>{}</code></td><td></td></tr></tbody></table><h3 id=new-tracing-key-value-pairs>New <code>tracing</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>tracing.nodeSelector</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>tracing.zipkin.hub</code></td><td><code>docker.io/openzipkin</code></td><td></td></tr><tr><td><code>tracing.zipkin.tag</code></td><td><code>2</code></td><td></td></tr><tr><td><code>tracing.zipkin.probeStartupDelay</code></td><td><code>200</code></td><td></td></tr><tr><td><code>tracing.zipkin.queryPort</code></td><td><code>9411</code></td><td></td></tr><tr><td><code>tracing.zipkin.resources.limits.cpu</code></td><td><code>300m</code></td><td></td></tr><tr><td><code>tracing.zipkin.resources.limits.memory</code></td><td><code>900Mi</code></td><td></td></tr><tr><td><code>tracing.zipkin.resources.requests.cpu</code></td><td><code>150m</code></td><td></td></tr><tr><td><code>tracing.zipkin.resources.requests.memory</code></td><td><code>900Mi</code></td><td></td></tr><tr><td><code>tracing.zipkin.javaOptsHeap</code></td><td><code>700</code></td><td></td></tr><tr><td><code>tracing.zipkin.maxSpans</code></td><td><code>500000</code></td><td></td></tr><tr><td><code>tracing.zipkin.node.cpus</code></td><td><code>2</code></td><td></td></tr></tbody></table><h3 id=new-sidecarinjectorwebhook-key-value-pairs>New <code>sidecarInjectorWebhook</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>sidecarInjectorWebhook.nodeSelector</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>sidecarInjectorWebhook.rewriteAppHTTPProbe</code></td><td><code>false</code></td><td><code>If true, webhook or istioctl injector will rewrite PodSpec for livenesshealth check to redirect request to sidecar. This makes liveness check workeven when mTLS is enabled.</code></td></tr></tbody></table><h3 id=new-global-key-value-pairs>New <code>global</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>global.monitoringPort</code></td><td><code>15014</code></td><td><code>monitoring port used by mixer, pilot, galley</code></td></tr><tr><td><code>global.k8sIngress.enabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>global.k8sIngress.gatewayName</code></td><td><code>ingressgateway</code></td><td><code>Gateway used for k8s Ingress resources. By default it isusing 'istio:ingressgateway' that will be installed by setting'gateways.enabled' and 'gateways.istio-ingressgateway.enabled'flags to true.</code></td></tr><tr><td><code>global.k8sIngress.enableHttps</code></td><td><code>false</code></td><td><code>enableHttps will add port 443 on the ingress.It REQUIRES that the certificates are installed in theexpected secrets - enabling this option without certificateswill result in LDS rejection and the ingress will not work.</code></td></tr><tr><td><code>global.proxy.clusterDomain</code></td><td><code>&quot;cluster.local&quot;</code></td><td><code>cluster domain. Default value is &quot;cluster.local&quot;.</code></td></tr><tr><td><code>global.proxy.resources.requests.memory</code></td><td><code>128Mi</code></td><td></td></tr><tr><td><code>global.proxy.resources.limits.cpu</code></td><td><code>2000m</code></td><td></td></tr><tr><td><code>global.proxy.resources.limits.memory</code></td><td><code>128Mi</code></td><td></td></tr><tr><td><code>global.proxy.concurrency</code></td><td><code>2</code></td><td><code>Controls number of Proxy worker threads.If set to 0 (default), then start worker thread for each CPU thread/core.</code></td></tr><tr><td><code>global.proxy.accessLogFormat</code></td><td><code>&quot;&quot;</code></td><td><code>Configure how and what fields are displayed in sidecar access log. Setting toempty string will result in default log format</code></td></tr><tr><td><code>global.proxy.accessLogEncoding</code></td><td><code>TEXT</code></td><td><code>Configure the access log for sidecar to JSON or TEXT.</code></td></tr><tr><td><code>global.proxy.dnsRefreshRate</code></td><td><code>5s</code></td><td><code>Configure the DNS refresh rate for Envoy cluster of type STRICT_DNS5 seconds is the default refresh rate used by Envoy</code></td></tr><tr><td><code>global.proxy.privileged</code></td><td><code>false</code></td><td><code>If set to true, istio-proxy container will have privileged securityContext</code></td></tr><tr><td><code>global.proxy.statusPort</code></td><td><code>15020</code></td><td><code>Default port for Pilot agent health checks. A value of 0 will disable health checking.</code></td></tr><tr><td><code>global.proxy.readinessInitialDelaySeconds</code></td><td><code>1</code></td><td><code>The initial delay for readiness probes in seconds.</code></td></tr><tr><td><code>global.proxy.readinessPeriodSeconds</code></td><td><code>2</code></td><td><code>The period between readiness probes.</code></td></tr><tr><td><code>global.proxy.readinessFailureThreshold</code></td><td><code>30</code></td><td><code>The number of successive failed probes before indicating readiness failure.</code></td></tr><tr><td><code>global.proxy.kubevirtInterfaces</code></td><td><code>&quot;&quot;</code></td><td><code>pod internal interfaces</code></td></tr><tr><td><code>global.proxy.envoyMetricsService.enabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>global.proxy.envoyMetricsService.host</code></td><td>``</td><td><code>example: metrics-service.istio-system</code></td></tr><tr><td><code>global.proxy.envoyMetricsService.port</code></td><td>``</td><td><code>example: 15000</code></td></tr><tr><td><code>global.proxy.tracer</code></td><td><code>&quot;zipkin&quot;</code></td><td><code>Specify which tracer to use. One of: lightstep, zipkin</code></td></tr><tr><td><code>global.policyCheckFailOpen</code></td><td><code>false</code></td><td><code>policyCheckFailOpen allows traffic in cases when the mixer policy service cannot be reached.Default is false which means the traffic is denied when the client is unable to connect to Mixer.</code></td></tr><tr><td><code>global.tracer.lightstep.address</code></td><td><code>&quot;&quot;</code></td><td><code>example: lightstep-satellite:443</code></td></tr><tr><td><code>global.tracer.lightstep.accessToken</code></td><td><code>&quot;&quot;</code></td><td><code>example: abcdefg1234567</code></td></tr><tr><td><code>global.tracer.lightstep.secure</code></td><td><code>true</code></td><td><code>example: true\|false</code></td></tr><tr><td><code>global.tracer.lightstep.cacertPath</code></td><td><code>&quot;&quot;</code></td><td><code>example: /etc/lightstep/cacert.pem</code></td></tr><tr><td><code>global.tracer.zipkin.address</code></td><td><code>&quot;&quot;</code></td><td></td></tr><tr><td><code>global.defaultNodeSelector</code></td><td><code>{}</code></td><td><code>Default node selector to be applied to all deployments so that all pods can beconstrained to run a particular nodes. Each component can overwrite these defaultvalues by adding its node selector block in the relevant section below and settingthe desired values.</code></td></tr><tr><td><code>global.meshExpansion.enabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>global.meshExpansion.useILB</code></td><td><code>false</code></td><td><code>If set to true, the pilot and citadel mtls and the plain text pilot portswill be exposed on an internal gateway</code></td></tr><tr><td><code>global.multiCluster.enabled</code></td><td><code>false</code></td><td><code>Set to true to connect two kubernetes clusters via their respectiveingressgateway services when pods in each cluster cannot directlytalk to one another. All clusters should be using Istio mTLS and musthave a shared root CA for this model to work.</code></td></tr><tr><td><code>global.defaultPodDisruptionBudget.enabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>global.useMCP</code></td><td><code>true</code></td><td><code>Use the Mesh Control Protocol (MCP) for configuring Mixer andPilot. Requires galley (--set galley.enabled=true).</code></td></tr><tr><td><code>global.trustDomain</code></td><td><code>&quot;&quot;</code></td><td></td></tr><tr><td><code>global.outboundTrafficPolicy.mode</code></td><td><code>ALLOW_ANY</code></td><td></td></tr><tr><td><code>global.sds.enabled</code></td><td><code>false</code></td><td><code>SDS enabled. IF set to true, mTLS certificates for the sidecars will bedistributed through the SecretDiscoveryService instead of using K8S secrets to mount the certificates.</code></td></tr><tr><td><code>global.sds.udsPath</code></td><td><code>&quot;&quot;</code></td><td></td></tr><tr><td><code>global.sds.useTrustworthyJwt</code></td><td><code>false</code></td><td></td></tr><tr><td><code>global.sds.useNormalJwt</code></td><td><code>false</code></td><td></td></tr><tr><td><code>global.meshNetworks</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>global.enableHelmTest</code></td><td><code>false</code></td><td><code>Specifies whether helm test is enabled or not.This field is set to false by default, so 'helm template ...'will ignore the helm test yaml files when generating the template</code></td></tr></tbody></table><h3 id=new-mixer-key-value-pairs>New <code>mixer</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>mixer.env.GODEBUG</code></td><td><code>gctrace=1</code></td><td></td></tr><tr><td><code>mixer.env.GOMAXPROCS</code></td><td><code>&quot;6&quot;</code></td><td><code>max procs should be ceil(cpu limit + 1)</code></td></tr><tr><td><code>mixer.policy.enabled</code></td><td><code>false</code></td><td><code>if policy is enabled, global.disablePolicyChecks has affect.</code></td></tr><tr><td><code>mixer.policy.replicaCount</code></td><td><code>1</code></td><td></td></tr><tr><td><code>mixer.policy.autoscaleEnabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>mixer.policy.autoscaleMin</code></td><td><code>1</code></td><td></td></tr><tr><td><code>mixer.policy.autoscaleMax</code></td><td><code>5</code></td><td></td></tr><tr><td><code>mixer.policy.cpu.targetAverageUtilization</code></td><td><code>80</code></td><td></td></tr><tr><td><code>mixer.telemetry.enabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>mixer.telemetry.replicaCount</code></td><td><code>1</code></td><td></td></tr><tr><td><code>mixer.telemetry.autoscaleEnabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>mixer.telemetry.autoscaleMin</code></td><td><code>1</code></td><td></td></tr><tr><td><code>mixer.telemetry.autoscaleMax</code></td><td><code>5</code></td><td></td></tr><tr><td><code>mixer.telemetry.cpu.targetAverageUtilization</code></td><td><code>80</code></td><td></td></tr><tr><td><code>mixer.telemetry.sessionAffinityEnabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>mixer.telemetry.loadshedding.mode</code></td><td><code>enforce</code></td><td><code>disabled, logonly or enforce</code></td></tr><tr><td><code>mixer.telemetry.loadshedding.latencyThreshold</code></td><td><code>100ms</code></td><td><code>based on measurements 100ms p50 translates to p99 of under 1s. This is ok for telemetry which is inherently async.</code></td></tr><tr><td><code>mixer.telemetry.resources.requests.cpu</code></td><td><code>1000m</code></td><td></td></tr><tr><td><code>mixer.telemetry.resources.requests.memory</code></td><td><code>1G</code></td><td></td></tr><tr><td><code>mixer.telemetry.resources.limits.cpu</code></td><td><code>4800m</code></td><td><code>It is best to do horizontal scaling of mixer using moderate cpu allocation.We have experimentally found that these values work well.</code></td></tr><tr><td><code>mixer.telemetry.resources.limits.memory</code></td><td><code>4G</code></td><td></td></tr><tr><td><code>mixer.podAnnotations</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>mixer.nodeSelector</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>mixer.adapters.kubernetesenv.enabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>mixer.adapters.stdio.enabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>mixer.adapters.stdio.outputAsJson</code></td><td><code>true</code></td><td></td></tr><tr><td><code>mixer.adapters.prometheus.enabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>mixer.adapters.prometheus.metricsExpiryDuration</code></td><td><code>10m</code></td><td></td></tr><tr><td><code>mixer.adapters.useAdapterCRDs</code></td><td><code>true</code></td><td><code>Setting this to false sets the useAdapterCRDs mixer startup argument to false</code></td></tr></tbody></table><h3 id=new-grafana-key-value-pairs>New <code>grafana</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>grafana.image.repository</code></td><td><code>grafana/grafana</code></td><td></td></tr><tr><td><code>grafana.image.tag</code></td><td><code>5.4.0</code></td><td></td></tr><tr><td><code>grafana.ingress.enabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>grafana.ingress.hosts</code></td><td><code>grafana.local</code></td><td><code>Used to create an Ingress record.</code></td></tr><tr><td><code>grafana.persist</code></td><td><code>false</code></td><td></td></tr><tr><td><code>grafana.storageClassName</code></td><td><code>&quot;&quot;</code></td><td></td></tr><tr><td><code>grafana.accessMode</code></td><td><code>ReadWriteMany</code></td><td></td></tr><tr><td><code>grafana.security.secretName</code></td><td><code>grafana</code></td><td></td></tr><tr><td><code>grafana.security.usernameKey</code></td><td><code>username</code></td><td></td></tr><tr><td><code>grafana.security.passphraseKey</code></td><td><code>passphrase</code></td><td></td></tr><tr><td><code>grafana.nodeSelector</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>grafana.contextPath</code></td><td><code>/grafana</code></td><td></td></tr><tr><td><code>grafana.datasources.datasources.apiVersion</code></td><td><code>1</code></td><td></td></tr><tr><td><code>grafana.datasources.datasources.datasources.type</code></td><td><code>prometheus</code></td><td></td></tr><tr><td><code>grafana.datasources.datasources.datasources.orgId</code></td><td><code>1</code></td><td></td></tr><tr><td><code>grafana.datasources.datasources.datasources.url</code></td><td><code>http://prometheus:9090</code></td><td></td></tr><tr><td><code>grafana.datasources.datasources.datasources.access</code></td><td><code>proxy</code></td><td></td></tr><tr><td><code>grafana.datasources.datasources.datasources.isDefault</code></td><td><code>true</code></td><td></td></tr><tr><td><code>grafana.datasources.datasources.datasources.jsonData.timeInterval</code></td><td><code>5s</code></td><td></td></tr><tr><td><code>grafana.datasources.datasources.datasources.editable</code></td><td><code>true</code></td><td></td></tr><tr><td><code>grafana.dashboardProviders.dashboardproviders.apiVersion</code></td><td><code>1</code></td><td></td></tr><tr><td><code>grafana.dashboardProviders.dashboardproviders.providers.orgId</code></td><td><code>1</code></td><td></td></tr><tr><td><code>grafana.dashboardProviders.dashboardproviders.providers.folder</code></td><td><code>'istio'</code></td><td></td></tr><tr><td><code>grafana.dashboardProviders.dashboardproviders.providers.type</code></td><td><code>file</code></td><td></td></tr><tr><td><code>grafana.dashboardProviders.dashboardproviders.providers.disableDeletion</code></td><td><code>false</code></td><td></td></tr><tr><td><code>grafana.dashboardProviders.dashboardproviders.providers.options.path</code></td><td><code>/var/lib/grafana/dashboards/istio</code></td><td></td></tr></tbody></table><h3 id=new-prometheus-key-value-pairs>New <code>prometheus</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>prometheus.retention</code></td><td><code>6h</code></td><td></td></tr><tr><td><code>prometheus.nodeSelector</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>prometheus.scrapeInterval</code></td><td><code>15s</code></td><td><code>Controls the frequency of prometheus scraping</code></td></tr><tr><td><code>prometheus.contextPath</code></td><td><code>/prometheus</code></td><td></td></tr><tr><td><code>prometheus.ingress.enabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>prometheus.ingress.hosts</code></td><td><code>prometheus.local</code></td><td><code>Used to create an Ingress record.</code></td></tr><tr><td><code>prometheus.security.enabled</code></td><td><code>true</code></td><td></td></tr></tbody></table><h3 id=new-gateways-key-value-pairs>New <code>gateways</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>gateways.istio-ingressgateway.sds.enabled</code></td><td><code>false</code></td><td><code>If true, ingress gateway fetches credentials from SDS server to handle TLS connections.</code></td></tr><tr><td><code>gateways.istio-ingressgateway.sds.image</code></td><td><code>node-agent-k8s</code></td><td><code>SDS server that watches kubernetes secrets and provisions credentials to ingress gateway.This server runs in the same pod as ingress gateway.</code></td></tr><tr><td><code>gateways.istio-ingressgateway.autoscaleEnabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.cpu.targetAverageUtilization</code></td><td><code>80</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.loadBalancerSourceRanges</code></td><td><code>[]</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.externalIPs</code></td><td><code>[]</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.podAnnotations</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.targetPort</code></td><td><code>15029</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.name</code></td><td><code>https-kiali</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.name</code></td><td><code>https-prometheus</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.name</code></td><td><code>https-grafana</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.targetPort</code></td><td><code>15032</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.name</code></td><td><code>https-tracing</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.targetPort</code></td><td><code>15443</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.name</code></td><td><code>tls</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.targetPort</code></td><td><code>15020</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.name</code></td><td><code>status-port</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.meshExpansionPorts.targetPort</code></td><td><code>15011</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.meshExpansionPorts.name</code></td><td><code>tcp-pilot-grpc-tls</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.meshExpansionPorts.targetPort</code></td><td><code>15004</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.meshExpansionPorts.name</code></td><td><code>tcp-mixer-grpc-tls</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.meshExpansionPorts.targetPort</code></td><td><code>8060</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.meshExpansionPorts.name</code></td><td><code>tcp-citadel-grpc-tls</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.meshExpansionPorts.targetPort</code></td><td><code>853</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.meshExpansionPorts.name</code></td><td><code>tcp-dns-tls</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.env.ISTIO_META_ROUTER_MODE</code></td><td><code>&quot;sni-dnat&quot;</code></td><td><code>A gateway with this mode ensures that pilot generates an additionalset of clusters for internal services but without Istio mTLS, toenable cross cluster routing.</code></td></tr><tr><td><code>gateways.istio-ingressgateway.nodeSelector</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>gateways.istio-egressgateway.autoscaleEnabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>gateways.istio-egressgateway.cpu.targetAverageUtilization</code></td><td><code>80</code></td><td></td></tr><tr><td><code>gateways.istio-egressgateway.podAnnotations</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>gateways.istio-egressgateway.ports.targetPort</code></td><td><code>15443</code></td><td></td></tr><tr><td><code>gateways.istio-egressgateway.ports.name</code></td><td><code>tls</code></td><td></td></tr><tr><td><code>gateways.istio-egressgateway.env.ISTIO_META_ROUTER_MODE</code></td><td><code>&quot;sni-dnat&quot;</code></td><td></td></tr><tr><td><code>gateways.istio-egressgateway.nodeSelector</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>gateways.istio-ilbgateway.autoscaleEnabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>gateways.istio-ilbgateway.cpu.targetAverageUtilization</code></td><td><code>80</code></td><td></td></tr><tr><td><code>gateways.istio-ilbgateway.podAnnotations</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>gateways.istio-ilbgateway.nodeSelector</code></td><td><code>{}</code></td><td></td></tr></tbody></table><h3 id=new-kiali-key-value-pairs>New <code>kiali</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>kiali.contextPath</code></td><td><code>/kiali</code></td><td></td></tr><tr><td><code>kiali.nodeSelector</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>kiali.ingress.hosts</code></td><td><code>kiali.local</code></td><td><code>Used to create an Ingress record.</code></td></tr><tr><td><code>kiali.dashboard.secretName</code></td><td><code>kiali</code></td><td></td></tr><tr><td><code>kiali.dashboard.usernameKey</code></td><td><code>username</code></td><td></td></tr><tr><td><code>kiali.dashboard.passphraseKey</code></td><td><code>passphrase</code></td><td></td></tr><tr><td><code>kiali.prometheusAddr</code></td><td><code>http://prometheus:9090</code></td><td></td></tr><tr><td><code>kiali.createDemoSecret</code></td><td><code>false</code></td><td><code>When true, a secret will be created with a default username and password. Useful for demos.</code></td></tr></tbody></table><h3 id=new-istiocoredns-key-value-pairs>New <code>istiocoredns</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>istiocoredns.enabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>istiocoredns.replicaCount</code></td><td><code>1</code></td><td></td></tr><tr><td><code>istiocoredns.coreDNSImage</code></td><td><code>coredns/coredns:1.1.2</code></td><td></td></tr><tr><td><code>istiocoredns.coreDNSPluginImage</code></td><td><code>istio/coredns-plugin:0.2-istio-1.1</code></td><td></td></tr><tr><td><code>istiocoredns.nodeSelector</code></td><td><code>{}</code></td><td></td></tr></tbody></table><h3 id=new-security-key-value-pairs>New <code>security</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>security.enabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>security.createMeshPolicy</code></td><td><code>true</code></td><td></td></tr><tr><td><code>security.nodeSelector</code></td><td><code>{}</code></td><td></td></tr></tbody></table><h3 id=new-nodeagent-key-value-pairs>New <code>nodeagent</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>nodeagent.enabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>nodeagent.image</code></td><td><code>node-agent-k8s</code></td><td></td></tr><tr><td><code>nodeagent.env.CA_PROVIDER</code></td><td><code>&quot;&quot;</code></td><td><code>name of authentication provider.</code></td></tr><tr><td><code>nodeagent.env.CA_ADDR</code></td><td><code>&quot;&quot;</code></td><td><code>CA endpoint.</code></td></tr><tr><td><code>nodeagent.env.Plugins</code></td><td><code>&quot;&quot;</code></td><td><code>names of authentication provider's plugins.</code></td></tr><tr><td><code>nodeagent.nodeSelector</code></td><td><code>{}</code></td><td></td></tr></tbody></table><h3 id=new-pilot-key-value-pairs>New <code>pilot</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>pilot.autoscaleEnabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>pilot.env.PILOT_PUSH_THROTTLE</code></td><td><code>100</code></td><td></td></tr><tr><td><code>pilot.env.GODEBUG</code></td><td><code>gctrace=1</code></td><td></td></tr><tr><td><code>pilot.cpu.targetAverageUtilization</code></td><td><code>80</code></td><td></td></tr><tr><td><code>pilot.nodeSelector</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>pilot.keepaliveMaxServerConnectionAge</code></td><td><code>30m</code></td><td><code>The following is used to limit how long a sidecar can be connectedto a pilot. It balances out load across pilot instances at the cost ofincreasing system churn.</code></td></tr></tbody></table><h2 id=removed-configuration-options>Removed configuration options</h2><h3 id=removed-ingress-key-value-pairs>Removed <code>ingress</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>ingress.service.ports.nodePort</code></td><td><code>32000</code></td><td></td></tr><tr><td><code>ingress.service.selector.istio</code></td><td><code>ingress</code></td><td></td></tr><tr><td><code>ingress.autoscaleMin</code></td><td><code>1</code></td><td></td></tr><tr><td><code>ingress.service.loadBalancerIP</code></td><td><code>&quot;&quot;</code></td><td></td></tr><tr><td><code>ingress.enabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>ingress.service.annotations</code></td><td><code>{}</code></td><td></td></tr><tr><td><code>ingress.service.ports.name</code></td><td><code>http</code></td><td></td></tr><tr><td><code>ingress.service.ports.name</code></td><td><code>https</code></td><td></td></tr><tr><td><code>ingress.autoscaleMax</code></td><td><code>5</code></td><td></td></tr><tr><td><code>ingress.replicaCount</code></td><td><code>1</code></td><td></td></tr><tr><td><code>ingress.service.type</code></td><td><code>LoadBalancer #change to NodePort, ClusterIP or LoadBalancer if need be</code></td><td></td></tr></tbody></table><h3 id=removed-servicegraph-key-value-pairs>Removed <code>servicegraph</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>servicegraph</code></td><td><code>servicegraph.local</code></td><td></td></tr><tr><td><code>servicegraph.ingress</code></td><td><code>servicegraph.local</code></td><td></td></tr><tr><td><code>servicegraph.service.internalPort</code></td><td><code>8088</code></td><td></td></tr></tbody></table><h3 id=removed-telemetry-gateway-key-value-pairs>Removed <code>telemetry-gateway</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>telemetry-gateway.prometheusEnabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>telemetry-gateway.gatewayName</code></td><td><code>ingressgateway</code></td><td></td></tr><tr><td><code>telemetry-gateway.grafanaEnabled</code></td><td><code>false</code></td><td></td></tr></tbody></table><h3 id=removed-global-key-value-pairs>Removed <code>global</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>global.hyperkube.tag</code></td><td><code>v1.7.6_coreos.0</code></td><td></td></tr><tr><td><code>global.k8sIngressHttps</code></td><td><code>false</code></td><td></td></tr><tr><td><code>global.crds</code></td><td><code>true</code></td><td></td></tr><tr><td><code>global.hyperkube.hub</code></td><td><code>quay.io/coreos</code></td><td></td></tr><tr><td><code>global.meshExpansion</code></td><td><code>false</code></td><td></td></tr><tr><td><code>global.k8sIngressSelector</code></td><td><code>ingress</code></td><td></td></tr><tr><td><code>global.meshExpansionILB</code></td><td><code>false</code></td><td></td></tr></tbody></table><h3 id=removed-mixer-key-value-pairs>Removed <code>mixer</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>mixer.autoscaleMin</code></td><td><code>1</code></td><td></td></tr><tr><td><code>mixer.istio-policy.cpu.targetAverageUtilization</code></td><td><code>80</code></td><td></td></tr><tr><td><code>mixer.autoscaleMax</code></td><td><code>5</code></td><td></td></tr><tr><td><code>mixer.istio-telemetry.autoscaleMin</code></td><td><code>1</code></td><td></td></tr><tr><td><code>mixer.prometheusStatsdExporter.tag</code></td><td><code>v0.6.0</code></td><td></td></tr><tr><td><code>mixer.istio-telemetry.autoscaleMax</code></td><td><code>5</code></td><td></td></tr><tr><td><code>mixer.istio-telemetry.cpu.targetAverageUtilization</code></td><td><code>80</code></td><td></td></tr><tr><td><code>mixer.istio-policy.autoscaleEnabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>mixer.istio-telemetry.autoscaleEnabled</code></td><td><code>true</code></td><td></td></tr><tr><td><code>mixer.replicaCount</code></td><td><code>1</code></td><td></td></tr><tr><td><code>mixer.prometheusStatsdExporter.hub</code></td><td><code>docker.io/prom</code></td><td></td></tr><tr><td><code>mixer.istio-policy.autoscaleMin</code></td><td><code>1</code></td><td></td></tr><tr><td><code>mixer.istio-policy.autoscaleMax</code></td><td><code>5</code></td><td></td></tr></tbody></table><h3 id=removed-grafana-key-value-pairs>Removed <code>grafana</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>grafana.image</code></td><td><code>grafana</code></td><td></td></tr><tr><td><code>grafana.service.internalPort</code></td><td><code>3000</code></td><td></td></tr><tr><td><code>grafana.security.adminPassword</code></td><td><code>admin</code></td><td></td></tr><tr><td><code>grafana.security.adminUser</code></td><td><code>admin</code></td><td></td></tr></tbody></table><h3 id=removed-gateways-key-value-pairs>Removed <code>gateways</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>gateways.istio-ilbgateway.replicaCount</code></td><td><code>1</code></td><td></td></tr><tr><td><code>gateways.istio-egressgateway.replicaCount</code></td><td><code>1</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.replicaCount</code></td><td><code>1</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.name</code></td><td><code>tcp-pilot-grpc-tls</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.name</code></td><td><code>tcp-citadel-grpc-tls</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.name</code></td><td><code>http2-prometheus</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.name</code></td><td><code>http2-grafana</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.targetPort</code></td><td><code>15011</code></td><td></td></tr><tr><td><code>gateways.istio-ingressgateway.ports.targetPort</code></td><td><code>8060</code></td><td></td></tr></tbody></table><h3 id=removed-tracing-key-value-pairs>Removed <code>tracing</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>tracing.service.internalPort</code></td><td><code>9411</code></td><td></td></tr><tr><td><code>tracing.replicaCount</code></td><td><code>1</code></td><td></td></tr><tr><td><code>tracing.jaeger.ingress</code></td><td><code>jaeger.local</code></td><td></td></tr><tr><td><code>tracing.ingress</code></td><td><code>tracing.local</code></td><td></td></tr><tr><td><code>tracing.jaeger</code></td><td><code>jaeger.local</code></td><td></td></tr><tr><td><code>tracing</code></td><td><code>jaeger.local tracing.local</code></td><td></td></tr><tr><td><code>tracing.jaeger.ingress.hosts</code></td><td><code>jaeger.local</code></td><td></td></tr><tr><td><code>tracing.jaeger.ingress.enabled</code></td><td><code>false</code></td><td></td></tr><tr><td><code>tracing.ingress.hosts</code></td><td><code>tracing.local</code></td><td></td></tr><tr><td><code>tracing.jaeger.ui.port</code></td><td><code>16686</code></td><td></td></tr></tbody></table><h3 id=removed-kiali-key-value-pairs>Removed <code>kiali</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>kiali.dashboard.username</code></td><td><code>admin</code></td><td></td></tr><tr><td><code>kiali.dashboard.passphrase</code></td><td><code>admin</code></td><td></td></tr></tbody></table><h3 id=removed-pilot-key-value-pairs>Removed <code>pilot</code> key/value pairs</h3><table><thead><tr><th>Key</th><th>Default Value</th><th>Description</th></tr></thead><tbody><tr><td><code>pilot.replicaCount</code></td><td><code>1</code></td><td></td></tr></tbody></table><nav id=see-also><h2>See also</h2><div class=see-also><div class=entry><p class=link><a data-skipendnotes=true href=/v1.1/docs/setup/kubernetes/install/helm/>Customizable Install with Helm</a></p><p class=desc>Instructions to install Istio using a Helm chart.</p></div><div class=entry><p class=link><a data-skipendnotes=true href=/v1.1/docs/setup/kubernetes/additional-setup/cni/>Install Istio with the Istio CNI plugin</a></p><p class=desc>Install and use Istio with the Istio CNI plugin, allowing operators to deploy services with lower privilege.</p></div><div class=entry><p class=link><a data-skipendnotes=true href=/v1.1/docs/setup/kubernetes/additional-setup/config-profiles/>Installation Configuration Profiles</a></p><p class=desc>Describes the built-in Istio installation configuration profiles.</p></div><div class=entry><p class=link><a data-skipendnotes=true href=/v1.1/docs/reference/config/installation-options/>Installation Options</a></p><p class=desc>Describes the options available when installing Istio using the included Helm chart.</p></div><div class=entry><p class=link><a data-skipendnotes=true href=/v1.1/blog/2019/data-plane-setup/>Demystifying Istio&#39;s Sidecar Injection Model</a></p><p class=desc>De-mystify how Istio manages to plugin its data-plane components into an existing deployment.</p></div><div class=entry><p class=link><a data-skipendnotes=true href=/v1.1/docs/examples/multicluster/split-horizon-eds/>Cluster-Aware Service Routing</a></p><p class=desc>Leveraging Istio&#39;s Split-horizon EDS to create a multicluster mesh.</p></div></div></nav></article><nav class=pagenav><div class=left><a title="Describes the options available when installing Istio using the included Helm chart." href=/v1.1/docs/reference/config/installation-options/><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#left-arrow"/></svg>Installation Options</a></div><div class=right><a title="Authentication policy for Istio services." href=/v1.1/docs/reference/config/istio.authentication.v1alpha1/>Authentication Policy<svg class="icon"><use xlink:href="/v1.1/img/icons.svg#right-arrow"/></svg></a></div></nav><div id=endnotes-container aria-hidden=true><h2>Links</h2><ol id=endnotes></ol></div></div><div class=toc-container><nav class=toc aria-label="Table of Contents"><div id=toc><ol><li role=none aria-label="Modified configuration options"><a href=#modified-configuration-options>Modified configuration options</a><ol><li role=none aria-label="Modified servicegraph key/value pairs"><a href=#modified-servicegraph-key-value-pairs>Modified <code>servicegraph</code> key/value pairs</a><li role=none aria-label="Modified tracing key/value pairs"><a href=#modified-tracing-key-value-pairs>Modified <code>tracing</code> key/value pairs</a><li role=none aria-label="Modified global key/value pairs"><a href=#modified-global-key-value-pairs>Modified <code>global</code> key/value pairs</a><li role=none aria-label="Modified gateways key/value pairs"><a href=#modified-gateways-key-value-pairs>Modified <code>gateways</code> key/value pairs</a><li role=none aria-label="Modified certmanager key/value pairs"><a href=#modified-certmanager-key-value-pairs>Modified <code>certmanager</code> key/value pairs</a><li role=none aria-label="Modified kiali key/value pairs"><a href=#modified-kiali-key-value-pairs>Modified <code>kiali</code> key/value pairs</a><li role=none aria-label="Modified security key/value pairs"><a href=#modified-security-key-value-pairs>Modified <code>security</code> key/value pairs</a><li role=none aria-label="Modified pilot key/value pairs"><a href=#modified-pilot-key-value-pairs>Modified <code>pilot</code> key/value pairs</a></ol></li><li role=none aria-label="New configuration options"><a href=#new-configuration-options>New configuration options</a><ol><li role=none aria-label="New istio_cni key/value pairs"><a href=#new-istio-cni-key-value-pairs>New <code>istio_cni</code> key/value pairs</a><li role=none aria-label="New servicegraph key/value pairs"><a href=#new-servicegraph-key-value-pairs>New <code>servicegraph</code> key/value pairs</a><li role=none aria-label="New tracing key/value pairs"><a href=#new-tracing-key-value-pairs>New <code>tracing</code> key/value pairs</a><li role=none aria-label="New sidecarInjectorWebhook key/value pairs"><a href=#new-sidecarinjectorwebhook-key-value-pairs>New <code>sidecarInjectorWebhook</code> key/value pairs</a><li role=none aria-label="New global key/value pairs"><a href=#new-global-key-value-pairs>New <code>global</code> key/value pairs</a><li role=none aria-label="New mixer key/value pairs"><a href=#new-mixer-key-value-pairs>New <code>mixer</code> key/value pairs</a><li role=none aria-label="New grafana key/value pairs"><a href=#new-grafana-key-value-pairs>New <code>grafana</code> key/value pairs</a><li role=none aria-label="New prometheus key/value pairs"><a href=#new-prometheus-key-value-pairs>New <code>prometheus</code> key/value pairs</a><li role=none aria-label="New gateways key/value pairs"><a href=#new-gateways-key-value-pairs>New <code>gateways</code> key/value pairs</a><li role=none aria-label="New kiali key/value pairs"><a href=#new-kiali-key-value-pairs>New <code>kiali</code> key/value pairs</a><li role=none aria-label="New istiocoredns key/value pairs"><a href=#new-istiocoredns-key-value-pairs>New <code>istiocoredns</code> key/value pairs</a><li role=none aria-label="New security key/value pairs"><a href=#new-security-key-value-pairs>New <code>security</code> key/value pairs</a><li role=none aria-label="New nodeagent key/value pairs"><a href=#new-nodeagent-key-value-pairs>New <code>nodeagent</code> key/value pairs</a><li role=none aria-label="New pilot key/value pairs"><a href=#new-pilot-key-value-pairs>New <code>pilot</code> key/value pairs</a></ol></li><li role=none aria-label="Removed configuration options"><a href=#removed-configuration-options>Removed configuration options</a><ol><li role=none aria-label="Removed ingress key/value pairs"><a href=#removed-ingress-key-value-pairs>Removed <code>ingress</code> key/value pairs</a><li role=none aria-label="Removed servicegraph key/value pairs"><a href=#removed-servicegraph-key-value-pairs>Removed <code>servicegraph</code> key/value pairs</a><li role=none aria-label="Removed telemetry-gateway key/value pairs"><a href=#removed-telemetry-gateway-key-value-pairs>Removed <code>telemetry-gateway</code> key/value pairs</a><li role=none aria-label="Removed global key/value pairs"><a href=#removed-global-key-value-pairs>Removed <code>global</code> key/value pairs</a><li role=none aria-label="Removed mixer key/value pairs"><a href=#removed-mixer-key-value-pairs>Removed <code>mixer</code> key/value pairs</a><li role=none aria-label="Removed grafana key/value pairs"><a href=#removed-grafana-key-value-pairs>Removed <code>grafana</code> key/value pairs</a><li role=none aria-label="Removed gateways key/value pairs"><a href=#removed-gateways-key-value-pairs>Removed <code>gateways</code> key/value pairs</a><li role=none aria-label="Removed tracing key/value pairs"><a href=#removed-tracing-key-value-pairs>Removed <code>tracing</code> key/value pairs</a><li role=none aria-label="Removed kiali key/value pairs"><a href=#removed-kiali-key-value-pairs>Removed <code>kiali</code> key/value pairs</a><li role=none aria-label="Removed pilot key/value pairs"><a href=#removed-pilot-key-value-pairs>Removed <code>pilot</code> key/value pairs</a></ol></li><li role=none aria-label="See also"><a href=#see-also>See also</a></li></ol></div></nav></div></main><footer><div class=user-links><a class=channel title="Go download Istio 1.1.9 now" href=https://github.com/istio/istio/releases/tag/1.1.9 aria-label="Download Istio"><span>download</span><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#download"/></svg>
</a><a class=channel title="Join the Istio discussion board to participate in discussions and get help troubleshooting problems" href=https://discuss.istio.io aria-label="Istio discussion board"><span>discuss</span><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#discourse"/></svg></a>
<a class=channel title="Stack Overflow is where you can ask questions and find curated answers on deploying, configuring, and using Istio" href=https://stackoverflow.com/questions/tagged/istio aria-label="Stack Overflow"><span>stack overflow</span><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#stackoverflow"/></svg></a>
<a class=channel title="Follow us on Twitter to get the latest news" href=https://twitter.com/IstioMesh aria-label=Twitter><span>twitter</span><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#twitter"/></svg></a><div class=tag>for everyone</div></div><div class=info><p class=copyright>Istio Archive
1.1.9<br>&copy; 2019 Istio Authors, <a href=https://policies.google.com/privacy>Privacy Policy</a><br>Archived on June 18, 2019</p></div><div class=dev-links><a class=channel title="GitHub is where development takes place on Istio code" href=https://github.com/istio/community aria-label=GitHub><span>github</span><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#github"/></svg></a>
<a class=channel title="Interactively discuss issues with the Istio community on Slack" href=https://istio.slack.com aria-label=slack><span>slack</span><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#slack"/></svg></a>
<a class=channel title="Access our team drive if you'd like to take a look at the Istio technical design documents" href=https://groups.google.com/forum/#!forum/istio-team-drive-access aria-label="team drive"><span>drive</span><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#drive"/></svg></a>
<a class=channel title="If you'd like to contribute to the Istio project, consider participating in our working groups" href=https://github.com/istio/community/blob/master/WORKING-GROUPS.md aria-label="working groups"><span>working groups</span><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#working-groups"/></svg></a><div class=tag>for developers</div></div></footer><div id=scroll-to-top-container aria-hidden=true><button id=scroll-to-top title="Back to top"><svg class="icon"><use xlink:href="/v1.1/img/icons.svg#top"/></svg></button></div></body></html>
Reference in New Issue View Git Blame Copy Permalink