istio

Documentation

Index

• Constants
• Variables
• func DisableMTLS(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command
• func EnableMTLS(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command
• func GetGlooVersion(ctx context.Context, namespace string) (string, error)
• func GetGlooVersionWithoutV(ctx context.Context, namespace string) (string, error)
• func Inject(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command
• func RootCmd(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command
• func Uninject(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

Constants

const (
	SDSContainerName = "sds"
	IstioProxyName   = "istio-proxy"
)

Variables

var (
	// ErrSdsAlreadyPresent occurs when trying to add an sds sidecar to a gateway-proxy which already has one
	ErrSdsAlreadyPresent = errors.New("sds sidecar container already exists on gateway-proxy pod")
	// ErrIstioAlreadyPresent occurs when trying to add an istio sidecar to a gateway-proxy which already has one
	ErrIstioAlreadyPresent = errors.New("istio-proxy sidecar container already exists on gateway-proxy pod")
	// ErrImgVerUndetermined occurs when the version of an image could not be determined from a given container
	ErrImgVerUndetermined = errors.New("version of image could not be determined")
	// ErrIstioVerUndetermined occurs when the version of istio could not be determined from the istiod pod
	ErrIstioVerUndetermined = errors.New("version of istio running could not be determined")
	// ErrGlooVerUndetermined occurs when the version of gloo could not be determined from the gloo pod
	ErrGlooVerUndetermined = errors.New("version of gloo running could not be determined")
)

var (
	// ErrMTLSAlreadyDisabled occurs when trying to disable mTLS for an upstream that isn't using mTLS
	ErrMTLSAlreadyDisabled = errors.New("upstream already has mTLS disabled")
)

var ErrMissingSidecars = errors.New("istio uninject can only be run when both the sds and istio-proxy sidecars are present on the gateway-proxy pod")

ErrMissingSidecars occurs when the user tries to uninject istio & sds, but one or both cannot be find.

var ErrUpstreamSdsConfigPresent = errors.New("istio uninject can only be run when upstreams no longer reference the sds cluster")

ErrUpstreamSdsConfigPresent occurs when the user tries to uninject istio & sds, but upstreams still references sds

Functions

func DisableMTLS

func DisableMTLS(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

DisableMTLS removes an sslConfig from the given upstream which was previously used by envoy SDS to pick up the mTLS certs

func EnableMTLS

func EnableMTLS(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

EnableMTLS adds an sslConfig to the given upstream which will be used by envoy SDS to pick up the mTLS certs

func GetGlooVersion

func GetGlooVersion(ctx context.Context, namespace string) (string, error)

GetGlooVersion gets the version of gloo currently running in the given namespace, by checking the gloo deployment.

func GetGlooVersionWithoutV

func GetGlooVersionWithoutV(ctx context.Context, namespace string) (string, error)

GetGlooVersionWithoutV mirrors the above function but returns the version without the leading 'v'

func Inject

func Inject(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

Inject is an istio subcommand in glooctl which can be used to inject an SDS sidecar and an istio-proxy sidecar into the gateway-proxy pod, so that istio mTLS certificates can be used and rotated automatically

func RootCmd

func RootCmd(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

func Uninject

func Uninject(opts *options.Options, optionsFunc ...cliutils.OptionsFunc) *cobra.Command

Uninject is an istio subcommand in glooctl which can be used to remove a previously injected SDS sidecar and an istio-proxy sidecar from the gateway-proxy pod