api: istio.io/api/mesh/v1alpha1 Index | Files

package v1alpha1

import "istio.io/api/mesh/v1alpha1"

Index

Package Files

config.pb.go network.pb.go proxy.pb.go

Variables

var (
    ErrInvalidLengthConfig = fmt.Errorf("proto: negative length found during unmarshaling")
    ErrIntOverflowConfig   = fmt.Errorf("proto: integer overflow")
)
var (
    ErrInvalidLengthNetwork = fmt.Errorf("proto: negative length found during unmarshaling")
    ErrIntOverflowNetwork   = fmt.Errorf("proto: integer overflow")
)
var (
    ErrInvalidLengthProxy = fmt.Errorf("proto: negative length found during unmarshaling")
    ErrIntOverflowProxy   = fmt.Errorf("proto: integer overflow")
)
var AuthenticationPolicy_name = map[int32]string{
    0:    "NONE",
    1:    "MUTUAL_TLS",
    1000: "INHERIT",
}
var AuthenticationPolicy_value = map[string]int32{
    "NONE":       0,
    "MUTUAL_TLS": 1,
    "INHERIT":    1000,
}
var MeshConfig_AccessLogEncoding_name = map[int32]string{
    0:  "TEXT",
    1:  "JSON",
}
var MeshConfig_AccessLogEncoding_value = map[string]int32{
    "TEXT": 0,
    "JSON": 1,
}
var MeshConfig_AuthPolicy_name = map[int32]string{
    0:  "NONE",
    1:  "MUTUAL_TLS",
}
var MeshConfig_AuthPolicy_value = map[string]int32{
    "NONE":       0,
    "MUTUAL_TLS": 1,
}
var MeshConfig_H2UpgradePolicy_name = map[int32]string{
    0:  "DO_NOT_UPGRADE",
    1:  "UPGRADE",
}
var MeshConfig_H2UpgradePolicy_value = map[string]int32{
    "DO_NOT_UPGRADE": 0,
    "UPGRADE":        1,
}
var MeshConfig_IngressControllerMode_name = map[int32]string{
    0:  "OFF",
    1:  "DEFAULT",
    2:  "STRICT",
}
var MeshConfig_IngressControllerMode_value = map[string]int32{
    "OFF":     0,
    "DEFAULT": 1,
    "STRICT":  2,
}
var MeshConfig_OutboundTrafficPolicy_Mode_name = map[int32]string{
    0:  "REGISTRY_ONLY",
    1:  "ALLOW_ANY",
}
var MeshConfig_OutboundTrafficPolicy_Mode_value = map[string]int32{
    "REGISTRY_ONLY": 0,
    "ALLOW_ANY":     1,
}
var ProxyConfig_InboundInterceptionMode_name = map[int32]string{
    0:  "REDIRECT",
    1:  "TPROXY",
}
var ProxyConfig_InboundInterceptionMode_value = map[string]int32{
    "REDIRECT": 0,
    "TPROXY":   1,
}
var Resource_name = map[int32]string{
    0: "SERVICE_REGISTRY",
}
var Resource_value = map[string]int32{
    "SERVICE_REGISTRY": 0,
}

type AuthenticationPolicy Uses

type AuthenticationPolicy int32

AuthenticationPolicy defines authentication policy. It can be set for different scopes (mesh, service …), and the most narrow scope with non-INHERIT value will be used. Mesh policy cannot be INHERIT.

const (
    // Do not encrypt Envoy to Envoy traffic.
    AuthenticationPolicy_NONE AuthenticationPolicy = 0
    // Envoy to Envoy traffic is wrapped into mutual TLS connections.
    AuthenticationPolicy_MUTUAL_TLS AuthenticationPolicy = 1
    // Use the policy defined by the parent scope. Should not be used for mesh
    // policy.
    AuthenticationPolicy_INHERIT AuthenticationPolicy = 1000
)

func (AuthenticationPolicy) EnumDescriptor Uses

func (AuthenticationPolicy) EnumDescriptor() ([]byte, []int)

func (AuthenticationPolicy) String Uses

func (x AuthenticationPolicy) String() string

type Certificate Uses

type Certificate struct {
    // Name of the secret the certificate and its key will be stored into.
    // If it is empty, it will not be stored into a secret.
    // Instead, the certificate and its key will be stored into a hard-coded directory.
    SecretName string `protobuf:"bytes,1,opt,name=secret_name,json=secretName,proto3" json:"secret_name,omitempty"`
    // The DNS names for the certificate. A certificate may contain
    // multiple DNS names.
    DnsNames             []string `protobuf:"bytes,2,rep,name=dns_names,json=dnsNames,proto3" json:"dns_names,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

Certificate configures the provision of a certificate and its key. Example 1: key and cert stored in a secret { secretName: galley-cert

secretNamespace: istio-system
dnsNames:
  - galley.istio-system.svc
  - galley.mydomain.com

} Example 2: key and cert stored in a directory { dnsNames:

- pilot.istio-system
- pilot.istio-system.svc
- pilot.mydomain.com

}

func (*Certificate) Descriptor Uses

func (*Certificate) Descriptor() ([]byte, []int)

func (*Certificate) GetDnsNames Uses

func (m *Certificate) GetDnsNames() []string

func (*Certificate) GetSecretName Uses

func (m *Certificate) GetSecretName() string

func (*Certificate) Marshal Uses

func (m *Certificate) Marshal() (dAtA []byte, err error)

func (*Certificate) MarshalTo Uses

func (m *Certificate) MarshalTo(dAtA []byte) (int, error)

func (*Certificate) MarshalToSizedBuffer Uses

func (m *Certificate) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Certificate) ProtoMessage Uses

func (*Certificate) ProtoMessage()

func (*Certificate) Reset Uses

func (m *Certificate) Reset()

func (*Certificate) Size Uses

func (m *Certificate) Size() (n int)

func (*Certificate) String Uses

func (m *Certificate) String() string

func (*Certificate) Unmarshal Uses

func (m *Certificate) Unmarshal(dAtA []byte) error

func (*Certificate) XXX_DiscardUnknown Uses

func (m *Certificate) XXX_DiscardUnknown()

func (*Certificate) XXX_Marshal Uses

func (m *Certificate) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Certificate) XXX_Merge Uses

func (m *Certificate) XXX_Merge(src proto.Message)

func (*Certificate) XXX_Size Uses

func (m *Certificate) XXX_Size() int

func (*Certificate) XXX_Unmarshal Uses

func (m *Certificate) XXX_Unmarshal(b []byte) error

type ConfigSource Uses

type ConfigSource struct {
    // Address of the server implementing the Istio Mesh Configuration
    // protocol (MCP). Can be IP address or a fully qualified DNS name.
    // Use fs:/// to specify a file-based backend with absolute path to the directory.
    Address string `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
    // Use the tls_settings to specify the tls mode to use. If the MCP server
    // uses Istio mutual TLS and shares the root CA with Pilot, specify the TLS
    // mode as ISTIO_MUTUAL.
    TlsSettings *v1alpha3.TLSSettings `protobuf:"bytes,2,opt,name=tls_settings,json=tlsSettings,proto3" json:"tls_settings,omitempty"`
    // Describes the source of configuration, if nothing is specified default is MCP
    SubscribedResources  []Resource `protobuf:"varint,3,rep,packed,name=subscribed_resources,json=subscribedResources,proto3,enum=istio.mesh.v1alpha1.Resource" json:"subscribed_resources,omitempty"`
    XXX_NoUnkeyedLiteral struct{}   `json:"-"`
    XXX_unrecognized     []byte     `json:"-"`
    XXX_sizecache        int32      `json:"-"`
}

ConfigSource describes information about a configuration store inside a mesh. A single control plane instance can interact with one or more data sources.

func (*ConfigSource) Descriptor Uses

func (*ConfigSource) Descriptor() ([]byte, []int)

func (*ConfigSource) GetAddress Uses

func (m *ConfigSource) GetAddress() string

func (*ConfigSource) GetSubscribedResources Uses

func (m *ConfigSource) GetSubscribedResources() []Resource

func (*ConfigSource) GetTlsSettings Uses

func (m *ConfigSource) GetTlsSettings() *v1alpha3.TLSSettings

func (*ConfigSource) Marshal Uses

func (m *ConfigSource) Marshal() (dAtA []byte, err error)

func (*ConfigSource) MarshalTo Uses

func (m *ConfigSource) MarshalTo(dAtA []byte) (int, error)

func (*ConfigSource) MarshalToSizedBuffer Uses

func (m *ConfigSource) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ConfigSource) ProtoMessage Uses

func (*ConfigSource) ProtoMessage()

func (*ConfigSource) Reset Uses

func (m *ConfigSource) Reset()

func (*ConfigSource) Size Uses

func (m *ConfigSource) Size() (n int)

func (*ConfigSource) String Uses

func (m *ConfigSource) String() string

func (*ConfigSource) Unmarshal Uses

func (m *ConfigSource) Unmarshal(dAtA []byte) error

func (*ConfigSource) XXX_DiscardUnknown Uses

func (m *ConfigSource) XXX_DiscardUnknown()

func (*ConfigSource) XXX_Marshal Uses

func (m *ConfigSource) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ConfigSource) XXX_Merge Uses

func (m *ConfigSource) XXX_Merge(src proto.Message)

func (*ConfigSource) XXX_Size Uses

func (m *ConfigSource) XXX_Size() int

func (*ConfigSource) XXX_Unmarshal Uses

func (m *ConfigSource) XXX_Unmarshal(b []byte) error

type MeshConfig Uses

type MeshConfig struct {
    // Address of the server that will be used by the proxies for policy
    // check calls. By using different names for mixerCheckServer and
    // mixerReportServer, it is possible to have one set of Mixer servers handle
    // policy check calls while another set of Mixer servers handle telemetry
    // calls.
    //
    // NOTE: Omitting mixerCheckServer while specifying mixerReportServer is
    // equivalent to setting disablePolicyChecks to true.
    MixerCheckServer string `protobuf:"bytes,1,opt,name=mixer_check_server,json=mixerCheckServer,proto3" json:"mixer_check_server,omitempty"`
    // Address of the server that will be used by the proxies for policy report
    // calls.
    MixerReportServer string `protobuf:"bytes,2,opt,name=mixer_report_server,json=mixerReportServer,proto3" json:"mixer_report_server,omitempty"`
    // Disable policy checks by the Mixer service. Default
    // is false, i.e. Mixer policy check is enabled by default.
    DisablePolicyChecks bool `protobuf:"varint,3,opt,name=disable_policy_checks,json=disablePolicyChecks,proto3" json:"disable_policy_checks,omitempty"`
    // $hide_from_docs
    // Disable telemetry reporting by the Mixer service for HTTP traffic.
    // Default is false (telemetry reporting via Mixer is enabled).
    // This option provides a transition path for Istio extensibility v2.
    DisableMixerHttpReports bool `protobuf:"varint,48,opt,name=disable_mixer_http_reports,json=disableMixerHttpReports,proto3" json:"disable_mixer_http_reports,omitempty"`
    // Allow all traffic in cases when the Mixer policy service cannot be reached.
    // Default is false which means the traffic is denied when the client is unable
    // to connect to Mixer.
    PolicyCheckFailOpen bool `protobuf:"varint,25,opt,name=policy_check_fail_open,json=policyCheckFailOpen,proto3" json:"policy_check_fail_open,omitempty"`
    // Enable session affinity for Envoy Mixer reports so that calls from a proxy will
    // always target the same Mixer instance.
    SidecarToTelemetrySessionAffinity bool `protobuf:"varint,30,opt,name=sidecar_to_telemetry_session_affinity,json=sidecarToTelemetrySessionAffinity,proto3" json:"sidecar_to_telemetry_session_affinity,omitempty"`
    // Port on which Envoy should listen for incoming connections from
    // other services.
    ProxyListenPort int32 `protobuf:"varint,4,opt,name=proxy_listen_port,json=proxyListenPort,proto3" json:"proxy_listen_port,omitempty"`
    // Port on which Envoy should listen for HTTP PROXY requests if set.
    ProxyHttpPort int32 `protobuf:"varint,5,opt,name=proxy_http_port,json=proxyHttpPort,proto3" json:"proxy_http_port,omitempty"`
    // Connection timeout used by Envoy. (MUST BE >=1ms)
    ConnectTimeout *types.Duration `protobuf:"bytes,6,opt,name=connect_timeout,json=connectTimeout,proto3" json:"connect_timeout,omitempty"`
    // Automatic protocol detection uses a set of heuristics to
    // determine whether the connection is using TLS or not (on the
    // server side), as well as the application protocol being used
    // (e.g., http vs tcp). These heuristics rely on the client sending
    // the first bits of data. For server first protocols like MySQL,
    // MongoDB, etc., Envoy will timeout on the protocol detection after
    // the specified period, defaulting to non mTLS plain TCP
    // traffic. Set this field to tweak the period that Envoy will wait
    // for the client to send the first bits of data. (MUST BE >=1ms)
    ProtocolDetectionTimeout *types.Duration `protobuf:"bytes,42,opt,name=protocol_detection_timeout,json=protocolDetectionTimeout,proto3" json:"protocol_detection_timeout,omitempty"`
    // If set then set SO_KEEPALIVE on the socket to enable TCP Keepalives.
    TcpKeepalive *v1alpha3.ConnectionPoolSettings_TCPSettings_TcpKeepalive `protobuf:"bytes,28,opt,name=tcp_keepalive,json=tcpKeepalive,proto3" json:"tcp_keepalive,omitempty"`
    // Class of ingress resources to be processed by Istio ingress
    // controller. This corresponds to the value of
    // "kubernetes.io/ingress.class" annotation.
    IngressClass string `protobuf:"bytes,7,opt,name=ingress_class,json=ingressClass,proto3" json:"ingress_class,omitempty"`
    // Name of theKubernetes service used for the istio ingress controller.
    IngressService string `protobuf:"bytes,8,opt,name=ingress_service,json=ingressService,proto3" json:"ingress_service,omitempty"`
    // Defines whether to use Istio ingress controller for annotated or all ingress resources.
    IngressControllerMode MeshConfig_IngressControllerMode `protobuf:"varint,9,opt,name=ingress_controller_mode,json=ingressControllerMode,proto3,enum=istio.mesh.v1alpha1.MeshConfig_IngressControllerMode" json:"ingress_controller_mode,omitempty"`
    // $hide_from_docs
    AuthPolicy MeshConfig_AuthPolicy `protobuf:"varint,10,opt,name=auth_policy,json=authPolicy,proto3,enum=istio.mesh.v1alpha1.MeshConfig_AuthPolicy" json:"auth_policy,omitempty"` // Deprecated: Do not use.
    // $hide_from_docs
    RdsRefreshDelay *types.Duration `protobuf:"bytes,11,opt,name=rds_refresh_delay,json=rdsRefreshDelay,proto3" json:"rds_refresh_delay,omitempty"` // Deprecated: Do not use.
    // Flag to control generation of trace spans and request IDs.
    // Requires a trace span collector defined in the proxy configuration.
    EnableTracing bool `protobuf:"varint,12,opt,name=enable_tracing,json=enableTracing,proto3" json:"enable_tracing,omitempty"`
    // File address for the proxy access log (e.g. /dev/stdout).
    // Empty value disables access logging.
    AccessLogFile string `protobuf:"bytes,13,opt,name=access_log_file,json=accessLogFile,proto3" json:"access_log_file,omitempty"`
    // Format for the proxy access log
    // Empty value results in proxy's default access log format
    AccessLogFormat string `protobuf:"bytes,24,opt,name=access_log_format,json=accessLogFormat,proto3" json:"access_log_format,omitempty"`
    // Encoding for the proxy access log (text or json).
    // Default value is text.
    AccessLogEncoding MeshConfig_AccessLogEncoding `protobuf:"varint,27,opt,name=access_log_encoding,json=accessLogEncoding,proto3,enum=istio.mesh.v1alpha1.MeshConfig_AccessLogEncoding" json:"access_log_encoding,omitempty"`
    // This flag enables Envoy's gRPC Access Log Service.
    // See [Access Log Service](https://www.envoyproxy.io/docs/envoy/latest/api-v2/config/accesslog/v2/als.proto)
    // for details about Envoy's gRPC Access Log Service API.
    EnableEnvoyAccessLogService bool `protobuf:"varint,40,opt,name=enable_envoy_access_log_service,json=enableEnvoyAccessLogService,proto3" json:"enable_envoy_access_log_service,omitempty"`
    // Default proxy config used by the proxy injection mechanism operating in the mesh
    // (e.g. Kubernetes admission controller)
    // In case of Kubernetes, the proxy config is applied once during the injection process,
    // and remain constant for the duration of the pod. The rest of the mesh config can be changed
    // at runtime and config gets distributed dynamically.
    DefaultConfig *ProxyConfig `protobuf:"bytes,14,opt,name=default_config,json=defaultConfig,proto3" json:"default_config,omitempty"`
    // $hide_from_docs
    MixerAddress string `protobuf:"bytes,16,opt,name=mixer_address,json=mixerAddress,proto3" json:"mixer_address,omitempty"` // Deprecated: Do not use.
    // Set the default behavior of the sidecar for handling outbound traffic
    // from the application.  If your application uses one or more external
    // services that are not known apriori, setting the policy to ALLOW_ANY
    // will cause the sidecars to route any unknown traffic originating from
    // the application to its requested destination.  Users are strongly
    // encouraged to use ServiceEntries to explicitly declare any external
    // dependencies, instead of using allow_any, so that traffic to these
    // services can be monitored.
    OutboundTrafficPolicy *MeshConfig_OutboundTrafficPolicy `protobuf:"bytes,17,opt,name=outbound_traffic_policy,json=outboundTrafficPolicy,proto3" json:"outbound_traffic_policy,omitempty"`
    // Enables client side policy checks.
    EnableClientSidePolicyCheck bool `protobuf:"varint,19,opt,name=enable_client_side_policy_check,json=enableClientSidePolicyCheck,proto3" json:"enable_client_side_policy_check,omitempty"`
    // Unix Domain Socket through which Envoy communicates with NodeAgent SDS to get key/cert for mTLS.
    // Use secret-mount files instead of SDS if set to empty.
    SdsUdsPath string `protobuf:"bytes,20,opt,name=sds_uds_path,json=sdsUdsPath,proto3" json:"sds_uds_path,omitempty"`
    // $hide_from_docs
    SdsRefreshDelay *types.Duration `protobuf:"bytes,21,opt,name=sds_refresh_delay,json=sdsRefreshDelay,proto3" json:"sds_refresh_delay,omitempty"` // Deprecated: Do not use.
    // ConfigSource describes a source of configuration data for networking
    // rules, and other Istio configuration artifacts. Multiple data sources
    // can be configured for a single control plane.
    ConfigSources []*ConfigSource `protobuf:"bytes,22,rep,name=config_sources,json=configSources,proto3" json:"config_sources,omitempty"`
    // This flag is used to enable mutual TLS automatically for service to service communication
    // within the mesh, default false.
    // If set to true, and a given service does not have a corresponding DestinationRule configured,
    // or its DestinationRule does not have TLSSettings specified, Istio configures client side
    // TLS configuration appropriately. More specifically,
    // If the upstream authentication policy is in STRICT mode, use Istio provisioned certificate
    // for mutual TLS to connect to upstream.
    // If upstream service is in plain text mode, use plain text.
    // If the upstream authentication policy is in PERMISSIVE mode, Istio configures clients to use
    // mutual TLS when server sides are capable of accepting mutual TLS traffic.
    // If service DestinationRule exists and has TLSSettings specified, that is always used instead.
    EnableAutoMtls *types.BoolValue `protobuf:"bytes,43,opt,name=enable_auto_mtls,json=enableAutoMtls,proto3" json:"enable_auto_mtls,omitempty"`
    // $hide_from_docs
    // This flag is used by secret discovery service(SDS).
    // If set to true ([prerequisite](https://kubernetes.io/docs/concepts/storage/volumes/#projected)), Istio will inject volumes mount
    // for Kubernetes service account trustworthy JWT(which is available with Kubernetes 1.12 or higher), so that the Kubernetes API server
    // mounts Kubernetes service account trustworthy JWT to the Envoy container, which will be used to request key/cert eventually.
    // This isn't supported for non-Kubernetes cases.
    EnableSdsTokenMount bool `protobuf:"varint,23,opt,name=enable_sds_token_mount,json=enableSdsTokenMount,proto3" json:"enable_sds_token_mount,omitempty"`
    // $hide_from_docs
    // This flag is used by secret discovery service(SDS).
    // If set to true, Envoy will fetch a normal Kubernetes service account JWT from '/var/run/secrets/kubernetes.io/serviceaccount/token'
    // (https://kubernetes.io/docs/tasks/access-application-cluster/access-cluster/#accessing-the-api-from-a-pod)
    // and pass to sds server, which will be used to request key/cert eventually.
    // If both enable_sds_token_mount and sds_use_k8s_sa_jwt are set to true, enable_sds_token_mount(trustworthy jwt) takes precedence.
    // This isn't supported for non-k8s case.
    SdsUseK8SSaJwt bool `protobuf:"varint,29,opt,name=sds_use_k8s_sa_jwt,json=sdsUseK8sSaJwt,proto3" json:"sds_use_k8s_sa_jwt,omitempty"`
    // The trust domain corresponds to the trust root of a system.
    // Refer to [SPIFFE-ID](https://github.com/spiffe/spiffe/blob/master/standards/SPIFFE-ID.md#21-trust-domain)
    TrustDomain string `protobuf:"bytes,26,opt,name=trust_domain,json=trustDomain,proto3" json:"trust_domain,omitempty"`
    // The trust domain aliases represent the aliases of `trust_domain`.
    // For example, if we have
    // ```yaml
    // trustDomain: td1
    // trustDomainAliases: ["td2", "td3"]
    // ```
    // Any service with the identity `td1/ns/foo/sa/a-service-account`, `td2/ns/foo/sa/a-service-account`,
    // or `td3/ns/foo/sa/a-service-account` will be treated the same in the Istio mesh.
    TrustDomainAliases []string `protobuf:"bytes,46,rep,name=trust_domain_aliases,json=trustDomainAliases,proto3" json:"trust_domain_aliases,omitempty"`
    // The default value for the ServiceEntry.export_to field and services
    // imported through container registry integrations, e.g. this applies to
    // Kubernetes Service resources. The value is a list of namespace names and
    // reserved namespace aliases. The allowed namespace aliases are:
    //
    // * - All Namespaces
    // . - Current Namespace
    // ~ - No Namespace
    //
    // If not set the system will use "*" as the default value which implies that
    // services are exported to all namespaces.
    //
    // 'All namespaces' is a reasonable default for implementations that don't
    // need to restrict access or visibility of services across namespace
    // boundaries. If that requirement is present it is generally good practice to
    // make the default 'Current namespace' so that services are only visible
    // within their own namespaces by default. Operators can then expand the
    // visibility of services to other namespaces as needed. Use of 'No Namespace'
    // is expected to be rare but can have utility for deployments where
    // dependency management needs to be precise even within the scope of a single
    // namespace.
    //
    // For further discussion see the reference documentation for ServiceEntry,
    // Sidecar, and Gateway.
    DefaultServiceExportTo []string `protobuf:"bytes,31,rep,name=default_service_export_to,json=defaultServiceExportTo,proto3" json:"default_service_export_to,omitempty"`
    // The default value for the VirtualService.export_to field. Has the same
    // syntax as 'default_service_export_to'.
    //
    // If not set the system will use "*" as the default value which implies that
    // virtual services are exported to all namespaces
    DefaultVirtualServiceExportTo []string `protobuf:"bytes,32,rep,name=default_virtual_service_export_to,json=defaultVirtualServiceExportTo,proto3" json:"default_virtual_service_export_to,omitempty"`
    // The default value for the DestinationRule.export_to field. Has the same
    // syntax as 'default_service_export_to'.
    //
    // If not set the system will use "*" as the default value which implies that
    // destination rules are exported to all namespaces
    DefaultDestinationRuleExportTo []string `protobuf:"bytes,33,rep,name=default_destination_rule_export_to,json=defaultDestinationRuleExportTo,proto3" json:"default_destination_rule_export_to,omitempty"`
    // The namespace to treat as the administrative root namespace for
    // Istio configuration. When processing a leaf namespace Istio will search for
    // declarations in that namespace first and if none are found it will
    // search in the root namespace. Any matching declaration found in the root
    // namespace is processed as if it were declared in the leaf namespace.
    //
    // The precise semantics of this processing are documented on each resource
    // type.
    RootNamespace string `protobuf:"bytes,34,opt,name=root_namespace,json=rootNamespace,proto3" json:"root_namespace,omitempty"`
    // Locality based load balancing distribution or failover settings.
    LocalityLbSetting *v1alpha3.LocalityLoadBalancerSetting `protobuf:"bytes,35,opt,name=locality_lb_setting,json=localityLbSetting,proto3" json:"locality_lb_setting,omitempty"`
    // Configures DNS refresh rate for Envoy clusters of type STRICT_DNS
    DnsRefreshRate *types.Duration `protobuf:"bytes,36,opt,name=dns_refresh_rate,json=dnsRefreshRate,proto3" json:"dns_refresh_rate,omitempty"`
    // The flag to disable report batch.
    DisableReportBatch bool `protobuf:"varint,37,opt,name=disable_report_batch,json=disableReportBatch,proto3" json:"disable_report_batch,omitempty"`
    // When disable_report_batch is false, this value specifies the maximum number
    // of requests that are batched in report. If left unspecified, the default value
    // of report_batch_max_entries == 0 will use the hardcoded defaults of
    // istio::mixerclient::ReportOptions.
    ReportBatchMaxEntries uint32 `protobuf:"varint,38,opt,name=report_batch_max_entries,json=reportBatchMaxEntries,proto3" json:"report_batch_max_entries,omitempty"`
    // When disable_report_batch is false, this value specifies the maximum elapsed
    // time a batched report will be sent after a user request is processed. If left
    // unspecified, the default report_batch_max_time == 0 will use the hardcoded
    // defaults of istio::mixerclient::ReportOptions.
    ReportBatchMaxTime *types.Duration `protobuf:"bytes,39,opt,name=report_batch_max_time,json=reportBatchMaxTime,proto3" json:"report_batch_max_time,omitempty"`
    // Specify if http1.1 connections should be upgraded to http2 by default.
    // if sidecar is installed on all pods in the mesh, then this should be set to UPGRADE.
    // If one or more services or namespaces do not have sidecar(s), then this should be set to DO_NOT_UPGRADE.
    // It can be enabled by destination using the destinationRule.trafficPolicy.connectionPool.http.h2UpgradePolicy override.
    H2UpgradePolicy MeshConfig_H2UpgradePolicy `protobuf:"varint,41,opt,name=h2_upgrade_policy,json=h2UpgradePolicy,proto3,enum=istio.mesh.v1alpha1.MeshConfig_H2UpgradePolicy" json:"h2_upgrade_policy,omitempty"`
    // Name to be used while emitting statistics for inbound clusters.
    // By default, Istio emits statistics with the pattern inbound|<port>|<port-name>|<service-FQDN>.
    // For example inbound|7443|grpc-reviews|reviews.prod.svc.cluster.local. This can be used to override that pattern.
    //
    // A Pattern can be composed of various pre-defined variables. The following variables are supported.
    // %SERVICE% - Will be substituted with name of the service.
    // %SERVICE_FQDN% - Will be substituted with FQDN of the service.
    // %SERVICE_PORT% - Will be substituted with port of the service.
    // %SERVICE_PORT_NAME% - Will be substituted with port name of the service.
    //
    // Following are some examples of supported patterns for reviews.
    // %SERVICE_FQDN%_%SERVICE_PORT% will use reviews.prod.svc.cluster.local_7443 as the stats name.
    // %SERVICE% will use reviews.prod as the stats name.
    InboundClusterStatName string `protobuf:"bytes,44,opt,name=inbound_cluster_stat_name,json=inboundClusterStatName,proto3" json:"inbound_cluster_stat_name,omitempty"`
    // Name to be used while emitting statistics for outbound clusters.
    // By default, Istio emits statistics with the pattern outbound|<port>|<subsetname>|<service-FQDN>.
    // For example outbound|8080|v2|reviews.prod.svc.cluster.local. This can be used to override that pattern.
    //
    // A Pattern can be composed of various pre-defined variables. The following variables are supported.
    // %SERVICE% - Will be substituted with name of the service.
    // %SERVICE_FQDN% - Will be substituted with FQDN of the service.
    // %SERVICE_PORT% - Will be substituted with port of the service.
    // %SERVICE_PORT_NAME% - Will be substituted with port name of the service.
    // %SUBSET_NAME% - Will be substituted with subset.
    //
    // Following are some examples of supported patterns for reviews.
    // %SERVICE_FQDN%_%SERVICE_PORT% will use reviews.prod.svc.cluster.local_7443 as the stats name.
    // %SERVICE% will use reviews.prod as the stats name.
    OutboundClusterStatName string `protobuf:"bytes,45,opt,name=outbound_cluster_stat_name,json=outboundClusterStatName,proto3" json:"outbound_cluster_stat_name,omitempty"`
    // Configure the provision of certificates.
    Certificates         []*Certificate `protobuf:"bytes,47,rep,name=certificates,proto3" json:"certificates,omitempty"`
    XXX_NoUnkeyedLiteral struct{}       `json:"-"`
    XXX_unrecognized     []byte         `json:"-"`
    XXX_sizecache        int32          `json:"-"`
}

MeshConfig defines mesh-wide variables shared by all Envoy instances in the Istio service mesh.

NOTE: This configuration type should be used for the low-level global configuration, such as component addresses and port numbers. It should not be used for the features of the mesh that can be scoped by service or by namespace. Some of the fields in the mesh config are going to be deprecated and replaced with several individual configuration types (for example, tracing configuration).

func (*MeshConfig) Descriptor Uses

func (*MeshConfig) Descriptor() ([]byte, []int)

func (*MeshConfig) GetAccessLogEncoding Uses

func (m *MeshConfig) GetAccessLogEncoding() MeshConfig_AccessLogEncoding

func (*MeshConfig) GetAccessLogFile Uses

func (m *MeshConfig) GetAccessLogFile() string

func (*MeshConfig) GetAccessLogFormat Uses

func (m *MeshConfig) GetAccessLogFormat() string

func (*MeshConfig) GetAuthPolicy Uses

func (m *MeshConfig) GetAuthPolicy() MeshConfig_AuthPolicy

Deprecated: Do not use.

func (*MeshConfig) GetCertificates Uses

func (m *MeshConfig) GetCertificates() []*Certificate

func (*MeshConfig) GetConfigSources Uses

func (m *MeshConfig) GetConfigSources() []*ConfigSource

func (*MeshConfig) GetConnectTimeout Uses

func (m *MeshConfig) GetConnectTimeout() *types.Duration

func (*MeshConfig) GetDefaultConfig Uses

func (m *MeshConfig) GetDefaultConfig() *ProxyConfig

func (*MeshConfig) GetDefaultDestinationRuleExportTo Uses

func (m *MeshConfig) GetDefaultDestinationRuleExportTo() []string

func (*MeshConfig) GetDefaultServiceExportTo Uses

func (m *MeshConfig) GetDefaultServiceExportTo() []string

func (*MeshConfig) GetDefaultVirtualServiceExportTo Uses

func (m *MeshConfig) GetDefaultVirtualServiceExportTo() []string

func (*MeshConfig) GetDisableMixerHttpReports Uses

func (m *MeshConfig) GetDisableMixerHttpReports() bool

func (*MeshConfig) GetDisablePolicyChecks Uses

func (m *MeshConfig) GetDisablePolicyChecks() bool

func (*MeshConfig) GetDisableReportBatch Uses

func (m *MeshConfig) GetDisableReportBatch() bool

func (*MeshConfig) GetDnsRefreshRate Uses

func (m *MeshConfig) GetDnsRefreshRate() *types.Duration

func (*MeshConfig) GetEnableAutoMtls Uses

func (m *MeshConfig) GetEnableAutoMtls() *types.BoolValue

func (*MeshConfig) GetEnableClientSidePolicyCheck Uses

func (m *MeshConfig) GetEnableClientSidePolicyCheck() bool

func (*MeshConfig) GetEnableEnvoyAccessLogService Uses

func (m *MeshConfig) GetEnableEnvoyAccessLogService() bool

func (*MeshConfig) GetEnableSdsTokenMount Uses

func (m *MeshConfig) GetEnableSdsTokenMount() bool

func (*MeshConfig) GetEnableTracing Uses

func (m *MeshConfig) GetEnableTracing() bool

func (*MeshConfig) GetH2UpgradePolicy Uses

func (m *MeshConfig) GetH2UpgradePolicy() MeshConfig_H2UpgradePolicy

func (*MeshConfig) GetInboundClusterStatName Uses

func (m *MeshConfig) GetInboundClusterStatName() string

func (*MeshConfig) GetIngressClass Uses

func (m *MeshConfig) GetIngressClass() string

func (*MeshConfig) GetIngressControllerMode Uses

func (m *MeshConfig) GetIngressControllerMode() MeshConfig_IngressControllerMode

func (*MeshConfig) GetIngressService Uses

func (m *MeshConfig) GetIngressService() string

func (*MeshConfig) GetLocalityLbSetting Uses

func (m *MeshConfig) GetLocalityLbSetting() *v1alpha3.LocalityLoadBalancerSetting

func (*MeshConfig) GetMixerAddress Uses

func (m *MeshConfig) GetMixerAddress() string

Deprecated: Do not use.

func (*MeshConfig) GetMixerCheckServer Uses

func (m *MeshConfig) GetMixerCheckServer() string

func (*MeshConfig) GetMixerReportServer Uses

func (m *MeshConfig) GetMixerReportServer() string

func (*MeshConfig) GetOutboundClusterStatName Uses

func (m *MeshConfig) GetOutboundClusterStatName() string

func (*MeshConfig) GetOutboundTrafficPolicy Uses

func (m *MeshConfig) GetOutboundTrafficPolicy() *MeshConfig_OutboundTrafficPolicy

func (*MeshConfig) GetPolicyCheckFailOpen Uses

func (m *MeshConfig) GetPolicyCheckFailOpen() bool

func (*MeshConfig) GetProtocolDetectionTimeout Uses

func (m *MeshConfig) GetProtocolDetectionTimeout() *types.Duration

func (*MeshConfig) GetProxyHttpPort Uses

func (m *MeshConfig) GetProxyHttpPort() int32

func (*MeshConfig) GetProxyListenPort Uses

func (m *MeshConfig) GetProxyListenPort() int32

func (*MeshConfig) GetRdsRefreshDelay Uses

func (m *MeshConfig) GetRdsRefreshDelay() *types.Duration

Deprecated: Do not use.

func (*MeshConfig) GetReportBatchMaxEntries Uses

func (m *MeshConfig) GetReportBatchMaxEntries() uint32

func (*MeshConfig) GetReportBatchMaxTime Uses

func (m *MeshConfig) GetReportBatchMaxTime() *types.Duration

func (*MeshConfig) GetRootNamespace Uses

func (m *MeshConfig) GetRootNamespace() string

func (*MeshConfig) GetSdsRefreshDelay Uses

func (m *MeshConfig) GetSdsRefreshDelay() *types.Duration

Deprecated: Do not use.

func (*MeshConfig) GetSdsUdsPath Uses

func (m *MeshConfig) GetSdsUdsPath() string

func (*MeshConfig) GetSdsUseK8SSaJwt Uses

func (m *MeshConfig) GetSdsUseK8SSaJwt() bool

func (*MeshConfig) GetSidecarToTelemetrySessionAffinity Uses

func (m *MeshConfig) GetSidecarToTelemetrySessionAffinity() bool

func (*MeshConfig) GetTcpKeepalive Uses

func (m *MeshConfig) GetTcpKeepalive() *v1alpha3.ConnectionPoolSettings_TCPSettings_TcpKeepalive

func (*MeshConfig) GetTrustDomain Uses

func (m *MeshConfig) GetTrustDomain() string

func (*MeshConfig) GetTrustDomainAliases Uses

func (m *MeshConfig) GetTrustDomainAliases() []string

func (*MeshConfig) Marshal Uses

func (m *MeshConfig) Marshal() (dAtA []byte, err error)

func (*MeshConfig) MarshalTo Uses

func (m *MeshConfig) MarshalTo(dAtA []byte) (int, error)

func (*MeshConfig) MarshalToSizedBuffer Uses

func (m *MeshConfig) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*MeshConfig) ProtoMessage Uses

func (*MeshConfig) ProtoMessage()

func (*MeshConfig) Reset Uses

func (m *MeshConfig) Reset()

func (*MeshConfig) Size Uses

func (m *MeshConfig) Size() (n int)

func (*MeshConfig) String Uses

func (m *MeshConfig) String() string

func (*MeshConfig) Unmarshal Uses

func (m *MeshConfig) Unmarshal(dAtA []byte) error

func (*MeshConfig) XXX_DiscardUnknown Uses

func (m *MeshConfig) XXX_DiscardUnknown()

func (*MeshConfig) XXX_Marshal Uses

func (m *MeshConfig) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*MeshConfig) XXX_Merge Uses

func (m *MeshConfig) XXX_Merge(src proto.Message)

func (*MeshConfig) XXX_Size Uses

func (m *MeshConfig) XXX_Size() int

func (*MeshConfig) XXX_Unmarshal Uses

func (m *MeshConfig) XXX_Unmarshal(b []byte) error

type MeshConfig_AccessLogEncoding Uses

type MeshConfig_AccessLogEncoding int32
const (
    MeshConfig_TEXT MeshConfig_AccessLogEncoding = 0
    MeshConfig_JSON MeshConfig_AccessLogEncoding = 1
)

func (MeshConfig_AccessLogEncoding) EnumDescriptor Uses

func (MeshConfig_AccessLogEncoding) EnumDescriptor() ([]byte, []int)

func (MeshConfig_AccessLogEncoding) String Uses

func (x MeshConfig_AccessLogEncoding) String() string

type MeshConfig_AuthPolicy Uses

type MeshConfig_AuthPolicy int32

$hide_from_docs

const (
    MeshConfig_NONE       MeshConfig_AuthPolicy = 0
    MeshConfig_MUTUAL_TLS MeshConfig_AuthPolicy = 1
)

func (MeshConfig_AuthPolicy) EnumDescriptor Uses

func (MeshConfig_AuthPolicy) EnumDescriptor() ([]byte, []int)

func (MeshConfig_AuthPolicy) String Uses

func (x MeshConfig_AuthPolicy) String() string

type MeshConfig_H2UpgradePolicy Uses

type MeshConfig_H2UpgradePolicy int32

Default Policy for upgrading http1.1 connections to http2.

const (
    // Do not upgrade connections to http2.
    MeshConfig_DO_NOT_UPGRADE MeshConfig_H2UpgradePolicy = 0
    // Upgrade the connections to http2.
    MeshConfig_UPGRADE MeshConfig_H2UpgradePolicy = 1
)

func (MeshConfig_H2UpgradePolicy) EnumDescriptor Uses

func (MeshConfig_H2UpgradePolicy) EnumDescriptor() ([]byte, []int)

func (MeshConfig_H2UpgradePolicy) String Uses

func (x MeshConfig_H2UpgradePolicy) String() string

type MeshConfig_IngressControllerMode Uses

type MeshConfig_IngressControllerMode int32
const (
    // Disables Istio ingress controller.
    MeshConfig_OFF MeshConfig_IngressControllerMode = 0
    // Istio ingress controller will act on ingress resources that do not
    // contain any annotation or whose annotations match the value
    // specified in the ingress_class parameter described earlier. Use this
    // mode if Istio ingress controller will be the default ingress
    // controller for the entireKubernetes cluster.
    MeshConfig_DEFAULT MeshConfig_IngressControllerMode = 1
    // Istio ingress controller will only act on ingress resources whose
    // annotations match the value specified in the ingress_class parameter
    // described earlier. Use this mode if Istio ingress controller will be
    // a secondary ingress controller (e.g., in addition to a
    // cloud-provided ingress controller).
    MeshConfig_STRICT MeshConfig_IngressControllerMode = 2
)

func (MeshConfig_IngressControllerMode) EnumDescriptor Uses

func (MeshConfig_IngressControllerMode) EnumDescriptor() ([]byte, []int)

func (MeshConfig_IngressControllerMode) String Uses

func (x MeshConfig_IngressControllerMode) String() string

type MeshConfig_OutboundTrafficPolicy Uses

type MeshConfig_OutboundTrafficPolicy struct {
    Mode                 MeshConfig_OutboundTrafficPolicy_Mode `protobuf:"varint,1,opt,name=mode,proto3,enum=istio.mesh.v1alpha1.MeshConfig_OutboundTrafficPolicy_Mode" json:"mode,omitempty"`
    XXX_NoUnkeyedLiteral struct{}                              `json:"-"`
    XXX_unrecognized     []byte                                `json:"-"`
    XXX_sizecache        int32                                 `json:"-"`
}

func (*MeshConfig_OutboundTrafficPolicy) Descriptor Uses

func (*MeshConfig_OutboundTrafficPolicy) Descriptor() ([]byte, []int)

func (*MeshConfig_OutboundTrafficPolicy) GetMode Uses

func (m *MeshConfig_OutboundTrafficPolicy) GetMode() MeshConfig_OutboundTrafficPolicy_Mode

func (*MeshConfig_OutboundTrafficPolicy) Marshal Uses

func (m *MeshConfig_OutboundTrafficPolicy) Marshal() (dAtA []byte, err error)

func (*MeshConfig_OutboundTrafficPolicy) MarshalTo Uses

func (m *MeshConfig_OutboundTrafficPolicy) MarshalTo(dAtA []byte) (int, error)

func (*MeshConfig_OutboundTrafficPolicy) MarshalToSizedBuffer Uses

func (m *MeshConfig_OutboundTrafficPolicy) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*MeshConfig_OutboundTrafficPolicy) ProtoMessage Uses

func (*MeshConfig_OutboundTrafficPolicy) ProtoMessage()

func (*MeshConfig_OutboundTrafficPolicy) Reset Uses

func (m *MeshConfig_OutboundTrafficPolicy) Reset()

func (*MeshConfig_OutboundTrafficPolicy) Size Uses

func (m *MeshConfig_OutboundTrafficPolicy) Size() (n int)

func (*MeshConfig_OutboundTrafficPolicy) String Uses

func (m *MeshConfig_OutboundTrafficPolicy) String() string

func (*MeshConfig_OutboundTrafficPolicy) Unmarshal Uses

func (m *MeshConfig_OutboundTrafficPolicy) Unmarshal(dAtA []byte) error

func (*MeshConfig_OutboundTrafficPolicy) XXX_DiscardUnknown Uses

func (m *MeshConfig_OutboundTrafficPolicy) XXX_DiscardUnknown()

func (*MeshConfig_OutboundTrafficPolicy) XXX_Marshal Uses

func (m *MeshConfig_OutboundTrafficPolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*MeshConfig_OutboundTrafficPolicy) XXX_Merge Uses

func (m *MeshConfig_OutboundTrafficPolicy) XXX_Merge(src proto.Message)

func (*MeshConfig_OutboundTrafficPolicy) XXX_Size Uses

func (m *MeshConfig_OutboundTrafficPolicy) XXX_Size() int

func (*MeshConfig_OutboundTrafficPolicy) XXX_Unmarshal Uses

func (m *MeshConfig_OutboundTrafficPolicy) XXX_Unmarshal(b []byte) error

type MeshConfig_OutboundTrafficPolicy_Mode Uses

type MeshConfig_OutboundTrafficPolicy_Mode int32
const (
    // outbound traffic will be restricted to services defined in the
    // service registry as well as those defined through ServiceEntries
    MeshConfig_OutboundTrafficPolicy_REGISTRY_ONLY MeshConfig_OutboundTrafficPolicy_Mode = 0
    // outbound traffic to unknown destinations will be allowed, in case
    // there are no services or ServiceEntries for the destination port
    MeshConfig_OutboundTrafficPolicy_ALLOW_ANY MeshConfig_OutboundTrafficPolicy_Mode = 1
)

func (MeshConfig_OutboundTrafficPolicy_Mode) EnumDescriptor Uses

func (MeshConfig_OutboundTrafficPolicy_Mode) EnumDescriptor() ([]byte, []int)

func (MeshConfig_OutboundTrafficPolicy_Mode) String Uses

func (x MeshConfig_OutboundTrafficPolicy_Mode) String() string

type MeshNetworks Uses

type MeshNetworks struct {
    // The set of networks inside this mesh. Each network should
    // have a unique name and information about how to infer the endpoints in
    // the network as well as the gateways associated with the network.
    Networks             map[string]*Network `protobuf:"bytes,1,rep,name=networks,proto3" json:"networks,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
    XXX_NoUnkeyedLiteral struct{}            `json:"-"`
    XXX_unrecognized     []byte              `json:"-"`
    XXX_sizecache        int32               `json:"-"`
}

MeshNetworks (config map) provides information about the set of networks inside a mesh and how to route to endpoints in each network. For example

MeshNetworks(file/config map):

“`yaml networks:

network1:
- endpoints:
  - fromRegistry: registry1 #must match kubeconfig name in Kubernetes secret
  - fromCidr: 192.168.100.0/22 #a VM network for example
  gateways:
  - registryServiceName: istio-ingressgateway.istio-system.svc.cluster.local
    port: 15443
    locality: us-east-1a
  - address: 192.168.100.1
    port: 15443
    locality: us-east-1a

“`

func (*MeshNetworks) Descriptor Uses

func (*MeshNetworks) Descriptor() ([]byte, []int)

func (*MeshNetworks) GetNetworks Uses

func (m *MeshNetworks) GetNetworks() map[string]*Network

func (*MeshNetworks) Marshal Uses

func (m *MeshNetworks) Marshal() (dAtA []byte, err error)

func (*MeshNetworks) MarshalTo Uses

func (m *MeshNetworks) MarshalTo(dAtA []byte) (int, error)

func (*MeshNetworks) MarshalToSizedBuffer Uses

func (m *MeshNetworks) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*MeshNetworks) ProtoMessage Uses

func (*MeshNetworks) ProtoMessage()

func (*MeshNetworks) Reset Uses

func (m *MeshNetworks) Reset()

func (*MeshNetworks) Size Uses

func (m *MeshNetworks) Size() (n int)

func (*MeshNetworks) String Uses

func (m *MeshNetworks) String() string

func (*MeshNetworks) Unmarshal Uses

func (m *MeshNetworks) Unmarshal(dAtA []byte) error

func (*MeshNetworks) XXX_DiscardUnknown Uses

func (m *MeshNetworks) XXX_DiscardUnknown()

func (*MeshNetworks) XXX_Marshal Uses

func (m *MeshNetworks) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*MeshNetworks) XXX_Merge Uses

func (m *MeshNetworks) XXX_Merge(src proto.Message)

func (*MeshNetworks) XXX_Size Uses

func (m *MeshNetworks) XXX_Size() int

func (*MeshNetworks) XXX_Unmarshal Uses

func (m *MeshNetworks) XXX_Unmarshal(b []byte) error

type Network Uses

type Network struct {
    // The list of endpoints in the network (obtained through the
    // constituent service registries or from CIDR ranges). All endpoints in
    // the network are directly accessible to one another.
    Endpoints []*Network_NetworkEndpoints `protobuf:"bytes,2,rep,name=endpoints,proto3" json:"endpoints,omitempty"`
    // Set of gateways associated with the network.
    Gateways             []*Network_IstioNetworkGateway `protobuf:"bytes,3,rep,name=gateways,proto3" json:"gateways,omitempty"`
    XXX_NoUnkeyedLiteral struct{}                       `json:"-"`
    XXX_unrecognized     []byte                         `json:"-"`
    XXX_sizecache        int32                          `json:"-"`
}

Network provides information about the endpoints in a routable L3 network. A single routable L3 network can have one or more service registries. Note that the network has no relation to the locality of the endpoint. The endpoint locality will be obtained from the service registry.

func (*Network) Descriptor Uses

func (*Network) Descriptor() ([]byte, []int)

func (*Network) GetEndpoints Uses

func (m *Network) GetEndpoints() []*Network_NetworkEndpoints

func (*Network) GetGateways Uses

func (m *Network) GetGateways() []*Network_IstioNetworkGateway

func (*Network) Marshal Uses

func (m *Network) Marshal() (dAtA []byte, err error)

func (*Network) MarshalTo Uses

func (m *Network) MarshalTo(dAtA []byte) (int, error)

func (*Network) MarshalToSizedBuffer Uses

func (m *Network) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Network) ProtoMessage Uses

func (*Network) ProtoMessage()

func (*Network) Reset Uses

func (m *Network) Reset()

func (*Network) Size Uses

func (m *Network) Size() (n int)

func (*Network) String Uses

func (m *Network) String() string

func (*Network) Unmarshal Uses

func (m *Network) Unmarshal(dAtA []byte) error

func (*Network) XXX_DiscardUnknown Uses

func (m *Network) XXX_DiscardUnknown()

func (*Network) XXX_Marshal Uses

func (m *Network) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Network) XXX_Merge Uses

func (m *Network) XXX_Merge(src proto.Message)

func (*Network) XXX_Size Uses

func (m *Network) XXX_Size() int

func (*Network) XXX_Unmarshal Uses

func (m *Network) XXX_Unmarshal(b []byte) error

type Network_IstioNetworkGateway Uses

type Network_IstioNetworkGateway struct {
    // Types that are valid to be assigned to Gw:
    //	*Network_IstioNetworkGateway_RegistryServiceName
    //	*Network_IstioNetworkGateway_Address
    Gw  isNetwork_IstioNetworkGateway_Gw `protobuf_oneof:"gw"`
    // The port associated with the gateway.
    Port uint32 `protobuf:"varint,3,opt,name=port,proto3" json:"port,omitempty"`
    // The locality associated with an explicitly specified gateway (i.e. ip)
    Locality             string   `protobuf:"bytes,4,opt,name=locality,proto3" json:"locality,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

The gateway associated with this network. Traffic from remote networks will arrive at the specified gateway:port. All incoming traffic must use mTLS.

func (*Network_IstioNetworkGateway) Descriptor Uses

func (*Network_IstioNetworkGateway) Descriptor() ([]byte, []int)

func (*Network_IstioNetworkGateway) GetAddress Uses

func (m *Network_IstioNetworkGateway) GetAddress() string

func (*Network_IstioNetworkGateway) GetGw Uses

func (m *Network_IstioNetworkGateway) GetGw() isNetwork_IstioNetworkGateway_Gw

func (*Network_IstioNetworkGateway) GetLocality Uses

func (m *Network_IstioNetworkGateway) GetLocality() string

func (*Network_IstioNetworkGateway) GetPort Uses

func (m *Network_IstioNetworkGateway) GetPort() uint32

func (*Network_IstioNetworkGateway) GetRegistryServiceName Uses

func (m *Network_IstioNetworkGateway) GetRegistryServiceName() string

func (*Network_IstioNetworkGateway) Marshal Uses

func (m *Network_IstioNetworkGateway) Marshal() (dAtA []byte, err error)

func (*Network_IstioNetworkGateway) MarshalTo Uses

func (m *Network_IstioNetworkGateway) MarshalTo(dAtA []byte) (int, error)

func (*Network_IstioNetworkGateway) MarshalToSizedBuffer Uses

func (m *Network_IstioNetworkGateway) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Network_IstioNetworkGateway) ProtoMessage Uses

func (*Network_IstioNetworkGateway) ProtoMessage()

func (*Network_IstioNetworkGateway) Reset Uses

func (m *Network_IstioNetworkGateway) Reset()

func (*Network_IstioNetworkGateway) Size Uses

func (m *Network_IstioNetworkGateway) Size() (n int)

func (*Network_IstioNetworkGateway) String Uses

func (m *Network_IstioNetworkGateway) String() string

func (*Network_IstioNetworkGateway) Unmarshal Uses

func (m *Network_IstioNetworkGateway) Unmarshal(dAtA []byte) error

func (*Network_IstioNetworkGateway) XXX_DiscardUnknown Uses

func (m *Network_IstioNetworkGateway) XXX_DiscardUnknown()

func (*Network_IstioNetworkGateway) XXX_Marshal Uses

func (m *Network_IstioNetworkGateway) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Network_IstioNetworkGateway) XXX_Merge Uses

func (m *Network_IstioNetworkGateway) XXX_Merge(src proto.Message)

func (*Network_IstioNetworkGateway) XXX_OneofWrappers Uses

func (*Network_IstioNetworkGateway) XXX_OneofWrappers() []interface{}

XXX_OneofWrappers is for the internal use of the proto package.

func (*Network_IstioNetworkGateway) XXX_Size Uses

func (m *Network_IstioNetworkGateway) XXX_Size() int

func (*Network_IstioNetworkGateway) XXX_Unmarshal Uses

func (m *Network_IstioNetworkGateway) XXX_Unmarshal(b []byte) error

type Network_IstioNetworkGateway_Address Uses

type Network_IstioNetworkGateway_Address struct {
    Address string `protobuf:"bytes,2,opt,name=address,proto3,oneof"`
}

func (*Network_IstioNetworkGateway_Address) MarshalTo Uses

func (m *Network_IstioNetworkGateway_Address) MarshalTo(dAtA []byte) (int, error)

func (*Network_IstioNetworkGateway_Address) MarshalToSizedBuffer Uses

func (m *Network_IstioNetworkGateway_Address) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Network_IstioNetworkGateway_Address) Size Uses

func (m *Network_IstioNetworkGateway_Address) Size() (n int)

type Network_IstioNetworkGateway_RegistryServiceName Uses

type Network_IstioNetworkGateway_RegistryServiceName struct {
    RegistryServiceName string `protobuf:"bytes,1,opt,name=registry_service_name,json=registryServiceName,proto3,oneof"`
}

func (*Network_IstioNetworkGateway_RegistryServiceName) MarshalTo Uses

func (m *Network_IstioNetworkGateway_RegistryServiceName) MarshalTo(dAtA []byte) (int, error)

func (*Network_IstioNetworkGateway_RegistryServiceName) MarshalToSizedBuffer Uses

func (m *Network_IstioNetworkGateway_RegistryServiceName) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Network_IstioNetworkGateway_RegistryServiceName) Size Uses

func (m *Network_IstioNetworkGateway_RegistryServiceName) Size() (n int)

type Network_NetworkEndpoints Uses

type Network_NetworkEndpoints struct {
    // Types that are valid to be assigned to Ne:
    //	*Network_NetworkEndpoints_FromCidr
    //	*Network_NetworkEndpoints_FromRegistry
    Ne                   isNetwork_NetworkEndpoints_Ne `protobuf_oneof:"ne"`
    XXX_NoUnkeyedLiteral struct{}                      `json:"-"`
    XXX_unrecognized     []byte                        `json:"-"`
    XXX_sizecache        int32                         `json:"-"`
}

NetworkEndpoints describes how the network associated with an endpoint should be inferred. An endpoint will be assigned to a network based on the following rules:

1. Implicitly: If the registry explicitly provides information about the network to which the endpoint belongs to. In some cases, its possible to indicate the network associated with the endpoint by adding the `ISTIO_META_NETWORK` environment variable to the sidecar.

2. Explicitly:

a. By matching the registry name with one of the "fromRegistry"
in the mesh config. A "from_registry" can only be assigned to a
single network.

b. By matching the IP against one of the CIDR ranges in a mesh
config network. The CIDR ranges must not overlap and be assigned to
a single network.

(2) will override (1) if both are present.

func (*Network_NetworkEndpoints) Descriptor Uses

func (*Network_NetworkEndpoints) Descriptor() ([]byte, []int)

func (*Network_NetworkEndpoints) GetFromCidr Uses

func (m *Network_NetworkEndpoints) GetFromCidr() string

func (*Network_NetworkEndpoints) GetFromRegistry Uses

func (m *Network_NetworkEndpoints) GetFromRegistry() string

func (*Network_NetworkEndpoints) GetNe Uses

func (m *Network_NetworkEndpoints) GetNe() isNetwork_NetworkEndpoints_Ne

func (*Network_NetworkEndpoints) Marshal Uses

func (m *Network_NetworkEndpoints) Marshal() (dAtA []byte, err error)

func (*Network_NetworkEndpoints) MarshalTo Uses

func (m *Network_NetworkEndpoints) MarshalTo(dAtA []byte) (int, error)

func (*Network_NetworkEndpoints) MarshalToSizedBuffer Uses

func (m *Network_NetworkEndpoints) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Network_NetworkEndpoints) ProtoMessage Uses

func (*Network_NetworkEndpoints) ProtoMessage()

func (*Network_NetworkEndpoints) Reset Uses

func (m *Network_NetworkEndpoints) Reset()

func (*Network_NetworkEndpoints) Size Uses

func (m *Network_NetworkEndpoints) Size() (n int)

func (*Network_NetworkEndpoints) String Uses

func (m *Network_NetworkEndpoints) String() string

func (*Network_NetworkEndpoints) Unmarshal Uses

func (m *Network_NetworkEndpoints) Unmarshal(dAtA []byte) error

func (*Network_NetworkEndpoints) XXX_DiscardUnknown Uses

func (m *Network_NetworkEndpoints) XXX_DiscardUnknown()

func (*Network_NetworkEndpoints) XXX_Marshal Uses

func (m *Network_NetworkEndpoints) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Network_NetworkEndpoints) XXX_Merge Uses

func (m *Network_NetworkEndpoints) XXX_Merge(src proto.Message)

func (*Network_NetworkEndpoints) XXX_OneofWrappers Uses

func (*Network_NetworkEndpoints) XXX_OneofWrappers() []interface{}

XXX_OneofWrappers is for the internal use of the proto package.

func (*Network_NetworkEndpoints) XXX_Size Uses

func (m *Network_NetworkEndpoints) XXX_Size() int

func (*Network_NetworkEndpoints) XXX_Unmarshal Uses

func (m *Network_NetworkEndpoints) XXX_Unmarshal(b []byte) error

type Network_NetworkEndpoints_FromCidr Uses

type Network_NetworkEndpoints_FromCidr struct {
    FromCidr string `protobuf:"bytes,1,opt,name=from_cidr,json=fromCidr,proto3,oneof"`
}

func (*Network_NetworkEndpoints_FromCidr) MarshalTo Uses

func (m *Network_NetworkEndpoints_FromCidr) MarshalTo(dAtA []byte) (int, error)

func (*Network_NetworkEndpoints_FromCidr) MarshalToSizedBuffer Uses

func (m *Network_NetworkEndpoints_FromCidr) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Network_NetworkEndpoints_FromCidr) Size Uses

func (m *Network_NetworkEndpoints_FromCidr) Size() (n int)

type Network_NetworkEndpoints_FromRegistry Uses

type Network_NetworkEndpoints_FromRegistry struct {
    FromRegistry string `protobuf:"bytes,2,opt,name=from_registry,json=fromRegistry,proto3,oneof"`
}

func (*Network_NetworkEndpoints_FromRegistry) MarshalTo Uses

func (m *Network_NetworkEndpoints_FromRegistry) MarshalTo(dAtA []byte) (int, error)

func (*Network_NetworkEndpoints_FromRegistry) MarshalToSizedBuffer Uses

func (m *Network_NetworkEndpoints_FromRegistry) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Network_NetworkEndpoints_FromRegistry) Size Uses

func (m *Network_NetworkEndpoints_FromRegistry) Size() (n int)

type ProxyConfig Uses

type ProxyConfig struct {
    // Path to the generated configuration file directory.
    // Proxy agent generates the actual configuration and stores it in this directory.
    ConfigPath string `protobuf:"bytes,1,opt,name=config_path,json=configPath,proto3" json:"config_path,omitempty"`
    // Path to the proxy binary
    BinaryPath string `protobuf:"bytes,2,opt,name=binary_path,json=binaryPath,proto3" json:"binary_path,omitempty"`
    // Service cluster defines the name for the service_cluster that is
    // shared by all Envoy instances. This setting corresponds to
    // _--service-cluster_ flag in Envoy.  In a typical Envoy deployment, the
    // _service-cluster_ flag is used to identify the caller, for
    // source-based routing scenarios.
    //
    // Since Istio does not assign a local service/service version to each
    // Envoy instance, the name is same for all of them.  However, the
    // source/caller's identity (e.g., IP address) is encoded in the
    // _--service-node_ flag when launching Envoy.  When the RDS service
    // receives API calls from Envoy, it uses the value of the _service-node_
    // flag to compute routes that are relative to the service instances
    // located at that IP address.
    ServiceCluster string `protobuf:"bytes,3,opt,name=service_cluster,json=serviceCluster,proto3" json:"service_cluster,omitempty"`
    // The time in seconds that Envoy will drain connections during a hot
    // restart. MUST be >=1s (e.g., _1s/1m/1h_)
    DrainDuration *types.Duration `protobuf:"bytes,4,opt,name=drain_duration,json=drainDuration,proto3" json:"drain_duration,omitempty"`
    // The time in seconds that Envoy will wait before shutting down the
    // parent process during a hot restart. MUST be >=1s (e.g., _1s/1m/1h_).
    // MUST BE greater than _drain_duration_ parameter.
    ParentShutdownDuration *types.Duration `protobuf:"bytes,5,opt,name=parent_shutdown_duration,json=parentShutdownDuration,proto3" json:"parent_shutdown_duration,omitempty"`
    // Address of the discovery service exposing xDS with mTLS connection.
    DiscoveryAddress string `protobuf:"bytes,6,opt,name=discovery_address,json=discoveryAddress,proto3" json:"discovery_address,omitempty"`
    // $hide_from_docs
    DiscoveryRefreshDelay *types.Duration `protobuf:"bytes,7,opt,name=discovery_refresh_delay,json=discoveryRefreshDelay,proto3" json:"discovery_refresh_delay,omitempty"` // Deprecated: Do not use.
    // Address of the Zipkin service (e.g. _zipkin:9411_).
    // DEPRECATED: Use [tracing][istio.mesh.v1alpha1.ProxyConfig.tracing] instead.
    ZipkinAddress string `protobuf:"bytes,8,opt,name=zipkin_address,json=zipkinAddress,proto3" json:"zipkin_address,omitempty"` // Deprecated: Do not use.
    // Connection timeout used by Envoy for supporting services. (MUST BE >=1ms)
    ConnectTimeout *types.Duration `protobuf:"bytes,9,opt,name=connect_timeout,json=connectTimeout,proto3" json:"connect_timeout,omitempty"`
    // IP Address and Port of a statsd UDP listener (e.g. _10.75.241.127:9125_).
    StatsdUdpAddress string `protobuf:"bytes,10,opt,name=statsd_udp_address,json=statsdUdpAddress,proto3" json:"statsd_udp_address,omitempty"`
    // $hide_from_docs
    EnvoyMetricsServiceAddress string `protobuf:"bytes,20,opt,name=envoy_metrics_service_address,json=envoyMetricsServiceAddress,proto3" json:"envoy_metrics_service_address,omitempty"` // Deprecated: Do not use.
    // Port on which Envoy should listen for administrative commands.
    ProxyAdminPort int32 `protobuf:"varint,11,opt,name=proxy_admin_port,json=proxyAdminPort,proto3" json:"proxy_admin_port,omitempty"`
    // $hide_from_docs
    AvailabilityZone string `protobuf:"bytes,12,opt,name=availability_zone,json=availabilityZone,proto3" json:"availability_zone,omitempty"` // Deprecated: Do not use.
    // Authentication policy defines the global switch to control authentication
    // for Envoy-to-Envoy communication for istio components Mixer and Pilot.
    ControlPlaneAuthPolicy AuthenticationPolicy `protobuf:"varint,13,opt,name=control_plane_auth_policy,json=controlPlaneAuthPolicy,proto3,enum=istio.mesh.v1alpha1.AuthenticationPolicy" json:"control_plane_auth_policy,omitempty"`
    // File path of custom proxy configuration, currently used by proxies
    // in front of Mixer and Pilot.
    CustomConfigFile string `protobuf:"bytes,14,opt,name=custom_config_file,json=customConfigFile,proto3" json:"custom_config_file,omitempty"`
    // Maximum length of name field in Envoy's metrics. The length of the name field
    // is determined by the length of a name field in a service and the set of labels that
    // comprise a particular version of the service. The default value is set to 189 characters.
    // Envoy's internal metrics take up 67 characters, for a total of 256 character name per metric.
    // Increase the value of this field if you find that the metrics from Envoys are truncated.
    StatNameLength int32 `protobuf:"varint,15,opt,name=stat_name_length,json=statNameLength,proto3" json:"stat_name_length,omitempty"`
    // The number of worker threads to run. Default value is number of cores on the machine.
    Concurrency int32 `protobuf:"varint,16,opt,name=concurrency,proto3" json:"concurrency,omitempty"`
    // Path to the proxy bootstrap template file
    ProxyBootstrapTemplatePath string `protobuf:"bytes,17,opt,name=proxy_bootstrap_template_path,json=proxyBootstrapTemplatePath,proto3" json:"proxy_bootstrap_template_path,omitempty"`
    // The mode used to redirect inbound traffic to Envoy.
    InterceptionMode ProxyConfig_InboundInterceptionMode `protobuf:"varint,18,opt,name=interception_mode,json=interceptionMode,proto3,enum=istio.mesh.v1alpha1.ProxyConfig_InboundInterceptionMode" json:"interception_mode,omitempty"`
    // Tracing configuration to be used by the proxy.
    Tracing *Tracing `protobuf:"bytes,19,opt,name=tracing,proto3" json:"tracing,omitempty"`
    // secret discovery service(SDS) configuration to be used by the proxy.
    Sds *SDS `protobuf:"bytes,21,opt,name=sds,proto3" json:"sds,omitempty"`
    // Address of the service to which access logs from Envoys should be
    // sent. (e.g. accesslog-service:15000). See [Access Log
    // Service](https://www.envoyproxy.io/docs/envoy/latest/api-v2/config/accesslog/v2/als.proto)
    // for details about Envoy's gRPC Access Log Service API.
    EnvoyAccessLogService *RemoteService `protobuf:"bytes,22,opt,name=envoy_access_log_service,json=envoyAccessLogService,proto3" json:"envoy_access_log_service,omitempty"`
    // Address of the Envoy Metrics Service implementation (e.g. metrics-service:15000).
    // See [Metric Service](https://www.envoyproxy.io/docs/envoy/latest/api-v2/config/metrics/v2/metrics_service.proto)
    // for details about Envoy's Metrics Service API.
    EnvoyMetricsService  *RemoteService `protobuf:"bytes,23,opt,name=envoy_metrics_service,json=envoyMetricsService,proto3" json:"envoy_metrics_service,omitempty"`
    XXX_NoUnkeyedLiteral struct{}       `json:"-"`
    XXX_unrecognized     []byte         `json:"-"`
    XXX_sizecache        int32          `json:"-"`
}

ProxyConfig defines variables for individual Envoy instances.

func (*ProxyConfig) Descriptor Uses

func (*ProxyConfig) Descriptor() ([]byte, []int)

func (*ProxyConfig) GetAvailabilityZone Uses

func (m *ProxyConfig) GetAvailabilityZone() string

Deprecated: Do not use.

func (*ProxyConfig) GetBinaryPath Uses

func (m *ProxyConfig) GetBinaryPath() string

func (*ProxyConfig) GetConcurrency Uses

func (m *ProxyConfig) GetConcurrency() int32

func (*ProxyConfig) GetConfigPath Uses

func (m *ProxyConfig) GetConfigPath() string

func (*ProxyConfig) GetConnectTimeout Uses

func (m *ProxyConfig) GetConnectTimeout() *types.Duration

func (*ProxyConfig) GetControlPlaneAuthPolicy Uses

func (m *ProxyConfig) GetControlPlaneAuthPolicy() AuthenticationPolicy

func (*ProxyConfig) GetCustomConfigFile Uses

func (m *ProxyConfig) GetCustomConfigFile() string

func (*ProxyConfig) GetDiscoveryAddress Uses

func (m *ProxyConfig) GetDiscoveryAddress() string

func (*ProxyConfig) GetDiscoveryRefreshDelay Uses

func (m *ProxyConfig) GetDiscoveryRefreshDelay() *types.Duration

Deprecated: Do not use.

func (*ProxyConfig) GetDrainDuration Uses

func (m *ProxyConfig) GetDrainDuration() *types.Duration

func (*ProxyConfig) GetEnvoyAccessLogService Uses

func (m *ProxyConfig) GetEnvoyAccessLogService() *RemoteService

func (*ProxyConfig) GetEnvoyMetricsService Uses

func (m *ProxyConfig) GetEnvoyMetricsService() *RemoteService

func (*ProxyConfig) GetEnvoyMetricsServiceAddress Uses

func (m *ProxyConfig) GetEnvoyMetricsServiceAddress() string

Deprecated: Do not use.

func (*ProxyConfig) GetInterceptionMode Uses

func (m *ProxyConfig) GetInterceptionMode() ProxyConfig_InboundInterceptionMode

func (*ProxyConfig) GetParentShutdownDuration Uses

func (m *ProxyConfig) GetParentShutdownDuration() *types.Duration

func (*ProxyConfig) GetProxyAdminPort Uses

func (m *ProxyConfig) GetProxyAdminPort() int32

func (*ProxyConfig) GetProxyBootstrapTemplatePath Uses

func (m *ProxyConfig) GetProxyBootstrapTemplatePath() string

func (*ProxyConfig) GetSds Uses

func (m *ProxyConfig) GetSds() *SDS

func (*ProxyConfig) GetServiceCluster Uses

func (m *ProxyConfig) GetServiceCluster() string

func (*ProxyConfig) GetStatNameLength Uses

func (m *ProxyConfig) GetStatNameLength() int32

func (*ProxyConfig) GetStatsdUdpAddress Uses

func (m *ProxyConfig) GetStatsdUdpAddress() string

func (*ProxyConfig) GetTracing Uses

func (m *ProxyConfig) GetTracing() *Tracing

func (*ProxyConfig) GetZipkinAddress Uses

func (m *ProxyConfig) GetZipkinAddress() string

Deprecated: Do not use.

func (*ProxyConfig) Marshal Uses

func (m *ProxyConfig) Marshal() (dAtA []byte, err error)

func (*ProxyConfig) MarshalTo Uses

func (m *ProxyConfig) MarshalTo(dAtA []byte) (int, error)

func (*ProxyConfig) MarshalToSizedBuffer Uses

func (m *ProxyConfig) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ProxyConfig) ProtoMessage Uses

func (*ProxyConfig) ProtoMessage()

func (*ProxyConfig) Reset Uses

func (m *ProxyConfig) Reset()

func (*ProxyConfig) Size Uses

func (m *ProxyConfig) Size() (n int)

func (*ProxyConfig) String Uses

func (m *ProxyConfig) String() string

func (*ProxyConfig) Unmarshal Uses

func (m *ProxyConfig) Unmarshal(dAtA []byte) error

func (*ProxyConfig) XXX_DiscardUnknown Uses

func (m *ProxyConfig) XXX_DiscardUnknown()

func (*ProxyConfig) XXX_Marshal Uses

func (m *ProxyConfig) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ProxyConfig) XXX_Merge Uses

func (m *ProxyConfig) XXX_Merge(src proto.Message)

func (*ProxyConfig) XXX_Size Uses

func (m *ProxyConfig) XXX_Size() int

func (*ProxyConfig) XXX_Unmarshal Uses

func (m *ProxyConfig) XXX_Unmarshal(b []byte) error

type ProxyConfig_InboundInterceptionMode Uses

type ProxyConfig_InboundInterceptionMode int32

The mode used to redirect inbound traffic to Envoy. This setting has no effect on outbound traffic: iptables REDIRECT is always used for outbound connections.

const (
    // The REDIRECT mode uses iptables REDIRECT to NAT and redirect to Envoy. This mode loses
    // source IP addresses during redirection.
    ProxyConfig_REDIRECT ProxyConfig_InboundInterceptionMode = 0
    // The TPROXY mode uses iptables TPROXY to redirect to Envoy. This mode preserves both the
    // source and destination IP addresses and ports, so that they can be used for advanced
    // filtering and manipulation. This mode also configures the sidecar to run with the
    // CAP_NET_ADMIN capability, which is required to use TPROXY.
    ProxyConfig_TPROXY ProxyConfig_InboundInterceptionMode = 1
)

func (ProxyConfig_InboundInterceptionMode) EnumDescriptor Uses

func (ProxyConfig_InboundInterceptionMode) EnumDescriptor() ([]byte, []int)

func (ProxyConfig_InboundInterceptionMode) String Uses

func (x ProxyConfig_InboundInterceptionMode) String() string

type RemoteService Uses

type RemoteService struct {
    // Address of a remove service used for various purposes (access log
    // receiver, metrics receiver, etc.). Can be IP address or a fully
    // qualified DNS name.
    Address string `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
    // Use the tls_settings to specify the tls mode to use. If the remote service
    // uses Istio mutual TLS and shares the root CA with Pilot, specify the TLS
    // mode as `ISTIO_MUTUAL`.
    TlsSettings *v1alpha3.TLSSettings `protobuf:"bytes,2,opt,name=tls_settings,json=tlsSettings,proto3" json:"tls_settings,omitempty"`
    // If set then set SO_KEEPALIVE on the socket to enable TCP Keepalives.
    TcpKeepalive         *v1alpha3.ConnectionPoolSettings_TCPSettings_TcpKeepalive `protobuf:"bytes,3,opt,name=tcp_keepalive,json=tcpKeepalive,proto3" json:"tcp_keepalive,omitempty"`
    XXX_NoUnkeyedLiteral struct{}                                                  `json:"-"`
    XXX_unrecognized     []byte                                                    `json:"-"`
    XXX_sizecache        int32                                                     `json:"-"`
}

func (*RemoteService) Descriptor Uses

func (*RemoteService) Descriptor() ([]byte, []int)

func (*RemoteService) GetAddress Uses

func (m *RemoteService) GetAddress() string

func (*RemoteService) GetTcpKeepalive Uses

func (m *RemoteService) GetTcpKeepalive() *v1alpha3.ConnectionPoolSettings_TCPSettings_TcpKeepalive

func (*RemoteService) GetTlsSettings Uses

func (m *RemoteService) GetTlsSettings() *v1alpha3.TLSSettings

func (*RemoteService) Marshal Uses

func (m *RemoteService) Marshal() (dAtA []byte, err error)

func (*RemoteService) MarshalTo Uses

func (m *RemoteService) MarshalTo(dAtA []byte) (int, error)

func (*RemoteService) MarshalToSizedBuffer Uses

func (m *RemoteService) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RemoteService) ProtoMessage Uses

func (*RemoteService) ProtoMessage()

func (*RemoteService) Reset Uses

func (m *RemoteService) Reset()

func (*RemoteService) Size Uses

func (m *RemoteService) Size() (n int)

func (*RemoteService) String Uses

func (m *RemoteService) String() string

func (*RemoteService) Unmarshal Uses

func (m *RemoteService) Unmarshal(dAtA []byte) error

func (*RemoteService) XXX_DiscardUnknown Uses

func (m *RemoteService) XXX_DiscardUnknown()

func (*RemoteService) XXX_Marshal Uses

func (m *RemoteService) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RemoteService) XXX_Merge Uses

func (m *RemoteService) XXX_Merge(src proto.Message)

func (*RemoteService) XXX_Size Uses

func (m *RemoteService) XXX_Size() int

func (*RemoteService) XXX_Unmarshal Uses

func (m *RemoteService) XXX_Unmarshal(b []byte) error

type Resource Uses

type Resource int32

Resource describes the source of configuration

const (
    // Set to only receive service entries that are generated by the platform.
    // These auto generated service entries are combination of services and endpoints
    // that are generated by a specific platform e.g. k8
    Resource_SERVICE_REGISTRY Resource = 0
)

func (Resource) EnumDescriptor Uses

func (Resource) EnumDescriptor() ([]byte, []int)

func (Resource) String Uses

func (x Resource) String() string

type SDS Uses

type SDS struct {
    // True if SDS is enabled.
    Enabled bool `protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
    // Path of k8s service account JWT path.
    K8SSaJwtPath         string   `protobuf:"bytes,2,opt,name=k8s_sa_jwt_path,json=k8sSaJwtPath,proto3" json:"k8s_sa_jwt_path,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

SDS defines secret discovery service(SDS) configuration to be used by the proxy. For workload, its values are set in sidecar injector(passed as arguments to istio-proxy container). For pilot/mixer, it's passed as arguments to istio-proxy container in pilot/mixer deployment yaml files directly.

func (*SDS) Descriptor Uses

func (*SDS) Descriptor() ([]byte, []int)

func (*SDS) GetEnabled Uses

func (m *SDS) GetEnabled() bool

func (*SDS) GetK8SSaJwtPath Uses

func (m *SDS) GetK8SSaJwtPath() string

func (*SDS) Marshal Uses

func (m *SDS) Marshal() (dAtA []byte, err error)

func (*SDS) MarshalTo Uses

func (m *SDS) MarshalTo(dAtA []byte) (int, error)

func (*SDS) MarshalToSizedBuffer Uses

func (m *SDS) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*SDS) ProtoMessage Uses

func (*SDS) ProtoMessage()

func (*SDS) Reset Uses

func (m *SDS) Reset()

func (*SDS) Size Uses

func (m *SDS) Size() (n int)

func (*SDS) String Uses

func (m *SDS) String() string

func (*SDS) Unmarshal Uses

func (m *SDS) Unmarshal(dAtA []byte) error

func (*SDS) XXX_DiscardUnknown Uses

func (m *SDS) XXX_DiscardUnknown()

func (*SDS) XXX_Marshal Uses

func (m *SDS) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*SDS) XXX_Merge Uses

func (m *SDS) XXX_Merge(src proto.Message)

func (*SDS) XXX_Size Uses

func (m *SDS) XXX_Size() int

func (*SDS) XXX_Unmarshal Uses

func (m *SDS) XXX_Unmarshal(b []byte) error

type Tracing Uses

type Tracing struct {
    // The tracer implementation to be used by Envoy.
    //
    // Types that are valid to be assigned to Tracer:
    //	*Tracing_Zipkin_
    //	*Tracing_Lightstep_
    //	*Tracing_Datadog_
    //	*Tracing_Stackdriver_
    Tracer               isTracing_Tracer `protobuf_oneof:"tracer"`
    XXX_NoUnkeyedLiteral struct{}         `json:"-"`
    XXX_unrecognized     []byte           `json:"-"`
    XXX_sizecache        int32            `json:"-"`
}

Tracing defines configuration for the tracing performed by Envoy instances.

func (*Tracing) Descriptor Uses

func (*Tracing) Descriptor() ([]byte, []int)

func (*Tracing) GetDatadog Uses

func (m *Tracing) GetDatadog() *Tracing_Datadog

func (*Tracing) GetLightstep Uses

func (m *Tracing) GetLightstep() *Tracing_Lightstep

func (*Tracing) GetStackdriver Uses

func (m *Tracing) GetStackdriver() *Tracing_Stackdriver

func (*Tracing) GetTracer Uses

func (m *Tracing) GetTracer() isTracing_Tracer

func (*Tracing) GetZipkin Uses

func (m *Tracing) GetZipkin() *Tracing_Zipkin

func (*Tracing) Marshal Uses

func (m *Tracing) Marshal() (dAtA []byte, err error)

func (*Tracing) MarshalTo Uses

func (m *Tracing) MarshalTo(dAtA []byte) (int, error)

func (*Tracing) MarshalToSizedBuffer Uses

func (m *Tracing) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Tracing) ProtoMessage Uses

func (*Tracing) ProtoMessage()

func (*Tracing) Reset Uses

func (m *Tracing) Reset()

func (*Tracing) Size Uses

func (m *Tracing) Size() (n int)

func (*Tracing) String Uses

func (m *Tracing) String() string

func (*Tracing) Unmarshal Uses

func (m *Tracing) Unmarshal(dAtA []byte) error

func (*Tracing) XXX_DiscardUnknown Uses

func (m *Tracing) XXX_DiscardUnknown()

func (*Tracing) XXX_Marshal Uses

func (m *Tracing) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Tracing) XXX_Merge Uses

func (m *Tracing) XXX_Merge(src proto.Message)

func (*Tracing) XXX_OneofWrappers Uses

func (*Tracing) XXX_OneofWrappers() []interface{}

XXX_OneofWrappers is for the internal use of the proto package.

func (*Tracing) XXX_Size Uses

func (m *Tracing) XXX_Size() int

func (*Tracing) XXX_Unmarshal Uses

func (m *Tracing) XXX_Unmarshal(b []byte) error

type Tracing_Datadog Uses

type Tracing_Datadog struct {
    // Address of the Datadog Agent.
    Address              string   `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

Datadog defines configuration for a Datadog tracer.

func (*Tracing_Datadog) Descriptor Uses

func (*Tracing_Datadog) Descriptor() ([]byte, []int)

func (*Tracing_Datadog) GetAddress Uses

func (m *Tracing_Datadog) GetAddress() string

func (*Tracing_Datadog) Marshal Uses

func (m *Tracing_Datadog) Marshal() (dAtA []byte, err error)

func (*Tracing_Datadog) MarshalTo Uses

func (m *Tracing_Datadog) MarshalTo(dAtA []byte) (int, error)

func (*Tracing_Datadog) MarshalToSizedBuffer Uses

func (m *Tracing_Datadog) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Tracing_Datadog) ProtoMessage Uses

func (*Tracing_Datadog) ProtoMessage()

func (*Tracing_Datadog) Reset Uses

func (m *Tracing_Datadog) Reset()

func (*Tracing_Datadog) Size Uses

func (m *Tracing_Datadog) Size() (n int)

func (*Tracing_Datadog) String Uses

func (m *Tracing_Datadog) String() string

func (*Tracing_Datadog) Unmarshal Uses

func (m *Tracing_Datadog) Unmarshal(dAtA []byte) error

func (*Tracing_Datadog) XXX_DiscardUnknown Uses

func (m *Tracing_Datadog) XXX_DiscardUnknown()

func (*Tracing_Datadog) XXX_Marshal Uses

func (m *Tracing_Datadog) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Tracing_Datadog) XXX_Merge Uses

func (m *Tracing_Datadog) XXX_Merge(src proto.Message)

func (*Tracing_Datadog) XXX_Size Uses

func (m *Tracing_Datadog) XXX_Size() int

func (*Tracing_Datadog) XXX_Unmarshal Uses

func (m *Tracing_Datadog) XXX_Unmarshal(b []byte) error

type Tracing_Datadog_ Uses

type Tracing_Datadog_ struct {
    Datadog *Tracing_Datadog `protobuf:"bytes,3,opt,name=datadog,proto3,oneof"`
}

func (*Tracing_Datadog_) MarshalTo Uses

func (m *Tracing_Datadog_) MarshalTo(dAtA []byte) (int, error)

func (*Tracing_Datadog_) MarshalToSizedBuffer Uses

func (m *Tracing_Datadog_) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Tracing_Datadog_) Size Uses

func (m *Tracing_Datadog_) Size() (n int)

type Tracing_Lightstep Uses

type Tracing_Lightstep struct {
    // Address of the LightStep Satellite pool.
    Address string `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
    // The LightStep access token.
    AccessToken string `protobuf:"bytes,2,opt,name=access_token,json=accessToken,proto3" json:"access_token,omitempty"`
    // True if a secure connection should be used when communicating with the pool.
    Secure bool `protobuf:"varint,3,opt,name=secure,proto3" json:"secure,omitempty"`
    // Path to the trusted cacert used to authenticate the pool.
    CacertPath           string   `protobuf:"bytes,4,opt,name=cacert_path,json=cacertPath,proto3" json:"cacert_path,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

Defines configuration for a LightStep tracer.

func (*Tracing_Lightstep) Descriptor Uses

func (*Tracing_Lightstep) Descriptor() ([]byte, []int)

func (*Tracing_Lightstep) GetAccessToken Uses

func (m *Tracing_Lightstep) GetAccessToken() string

func (*Tracing_Lightstep) GetAddress Uses

func (m *Tracing_Lightstep) GetAddress() string

func (*Tracing_Lightstep) GetCacertPath Uses

func (m *Tracing_Lightstep) GetCacertPath() string

func (*Tracing_Lightstep) GetSecure Uses

func (m *Tracing_Lightstep) GetSecure() bool

func (*Tracing_Lightstep) Marshal Uses

func (m *Tracing_Lightstep) Marshal() (dAtA []byte, err error)

func (*Tracing_Lightstep) MarshalTo Uses

func (m *Tracing_Lightstep) MarshalTo(dAtA []byte) (int, error)

func (*Tracing_Lightstep) MarshalToSizedBuffer Uses

func (m *Tracing_Lightstep) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Tracing_Lightstep) ProtoMessage Uses

func (*Tracing_Lightstep) ProtoMessage()

func (*Tracing_Lightstep) Reset Uses

func (m *Tracing_Lightstep) Reset()

func (*Tracing_Lightstep) Size Uses

func (m *Tracing_Lightstep) Size() (n int)

func (*Tracing_Lightstep) String Uses

func (m *Tracing_Lightstep) String() string

func (*Tracing_Lightstep) Unmarshal Uses

func (m *Tracing_Lightstep) Unmarshal(dAtA []byte) error

func (*Tracing_Lightstep) XXX_DiscardUnknown Uses

func (m *Tracing_Lightstep) XXX_DiscardUnknown()

func (*Tracing_Lightstep) XXX_Marshal Uses

func (m *Tracing_Lightstep) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Tracing_Lightstep) XXX_Merge Uses

func (m *Tracing_Lightstep) XXX_Merge(src proto.Message)

func (*Tracing_Lightstep) XXX_Size Uses

func (m *Tracing_Lightstep) XXX_Size() int

func (*Tracing_Lightstep) XXX_Unmarshal Uses

func (m *Tracing_Lightstep) XXX_Unmarshal(b []byte) error

type Tracing_Lightstep_ Uses

type Tracing_Lightstep_ struct {
    Lightstep *Tracing_Lightstep `protobuf:"bytes,2,opt,name=lightstep,proto3,oneof"`
}

func (*Tracing_Lightstep_) MarshalTo Uses

func (m *Tracing_Lightstep_) MarshalTo(dAtA []byte) (int, error)

func (*Tracing_Lightstep_) MarshalToSizedBuffer Uses

func (m *Tracing_Lightstep_) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Tracing_Lightstep_) Size Uses

func (m *Tracing_Lightstep_) Size() (n int)

type Tracing_Stackdriver Uses

type Tracing_Stackdriver struct {
    // debug enables trace output to stdout.
    // $hide_from_docs
    Debug bool `protobuf:"varint,1,opt,name=debug,proto3" json:"debug,omitempty"`
    // The global default max number of attributes per span.
    // default is 200.
    // $hide_from_docs
    MaxNumberOfAttributes *types.Int64Value `protobuf:"bytes,2,opt,name=max_number_of_attributes,json=maxNumberOfAttributes,proto3" json:"max_number_of_attributes,omitempty"`
    // The global default max number of annotation events per span.
    // default is 200.
    // $hide_from_docs
    MaxNumberOfAnnotations *types.Int64Value `protobuf:"bytes,3,opt,name=max_number_of_annotations,json=maxNumberOfAnnotations,proto3" json:"max_number_of_annotations,omitempty"`
    // The global default max number of message events per span.
    // default is 200.
    // $hide_from_docs
    MaxNumberOfMessageEvents *types.Int64Value `protobuf:"bytes,4,opt,name=max_number_of_message_events,json=maxNumberOfMessageEvents,proto3" json:"max_number_of_message_events,omitempty"`
    XXX_NoUnkeyedLiteral     struct{}          `json:"-"`
    XXX_unrecognized         []byte            `json:"-"`
    XXX_sizecache            int32             `json:"-"`
}

Stackdriver defines configuration for a Stackdriver tracer. See [Opencensus trace config](https://github.com/census-instrumentation/opencensus-proto/blob/master/src/opencensus/proto/trace/v1/trace_config.proto) for details.

func (*Tracing_Stackdriver) Descriptor Uses

func (*Tracing_Stackdriver) Descriptor() ([]byte, []int)

func (*Tracing_Stackdriver) GetDebug Uses

func (m *Tracing_Stackdriver) GetDebug() bool

func (*Tracing_Stackdriver) GetMaxNumberOfAnnotations Uses

func (m *Tracing_Stackdriver) GetMaxNumberOfAnnotations() *types.Int64Value

func (*Tracing_Stackdriver) GetMaxNumberOfAttributes Uses

func (m *Tracing_Stackdriver) GetMaxNumberOfAttributes() *types.Int64Value

func (*Tracing_Stackdriver) GetMaxNumberOfMessageEvents Uses

func (m *Tracing_Stackdriver) GetMaxNumberOfMessageEvents() *types.Int64Value

func (*Tracing_Stackdriver) Marshal Uses

func (m *Tracing_Stackdriver) Marshal() (dAtA []byte, err error)

func (*Tracing_Stackdriver) MarshalTo Uses

func (m *Tracing_Stackdriver) MarshalTo(dAtA []byte) (int, error)

func (*Tracing_Stackdriver) MarshalToSizedBuffer Uses

func (m *Tracing_Stackdriver) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Tracing_Stackdriver) ProtoMessage Uses

func (*Tracing_Stackdriver) ProtoMessage()

func (*Tracing_Stackdriver) Reset Uses

func (m *Tracing_Stackdriver) Reset()

func (*Tracing_Stackdriver) Size Uses

func (m *Tracing_Stackdriver) Size() (n int)

func (*Tracing_Stackdriver) String Uses

func (m *Tracing_Stackdriver) String() string

func (*Tracing_Stackdriver) Unmarshal Uses

func (m *Tracing_Stackdriver) Unmarshal(dAtA []byte) error

func (*Tracing_Stackdriver) XXX_DiscardUnknown Uses

func (m *Tracing_Stackdriver) XXX_DiscardUnknown()

func (*Tracing_Stackdriver) XXX_Marshal Uses

func (m *Tracing_Stackdriver) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Tracing_Stackdriver) XXX_Merge Uses

func (m *Tracing_Stackdriver) XXX_Merge(src proto.Message)

func (*Tracing_Stackdriver) XXX_Size Uses

func (m *Tracing_Stackdriver) XXX_Size() int

func (*Tracing_Stackdriver) XXX_Unmarshal Uses

func (m *Tracing_Stackdriver) XXX_Unmarshal(b []byte) error

type Tracing_Stackdriver_ Uses

type Tracing_Stackdriver_ struct {
    Stackdriver *Tracing_Stackdriver `protobuf:"bytes,4,opt,name=stackdriver,proto3,oneof"`
}

func (*Tracing_Stackdriver_) MarshalTo Uses

func (m *Tracing_Stackdriver_) MarshalTo(dAtA []byte) (int, error)

func (*Tracing_Stackdriver_) MarshalToSizedBuffer Uses

func (m *Tracing_Stackdriver_) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Tracing_Stackdriver_) Size Uses

func (m *Tracing_Stackdriver_) Size() (n int)

type Tracing_Zipkin Uses

type Tracing_Zipkin struct {
    // Address of the Zipkin service (e.g. _zipkin:9411_).
    Address              string   `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
    XXX_NoUnkeyedLiteral struct{} `json:"-"`
    XXX_unrecognized     []byte   `json:"-"`
    XXX_sizecache        int32    `json:"-"`
}

Zipkin defines configuration for a Zipkin tracer.

func (*Tracing_Zipkin) Descriptor Uses

func (*Tracing_Zipkin) Descriptor() ([]byte, []int)

func (*Tracing_Zipkin) GetAddress Uses

func (m *Tracing_Zipkin) GetAddress() string

func (*Tracing_Zipkin) Marshal Uses

func (m *Tracing_Zipkin) Marshal() (dAtA []byte, err error)

func (*Tracing_Zipkin) MarshalTo Uses

func (m *Tracing_Zipkin) MarshalTo(dAtA []byte) (int, error)

func (*Tracing_Zipkin) MarshalToSizedBuffer Uses

func (m *Tracing_Zipkin) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Tracing_Zipkin) ProtoMessage Uses

func (*Tracing_Zipkin) ProtoMessage()

func (*Tracing_Zipkin) Reset Uses

func (m *Tracing_Zipkin) Reset()

func (*Tracing_Zipkin) Size Uses

func (m *Tracing_Zipkin) Size() (n int)

func (*Tracing_Zipkin) String Uses

func (m *Tracing_Zipkin) String() string

func (*Tracing_Zipkin) Unmarshal Uses

func (m *Tracing_Zipkin) Unmarshal(dAtA []byte) error

func (*Tracing_Zipkin) XXX_DiscardUnknown Uses

func (m *Tracing_Zipkin) XXX_DiscardUnknown()

func (*Tracing_Zipkin) XXX_Marshal Uses

func (m *Tracing_Zipkin) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Tracing_Zipkin) XXX_Merge Uses

func (m *Tracing_Zipkin) XXX_Merge(src proto.Message)

func (*Tracing_Zipkin) XXX_Size Uses

func (m *Tracing_Zipkin) XXX_Size() int

func (*Tracing_Zipkin) XXX_Unmarshal Uses

func (m *Tracing_Zipkin) XXX_Unmarshal(b []byte) error

type Tracing_Zipkin_ Uses

type Tracing_Zipkin_ struct {
    Zipkin *Tracing_Zipkin `protobuf:"bytes,1,opt,name=zipkin,proto3,oneof"`
}

func (*Tracing_Zipkin_) MarshalTo Uses

func (m *Tracing_Zipkin_) MarshalTo(dAtA []byte) (int, error)

func (*Tracing_Zipkin_) MarshalToSizedBuffer Uses

func (m *Tracing_Zipkin_) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Tracing_Zipkin_) Size Uses

func (m *Tracing_Zipkin_) Size() (n int)

Package v1alpha1 imports 8 packages (graph) and is imported by 56 packages. Updated 2019-11-13. Refresh now. Tools for package owners.