istio

Documentation

Index

• Variables
• func DisableMTLS(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command
• func EnableMTLS(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command
• func Inject(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command
• func RootCmd(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command
• func Uninject(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

Variables

var (
	// ErrSdsAlreadyPresent occurs when trying to add an sds sidecar to a gateway-proxy which already has one
	ErrSdsAlreadyPresent = errors.New("sds sidecar container already exists on gateway-proxy pod")
	// ErrIstioAlreadyPresent occurs when trying to add an istio sidecar to a gateway-proxy which already has one
	ErrIstioAlreadyPresent = errors.New("istio-proxy sidecar container already exists on gateway-proxy pod")
	// ErrImgVerUndetermined occurs when the version of an image could not be determined from a given container
	ErrImgVerUndetermined = errors.New("version of image could not be determined")
	// ErrIstioVerUndetermined occurs when the version of istio could not be determined from the istiod pod
	ErrIstioVerUndetermined = errors.New("version of istio running could not be determined")
	// ErrGlooVerUndetermined occurs when the version of gloo could not be determined from the gloo pod
	ErrGlooVerUndetermined = errors.New("version of gloo running could not be determined")
)

var (
	// ErrMTLSAlreadyDisabled occurs when trying to disable mTLS for an upstream that isn't using mTLS
	ErrMTLSAlreadyDisabled = errors.New("upstream already has mTLS disabled")
)

var ErrMissingSidecars = errors.New("istio uninject can only be run when both the sds and istio-proxy sidecars are present on the gateway-proxy pod")

ErrMissingSidecars occurs when the user tries to uninject istio & sds, but one or both cannot be find.

var ErrUpstreamSdsConfigPresent = errors.New("istio uninject can only be run when upstreams no longer reference the sds cluster")

ErrUpstreamSdsConfigPresent occurs when the user tries to uninject istio & sds, but upstreams still references sds

Functions

func DisableMTLS

func DisableMTLS(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

DisableMTLS removes an sslConfig from the given upstream which was previously used by envoy SDS to pick up the mTLS certs

func EnableMTLS

func EnableMTLS(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

EnableMTLS adds an sslConfig to the given upstream which will be used by envoy SDS to pick up the mTLS certs

func Inject

func Inject(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

Inject is an istio subcommand in glooctl which can be used to inject an SDS sidecar and an istio-proxy sidecar into the gateway-proxy pod, so that istio mTLS certificates can be used and rotated automatically

func RootCmd

func RootCmd(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

func Uninject

func Uninject(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

Uninject is an istio subcommand in glooctl which can be used to remove a previously injected SDS sidecar and an istio-proxy sidecar from the gateway-proxy pod