apis

package
v0.0.0-...-fa104c4 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Dec 19, 2024 License: Apache-2.0 Imports: 18 Imported by: 1

Documentation

Overview

Package v1alpha1 contains API Schema definitions for the istio v1alpha1 API group +k8s:deepcopy-gen=package,register +groupName=install.istio.io

Index

Constants

This section is empty.

Variables

View Source 
var (
	OperatorMarshaler   = &github_com_golang_protobuf_jsonpb.Marshaler{}
	OperatorUnmarshaler = &github_com_golang_protobuf_jsonpb.Unmarshaler{}
)
View Source 
var (
	IngressControllerMode_name = map[int32]string{
		0: "UNSPECIFIED",
		1: "DEFAULT",
		2: "STRICT",
		3: "OFF",
	}
	IngressControllerMode_value = map[string]int32{
		"UNSPECIFIED": 0,
		"DEFAULT":     1,
		"STRICT":      2,
		"OFF":         3,
	}
)

Enum value maps for IngressControllerMode.

View Source 
var (
	Tracer_name = map[int32]string{
		0: "zipkin",
		1: "lightstep",
		2: "datadog",
		3: "stackdriver",
		4: "openCensusAgent",
		5: "none",
	}
	Tracer_value = map[string]int32{
		"zipkin":          0,
		"lightstep":       1,
		"datadog":         2,
		"stackdriver":     3,
		"openCensusAgent": 4,
		"none":            5,
	}
)

Enum value maps for Tracer.

View Source 
var (
	OutboundTrafficPolicyConfig_Mode_name = map[int32]string{
		0: "ALLOW_ANY",
		1: "REGISTRY_ONLY",
	}
	OutboundTrafficPolicyConfig_Mode_value = map[string]int32{
		"ALLOW_ANY":     0,
		"REGISTRY_ONLY": 1,
	}
)

Enum value maps for OutboundTrafficPolicyConfig_Mode.

View Source 
var File_pkg_apis_values_types_proto protoreflect.FileDescriptor
View Source 
var IstioOperatorGVK = schema.GroupVersionKind{
	Version: "v1alpha1",
	Group:   "install.istio.io",
	Kind:    "IstioOperator",
}

IstioOperatorGVK is GVK for IstioOperator

Functions

This section is empty.

Types

type ArchConfig 

type ArchConfig struct {

	// Sets pod scheduling weight for amd64 arch
	Amd64 uint32 `protobuf:"varint,1,opt,name=amd64,proto3" json:"amd64,omitempty"`
	// Sets pod scheduling weight for ppc64le arch.
	Ppc64Le uint32 `protobuf:"varint,2,opt,name=ppc64le,proto3" json:"ppc64le,omitempty"`
	// Sets pod scheduling weight for s390x arch.
	S390X uint32 `protobuf:"varint,3,opt,name=s390x,proto3" json:"s390x,omitempty"`
	// Sets pod scheduling weight for arm64 arch.
	Arm64 uint32 `protobuf:"varint,4,opt,name=arm64,proto3" json:"arm64,omitempty"`
	// contains filtered or unexported fields
}

ArchConfig specifies the pod scheduling target architecture(amd64, ppc64le, s390x, arm64) for all the Istio control plane components.

func (*ArchConfig) Descriptor deprecated 

func (*ArchConfig) Descriptor() ([]byte, []int)

Deprecated: Use ArchConfig.ProtoReflect.Descriptor instead.

func (*ArchConfig) GetAmd64 

func (x *ArchConfig) GetAmd64() uint32

func (*ArchConfig) GetArm64 

func (x *ArchConfig) GetArm64() uint32

func (*ArchConfig) GetPpc64Le 

func (x *ArchConfig) GetPpc64Le() uint32

func (*ArchConfig) GetS390X 

func (x *ArchConfig) GetS390X() uint32

func (*ArchConfig) ProtoMessage 

func (*ArchConfig) ProtoMessage()

func (*ArchConfig) ProtoReflect 

func (x *ArchConfig) ProtoReflect() protoreflect.Message

func (*ArchConfig) Reset 

func (x *ArchConfig) Reset()

func (*ArchConfig) String 

func (x *ArchConfig) String() string

type BaseComponentSpec 

type BaseComponentSpec struct {
	// Selects whether this component is installed.
	Enabled    *BoolValue           `json:"enabled,omitempty"`
	Kubernetes *KubernetesResources `json:"k8s,omitempty"`
}

type BaseConfig 

type BaseConfig struct {

	// For Helm2 use, adds the CRDs to templates.
	EnableCRDTemplates *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enableCRDTemplates,proto3" json:"enableCRDTemplates,omitempty"`
	// CRDs to exclude. Requires `enableCRDTemplates`
	ExcludedCRDs []string `protobuf:"bytes,6,rep,name=excludedCRDs,proto3" json:"excludedCRDs,omitempty"`
	// URL to use for validating webhook.
	ValidationURL string `protobuf:"bytes,2,opt,name=validationURL,proto3" json:"validationURL,omitempty"`
	// For istioctl usage to disable istio config crds in base
	EnableIstioConfigCRDs *wrapperspb.BoolValue `protobuf:"bytes,3,opt,name=enableIstioConfigCRDs,proto3" json:"enableIstioConfigCRDs,omitempty"`
	ValidateGateway       *wrapperspb.BoolValue `protobuf:"bytes,4,opt,name=validateGateway,proto3" json:"validateGateway,omitempty"`
	// validation webhook CA bundle
	ValidationCABundle string `protobuf:"bytes,5,opt,name=validationCABundle,proto3" json:"validationCABundle,omitempty"`
	// contains filtered or unexported fields
}

func (*BaseConfig) Descriptor deprecated 

func (*BaseConfig) Descriptor() ([]byte, []int)

Deprecated: Use BaseConfig.ProtoReflect.Descriptor instead.

func (*BaseConfig) GetEnableCRDTemplates 

func (x *BaseConfig) GetEnableCRDTemplates() *wrapperspb.BoolValue

func (*BaseConfig) GetEnableIstioConfigCRDs 

func (x *BaseConfig) GetEnableIstioConfigCRDs() *wrapperspb.BoolValue

func (*BaseConfig) GetExcludedCRDs 

func (x *BaseConfig) GetExcludedCRDs() []string

func (*BaseConfig) GetValidateGateway 

func (x *BaseConfig) GetValidateGateway() *wrapperspb.BoolValue

func (*BaseConfig) GetValidationCABundle 

func (x *BaseConfig) GetValidationCABundle() string

func (*BaseConfig) GetValidationURL 

func (x *BaseConfig) GetValidationURL() string

func (*BaseConfig) ProtoMessage 

func (*BaseConfig) ProtoMessage()

func (*BaseConfig) ProtoReflect 

func (x *BaseConfig) ProtoReflect() protoreflect.Message

func (*BaseConfig) Reset 

func (x *BaseConfig) Reset()

func (*BaseConfig) String 

func (x *BaseConfig) String() string

type BoolValue 

type BoolValue struct {
	// contains filtered or unexported fields
}

func (*BoolValue) GetValueOrFalse 

func (b *BoolValue) GetValueOrFalse() bool

func (*BoolValue) GetValueOrTrue 

func (b *BoolValue) GetValueOrTrue() bool

func (*BoolValue) MarshalJSON 

func (b *BoolValue) MarshalJSON() ([]byte, error)

func (*BoolValue) UnmarshalJSON 

func (b *BoolValue) UnmarshalJSON(bytes []byte) error

type CNIAmbientConfig 

type CNIAmbientConfig struct {

	// Controls whether ambient redirection is enabled
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// The directory path containing the configuration files for Ambient. Defaults to /etc/ambient-config.
	ConfigDir string `protobuf:"bytes,3,opt,name=configDir,proto3" json:"configDir,omitempty"`
	// If enabled, and ambient is enabled, DNS redirection will be enabled.
	DnsCapture *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=dnsCapture,proto3" json:"dnsCapture,omitempty"`
	// UNSTABLE: If enabled, and ambient is enabled, enables ipv6 support
	Ipv6 *wrapperspb.BoolValue `protobuf:"bytes,7,opt,name=ipv6,proto3" json:"ipv6,omitempty"`
	// contains filtered or unexported fields
}

func (*CNIAmbientConfig) Descriptor deprecated 

func (*CNIAmbientConfig) Descriptor() ([]byte, []int)

Deprecated: Use CNIAmbientConfig.ProtoReflect.Descriptor instead.

func (*CNIAmbientConfig) GetConfigDir 

func (x *CNIAmbientConfig) GetConfigDir() string

func (*CNIAmbientConfig) GetDnsCapture 

func (x *CNIAmbientConfig) GetDnsCapture() *wrapperspb.BoolValue

func (*CNIAmbientConfig) GetEnabled 

func (x *CNIAmbientConfig) GetEnabled() *wrapperspb.BoolValue

func (*CNIAmbientConfig) GetIpv6 

func (x *CNIAmbientConfig) GetIpv6() *wrapperspb.BoolValue

func (*CNIAmbientConfig) ProtoMessage 

func (*CNIAmbientConfig) ProtoMessage()

func (*CNIAmbientConfig) ProtoReflect 

func (x *CNIAmbientConfig) ProtoReflect() protoreflect.Message

func (*CNIAmbientConfig) Reset 

func (x *CNIAmbientConfig) Reset()

func (*CNIAmbientConfig) String 

func (x *CNIAmbientConfig) String() string

type CNIConfig 

type CNIConfig struct {

	// Controls whether CNI is installed.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Hub to pull the container image from. Image will be `Hub/Image:Tag-Variant`.
	Hub string `protobuf:"bytes,2,opt,name=hub,proto3" json:"hub,omitempty"`
	// The container image tag to pull. Image will be `Hub/Image:Tag-Variant`.
	Tag *structpb.Value `protobuf:"bytes,3,opt,name=tag,proto3" json:"tag,omitempty"`
	// The container image variant to pull. Options are "debug" or "distroless". Unset will use the default for the given version.
	Variant string `protobuf:"bytes,29,opt,name=variant,proto3" json:"variant,omitempty"`
	// Image name to pull from. Image will be `Hub/Image:Tag-Variant`.
	// If Image contains a "/", it will replace the entire `image` in the pod.
	Image string `protobuf:"bytes,4,opt,name=image,proto3" json:"image,omitempty"`
	// Specifies the image pull policy. one of Always, Never, IfNotPresent.
	// Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
	//
	// More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
	PullPolicy string `protobuf:"bytes,5,opt,name=pullPolicy,proto3" json:"pullPolicy,omitempty"`
	// The directory path within the cluster node's filesystem where the CNI binaries are to be installed. Typically /var/lib/cni/bin.
	CniBinDir string `protobuf:"bytes,6,opt,name=cniBinDir,proto3" json:"cniBinDir,omitempty"`
	// The directory path within the cluster node's filesystem where the CNI configuration files are to be installed. Typically /etc/cni/net.d.
	CniConfDir string `protobuf:"bytes,7,opt,name=cniConfDir,proto3" json:"cniConfDir,omitempty"`
	// The name of the CNI plugin configuration file. Defaults to istio-cni.conf.
	CniConfFileName string `protobuf:"bytes,8,opt,name=cniConfFileName,proto3" json:"cniConfFileName,omitempty"`
	// The directory path within the cluster node's filesystem where network namespaces are located.
	// Defaults to '/var/run/netns', in minikube/docker/others can be '/var/run/docker/netns'.
	CniNetnsDir string `protobuf:"bytes,31,opt,name=cniNetnsDir,proto3" json:"cniNetnsDir,omitempty"`
	// List of namespaces that should be ignored by the CNI plugin.
	ExcludeNamespaces []string `protobuf:"bytes,9,rep,name=excludeNamespaces,proto3" json:"excludeNamespaces,omitempty"`
	// K8s affinity to set on the istio-cni Pods. Can be used to exclude istio-cni from being scheduled on specified nodes.
	Affinity *v1.Affinity `protobuf:"bytes,20,opt,name=affinity,proto3" json:"affinity,omitempty"`
	// Additional annotations to apply to the istio-cni Pods.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAnnotations *structpb.Struct `protobuf:"bytes,10,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"`
	// PodSecurityPolicy cluster role. No longer used anywhere.
	PspClusterRole string `protobuf:"bytes,11,opt,name=psp_cluster_role,json=pspClusterRole,proto3" json:"psp_cluster_role,omitempty"`
	// DEPRECATED. Configuration log level of istio-cni binary. By default, istio-cni sends all logs to the UDS server.
	// To see the logs, change global.logging.level to cni:debug.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	LogLevel string `protobuf:"bytes,12,opt,name=logLevel,proto3" json:"logLevel,omitempty"`
	// Same as `global.logging.level`, but will override it if set
	Logging *GlobalLoggingConfig `protobuf:"bytes,25,opt,name=logging,proto3" json:"logging,omitempty"`
	// Configuration for the CNI Repair controller.
	Repair *CNIRepairConfig `protobuf:"bytes,13,opt,name=repair,proto3" json:"repair,omitempty"`
	// Configure the plugin as a chained CNI plugin. When true, the configuration is added to the CNI chain; when false,
	// the configuration is added as a standalone file in the CNI configuration directory.
	Chained *wrapperspb.BoolValue `protobuf:"bytes,14,opt,name=chained,proto3" json:"chained,omitempty"`
	// The resource quotas configration for the CNI DaemonSet.
	ResourceQuotas *ResourceQuotas `protobuf:"bytes,16,opt,name=resource_quotas,json=resourceQuotas,proto3" json:"resource_quotas,omitempty"`
	// The k8s resource requests and limits for the istio-cni Pods.
	Resources *Resources `protobuf:"bytes,17,opt,name=resources,proto3" json:"resources,omitempty"`
	// No longer used for CNI. See: https://github.com/istio/istio/issues/49004
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Privileged *wrapperspb.BoolValue `protobuf:"bytes,18,opt,name=privileged,proto3" json:"privileged,omitempty"`
	// The Container seccompProfile
	//
	// See: https://kubernetes.io/docs/tutorials/security/seccomp/
	SeccompProfile *v1.SeccompProfile `protobuf:"bytes,19,opt,name=seccompProfile,proto3" json:"seccompProfile,omitempty"`
	// Configuration for Istio Ambient.
	Ambient *CNIAmbientConfig `protobuf:"bytes,21,opt,name=ambient,proto3" json:"ambient,omitempty"`
	// Specifies the CNI provider. Can be either "default" or "multus". When set to "multus", an additional
	// NetworkAttachmentDefinition resource is deployed to the cluster to allow the istio-cni plugin to be
	// invoked in a cluster using the Multus CNI plugin.
	Provider string `protobuf:"bytes,22,opt,name=provider,proto3" json:"provider,omitempty"`
	// The number of pods that can be unavailable during a rolling update of the CNI DaemonSet (see
	// `updateStrategy.rollingUpdate.maxUnavailable` here:
	// https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/daemon-set-v1/#DaemonSetSpec).
	// May be specified as a number of pods or as a percent of the total number
	// of pods at the start of the update.
	RollingMaxUnavailable *IntOrString `protobuf:"bytes,23,opt,name=rollingMaxUnavailable,proto3" json:"rollingMaxUnavailable,omitempty"`
	// contains filtered or unexported fields
}

Configuration for CNI.

func (*CNIConfig) Descriptor deprecated 

func (*CNIConfig) Descriptor() ([]byte, []int)

Deprecated: Use CNIConfig.ProtoReflect.Descriptor instead.

func (*CNIConfig) GetAffinity 

func (x *CNIConfig) GetAffinity() *v1.Affinity

func (*CNIConfig) GetAmbient 

func (x *CNIConfig) GetAmbient() *CNIAmbientConfig

func (*CNIConfig) GetChained 

func (x *CNIConfig) GetChained() *wrapperspb.BoolValue

func (*CNIConfig) GetCniBinDir 

func (x *CNIConfig) GetCniBinDir() string

func (*CNIConfig) GetCniConfDir 

func (x *CNIConfig) GetCniConfDir() string

func (*CNIConfig) GetCniConfFileName 

func (x *CNIConfig) GetCniConfFileName() string

func (*CNIConfig) GetCniNetnsDir 

func (x *CNIConfig) GetCniNetnsDir() string

func (*CNIConfig) GetEnabled 

func (x *CNIConfig) GetEnabled() *wrapperspb.BoolValue

func (*CNIConfig) GetExcludeNamespaces 

func (x *CNIConfig) GetExcludeNamespaces() []string

func (*CNIConfig) GetHub 

func (x *CNIConfig) GetHub() string

func (*CNIConfig) GetImage 

func (x *CNIConfig) GetImage() string

func (*CNIConfig) GetLogLevel deprecated 

func (x *CNIConfig) GetLogLevel() string

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*CNIConfig) GetLogging 

func (x *CNIConfig) GetLogging() *GlobalLoggingConfig

func (*CNIConfig) GetPodAnnotations deprecated 

func (x *CNIConfig) GetPodAnnotations() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*CNIConfig) GetPrivileged deprecated 

func (x *CNIConfig) GetPrivileged() *wrapperspb.BoolValue

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*CNIConfig) GetProvider 

func (x *CNIConfig) GetProvider() string

func (*CNIConfig) GetPspClusterRole 

func (x *CNIConfig) GetPspClusterRole() string

func (*CNIConfig) GetPullPolicy 

func (x *CNIConfig) GetPullPolicy() string

func (*CNIConfig) GetRepair 

func (x *CNIConfig) GetRepair() *CNIRepairConfig

func (*CNIConfig) GetResourceQuotas 

func (x *CNIConfig) GetResourceQuotas() *ResourceQuotas

func (*CNIConfig) GetResources 

func (x *CNIConfig) GetResources() *Resources

func (*CNIConfig) GetRollingMaxUnavailable 

func (x *CNIConfig) GetRollingMaxUnavailable() *IntOrString

func (*CNIConfig) GetSeccompProfile 

func (x *CNIConfig) GetSeccompProfile() *v1.SeccompProfile

func (*CNIConfig) GetTag 

func (x *CNIConfig) GetTag() *structpb.Value

func (*CNIConfig) GetVariant 

func (x *CNIConfig) GetVariant() string

func (*CNIConfig) ProtoMessage 

func (*CNIConfig) ProtoMessage()

func (*CNIConfig) ProtoReflect 

func (x *CNIConfig) ProtoReflect() protoreflect.Message

func (*CNIConfig) Reset 

func (x *CNIConfig) Reset()

func (*CNIConfig) String 

func (x *CNIConfig) String() string

type CNIRepairConfig 

type CNIRepairConfig struct {

	// Controls whether repair behavior is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Hub to pull the container image from. Image will be `Hub/Image:Tag-Variant`.
	Hub string `protobuf:"bytes,2,opt,name=hub,proto3" json:"hub,omitempty"`
	// The container image tag to pull. Image will be `Hub/Image:Tag-Variant`.
	Tag *structpb.Value `protobuf:"bytes,3,opt,name=tag,proto3" json:"tag,omitempty"`
	// Image name to pull from. Image will be `Hub/Image:Tag-Variant`.
	// If Image contains a "/", it will replace the entire `image` in the pod.
	Image string `protobuf:"bytes,4,opt,name=image,proto3" json:"image,omitempty"`
	// The Repair controller has 3 modes (labelPods, deletePods, and repairPods). Pick which one meets your use cases. Note only one may be used.
	// The mode defines the action the controller will take when a pod is detected as broken.
	// If labelPods is true, the controller will label all broken pods with <brokenPodLabelKey>=<brokenPodLabelValue>.
	// This is only capable of identifying broken pods; the user is responsible for fixing them (generally, by deleting them).
	// Note this gives the DaemonSet a relatively high privilege, as modifying pod metadata/status can have wider impacts.
	LabelPods bool `protobuf:"varint,5,opt,name=labelPods,proto3" json:"labelPods,omitempty"`
	// The Repair controller has 3 modes (labelPods, deletePods, and repairPods). Pick which one meets your use cases. Note only one may be used.
	// The mode defines the action the controller will take when a pod is detected as broken.
	// If repairPods is true, the controller will dynamically repair any broken pod by setting up the pod networking configuration even after it has started.
	// Note the pod will be crashlooping, so this may take a few minutes to become fully functional based on when the retry occurs.
	// This requires no RBAC privilege, but will require the CNI agent to run as a privileged pod.
	RepairPods bool `protobuf:"varint,11,opt,name=repairPods,proto3" json:"repairPods,omitempty"`
	// No longer used.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	CreateEvents string `protobuf:"bytes,6,opt,name=createEvents,proto3" json:"createEvents,omitempty"`
	// The Repair controller has 3 modes (labelPods, deletePods, and repairPods). Pick which one meets your use cases. Note only one may be used.
	// The mode defines the action the controller will take when a pod is detected as broken.
	// If deletePods is true, the controller will delete the broken pod. The pod will then be rescheduled, hopefully onto a node that is fully ready.
	// Note this gives the DaemonSet a relatively high privilege, as it can delete any Pod.
	DeletePods bool `protobuf:"varint,7,opt,name=deletePods,proto3" json:"deletePods,omitempty"`
	// The label key to apply to a broken pod when the controller is in labelPods mode.
	BrokenPodLabelKey string `protobuf:"bytes,8,opt,name=brokenPodLabelKey,proto3" json:"brokenPodLabelKey,omitempty"`
	// The label value to apply to a broken pod when the controller is in labelPods mode.
	BrokenPodLabelValue string `protobuf:"bytes,9,opt,name=brokenPodLabelValue,proto3" json:"brokenPodLabelValue,omitempty"`
	// The name of the init container to use for the repairPods mode.
	InitContainerName string `protobuf:"bytes,10,opt,name=initContainerName,proto3" json:"initContainerName,omitempty"`
	// contains filtered or unexported fields
}

func (*CNIRepairConfig) Descriptor deprecated 

func (*CNIRepairConfig) Descriptor() ([]byte, []int)

Deprecated: Use CNIRepairConfig.ProtoReflect.Descriptor instead.

func (*CNIRepairConfig) GetBrokenPodLabelKey 

func (x *CNIRepairConfig) GetBrokenPodLabelKey() string

func (*CNIRepairConfig) GetBrokenPodLabelValue 

func (x *CNIRepairConfig) GetBrokenPodLabelValue() string

func (*CNIRepairConfig) GetCreateEvents deprecated 

func (x *CNIRepairConfig) GetCreateEvents() string

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*CNIRepairConfig) GetDeletePods 

func (x *CNIRepairConfig) GetDeletePods() bool

func (*CNIRepairConfig) GetEnabled 

func (x *CNIRepairConfig) GetEnabled() *wrapperspb.BoolValue

func (*CNIRepairConfig) GetHub 

func (x *CNIRepairConfig) GetHub() string

func (*CNIRepairConfig) GetImage 

func (x *CNIRepairConfig) GetImage() string

func (*CNIRepairConfig) GetInitContainerName 

func (x *CNIRepairConfig) GetInitContainerName() string

func (*CNIRepairConfig) GetLabelPods 

func (x *CNIRepairConfig) GetLabelPods() bool

func (*CNIRepairConfig) GetRepairPods 

func (x *CNIRepairConfig) GetRepairPods() bool

func (*CNIRepairConfig) GetTag 

func (x *CNIRepairConfig) GetTag() *structpb.Value

func (*CNIRepairConfig) ProtoMessage 

func (*CNIRepairConfig) ProtoMessage()

func (*CNIRepairConfig) ProtoReflect 

func (x *CNIRepairConfig) ProtoReflect() protoreflect.Message

func (*CNIRepairConfig) Reset 

func (x *CNIRepairConfig) Reset()

func (*CNIRepairConfig) String 

func (x *CNIRepairConfig) String() string

type CNIUsageConfig 

type CNIUsageConfig struct {

	// Controls whether CNI should be used.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Chained *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=chained,proto3" json:"chained,omitempty"`
	// Specifies the CNI provider. Can be either "default" or "multus". When set to "multus", an annotation
	// `k8s.v1.cni.cncf.io/networks` is set on injected pods to point to a NetworkAttachmentDefinition
	Provider string `protobuf:"bytes,3,opt,name=provider,proto3" json:"provider,omitempty"`
	// contains filtered or unexported fields
}

func (*CNIUsageConfig) Descriptor deprecated 

func (*CNIUsageConfig) Descriptor() ([]byte, []int)

Deprecated: Use CNIUsageConfig.ProtoReflect.Descriptor instead.

func (*CNIUsageConfig) GetChained deprecated 

func (x *CNIUsageConfig) GetChained() *wrapperspb.BoolValue

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*CNIUsageConfig) GetEnabled 

func (x *CNIUsageConfig) GetEnabled() *wrapperspb.BoolValue

func (*CNIUsageConfig) GetProvider 

func (x *CNIUsageConfig) GetProvider() string

func (*CNIUsageConfig) ProtoMessage 

func (*CNIUsageConfig) ProtoMessage()

func (*CNIUsageConfig) ProtoReflect 

func (x *CNIUsageConfig) ProtoReflect() protoreflect.Message

func (*CNIUsageConfig) Reset 

func (x *CNIUsageConfig) Reset()

func (*CNIUsageConfig) String 

func (x *CNIUsageConfig) String() string

type ComponentSpec 

type ComponentSpec struct {
	// Selects whether this component is installed.
	Enabled *BoolValue `json:"enabled,omitempty"`
	// Namespace for the component.
	Namespace string `json:"namespace,omitempty"`
	// Hub for the component (overrides top level hub setting).
	Hub string `json:"hub,omitempty"`
	// Tag for the component (overrides top level tag setting).
	// This is "any" because people put `tag: 1` in their config and we supported that historically.
	Tag any `json:"tag,omitempty"`
	// Kubernetes resource spec.
	Kubernetes *KubernetesResources `json:"k8s,omitempty"`
	// Raw is the raw inputs. This allows distinguishing unset vs zero-values for KubernetesResources
	Raw map[string]any `json:"-"`
}

type DefaultPodDisruptionBudgetConfig 

type DefaultPodDisruptionBudgetConfig struct {

	// Controls whether a PodDisruptionBudget with a default minAvailable value of 1 is created for each deployment.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

DefaultPodDisruptionBudgetConfig specifies the default pod disruption budget configuration.

See https://kubernetes.io/docs/concepts/workloads/pods/disruptions/

func (*DefaultPodDisruptionBudgetConfig) Descriptor deprecated 

func (*DefaultPodDisruptionBudgetConfig) Descriptor() ([]byte, []int)

Deprecated: Use DefaultPodDisruptionBudgetConfig.ProtoReflect.Descriptor instead.

func (*DefaultPodDisruptionBudgetConfig) GetEnabled 

func (x *DefaultPodDisruptionBudgetConfig) GetEnabled() *wrapperspb.BoolValue

func (*DefaultPodDisruptionBudgetConfig) ProtoMessage 

func (*DefaultPodDisruptionBudgetConfig) ProtoMessage()

func (*DefaultPodDisruptionBudgetConfig) ProtoReflect 

func (x *DefaultPodDisruptionBudgetConfig) ProtoReflect() protoreflect.Message

func (*DefaultPodDisruptionBudgetConfig) Reset 

func (x *DefaultPodDisruptionBudgetConfig) Reset()

func (*DefaultPodDisruptionBudgetConfig) String 

func (x *DefaultPodDisruptionBudgetConfig) String() string

type DefaultResourcesConfig 

type DefaultResourcesConfig struct {

	// k8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	Requests *ResourcesRequestsConfig `protobuf:"bytes,1,opt,name=requests,proto3" json:"requests,omitempty"`
	// contains filtered or unexported fields
}

DefaultResourcesConfig specifies the default k8s resources settings for all Istio control plane components.

func (*DefaultResourcesConfig) Descriptor deprecated 

func (*DefaultResourcesConfig) Descriptor() ([]byte, []int)

Deprecated: Use DefaultResourcesConfig.ProtoReflect.Descriptor instead.

func (*DefaultResourcesConfig) GetRequests 

func (x *DefaultResourcesConfig) GetRequests() *ResourcesRequestsConfig

func (*DefaultResourcesConfig) ProtoMessage 

func (*DefaultResourcesConfig) ProtoMessage()

func (*DefaultResourcesConfig) ProtoReflect 

func (x *DefaultResourcesConfig) ProtoReflect() protoreflect.Message

func (*DefaultResourcesConfig) Reset 

func (x *DefaultResourcesConfig) Reset()

func (*DefaultResourcesConfig) String 

func (x *DefaultResourcesConfig) String() string

type EgressGatewayConfig 

type EgressGatewayConfig struct {

	// Controls whether auto scaling with a HorizontalPodAutoscaler is enabled.
	AutoscaleEnabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=autoscaleEnabled,proto3" json:"autoscaleEnabled,omitempty"`
	// maxReplicas setting for HorizontalPodAutoscaler.
	AutoscaleMax uint32 `protobuf:"varint,2,opt,name=autoscaleMax,proto3" json:"autoscaleMax,omitempty"`
	// minReplicas setting for HorizontalPodAutoscaler.
	AutoscaleMin uint32 `protobuf:"varint,3,opt,name=autoscaleMin,proto3" json:"autoscaleMin,omitempty"`
	// K8s memory utilization setting for HorizontalPodAutoscaler target.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Memory *TargetUtilizationConfig `protobuf:"bytes,4,opt,name=memory,proto3" json:"memory,omitempty"`
	// K8s utilization setting for HorizontalPodAutoscaler target.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Cpu           *TargetUtilizationConfig `protobuf:"bytes,5,opt,name=cpu,proto3" json:"cpu,omitempty"`
	CustomService *wrapperspb.BoolValue    `protobuf:"bytes,6,opt,name=customService,proto3" json:"customService,omitempty"`
	// Controls whether an egress gateway is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,7,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Environment variables passed to the proxy container.
	Env    *structpb.Struct  `protobuf:"bytes,8,opt,name=env,proto3" json:"env,omitempty"`
	Labels map[string]string `` /* 153-byte string literal not displayed */
	Name   string            `protobuf:"bytes,25,opt,name=name,proto3" json:"name,omitempty"`
	// K8s node selector.
	//
	// See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	NodeSelector *structpb.Struct `protobuf:"bytes,10,opt,name=nodeSelector,proto3" json:"nodeSelector,omitempty"`
	// K8s annotations for pods.
	//
	// See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAnnotations *structpb.Struct `protobuf:"bytes,11,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"`
	// Pod anti-affinity label selector.
	//
	// Specify the pod anti-affinity that allows you to constrain which nodes
	// your pod is eligible to be scheduled based on labels on pods that are
	// already running on the node rather than based on labels on nodes.
	// There are currently two types of anti-affinity:
	//
	//	"requiredDuringSchedulingIgnoredDuringExecution"
	//	"preferredDuringSchedulingIgnoredDuringExecution"
	//
	// which denote “hard” vs. “soft” requirements, you can define your values
	// in "podAntiAffinityLabelSelector" and "podAntiAffinityTermLabelSelector"
	// correspondingly.
	// See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
	//
	// Examples:
	// podAntiAffinityLabelSelector:
	//   - key: security
	//     operator: In
	//     values: S1,S2
	//     topologyKey: "kubernetes.io/hostname"
	//     This pod anti-affinity rule says that the pod requires not to be scheduled
	//     onto a node if that node is already running a pod with label having key
	//     “security” and value “S1”.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAntiAffinityLabelSelector []*v11.LabelSelector `protobuf:"bytes,12,rep,name=podAntiAffinityLabelSelector,proto3" json:"podAntiAffinityLabelSelector,omitempty"`
	// See PodAntiAffinityLabelSelector.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAntiAffinityTermLabelSelector []*v11.LabelSelector `protobuf:"bytes,13,rep,name=podAntiAffinityTermLabelSelector,proto3" json:"podAntiAffinityTermLabelSelector,omitempty"`
	// Ports Configuration for the egress gateway service.
	Ports []*PortsConfig `protobuf:"bytes,14,rep,name=ports,proto3" json:"ports,omitempty"`
	// K8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Resources *Resources `protobuf:"bytes,15,opt,name=resources,proto3" json:"resources,omitempty"`
	// Config for secret volume mounts.
	SecretVolumes []*SecretVolume `protobuf:"bytes,16,rep,name=secretVolumes,proto3" json:"secretVolumes,omitempty"`
	// Annotations to add to the egress gateway service.
	ServiceAnnotations *structpb.Struct `protobuf:"bytes,17,opt,name=serviceAnnotations,proto3" json:"serviceAnnotations,omitempty"`
	// Service type.
	//
	// See https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types
	Type string `protobuf:"bytes,18,opt,name=type,proto3" json:"type,omitempty"`
	// Enables cross-cluster access using SNI matching.
	Zvpn *ZeroVPNConfig `protobuf:"bytes,19,opt,name=zvpn,proto3" json:"zvpn,omitempty"`
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Tolerations []*v1.Toleration `protobuf:"bytes,20,rep,name=tolerations,proto3" json:"tolerations,omitempty"`
	// K8s rolling update strategy
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxSurge *IntOrString `protobuf:"bytes,21,opt,name=rollingMaxSurge,proto3" json:"rollingMaxSurge,omitempty"`
	// The number of pods that can be unavailable during a rolling update (see
	// `strategy.rollingUpdate.maxUnavailable` here:
	// https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/deployment-v1/#DeploymentSpec).
	// May be specified as a number of pods or as a percent of the total number
	// of pods at the start of the update.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxUnavailable *IntOrString          `protobuf:"bytes,22,opt,name=rollingMaxUnavailable,proto3" json:"rollingMaxUnavailable,omitempty"`
	ConfigVolumes         []*structpb.Struct    `protobuf:"bytes,23,rep,name=configVolumes,proto3" json:"configVolumes,omitempty"`
	AdditionalContainers  []*structpb.Struct    `protobuf:"bytes,24,rep,name=additionalContainers,proto3" json:"additionalContainers,omitempty"`
	RunAsRoot             *wrapperspb.BoolValue `protobuf:"bytes,26,opt,name=runAsRoot,proto3" json:"runAsRoot,omitempty"`
	// The injection template to use for the gateway. If not set, no injection will be performed.
	InjectionTemplate string          `protobuf:"bytes,27,opt,name=injectionTemplate,proto3" json:"injectionTemplate,omitempty"`
	ServiceAccount    *ServiceAccount `protobuf:"bytes,28,opt,name=serviceAccount,proto3" json:"serviceAccount,omitempty"`
	// Defines which IP family to use for single stack or the order of IP families for dual-stack.
	// Valid list items are "IPv4", "IPv6".
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilies []string `protobuf:"bytes,29,rep,name=ipFamilies,proto3" json:"ipFamilies,omitempty"`
	// Controls whether Services are configured to use IPv4, IPv6, or both. Valid options
	// are PreferDualStack, RequireDualStack, and SingleStack.
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilyPolicy string `protobuf:"bytes,30,opt,name=ipFamilyPolicy,proto3" json:"ipFamilyPolicy,omitempty"` // Next available 31.
	// contains filtered or unexported fields
}

Configuration for an egress gateway.

func (*EgressGatewayConfig) Descriptor deprecated 

func (*EgressGatewayConfig) Descriptor() ([]byte, []int)

Deprecated: Use EgressGatewayConfig.ProtoReflect.Descriptor instead.

func (*EgressGatewayConfig) GetAdditionalContainers 

func (x *EgressGatewayConfig) GetAdditionalContainers() []*structpb.Struct

func (*EgressGatewayConfig) GetAutoscaleEnabled 

func (x *EgressGatewayConfig) GetAutoscaleEnabled() *wrapperspb.BoolValue

func (*EgressGatewayConfig) GetAutoscaleMax 

func (x *EgressGatewayConfig) GetAutoscaleMax() uint32

func (*EgressGatewayConfig) GetAutoscaleMin 

func (x *EgressGatewayConfig) GetAutoscaleMin() uint32

func (*EgressGatewayConfig) GetConfigVolumes 

func (x *EgressGatewayConfig) GetConfigVolumes() []*structpb.Struct

func (*EgressGatewayConfig) GetCpu deprecated 

func (x *EgressGatewayConfig) GetCpu() *TargetUtilizationConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetCustomService 

func (x *EgressGatewayConfig) GetCustomService() *wrapperspb.BoolValue

func (*EgressGatewayConfig) GetEnabled 

func (x *EgressGatewayConfig) GetEnabled() *wrapperspb.BoolValue

func (*EgressGatewayConfig) GetEnv 

func (x *EgressGatewayConfig) GetEnv() *structpb.Struct

func (*EgressGatewayConfig) GetInjectionTemplate 

func (x *EgressGatewayConfig) GetInjectionTemplate() string

func (*EgressGatewayConfig) GetIpFamilies 

func (x *EgressGatewayConfig) GetIpFamilies() []string

func (*EgressGatewayConfig) GetIpFamilyPolicy 

func (x *EgressGatewayConfig) GetIpFamilyPolicy() string

func (*EgressGatewayConfig) GetLabels 

func (x *EgressGatewayConfig) GetLabels() map[string]string

func (*EgressGatewayConfig) GetMemory deprecated 

func (x *EgressGatewayConfig) GetMemory() *TargetUtilizationConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetName 

func (x *EgressGatewayConfig) GetName() string

func (*EgressGatewayConfig) GetNodeSelector deprecated 

func (x *EgressGatewayConfig) GetNodeSelector() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetPodAnnotations deprecated 

func (x *EgressGatewayConfig) GetPodAnnotations() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetPodAntiAffinityLabelSelector deprecated 

func (x *EgressGatewayConfig) GetPodAntiAffinityLabelSelector() []*v11.LabelSelector

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetPodAntiAffinityTermLabelSelector deprecated 

func (x *EgressGatewayConfig) GetPodAntiAffinityTermLabelSelector() []*v11.LabelSelector

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetPorts 

func (x *EgressGatewayConfig) GetPorts() []*PortsConfig

func (*EgressGatewayConfig) GetResources deprecated 

func (x *EgressGatewayConfig) GetResources() *Resources

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetRollingMaxSurge deprecated 

func (x *EgressGatewayConfig) GetRollingMaxSurge() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetRollingMaxUnavailable deprecated 

func (x *EgressGatewayConfig) GetRollingMaxUnavailable() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetRunAsRoot 

func (x *EgressGatewayConfig) GetRunAsRoot() *wrapperspb.BoolValue

func (*EgressGatewayConfig) GetSecretVolumes 

func (x *EgressGatewayConfig) GetSecretVolumes() []*SecretVolume

func (*EgressGatewayConfig) GetServiceAccount 

func (x *EgressGatewayConfig) GetServiceAccount() *ServiceAccount

func (*EgressGatewayConfig) GetServiceAnnotations 

func (x *EgressGatewayConfig) GetServiceAnnotations() *structpb.Struct

func (*EgressGatewayConfig) GetTolerations deprecated 

func (x *EgressGatewayConfig) GetTolerations() []*v1.Toleration

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetType 

func (x *EgressGatewayConfig) GetType() string

func (*EgressGatewayConfig) GetZvpn 

func (x *EgressGatewayConfig) GetZvpn() *ZeroVPNConfig

func (*EgressGatewayConfig) ProtoMessage 

func (*EgressGatewayConfig) ProtoMessage()

func (*EgressGatewayConfig) ProtoReflect 

func (x *EgressGatewayConfig) ProtoReflect() protoreflect.Message

func (*EgressGatewayConfig) Reset 

func (x *EgressGatewayConfig) Reset()

func (*EgressGatewayConfig) String 

func (x *EgressGatewayConfig) String() string

type ExperimentalConfig 

type ExperimentalConfig struct {

	// Controls whether the experimental feature is enabled.
	StableValidationPolicy *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=stableValidationPolicy,proto3" json:"stableValidationPolicy,omitempty"`
	// contains filtered or unexported fields
}

ExperimentalConfig is a placeholder for experimental installation features.

func (*ExperimentalConfig) Descriptor deprecated 

func (*ExperimentalConfig) Descriptor() ([]byte, []int)

Deprecated: Use ExperimentalConfig.ProtoReflect.Descriptor instead.

func (*ExperimentalConfig) GetStableValidationPolicy 

func (x *ExperimentalConfig) GetStableValidationPolicy() *wrapperspb.BoolValue

func (*ExperimentalConfig) ProtoMessage 

func (*ExperimentalConfig) ProtoMessage()

func (*ExperimentalConfig) ProtoReflect 

func (x *ExperimentalConfig) ProtoReflect() protoreflect.Message

func (*ExperimentalConfig) Reset 

func (x *ExperimentalConfig) Reset()

func (*ExperimentalConfig) String 

func (x *ExperimentalConfig) String() string

type GatewayComponentSpec 

type GatewayComponentSpec struct {
	ComponentSpec
	// Name for the component.
	Name string `json:"name,omitempty"`
	// Labels for the component.
	Label map[string]string `json:"label,omitempty"`
}

type GatewaysConfig 

type GatewaysConfig struct {

	// Configuration for an egress gateway.
	IstioEgressgateway *EgressGatewayConfig `protobuf:"bytes,1,opt,name=istio_egressgateway,json=istio-egressgateway,proto3" json:"istio_egressgateway,omitempty"`
	// Controls whether any gateways are enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Configuration for an ingress gateway.
	IstioIngressgateway *IngressGatewayConfig `protobuf:"bytes,4,opt,name=istio_ingressgateway,json=istio-ingressgateway,proto3" json:"istio_ingressgateway,omitempty"`
	SecurityContext     *structpb.Value       `protobuf:"bytes,10,opt,name=securityContext,proto3" json:"securityContext,omitempty"`
	SeccompProfile      *structpb.Value       `protobuf:"bytes,12,opt,name=seccompProfile,proto3" json:"seccompProfile,omitempty"`
	// contains filtered or unexported fields
}

Configuration for gateways.

func (*GatewaysConfig) Descriptor deprecated 

func (*GatewaysConfig) Descriptor() ([]byte, []int)

Deprecated: Use GatewaysConfig.ProtoReflect.Descriptor instead.

func (*GatewaysConfig) GetEnabled 

func (x *GatewaysConfig) GetEnabled() *wrapperspb.BoolValue

func (*GatewaysConfig) GetIstioEgressgateway 

func (x *GatewaysConfig) GetIstioEgressgateway() *EgressGatewayConfig

func (*GatewaysConfig) GetIstioIngressgateway 

func (x *GatewaysConfig) GetIstioIngressgateway() *IngressGatewayConfig

func (*GatewaysConfig) GetSeccompProfile 

func (x *GatewaysConfig) GetSeccompProfile() *structpb.Value

func (*GatewaysConfig) GetSecurityContext 

func (x *GatewaysConfig) GetSecurityContext() *structpb.Value

func (*GatewaysConfig) ProtoMessage 

func (*GatewaysConfig) ProtoMessage()

func (*GatewaysConfig) ProtoReflect 

func (x *GatewaysConfig) ProtoReflect() protoreflect.Message

func (*GatewaysConfig) Reset 

func (x *GatewaysConfig) Reset()

func (*GatewaysConfig) String 

func (x *GatewaysConfig) String() string

type GlobalConfig 

type GlobalConfig struct {

	// Specifies pod scheduling arch(amd64, ppc64le, s390x, arm64) and weight as follows:
	//
	//	0 - Never scheduled
	//	1 - Least preferred
	//	2 - No preference
	//	3 - Most preferred
	//
	// Deprecated: replaced by the affinity k8s settings which allows architecture nodeAffinity configuration of this behavior.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Arch *ArchConfig `protobuf:"bytes,1,opt,name=arch,proto3" json:"arch,omitempty"`
	// List of certSigners to allow "approve" action in the ClusterRole
	CertSigners []string `protobuf:"bytes,68,rep,name=certSigners,proto3" json:"certSigners,omitempty"`
	// Controls whether the server-side validation is enabled.
	ConfigValidation *wrapperspb.BoolValue `protobuf:"bytes,3,opt,name=configValidation,proto3" json:"configValidation,omitempty"`
	// Default k8s node selector for all the Istio control plane components
	//
	// See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	DefaultNodeSelector *structpb.Struct `protobuf:"bytes,6,opt,name=defaultNodeSelector,proto3" json:"defaultNodeSelector,omitempty"`
	// Specifies the default pod disruption budget configuration.
	DefaultPodDisruptionBudget *DefaultPodDisruptionBudgetConfig `protobuf:"bytes,7,opt,name=defaultPodDisruptionBudget,proto3" json:"defaultPodDisruptionBudget,omitempty"`
	// Default k8s resources settings for all Istio control plane components.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	DefaultResources *DefaultResourcesConfig `protobuf:"bytes,9,opt,name=defaultResources,proto3" json:"defaultResources,omitempty"`
	// Default node tolerations to be applied to all deployments so that all pods can be
	// scheduled to nodes with matching taints. Each component can overwrite
	// these default values by adding its tolerations block in the relevant section below
	// and setting the desired values.
	// Configure this field in case that all pods of Istio control plane are expected to
	// be scheduled to particular nodes with specified taints.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	DefaultTolerations []*v1.Toleration `protobuf:"bytes,55,rep,name=defaultTolerations,proto3" json:"defaultTolerations,omitempty"`
	// Specifies the docker hub for Istio images.
	Hub string `protobuf:"bytes,12,opt,name=hub,proto3" json:"hub,omitempty"`
	// Specifies the image pull policy for the Istio images. one of Always, Never, IfNotPresent.
	// Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
	//
	// More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
	ImagePullPolicy string `protobuf:"bytes,13,opt,name=imagePullPolicy,proto3" json:"imagePullPolicy,omitempty"`
	// ImagePullSecrets for the control plane ServiceAccount, list of secrets in the same namespace
	// to use for pulling any images in pods that reference this ServiceAccount.
	// Must be set for any cluster configured with private docker registry.
	ImagePullSecrets []string `protobuf:"bytes,37,rep,name=imagePullSecrets,proto3" json:"imagePullSecrets,omitempty"`
	// Specifies the default namespace for the Istio control plane components.
	IstioNamespace string `protobuf:"bytes,14,opt,name=istioNamespace,proto3" json:"istioNamespace,omitempty"`
	// Specifies whether istio components should output logs in json format by adding --log_as_json argument to each container.
	LogAsJson *wrapperspb.BoolValue `protobuf:"bytes,36,opt,name=logAsJson,proto3" json:"logAsJson,omitempty"`
	// Specifies the global logging level settings for the Istio control plane components.
	Logging *GlobalLoggingConfig `protobuf:"bytes,17,opt,name=logging,proto3" json:"logging,omitempty"`
	// The Mesh Identifier. It should be unique within the scope where
	// meshes will interact with each other, but it is not required to be
	// globally/universally unique. For example, if any of the following are true,
	// then two meshes must have different Mesh IDs:
	// - Meshes will have their telemetry aggregated in one place
	// - Meshes will be federated together
	// - Policy will be written referencing one mesh from the other
	//
	// If an administrator expects that any of these conditions may become true in
	// the future, they should ensure their meshes have different Mesh IDs
	// assigned.
	//
	// Within a multicluster mesh, each cluster must be (manually or auto)
	// configured to have the same Mesh ID value. If an existing cluster 'joins' a
	// multicluster mesh, it will need to be migrated to the new mesh ID. Details
	// of migration TBD, and it may be a disruptive operation to change the Mesh
	// ID post-install.
	//
	// If the mesh admin does not specify a value, Istio will use the value of the
	// mesh's Trust Domain. The best practice is to select a proper Trust Domain
	// value.
	MeshID string `protobuf:"bytes,53,opt,name=meshID,proto3" json:"meshID,omitempty"`
	// Configure the mesh networks to be used by the Split Horizon EDS.
	//
	// The following example defines two networks with different endpoints association methods.
	// For `network1` all endpoints that their IP belongs to the provided CIDR range will be
	// mapped to network1. The gateway for this network example is specified by its public IP
	// address and port.
	// The second network, `network2`, in this example is defined differently with all endpoints
	// retrieved through the specified Multi-Cluster registry being mapped to network2. The
	// gateway is also defined differently with the name of the gateway service on the remote
	// cluster. The public IP for the gateway will be determined from that remote service (only
	// LoadBalancer gateway service type is currently supported, for a NodePort type gateway service,
	// it still need to be configured manually).
	//
	// meshNetworks:
	//
	//	network1:
	//	  endpoints:
	//	  - fromCidr: "192.168.0.1/24"
	//	  gateways:
	//	  - address: 1.1.1.1
	//	    port: 80
	//	network2:
	//	  endpoints:
	//	  - fromRegistry: reg1
	//	  gateways:
	//	  - registryServiceName: istio-ingressgateway.istio-system.svc.cluster.local
	//	    port: 443
	MeshNetworks *structpb.Struct `protobuf:"bytes,19,opt,name=meshNetworks,proto3" json:"meshNetworks,omitempty"`
	// Specifies the Configuration for Istio mesh across multiple clusters through Istio gateways.
	MultiCluster *MultiClusterConfig `protobuf:"bytes,22,opt,name=multiCluster,proto3" json:"multiCluster,omitempty"`
	// Network defines the network this cluster belong to. This name
	// corresponds to the networks in the map of mesh networks.
	Network string `protobuf:"bytes,39,opt,name=network,proto3" json:"network,omitempty"`
	// Custom DNS config for the pod to resolve names of services in other
	// clusters. Use this to add additional search domains, and other settings.
	// see https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#dns-config
	// This does not apply to gateway pods as they typically need a different
	// set of DNS settings than the normal application pods (e.g. in multicluster scenarios).
	PodDNSSearchNamespaces []string `protobuf:"bytes,43,rep,name=podDNSSearchNamespaces,proto3" json:"podDNSSearchNamespaces,omitempty"`
	// Controls whether the creation of the sidecar injector ConfigMap should be skipped.
	// Defaults to false. When set to true, the sidecar injector ConfigMap will not be created.
	OmitSidecarInjectorConfigMap *wrapperspb.BoolValue `protobuf:"bytes,38,opt,name=omitSidecarInjectorConfigMap,proto3" json:"omitSidecarInjectorConfigMap,omitempty"`
	// Controls whether the WebhookConfiguration resource(s) should be created. The current behavior
	// of Istiod is to manage its own webhook configurations.
	// When this option is set to true, Istio Operator, instead of webhooks, manages the
	// webhook configurations. When this option is set as false, webhooks manage their
	// own webhook configurations.
	OperatorManageWebhooks *wrapperspb.BoolValue `protobuf:"bytes,41,opt,name=operatorManageWebhooks,proto3" json:"operatorManageWebhooks,omitempty"`
	// Specifies the k8s priorityClassName for the istio control plane components.
	//
	// See https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/#priorityclass
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PriorityClassName string `protobuf:"bytes,27,opt,name=priorityClassName,proto3" json:"priorityClassName,omitempty"`
	// Specifies how proxies are configured within Istio.
	Proxy *ProxyConfig `protobuf:"bytes,28,opt,name=proxy,proto3" json:"proxy,omitempty"`
	// Specifies the Configuration for proxy_init container which sets the pods' networking to intercept the inbound/outbound traffic.
	ProxyInit *ProxyInitConfig `protobuf:"bytes,29,opt,name=proxy_init,proto3" json:"proxy_init,omitempty"`
	// Specifies the Configuration for the SecretDiscoveryService instead of using K8S secrets to mount the certificates.
	Sds *SDSConfig `protobuf:"bytes,30,opt,name=sds,proto3" json:"sds,omitempty"`
	// Specifies the tag for the Istio docker images.
	Tag *structpb.Value `protobuf:"bytes,31,opt,name=tag,proto3" json:"tag,omitempty"`
	// The variant of the Istio container images to use. Options are "debug" or "distroless". Unset will use the default for the given version.
	Variant string `protobuf:"bytes,67,opt,name=variant,proto3" json:"variant,omitempty"`
	// Specifies the Configuration for each of the supported tracers.
	Tracer *TracerConfig `protobuf:"bytes,33,opt,name=tracer,proto3" json:"tracer,omitempty"`
	// Specifies the Istio control plane’s pilot Pod IP address or remote cluster DNS resolvable hostname.
	RemotePilotAddress string `protobuf:"bytes,48,opt,name=remotePilotAddress,proto3" json:"remotePilotAddress,omitempty"`
	// Specifies the configution of istiod
	Istiod *IstiodConfig `protobuf:"bytes,54,opt,name=istiod,proto3" json:"istiod,omitempty"`
	// Configure the Pilot certificate provider.
	// Currently, four providers are supported: "kubernetes", "istiod", "custom" and "none".
	PilotCertProvider string `protobuf:"bytes,56,opt,name=pilotCertProvider,proto3" json:"pilotCertProvider,omitempty"`
	// Configure the policy for validating JWT.
	// This is deprecated and has no effect.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	JwtPolicy string `protobuf:"bytes,57,opt,name=jwtPolicy,proto3" json:"jwtPolicy,omitempty"`
	// Specifies the configuration for Security Token Service.
	Sts *STSConfig `protobuf:"bytes,58,opt,name=sts,proto3" json:"sts,omitempty"`
	// Configures the revision this control plane is a part of
	Revision string `protobuf:"bytes,59,opt,name=revision,proto3" json:"revision,omitempty"`
	// Controls whether the in-cluster MTLS key and certs are loaded from the secret volume mounts.
	MountMtlsCerts *wrapperspb.BoolValue `protobuf:"bytes,60,opt,name=mountMtlsCerts,proto3" json:"mountMtlsCerts,omitempty"`
	// The address of the CA for CSR.
	CaAddress string `protobuf:"bytes,61,opt,name=caAddress,proto3" json:"caAddress,omitempty"`
	// Controls whether one external istiod is enabled.
	ExternalIstiod *wrapperspb.BoolValue `protobuf:"bytes,62,opt,name=externalIstiod,proto3" json:"externalIstiod,omitempty"`
	// Controls whether a remote cluster is the config cluster for an external istiod
	ConfigCluster *wrapperspb.BoolValue `protobuf:"bytes,64,opt,name=configCluster,proto3" json:"configCluster,omitempty"`
	// The name of the CA for workloads.
	// For example, when caName=GkeWorkloadCertificate, GKE workload certificates
	// will be used as the certificates for workloads.
	// The default value is "" and when caName="", the CA will be configured by other
	// mechanisms (e.g., environmental variable CA_PROVIDER).
	CaName string `protobuf:"bytes,65,opt,name=caName,proto3" json:"caName,omitempty"`
	// Platform in which Istio is deployed. Possible values are: "openshift" and "gcp"
	// An empty value means it is a vanilla Kubernetes distribution, therefore no special
	// treatment will be considered.
	Platform string `protobuf:"bytes,69,opt,name=platform,proto3" json:"platform,omitempty"`
	// Defines which IP family to use for single stack or the order of IP families for dual-stack.
	// Valid list items are "IPv4", "IPv6".
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilies []string `protobuf:"bytes,70,rep,name=ipFamilies,proto3" json:"ipFamilies,omitempty"`
	// Controls whether Services are configured to use IPv4, IPv6, or both. Valid options
	// are PreferDualStack, RequireDualStack, and SingleStack.
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilyPolicy string `protobuf:"bytes,71,opt,name=ipFamilyPolicy,proto3" json:"ipFamilyPolicy,omitempty"`
	// Specifies how waypoints are configured within Istio.
	Waypoint *WaypointConfig `protobuf:"bytes,72,opt,name=waypoint,proto3" json:"waypoint,omitempty"` // The next available key is 73
	// contains filtered or unexported fields
}

Global Configuration for Istio components.

func (*GlobalConfig) Descriptor deprecated 

func (*GlobalConfig) Descriptor() ([]byte, []int)

Deprecated: Use GlobalConfig.ProtoReflect.Descriptor instead.

func (*GlobalConfig) GetArch deprecated 

func (x *GlobalConfig) GetArch() *ArchConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetCaAddress 

func (x *GlobalConfig) GetCaAddress() string

func (*GlobalConfig) GetCaName 

func (x *GlobalConfig) GetCaName() string

func (*GlobalConfig) GetCertSigners 

func (x *GlobalConfig) GetCertSigners() []string

func (*GlobalConfig) GetConfigCluster 

func (x *GlobalConfig) GetConfigCluster() *wrapperspb.BoolValue

func (*GlobalConfig) GetConfigValidation 

func (x *GlobalConfig) GetConfigValidation() *wrapperspb.BoolValue

func (*GlobalConfig) GetDefaultNodeSelector deprecated 

func (x *GlobalConfig) GetDefaultNodeSelector() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetDefaultPodDisruptionBudget 

func (x *GlobalConfig) GetDefaultPodDisruptionBudget() *DefaultPodDisruptionBudgetConfig

func (*GlobalConfig) GetDefaultResources deprecated 

func (x *GlobalConfig) GetDefaultResources() *DefaultResourcesConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetDefaultTolerations deprecated 

func (x *GlobalConfig) GetDefaultTolerations() []*v1.Toleration

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetExternalIstiod 

func (x *GlobalConfig) GetExternalIstiod() *wrapperspb.BoolValue

func (*GlobalConfig) GetHub 

func (x *GlobalConfig) GetHub() string

func (*GlobalConfig) GetImagePullPolicy 

func (x *GlobalConfig) GetImagePullPolicy() string

func (*GlobalConfig) GetImagePullSecrets 

func (x *GlobalConfig) GetImagePullSecrets() []string

func (*GlobalConfig) GetIpFamilies 

func (x *GlobalConfig) GetIpFamilies() []string

func (*GlobalConfig) GetIpFamilyPolicy 

func (x *GlobalConfig) GetIpFamilyPolicy() string

func (*GlobalConfig) GetIstioNamespace 

func (x *GlobalConfig) GetIstioNamespace() string

func (*GlobalConfig) GetIstiod 

func (x *GlobalConfig) GetIstiod() *IstiodConfig

func (*GlobalConfig) GetJwtPolicy deprecated 

func (x *GlobalConfig) GetJwtPolicy() string

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetLogAsJson 

func (x *GlobalConfig) GetLogAsJson() *wrapperspb.BoolValue

func (*GlobalConfig) GetLogging 

func (x *GlobalConfig) GetLogging() *GlobalLoggingConfig

func (*GlobalConfig) GetMeshID 

func (x *GlobalConfig) GetMeshID() string

func (*GlobalConfig) GetMeshNetworks 

func (x *GlobalConfig) GetMeshNetworks() *structpb.Struct

func (*GlobalConfig) GetMountMtlsCerts 

func (x *GlobalConfig) GetMountMtlsCerts() *wrapperspb.BoolValue

func (*GlobalConfig) GetMultiCluster 

func (x *GlobalConfig) GetMultiCluster() *MultiClusterConfig

func (*GlobalConfig) GetNetwork 

func (x *GlobalConfig) GetNetwork() string

func (*GlobalConfig) GetOmitSidecarInjectorConfigMap 

func (x *GlobalConfig) GetOmitSidecarInjectorConfigMap() *wrapperspb.BoolValue

func (*GlobalConfig) GetOperatorManageWebhooks 

func (x *GlobalConfig) GetOperatorManageWebhooks() *wrapperspb.BoolValue

func (*GlobalConfig) GetPilotCertProvider 

func (x *GlobalConfig) GetPilotCertProvider() string

func (*GlobalConfig) GetPlatform 

func (x *GlobalConfig) GetPlatform() string

func (*GlobalConfig) GetPodDNSSearchNamespaces 

func (x *GlobalConfig) GetPodDNSSearchNamespaces() []string

func (*GlobalConfig) GetPriorityClassName deprecated 

func (x *GlobalConfig) GetPriorityClassName() string

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetProxy 

func (x *GlobalConfig) GetProxy() *ProxyConfig

func (*GlobalConfig) GetProxyInit 

func (x *GlobalConfig) GetProxyInit() *ProxyInitConfig

func (*GlobalConfig) GetRemotePilotAddress 

func (x *GlobalConfig) GetRemotePilotAddress() string

func (*GlobalConfig) GetRevision 

func (x *GlobalConfig) GetRevision() string

func (*GlobalConfig) GetSds 

func (x *GlobalConfig) GetSds() *SDSConfig

func (*GlobalConfig) GetSts 

func (x *GlobalConfig) GetSts() *STSConfig

func (*GlobalConfig) GetTag 

func (x *GlobalConfig) GetTag() *structpb.Value

func (*GlobalConfig) GetTracer 

func (x *GlobalConfig) GetTracer() *TracerConfig

func (*GlobalConfig) GetVariant 

func (x *GlobalConfig) GetVariant() string

func (*GlobalConfig) GetWaypoint 

func (x *GlobalConfig) GetWaypoint() *WaypointConfig

func (*GlobalConfig) ProtoMessage 

func (*GlobalConfig) ProtoMessage()

func (*GlobalConfig) ProtoReflect 

func (x *GlobalConfig) ProtoReflect() protoreflect.Message

func (*GlobalConfig) Reset 

func (x *GlobalConfig) Reset()

func (*GlobalConfig) String 

func (x *GlobalConfig) String() string

type GlobalLoggingConfig 

type GlobalLoggingConfig struct {

	// Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>
	// The control plane has different scopes depending on component, but can configure default log level across all components
	// If empty, default scope and level will be used as configured in code
	Level string `protobuf:"bytes,1,opt,name=level,proto3" json:"level,omitempty"`
	// contains filtered or unexported fields
}

GlobalLoggingConfig specifies the global logging level settings for the Istio control plane components.

func (*GlobalLoggingConfig) Descriptor deprecated 

func (*GlobalLoggingConfig) Descriptor() ([]byte, []int)

Deprecated: Use GlobalLoggingConfig.ProtoReflect.Descriptor instead.

func (*GlobalLoggingConfig) GetLevel 

func (x *GlobalLoggingConfig) GetLevel() string

func (*GlobalLoggingConfig) ProtoMessage 

func (*GlobalLoggingConfig) ProtoMessage()

func (*GlobalLoggingConfig) ProtoReflect 

func (x *GlobalLoggingConfig) ProtoReflect() protoreflect.Message

func (*GlobalLoggingConfig) Reset 

func (x *GlobalLoggingConfig) Reset()

func (*GlobalLoggingConfig) String 

func (x *GlobalLoggingConfig) String() string

type IngressControllerMode 

type IngressControllerMode int32

Mode for the ingress controller. 

const (
	// Unspecified Istio ingress controller.
	IngressControllerMode_UNSPECIFIED IngressControllerMode = 0
	// Selects all Ingress resources, with or without Istio annotation.
	IngressControllerMode_DEFAULT IngressControllerMode = 1
	// Selects only resources with istio annotation.
	IngressControllerMode_STRICT IngressControllerMode = 2
	// No ingress or sync.
	IngressControllerMode_OFF IngressControllerMode = 3
)

func (IngressControllerMode) Descriptor 

func (IngressControllerMode) Descriptor() protoreflect.EnumDescriptor

func (IngressControllerMode) Enum 

func (x IngressControllerMode) Enum() *IngressControllerMode

func (IngressControllerMode) EnumDescriptor deprecated 

func (IngressControllerMode) EnumDescriptor() ([]byte, []int)

Deprecated: Use IngressControllerMode.Descriptor instead.

func (IngressControllerMode) Number 

func (x IngressControllerMode) Number() protoreflect.EnumNumber

func (IngressControllerMode) String 

func (x IngressControllerMode) String() string

func (IngressControllerMode) Type 

func (IngressControllerMode) Type() protoreflect.EnumType

type IngressGatewayConfig 

type IngressGatewayConfig struct {

	// Controls whether auto scaling with a HorizontalPodAutoscaler is enabled.
	AutoscaleEnabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=autoscaleEnabled,proto3" json:"autoscaleEnabled,omitempty"`
	// maxReplicas setting for HorizontalPodAutoscaler.
	AutoscaleMax uint32 `protobuf:"varint,2,opt,name=autoscaleMax,proto3" json:"autoscaleMax,omitempty"`
	// minReplicas setting for HorizontalPodAutoscaler.
	AutoscaleMin uint32 `protobuf:"varint,3,opt,name=autoscaleMin,proto3" json:"autoscaleMin,omitempty"`
	// K8s memory utilization setting for HorizontalPodAutoscaler target.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Memory *TargetUtilizationConfig `protobuf:"bytes,4,opt,name=memory,proto3" json:"memory,omitempty"`
	// K8s cpu utilization setting for HorizontalPodAutoscaler target.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Cpu           *TargetUtilizationConfig `protobuf:"bytes,5,opt,name=cpu,proto3" json:"cpu,omitempty"`
	CustomService *wrapperspb.BoolValue    `protobuf:"bytes,6,opt,name=customService,proto3" json:"customService,omitempty"`
	// Controls whether an ingress gateway is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,10,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Environment variables passed to the proxy container.
	Env                      *structpb.Struct  `protobuf:"bytes,11,opt,name=env,proto3" json:"env,omitempty"`
	Labels                   map[string]string `` /* 154-byte string literal not displayed */
	LoadBalancerIP           string            `protobuf:"bytes,16,opt,name=loadBalancerIP,proto3" json:"loadBalancerIP,omitempty"`
	LoadBalancerSourceRanges []string          `protobuf:"bytes,17,rep,name=loadBalancerSourceRanges,proto3" json:"loadBalancerSourceRanges,omitempty"`
	Name                     string            `protobuf:"bytes,44,opt,name=name,proto3" json:"name,omitempty"`
	// K8s node selector.
	//
	// See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	NodeSelector *structpb.Struct `protobuf:"bytes,19,opt,name=nodeSelector,proto3" json:"nodeSelector,omitempty"`
	// K8s annotations for pods.
	//
	// See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAnnotations *structpb.Struct `protobuf:"bytes,20,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"`
	// See EgressGatewayConfig.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAntiAffinityLabelSelector []*v11.LabelSelector `protobuf:"bytes,21,rep,name=podAntiAffinityLabelSelector,proto3" json:"podAntiAffinityLabelSelector,omitempty"`
	// See EgressGatewayConfig.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAntiAffinityTermLabelSelector []*v11.LabelSelector `protobuf:"bytes,22,rep,name=podAntiAffinityTermLabelSelector,proto3" json:"podAntiAffinityTermLabelSelector,omitempty"`
	// Port Configuration for the ingress gateway.
	Ports []*PortsConfig `protobuf:"bytes,23,rep,name=ports,proto3" json:"ports,omitempty"`
	// Number of replicas for the ingress gateway Deployment.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	ReplicaCount uint32 `protobuf:"varint,24,opt,name=replicaCount,proto3" json:"replicaCount,omitempty"`
	// K8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Resources *structpb.Struct `protobuf:"bytes,25,opt,name=resources,proto3" json:"resources,omitempty"`
	// Config for secret volume mounts.
	SecretVolumes []*SecretVolume `protobuf:"bytes,27,rep,name=secretVolumes,proto3" json:"secretVolumes,omitempty"`
	// Annotations to add to the egress gateway service.
	ServiceAnnotations *structpb.Struct `protobuf:"bytes,28,opt,name=serviceAnnotations,proto3" json:"serviceAnnotations,omitempty"`
	// Service type.
	//
	// See https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types
	Type string `protobuf:"bytes,29,opt,name=type,proto3" json:"type,omitempty"`
	// Enables cross-cluster access using SNI matching.
	Zvpn *IngressGatewayZvpnConfig `protobuf:"bytes,30,opt,name=zvpn,proto3" json:"zvpn,omitempty"`
	// K8s rolling update strategy
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxSurge *IntOrString `protobuf:"bytes,31,opt,name=rollingMaxSurge,proto3" json:"rollingMaxSurge,omitempty"`
	// The number of pods that can be unavailable during a rolling update (see
	// `strategy.rollingUpdate.maxUnavailable` here:
	// https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/deployment-v1/#DeploymentSpec).
	// May be specified as a number of pods or as a percent of the total number
	// of pods at the start of the update.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxUnavailable *IntOrString `protobuf:"bytes,32,opt,name=rollingMaxUnavailable,proto3" json:"rollingMaxUnavailable,omitempty"`
	ExternalTrafficPolicy string       `protobuf:"bytes,34,opt,name=externalTrafficPolicy,proto3" json:"externalTrafficPolicy,omitempty"`
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Tolerations          []*v1.Toleration      `protobuf:"bytes,35,rep,name=tolerations,proto3" json:"tolerations,omitempty"`
	IngressPorts         []*structpb.Struct    `protobuf:"bytes,36,rep,name=ingressPorts,proto3" json:"ingressPorts,omitempty"`
	AdditionalContainers []*structpb.Struct    `protobuf:"bytes,37,rep,name=additionalContainers,proto3" json:"additionalContainers,omitempty"`
	ConfigVolumes        []*structpb.Struct    `protobuf:"bytes,38,rep,name=configVolumes,proto3" json:"configVolumes,omitempty"`
	RunAsRoot            *wrapperspb.BoolValue `protobuf:"bytes,45,opt,name=runAsRoot,proto3" json:"runAsRoot,omitempty"`
	// The injection template to use for the gateway. If not set, no injection will be performed.
	InjectionTemplate string          `protobuf:"bytes,46,opt,name=injectionTemplate,proto3" json:"injectionTemplate,omitempty"`
	ServiceAccount    *ServiceAccount `protobuf:"bytes,47,opt,name=serviceAccount,proto3" json:"serviceAccount,omitempty"`
	// Defines which IP family to use for single stack or the order of IP families for dual-stack.
	// Valid list items are "IPv4", "IPv6".
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilies []string `protobuf:"bytes,48,rep,name=ipFamilies,proto3" json:"ipFamilies,omitempty"`
	// Controls whether Services are configured to use IPv4, IPv6, or both. Valid options
	// are PreferDualStack, RequireDualStack, and SingleStack.
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilyPolicy string `protobuf:"bytes,49,opt,name=ipFamilyPolicy,proto3" json:"ipFamilyPolicy,omitempty"` // Next available 50.
	// contains filtered or unexported fields
}

Configuration for an ingress gateway.

func (*IngressGatewayConfig) Descriptor deprecated 

func (*IngressGatewayConfig) Descriptor() ([]byte, []int)

Deprecated: Use IngressGatewayConfig.ProtoReflect.Descriptor instead.

func (*IngressGatewayConfig) GetAdditionalContainers 

func (x *IngressGatewayConfig) GetAdditionalContainers() []*structpb.Struct

func (*IngressGatewayConfig) GetAutoscaleEnabled 

func (x *IngressGatewayConfig) GetAutoscaleEnabled() *wrapperspb.BoolValue

func (*IngressGatewayConfig) GetAutoscaleMax 

func (x *IngressGatewayConfig) GetAutoscaleMax() uint32

func (*IngressGatewayConfig) GetAutoscaleMin 

func (x *IngressGatewayConfig) GetAutoscaleMin() uint32

func (*IngressGatewayConfig) GetConfigVolumes 

func (x *IngressGatewayConfig) GetConfigVolumes() []*structpb.Struct

func (*IngressGatewayConfig) GetCpu deprecated 

func (x *IngressGatewayConfig) GetCpu() *TargetUtilizationConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetCustomService 

func (x *IngressGatewayConfig) GetCustomService() *wrapperspb.BoolValue

func (*IngressGatewayConfig) GetEnabled 

func (x *IngressGatewayConfig) GetEnabled() *wrapperspb.BoolValue

func (*IngressGatewayConfig) GetEnv 

func (x *IngressGatewayConfig) GetEnv() *structpb.Struct

func (*IngressGatewayConfig) GetExternalTrafficPolicy 

func (x *IngressGatewayConfig) GetExternalTrafficPolicy() string

func (*IngressGatewayConfig) GetIngressPorts 

func (x *IngressGatewayConfig) GetIngressPorts() []*structpb.Struct

func (*IngressGatewayConfig) GetInjectionTemplate 

func (x *IngressGatewayConfig) GetInjectionTemplate() string

func (*IngressGatewayConfig) GetIpFamilies 

func (x *IngressGatewayConfig) GetIpFamilies() []string

func (*IngressGatewayConfig) GetIpFamilyPolicy 

func (x *IngressGatewayConfig) GetIpFamilyPolicy() string

func (*IngressGatewayConfig) GetLabels 

func (x *IngressGatewayConfig) GetLabels() map[string]string

func (*IngressGatewayConfig) GetLoadBalancerIP 

func (x *IngressGatewayConfig) GetLoadBalancerIP() string

func (*IngressGatewayConfig) GetLoadBalancerSourceRanges 

func (x *IngressGatewayConfig) GetLoadBalancerSourceRanges() []string

func (*IngressGatewayConfig) GetMemory deprecated 

func (x *IngressGatewayConfig) GetMemory() *TargetUtilizationConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetName 

func (x *IngressGatewayConfig) GetName() string

func (*IngressGatewayConfig) GetNodeSelector deprecated 

func (x *IngressGatewayConfig) GetNodeSelector() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetPodAnnotations deprecated 

func (x *IngressGatewayConfig) GetPodAnnotations() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetPodAntiAffinityLabelSelector deprecated 

func (x *IngressGatewayConfig) GetPodAntiAffinityLabelSelector() []*v11.LabelSelector

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetPodAntiAffinityTermLabelSelector deprecated 

func (x *IngressGatewayConfig) GetPodAntiAffinityTermLabelSelector() []*v11.LabelSelector

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetPorts 

func (x *IngressGatewayConfig) GetPorts() []*PortsConfig

func (*IngressGatewayConfig) GetReplicaCount deprecated 

func (x *IngressGatewayConfig) GetReplicaCount() uint32

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetResources deprecated 

func (x *IngressGatewayConfig) GetResources() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetRollingMaxSurge deprecated 

func (x *IngressGatewayConfig) GetRollingMaxSurge() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetRollingMaxUnavailable deprecated 

func (x *IngressGatewayConfig) GetRollingMaxUnavailable() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetRunAsRoot 

func (x *IngressGatewayConfig) GetRunAsRoot() *wrapperspb.BoolValue

func (*IngressGatewayConfig) GetSecretVolumes 

func (x *IngressGatewayConfig) GetSecretVolumes() []*SecretVolume

func (*IngressGatewayConfig) GetServiceAccount 

func (x *IngressGatewayConfig) GetServiceAccount() *ServiceAccount

func (*IngressGatewayConfig) GetServiceAnnotations 

func (x *IngressGatewayConfig) GetServiceAnnotations() *structpb.Struct

func (*IngressGatewayConfig) GetTolerations deprecated 

func (x *IngressGatewayConfig) GetTolerations() []*v1.Toleration

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetType 

func (x *IngressGatewayConfig) GetType() string

func (*IngressGatewayConfig) GetZvpn 

func (x *IngressGatewayConfig) GetZvpn() *IngressGatewayZvpnConfig

func (*IngressGatewayConfig) ProtoMessage 

func (*IngressGatewayConfig) ProtoMessage()

func (*IngressGatewayConfig) ProtoReflect 

func (x *IngressGatewayConfig) ProtoReflect() protoreflect.Message

func (*IngressGatewayConfig) Reset 

func (x *IngressGatewayConfig) Reset()

func (*IngressGatewayConfig) String 

func (x *IngressGatewayConfig) String() string

type IngressGatewayZvpnConfig 

type IngressGatewayZvpnConfig struct {

	// Controls whether ZeroVPN is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	Suffix  string                `protobuf:"bytes,2,opt,name=suffix,proto3" json:"suffix,omitempty"`
	// contains filtered or unexported fields
}

IngressGatewayZvpnConfig enables cross-cluster access using SNI matching.

func (*IngressGatewayZvpnConfig) Descriptor deprecated 

func (*IngressGatewayZvpnConfig) Descriptor() ([]byte, []int)

Deprecated: Use IngressGatewayZvpnConfig.ProtoReflect.Descriptor instead.

func (*IngressGatewayZvpnConfig) GetEnabled 

func (x *IngressGatewayZvpnConfig) GetEnabled() *wrapperspb.BoolValue

func (*IngressGatewayZvpnConfig) GetSuffix 

func (x *IngressGatewayZvpnConfig) GetSuffix() string

func (*IngressGatewayZvpnConfig) ProtoMessage 

func (*IngressGatewayZvpnConfig) ProtoMessage()

func (*IngressGatewayZvpnConfig) ProtoReflect 

func (x *IngressGatewayZvpnConfig) ProtoReflect() protoreflect.Message

func (*IngressGatewayZvpnConfig) Reset 

func (x *IngressGatewayZvpnConfig) Reset()

func (*IngressGatewayZvpnConfig) String 

func (x *IngressGatewayZvpnConfig) String() string

type IntOrString 

type IntOrString struct {
	Type   int64                   `protobuf:"varint,1,opt,name=type,proto3" json:"type,omitempty"`
	IntVal *wrapperspb.Int32Value  `protobuf:"bytes,2,opt,name=intVal,proto3" json:"intVal,omitempty"`
	StrVal *wrapperspb.StringValue `protobuf:"bytes,3,opt,name=strVal,proto3" json:"strVal,omitempty"`
	// contains filtered or unexported fields
}

IntOrString is a type that can hold an int32 or a string. When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type. This allows you to have, for example, a JSON field that can accept a name or number. TODO: Rename to Int32OrString

+protobuf=true +protobuf.options.(gogoproto.goproto_stringer)=false +k8s:openapi-gen=true

func (*IntOrString) Descriptor deprecated 

func (*IntOrString) Descriptor() ([]byte, []int)

Deprecated: Use IntOrString.ProtoReflect.Descriptor instead.

func (*IntOrString) GetIntVal 

func (x *IntOrString) GetIntVal() *wrapperspb.Int32Value

func (*IntOrString) GetStrVal 

func (x *IntOrString) GetStrVal() *wrapperspb.StringValue

func (*IntOrString) GetType 

func (x *IntOrString) GetType() int64

func (*IntOrString) MarshalJSON 

func (i *IntOrString) MarshalJSON() ([]byte, error)

func (*IntOrString) MarshalJSONPB 

func (i *IntOrString) MarshalJSONPB(_ *github_com_golang_protobuf_jsonpb.Marshaler) ([]byte, error)

func (*IntOrString) ProtoMessage 

func (*IntOrString) ProtoMessage()

func (*IntOrString) ProtoReflect 

func (x *IntOrString) ProtoReflect() protoreflect.Message

func (*IntOrString) Reset 

func (x *IntOrString) Reset()

func (*IntOrString) String 

func (x *IntOrString) String() string

func (*IntOrString) ToKubernetes 

func (i *IntOrString) ToKubernetes() intstr.IntOrString

func (*IntOrString) UnmarshalJSON 

func (i *IntOrString) UnmarshalJSON(value []byte) error

UnmarshalJSON implements the json.Unmarshaller interface.

func (*IntOrString) UnmarshalJSONPB 

func (i *IntOrString) UnmarshalJSONPB(_ *github_com_golang_protobuf_jsonpb.Unmarshaler, value []byte) error

type IstioComponentSpec 

type IstioComponentSpec struct {
	Base    *BaseComponentSpec `json:"base,omitempty"`
	Pilot   *ComponentSpec     `json:"pilot,omitempty"`
	Cni     *ComponentSpec     `json:"cni,omitempty"`
	Ztunnel *ComponentSpec     `json:"ztunnel,omitempty"`
	// Remote cluster using an external control plane.
	IstiodRemote    *ComponentSpec         `json:"istiodRemote,omitempty"`
	IngressGateways []GatewayComponentSpec `json:"ingressGateways,omitempty"`
	EgressGateways  []GatewayComponentSpec `json:"egressGateways,omitempty"`
}

type IstioOperator 

type IstioOperator struct {
	metav1.TypeMeta `json:",inline"`
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty""`

	// Spec defines the implementation of this definition.
	// +optional
	Spec IstioOperatorSpec `json:"spec,omitempty"`
}

IstioOperatorSpec defines the desired installed state of Istio components. The spec is a used to define a customization of the default profile values that are supplied with each Istio release. Because the spec is a customization API, specifying an empty IstioOperatorSpec results in a default Istio component values. 

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  profile: default
  hub: gcr.io/istio-testing
  tag: latest
  revision: 1-8-0
  meshConfig:
    accessLogFile: /dev/stdout
    enableTracing: true
  components:
    egressGateways:
    - name: istio-egressgateway
      enabled: true

+kubetype-gen +kubetype-gen:groupVersion=install.istio.io/v1alpha1 +k8s:deepcopy-gen=true

type IstioOperatorSpec 

type IstioOperatorSpec struct {
	// Path or name for the profile e.g.
	//
	// * minimal (looks in profiles dir for a file called minimal.yaml)
	// * /tmp/istio/install/values/custom/custom-install.yaml (local file path)
	//
	// default profile is used if this field is unset.
	Profile string `json:"profile,omitempty"`
	// Path for the install package. e.g.
	//
	// * /tmp/istio-installer/nightly (local file path)
	InstallPackagePath string `json:"installPackagePath,omitempty"`
	// Root for docker image paths e.g. `docker.io/istio`
	Hub string `json:"hub,omitempty"`
	// Version tag for docker images e.g. `1.7.2`
	Tag any `json:"tag,omitempty"`
	// Namespace to install control plane resources into. If unset, Istio will be installed into the same namespace
	// as the `IstioOperator` CR. You must also set `values.global.istioNamespace` if you wish to install Istio in
	// a custom namespace.
	// If you have enabled CNI, you must  exclude this namespace by adding it to the list `values.cni.excludeNamespaces`.
	Namespace string `json:"namespace,omitempty"`
	// Identify the revision this installation is associated with.
	// This option is currently experimental.
	Revision string `json:"revision,omitempty"`
	// Compatibility version allows configuring Istio to behave like an older version by tuning various settings to align with a
	// previous versions defaults. This accepts a `major.minor` format, such as `1.23`.
	// This option is currently experimental.
	CompatibilityVersion string `json:"compatibilityVersion,omitempty"`
	// Config used by control plane components internally.
	MeshConfig json.RawMessage `json:"meshConfig,omitempty"`
	// Kubernetes resource settings, enablement and component-specific settings that are not internal to the
	// component.
	Components *IstioComponentSpec `json:"components,omitempty"`
	// Overrides for default `values.yaml`. This is a validated pass-through to Helm templates.
	// See the [Helm installation options](https://istio.io/v1.5/docs/reference/config/installation-options/) for schema details.
	// Anything that is available in `IstioOperatorSpec` should be set above rather than using the passthrough. This
	// includes Kubernetes resource settings for components in `KubernetesResourcesSpec`.
	Values json.RawMessage `json:"values,omitempty"`
	// Unvalidated overrides for default `values.yaml`. Used for custom templates where new parameters are added.
	UnvalidatedValues any `json:"unvalidatedValues,omitempty"`
}

type IstiodConfig 

type IstiodConfig struct {

	// If enabled, istiod will perform config analysis
	EnableAnalysis *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=enableAnalysis,proto3" json:"enableAnalysis,omitempty"`
	// contains filtered or unexported fields
}

func (*IstiodConfig) Descriptor deprecated 

func (*IstiodConfig) Descriptor() ([]byte, []int)

Deprecated: Use IstiodConfig.ProtoReflect.Descriptor instead.

func (*IstiodConfig) GetEnableAnalysis 

func (x *IstiodConfig) GetEnableAnalysis() *wrapperspb.BoolValue

func (*IstiodConfig) ProtoMessage 

func (*IstiodConfig) ProtoMessage()

func (*IstiodConfig) ProtoReflect 

func (x *IstiodConfig) ProtoReflect() protoreflect.Message

func (*IstiodConfig) Reset 

func (x *IstiodConfig) Reset()

func (*IstiodConfig) String 

func (x *IstiodConfig) String() string

type IstiodRemoteConfig 

type IstiodRemoteConfig struct {

	// URL to use for sidecar injector webhook.
	InjectionURL string `protobuf:"bytes,1,opt,name=injectionURL,proto3" json:"injectionURL,omitempty"`
	// Path to use for the sidecar injector webhook service.
	InjectionPath string `protobuf:"bytes,2,opt,name=injectionPath,proto3" json:"injectionPath,omitempty"`
	// injector ca bundle
	InjectionCABundle string `protobuf:"bytes,3,opt,name=injectionCABundle,proto3" json:"injectionCABundle,omitempty"`
	// Indicates if this cluster/install should consume a "remote" istiod instance,
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

func (*IstiodRemoteConfig) Descriptor deprecated 

func (*IstiodRemoteConfig) Descriptor() ([]byte, []int)

Deprecated: Use IstiodRemoteConfig.ProtoReflect.Descriptor instead.

func (*IstiodRemoteConfig) GetEnabled 

func (x *IstiodRemoteConfig) GetEnabled() *wrapperspb.BoolValue

func (*IstiodRemoteConfig) GetInjectionCABundle 

func (x *IstiodRemoteConfig) GetInjectionCABundle() string

func (*IstiodRemoteConfig) GetInjectionPath 

func (x *IstiodRemoteConfig) GetInjectionPath() string

func (*IstiodRemoteConfig) GetInjectionURL 

func (x *IstiodRemoteConfig) GetInjectionURL() string

func (*IstiodRemoteConfig) ProtoMessage 

func (*IstiodRemoteConfig) ProtoMessage()

func (*IstiodRemoteConfig) ProtoReflect 

func (x *IstiodRemoteConfig) ProtoReflect() protoreflect.Message

func (*IstiodRemoteConfig) Reset 

func (x *IstiodRemoteConfig) Reset()

func (*IstiodRemoteConfig) String 

func (x *IstiodRemoteConfig) String() string

type KubernetesOverlay 

type KubernetesOverlay struct {
	// Resource API version.
	ApiVersion string `json:"apiVersion,omitempty"`
	// Resource kind.
	Kind string `json:"kind,omitempty"`
	// Name of resource.
	// Namespace is always the component namespace.
	Name string `json:"name,omitempty"`
	// List of patches to apply to resource.
	Patches []Patch `json:"patches,omitempty"`
}

KubernetesOverlay for an existing Kubernetes resource.

type KubernetesResources 

type KubernetesResources struct {
	// Kubernetes affinity.
	Affinity *corev1.Affinity `json:"affinity,omitempty"`
	// Deployment environment variables.
	Env []*corev1.EnvVar `json:"env,omitempty"`
	// Kubernetes HorizontalPodAutoscaler settings.
	HpaSpec *autoscaling.HorizontalPodAutoscalerSpec `json:"hpaSpec,omitempty"`
	// Kubernetes imagePullPolicy.
	ImagePullPolicy string `json:"imagePullPolicy,omitempty"`
	// Kubernetes nodeSelector.
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`
	// Kubernetes PodDisruptionBudget settings.
	PodDisruptionBudget *policy.PodDisruptionBudgetSpec `json:"podDisruptionBudget,omitempty"`
	// Kubernetes pod annotations.
	PodAnnotations map[string]string `json:"podAnnotations,omitempty"`
	// Kubernetes priorityClassName. Default for all resources unless overridden.
	PriorityClassName string `json:"priorityClassName,omitempty"`
	// Kubernetes readinessProbe settings.
	ReadinessProbe *corev1.Probe `json:"readinessProbe,omitempty"`
	// Kubernetes Deployment replicas setting.
	ReplicaCount uint32 `json:"replicaCount,omitempty"`
	// Kubernetes resources settings.
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
	// Kubernetes Service settings.
	Service *corev1.ServiceSpec `json:"service,omitempty"`
	// Kubernetes deployment strategy.
	Strategy *appsv1.DeploymentStrategy `json:"strategy,omitempty"`
	// Kubernetes toleration
	Tolerations []*corev1.Toleration `json:"tolerations,omitempty"`
	// Kubernetes service annotations.
	ServiceAnnotations map[string]string `json:"serviceAnnotations,omitempty"`
	// Kubernetes pod security context
	SecurityContext *corev1.PodSecurityContext `json:"securityContext,omitempty"`
	// Kubernetes volumes
	// Volumes defines the collection of Volume to inject into the pod.
	Volumes []*corev1.Volume `json:"volumes,omitempty"`
	// Kubernetes volumeMounts
	// VolumeMounts defines the collection of VolumeMount to inject into containers.
	VolumeMounts []*corev1.VolumeMount `json:"volumeMounts,omitempty"`
	// Overlays for Kubernetes resources in rendered manifests.
	Overlays []KubernetesOverlay `json:"overlays,omitempty"`
}

KubernetesResources is a common set of Kubernetes resource configs for components.

type MultiClusterConfig 

type MultiClusterConfig struct {

	// Enables the connection between two kubernetes clusters via their respective ingressgateway services.
	// Use if the pods in each cluster cannot directly talk to one another.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// The name of the cluster this installation will run in. This is required for sidecar injection
	// to properly label proxies
	ClusterName string `protobuf:"bytes,2,opt,name=clusterName,proto3" json:"clusterName,omitempty"`
	// The suffix for global service names.
	GlobalDomainSuffix string `protobuf:"bytes,3,opt,name=globalDomainSuffix,proto3" json:"globalDomainSuffix,omitempty"`
	// Enable envoy filter to translate `globalDomainSuffix` to cluster local suffix for cross cluster communication.
	IncludeEnvoyFilter *wrapperspb.BoolValue `protobuf:"bytes,4,opt,name=includeEnvoyFilter,proto3" json:"includeEnvoyFilter,omitempty"`
	// contains filtered or unexported fields
}

MultiClusterConfig specifies the Configuration for Istio mesh across multiple clusters through the istio gateways.

func (*MultiClusterConfig) Descriptor deprecated 

func (*MultiClusterConfig) Descriptor() ([]byte, []int)

Deprecated: Use MultiClusterConfig.ProtoReflect.Descriptor instead.

func (*MultiClusterConfig) GetClusterName 

func (x *MultiClusterConfig) GetClusterName() string

func (*MultiClusterConfig) GetEnabled 

func (x *MultiClusterConfig) GetEnabled() *wrapperspb.BoolValue

func (*MultiClusterConfig) GetGlobalDomainSuffix 

func (x *MultiClusterConfig) GetGlobalDomainSuffix() string

func (*MultiClusterConfig) GetIncludeEnvoyFilter 

func (x *MultiClusterConfig) GetIncludeEnvoyFilter() *wrapperspb.BoolValue

func (*MultiClusterConfig) ProtoMessage 

func (*MultiClusterConfig) ProtoMessage()

func (*MultiClusterConfig) ProtoReflect 

func (x *MultiClusterConfig) ProtoReflect() protoreflect.Message

func (*MultiClusterConfig) Reset 

func (x *MultiClusterConfig) Reset()

func (*MultiClusterConfig) String 

func (x *MultiClusterConfig) String() string

type OutboundTrafficPolicyConfig 

type OutboundTrafficPolicyConfig struct {
	Mode OutboundTrafficPolicyConfig_Mode `protobuf:"varint,2,opt,name=mode,proto3,enum=istio.operator.v1alpha1.OutboundTrafficPolicyConfig_Mode" json:"mode,omitempty"`
	// contains filtered or unexported fields
}

OutboundTrafficPolicyConfig controls the default behavior of the sidecar for handling outbound traffic from the application.

func (*OutboundTrafficPolicyConfig) Descriptor deprecated 

func (*OutboundTrafficPolicyConfig) Descriptor() ([]byte, []int)

Deprecated: Use OutboundTrafficPolicyConfig.ProtoReflect.Descriptor instead.

func (*OutboundTrafficPolicyConfig) GetMode 

func (x *OutboundTrafficPolicyConfig) GetMode() OutboundTrafficPolicyConfig_Mode

func (*OutboundTrafficPolicyConfig) ProtoMessage 

func (*OutboundTrafficPolicyConfig) ProtoMessage()

func (*OutboundTrafficPolicyConfig) ProtoReflect 

func (x *OutboundTrafficPolicyConfig) ProtoReflect() protoreflect.Message

func (*OutboundTrafficPolicyConfig) Reset 

func (x *OutboundTrafficPolicyConfig) Reset()

func (*OutboundTrafficPolicyConfig) String 

func (x *OutboundTrafficPolicyConfig) String() string

type OutboundTrafficPolicyConfig_Mode 

type OutboundTrafficPolicyConfig_Mode int32

Specifies the sidecar's default behavior when handling outbound traffic from the application. 

const (
	// Outbound traffic to unknown destinations will be allowed, in case there are no services or ServiceEntries for the destination port
	OutboundTrafficPolicyConfig_ALLOW_ANY OutboundTrafficPolicyConfig_Mode = 0
	// Restrict outbound traffic to services defined in the service registry as well as those defined through ServiceEntries
	OutboundTrafficPolicyConfig_REGISTRY_ONLY OutboundTrafficPolicyConfig_Mode = 1
)

func (OutboundTrafficPolicyConfig_Mode) Descriptor 

func (OutboundTrafficPolicyConfig_Mode) Descriptor() protoreflect.EnumDescriptor

func (OutboundTrafficPolicyConfig_Mode) Enum 

func (x OutboundTrafficPolicyConfig_Mode) Enum() *OutboundTrafficPolicyConfig_Mode

func (OutboundTrafficPolicyConfig_Mode) EnumDescriptor deprecated 

func (OutboundTrafficPolicyConfig_Mode) EnumDescriptor() ([]byte, []int)

Deprecated: Use OutboundTrafficPolicyConfig_Mode.Descriptor instead.

func (OutboundTrafficPolicyConfig_Mode) Number 

func (x OutboundTrafficPolicyConfig_Mode) Number() protoreflect.EnumNumber

func (OutboundTrafficPolicyConfig_Mode) String 

func (x OutboundTrafficPolicyConfig_Mode) String() string

func (OutboundTrafficPolicyConfig_Mode) Type 

func (OutboundTrafficPolicyConfig_Mode) Type() protoreflect.EnumType

type Patch 

type Patch struct {
	// Path of the form a.[key1:value1].b.[:value2]
	// Where [key1:value1] is a selector for a key-value pair to identify a list element and [:value] is a value
	// selector to identify a list element in a leaf list.
	// All path intermediate nodes must exist.
	Path string `json:"path,omitempty"`
	// Value to add, delete or replace.
	// For add, the path should be a new leaf.
	// For delete, value should be unset.
	// For replace, path should reference an existing node.
	// All values are strings but are converted into appropriate type based on schema.
	Value any `json:"value,omitempty"`
}

type PilotConfig 

type PilotConfig struct {

	// Controls whether Pilot is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Controls whether a HorizontalPodAutoscaler is installed for Pilot.
	AutoscaleEnabled *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=autoscaleEnabled,proto3" json:"autoscaleEnabled,omitempty"`
	// Minimum number of replicas in the HorizontalPodAutoscaler for Pilot.
	AutoscaleMin uint32 `protobuf:"varint,3,opt,name=autoscaleMin,proto3" json:"autoscaleMin,omitempty"`
	// Maximum number of replicas in the HorizontalPodAutoscaler for Pilot.
	AutoscaleMax uint32 `protobuf:"varint,4,opt,name=autoscaleMax,proto3" json:"autoscaleMax,omitempty"`
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/#configurable-scaling-behavior
	AutoscaleBehavior *structpb.Struct `protobuf:"bytes,40,opt,name=autoscaleBehavior,proto3" json:"autoscaleBehavior,omitempty"`
	// Number of replicas in the Pilot Deployment.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	ReplicaCount uint32 `protobuf:"varint,5,opt,name=replicaCount,proto3" json:"replicaCount,omitempty"`
	// Image name used for Pilot.
	//
	// This can be set either to image name if hub is also set, or can be set to the full hub:name string.
	//
	// Examples: custom-pilot, docker.io/someuser:custom-pilot
	Image string `protobuf:"bytes,6,opt,name=image,proto3" json:"image,omitempty"`
	// Trace sampling fraction.
	//
	// Used to set the fraction of time that traces are sampled. Higher values are more accurate but add CPU overhead.
	//
	// Allowed values: 0.0 to 1.0
	TraceSampling float64 `protobuf:"fixed64,8,opt,name=traceSampling,proto3" json:"traceSampling,omitempty"`
	// K8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Resources *Resources `protobuf:"bytes,9,opt,name=resources,proto3" json:"resources,omitempty"`
	// Target CPU utilization used in HorizontalPodAutoscaler.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Cpu *TargetUtilizationConfig `protobuf:"bytes,11,opt,name=cpu,proto3" json:"cpu,omitempty"`
	// K8s node selector.
	//
	// See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	NodeSelector *structpb.Struct `protobuf:"bytes,12,opt,name=nodeSelector,proto3" json:"nodeSelector,omitempty"`
	// Maximum duration that a sidecar can be connected to a pilot.
	//
	// This setting balances out load across pilot instances, but adds some resource overhead.
	//
	// Examples: 300s, 30m, 1h
	KeepaliveMaxServerConnectionAge *durationpb.Duration `protobuf:"bytes,13,opt,name=keepaliveMaxServerConnectionAge,proto3" json:"keepaliveMaxServerConnectionAge,omitempty"`
	// Labels that are added to Pilot deployment.
	//
	// See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
	DeploymentLabels *structpb.Struct `protobuf:"bytes,14,opt,name=deploymentLabels,proto3" json:"deploymentLabels,omitempty"`
	// Labels that are added to Pilot pods.
	//
	// See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
	PodLabels *structpb.Struct `protobuf:"bytes,36,opt,name=podLabels,proto3" json:"podLabels,omitempty"`
	// Configuration settings passed to Pilot as a ConfigMap.
	//
	// This controls whether the mesh config map, generated from values.yaml is generated.
	// If false, pilot wil use default values or user-supplied values, in that order of preference.
	ConfigMap *wrapperspb.BoolValue `protobuf:"bytes,18,opt,name=configMap,proto3" json:"configMap,omitempty"`
	// Environment variables passed to the Pilot container.
	//
	// Examples:
	// env:
	//
	//	ENV_VAR_1: value1
	//	ENV_VAR_2: value2
	Env *structpb.Struct `protobuf:"bytes,21,opt,name=env,proto3" json:"env,omitempty"`
	// K8s affinity to set on the Pilot Pods.
	Affinity *v1.Affinity `protobuf:"bytes,22,opt,name=affinity,proto3" json:"affinity,omitempty"`
	// K8s rolling update strategy
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxSurge *IntOrString `protobuf:"bytes,24,opt,name=rollingMaxSurge,proto3" json:"rollingMaxSurge,omitempty"`
	// The number of pods that can be unavailable during a rolling update (see
	// `strategy.rollingUpdate.maxUnavailable` here:
	// https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/deployment-v1/#DeploymentSpec).
	// May be specified as a number of pods or as a percent of the total number
	// of pods at the start of the update.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxUnavailable *IntOrString `protobuf:"bytes,25,opt,name=rollingMaxUnavailable,proto3" json:"rollingMaxUnavailable,omitempty"`
	// The node tolerations to be applied to the Pilot deployment so that it can be
	// scheduled to particular nodes with matching taints.
	// More info: https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Tolerations []*v1.Toleration `protobuf:"bytes,26,rep,name=tolerations,proto3" json:"tolerations,omitempty"`
	// K8s annotations for pods.
	//
	// See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAnnotations *structpb.Struct `protobuf:"bytes,30,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"`
	// K8s annotations for the Service.
	//
	// See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
	ServiceAnnotations *structpb.Struct `protobuf:"bytes,37,opt,name=serviceAnnotations,proto3" json:"serviceAnnotations,omitempty"`
	// K8s annotations for the service account
	ServiceAccountAnnotations *structpb.Struct `protobuf:"bytes,56,opt,name=serviceAccountAnnotations,proto3" json:"serviceAccountAnnotations,omitempty"`
	// Specifies an extra root certificate in PEM format. This certificate will be trusted
	// by pilot when resolving JWKS URIs.
	JwksResolverExtraRootCA string `protobuf:"bytes,32,opt,name=jwksResolverExtraRootCA,proto3" json:"jwksResolverExtraRootCA,omitempty"`
	// Hub to pull the container image from. Image will be `Hub/Image:Tag-Variant`.
	Hub string `protobuf:"bytes,34,opt,name=hub,proto3" json:"hub,omitempty"`
	// The container image tag to pull. Image will be `Hub/Image:Tag-Variant`.
	Tag *structpb.Value `protobuf:"bytes,35,opt,name=tag,proto3" json:"tag,omitempty"`
	// The container image variant to pull. Options are "debug" or "distroless". Unset will use the default for the given version.
	Variant string `protobuf:"bytes,39,opt,name=variant,proto3" json:"variant,omitempty"`
	// The seccompProfile for the Pilot container.
	//
	// See: https://kubernetes.io/docs/tutorials/security/seccomp/
	SeccompProfile *v1.SeccompProfile `protobuf:"bytes,38,opt,name=seccompProfile,proto3" json:"seccompProfile,omitempty"`
	// The k8s topologySpreadConstraints for the Pilot pods.
	TopologySpreadConstraints []*v1.TopologySpreadConstraint `protobuf:"bytes,41,rep,name=topologySpreadConstraints,proto3" json:"topologySpreadConstraints,omitempty"`
	// Additional container arguments for the Pilot container.
	ExtraContainerArgs []*structpb.Struct `protobuf:"bytes,42,rep,name=extraContainerArgs,proto3" json:"extraContainerArgs,omitempty"`
	// Additional volumeMounts to add to the Pilot container.
	VolumeMounts []*v1.VolumeMount `protobuf:"bytes,49,rep,name=volumeMounts,proto3" json:"volumeMounts,omitempty"`
	// Additional volumes to add to the Pilot Pod.
	Volumes []*v1.Volume `protobuf:"bytes,51,rep,name=volumes,proto3" json:"volumes,omitempty"`
	// Defines which IP family to use for single stack or the order of IP families for dual-stack.
	// Valid list items are "IPv4", "IPv6".
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilies []string `protobuf:"bytes,52,rep,name=ipFamilies,proto3" json:"ipFamilies,omitempty"`
	// Controls whether Services are configured to use IPv4, IPv6, or both. Valid options
	// are PreferDualStack, RequireDualStack, and SingleStack.
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilyPolicy string `protobuf:"bytes,53,opt,name=ipFamilyPolicy,proto3" json:"ipFamilyPolicy,omitempty"`
	// Target memory utilization used in HorizontalPodAutoscaler.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Memory *TargetUtilizationConfig `protobuf:"bytes,54,opt,name=memory,proto3" json:"memory,omitempty"`
	// Configures whether to use an existing CNI installation for workloads
	Cni   *CNIUsageConfig             `protobuf:"bytes,55,opt,name=cni,proto3" json:"cni,omitempty"`
	Taint *PilotTaintControllerConfig `protobuf:"bytes,57,opt,name=taint,proto3" json:"taint,omitempty"`
	// If set, `istiod` will allow connections from trusted node proxy ztunnels
	// in the provided namespace.
	TrustedZtunnelNamespace string `protobuf:"bytes,59,opt,name=trustedZtunnelNamespace,proto3" json:"trustedZtunnelNamespace,omitempty"`
	// Configuration for the istio-discovery chart when istiod is running in a remote cluster (e.g. "remote control plane").
	IstiodRemote *IstiodRemoteConfig `protobuf:"bytes,61,opt,name=istiodRemote,proto3" json:"istiodRemote,omitempty"`
	// contains filtered or unexported fields
}

Configuration for Pilot.

func (*PilotConfig) Descriptor deprecated 

func (*PilotConfig) Descriptor() ([]byte, []int)

Deprecated: Use PilotConfig.ProtoReflect.Descriptor instead.

func (*PilotConfig) GetAffinity 

func (x *PilotConfig) GetAffinity() *v1.Affinity

func (*PilotConfig) GetAutoscaleBehavior 

func (x *PilotConfig) GetAutoscaleBehavior() *structpb.Struct

func (*PilotConfig) GetAutoscaleEnabled 

func (x *PilotConfig) GetAutoscaleEnabled() *wrapperspb.BoolValue

func (*PilotConfig) GetAutoscaleMax 

func (x *PilotConfig) GetAutoscaleMax() uint32

func (*PilotConfig) GetAutoscaleMin 

func (x *PilotConfig) GetAutoscaleMin() uint32

func (*PilotConfig) GetCni 

func (x *PilotConfig) GetCni() *CNIUsageConfig

func (*PilotConfig) GetConfigMap 

func (x *PilotConfig) GetConfigMap() *wrapperspb.BoolValue

func (*PilotConfig) GetCpu deprecated 

func (x *PilotConfig) GetCpu() *TargetUtilizationConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetDeploymentLabels 

func (x *PilotConfig) GetDeploymentLabels() *structpb.Struct

func (*PilotConfig) GetEnabled 

func (x *PilotConfig) GetEnabled() *wrapperspb.BoolValue

func (*PilotConfig) GetEnv 

func (x *PilotConfig) GetEnv() *structpb.Struct

func (*PilotConfig) GetExtraContainerArgs 

func (x *PilotConfig) GetExtraContainerArgs() []*structpb.Struct

func (*PilotConfig) GetHub 

func (x *PilotConfig) GetHub() string

func (*PilotConfig) GetImage 

func (x *PilotConfig) GetImage() string

func (*PilotConfig) GetIpFamilies 

func (x *PilotConfig) GetIpFamilies() []string

func (*PilotConfig) GetIpFamilyPolicy 

func (x *PilotConfig) GetIpFamilyPolicy() string

func (*PilotConfig) GetIstiodRemote 

func (x *PilotConfig) GetIstiodRemote() *IstiodRemoteConfig

func (*PilotConfig) GetJwksResolverExtraRootCA 

func (x *PilotConfig) GetJwksResolverExtraRootCA() string

func (*PilotConfig) GetKeepaliveMaxServerConnectionAge 

func (x *PilotConfig) GetKeepaliveMaxServerConnectionAge() *durationpb.Duration

func (*PilotConfig) GetMemory deprecated 

func (x *PilotConfig) GetMemory() *TargetUtilizationConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetNodeSelector deprecated 

func (x *PilotConfig) GetNodeSelector() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetPodAnnotations deprecated 

func (x *PilotConfig) GetPodAnnotations() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetPodLabels 

func (x *PilotConfig) GetPodLabels() *structpb.Struct

func (*PilotConfig) GetReplicaCount deprecated 

func (x *PilotConfig) GetReplicaCount() uint32

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetResources deprecated 

func (x *PilotConfig) GetResources() *Resources

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetRollingMaxSurge deprecated 

func (x *PilotConfig) GetRollingMaxSurge() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetRollingMaxUnavailable deprecated 

func (x *PilotConfig) GetRollingMaxUnavailable() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetSeccompProfile 

func (x *PilotConfig) GetSeccompProfile() *v1.SeccompProfile

func (*PilotConfig) GetServiceAccountAnnotations 

func (x *PilotConfig) GetServiceAccountAnnotations() *structpb.Struct

func (*PilotConfig) GetServiceAnnotations 

func (x *PilotConfig) GetServiceAnnotations() *structpb.Struct

func (*PilotConfig) GetTag 

func (x *PilotConfig) GetTag() *structpb.Value

func (*PilotConfig) GetTaint 

func (x *PilotConfig) GetTaint() *PilotTaintControllerConfig

func (*PilotConfig) GetTolerations deprecated 

func (x *PilotConfig) GetTolerations() []*v1.Toleration

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetTopologySpreadConstraints 

func (x *PilotConfig) GetTopologySpreadConstraints() []*v1.TopologySpreadConstraint

func (*PilotConfig) GetTraceSampling 

func (x *PilotConfig) GetTraceSampling() float64

func (*PilotConfig) GetTrustedZtunnelNamespace 

func (x *PilotConfig) GetTrustedZtunnelNamespace() string

func (*PilotConfig) GetVariant 

func (x *PilotConfig) GetVariant() string

func (*PilotConfig) GetVolumeMounts 

func (x *PilotConfig) GetVolumeMounts() []*v1.VolumeMount

func (*PilotConfig) GetVolumes 

func (x *PilotConfig) GetVolumes() []*v1.Volume

func (*PilotConfig) ProtoMessage 

func (*PilotConfig) ProtoMessage()

func (*PilotConfig) ProtoReflect 

func (x *PilotConfig) ProtoReflect() protoreflect.Message

func (*PilotConfig) Reset 

func (x *PilotConfig) Reset()

func (*PilotConfig) String 

func (x *PilotConfig) String() string

type PilotIngressConfig 

type PilotIngressConfig struct {

	// Sets the type ingress service for Pilot.
	//
	// If empty, node-port is assumed.
	//
	// Allowed values: node-port, istio-ingressgateway, ingress
	IngressService        string                `protobuf:"bytes,1,opt,name=ingressService,proto3" json:"ingressService,omitempty"`
	IngressControllerMode IngressControllerMode `` /* 147-byte string literal not displayed */
	// If mode is STRICT, this value must be set on "kubernetes.io/ingress.class" annotation to activate.
	IngressClass string `protobuf:"bytes,3,opt,name=ingressClass,proto3" json:"ingressClass,omitempty"`
	// contains filtered or unexported fields
}

Controls legacy k8s ingress. Only one pilot profile should enable ingress support.

func (*PilotIngressConfig) Descriptor deprecated 

func (*PilotIngressConfig) Descriptor() ([]byte, []int)

Deprecated: Use PilotIngressConfig.ProtoReflect.Descriptor instead.

func (*PilotIngressConfig) GetIngressClass 

func (x *PilotIngressConfig) GetIngressClass() string

func (*PilotIngressConfig) GetIngressControllerMode 

func (x *PilotIngressConfig) GetIngressControllerMode() IngressControllerMode

func (*PilotIngressConfig) GetIngressService 

func (x *PilotIngressConfig) GetIngressService() string

func (*PilotIngressConfig) ProtoMessage 

func (*PilotIngressConfig) ProtoMessage()

func (*PilotIngressConfig) ProtoReflect 

func (x *PilotIngressConfig) ProtoReflect() protoreflect.Message

func (*PilotIngressConfig) Reset 

func (x *PilotIngressConfig) Reset()

func (*PilotIngressConfig) String 

func (x *PilotIngressConfig) String() string

type PilotPolicyConfig 

type PilotPolicyConfig struct {

	// Controls whether Istio policy is applied to Pilot.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

Controls whether Istio policy is applied to Pilot.

func (*PilotPolicyConfig) Descriptor deprecated 

func (*PilotPolicyConfig) Descriptor() ([]byte, []int)

Deprecated: Use PilotPolicyConfig.ProtoReflect.Descriptor instead.

func (*PilotPolicyConfig) GetEnabled 

func (x *PilotPolicyConfig) GetEnabled() *wrapperspb.BoolValue

func (*PilotPolicyConfig) ProtoMessage 

func (*PilotPolicyConfig) ProtoMessage()

func (*PilotPolicyConfig) ProtoReflect 

func (x *PilotPolicyConfig) ProtoReflect() protoreflect.Message

func (*PilotPolicyConfig) Reset 

func (x *PilotPolicyConfig) Reset()

func (*PilotPolicyConfig) String 

func (x *PilotPolicyConfig) String() string

type PilotTaintControllerConfig 

type PilotTaintControllerConfig struct {

	// Enable the untaint controller for new nodes. This aims to solve a race for CNI installation on
	// new nodes. For this to work, the newly added nodes need to have the istio CNI taint as they are
	// added to the cluster. This is usually done by configuring the cluster infra provider.
	Enabled bool `protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// The namespace of the CNI daemonset, incase it's not the same as istiod.
	Namespace string `protobuf:"bytes,2,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// contains filtered or unexported fields
}

func (*PilotTaintControllerConfig) Descriptor deprecated 

func (*PilotTaintControllerConfig) Descriptor() ([]byte, []int)

Deprecated: Use PilotTaintControllerConfig.ProtoReflect.Descriptor instead.

func (*PilotTaintControllerConfig) GetEnabled 

func (x *PilotTaintControllerConfig) GetEnabled() bool

func (*PilotTaintControllerConfig) GetNamespace 

func (x *PilotTaintControllerConfig) GetNamespace() string

func (*PilotTaintControllerConfig) ProtoMessage 

func (*PilotTaintControllerConfig) ProtoMessage()

func (*PilotTaintControllerConfig) ProtoReflect 

func (x *PilotTaintControllerConfig) ProtoReflect() protoreflect.Message

func (*PilotTaintControllerConfig) Reset 

func (x *PilotTaintControllerConfig) Reset()

func (*PilotTaintControllerConfig) String 

func (x *PilotTaintControllerConfig) String() string

type PortsConfig 

type PortsConfig struct {

	// Port name.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Port number.
	Port int32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
	// NodePort number.
	NodePort int32 `protobuf:"varint,3,opt,name=nodePort,proto3" json:"nodePort,omitempty"`
	// Target port number.
	TargetPort int32 `protobuf:"varint,4,opt,name=targetPort,proto3" json:"targetPort,omitempty"`
	// Protocol name.
	Protocol string `protobuf:"bytes,5,opt,name=protocol,proto3" json:"protocol,omitempty"`
	// contains filtered or unexported fields
}

Configuration for a port.

func (*PortsConfig) Descriptor deprecated 

func (*PortsConfig) Descriptor() ([]byte, []int)

Deprecated: Use PortsConfig.ProtoReflect.Descriptor instead.

func (*PortsConfig) GetName 

func (x *PortsConfig) GetName() string

func (*PortsConfig) GetNodePort 

func (x *PortsConfig) GetNodePort() int32

func (*PortsConfig) GetPort 

func (x *PortsConfig) GetPort() int32

func (*PortsConfig) GetProtocol 

func (x *PortsConfig) GetProtocol() string

func (*PortsConfig) GetTargetPort 

func (x *PortsConfig) GetTargetPort() int32

func (*PortsConfig) ProtoMessage 

func (*PortsConfig) ProtoMessage()

func (*PortsConfig) ProtoReflect 

func (x *PortsConfig) ProtoReflect() protoreflect.Message

func (*PortsConfig) Reset 

func (x *PortsConfig) Reset()

func (*PortsConfig) String 

func (x *PortsConfig) String() string

type ProxyConfig 

type ProxyConfig struct {

	// Controls the 'policy' in the sidecar injector.
	AutoInject string `protobuf:"bytes,4,opt,name=autoInject,proto3" json:"autoInject,omitempty"`
	// Domain for the cluster, default: "cluster.local".
	//
	// K8s allows this to be customized, see https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/
	ClusterDomain string `protobuf:"bytes,5,opt,name=clusterDomain,proto3" json:"clusterDomain,omitempty"`
	// Per Component log level for proxy, applies to gateways and sidecars.
	//
	// If a component level is not set, then the global "logLevel" will be used. If left empty, "misc:error" is used.
	ComponentLogLevel string `protobuf:"bytes,6,opt,name=componentLogLevel,proto3" json:"componentLogLevel,omitempty"`
	// Enables core dumps for newly injected sidecars.
	//
	// If set, newly injected sidecars will have core dumps enabled.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	EnableCoreDump *wrapperspb.BoolValue `protobuf:"bytes,9,opt,name=enableCoreDump,proto3" json:"enableCoreDump,omitempty"`
	// Specifies the Istio ingress ports not to capture.
	ExcludeInboundPorts string `protobuf:"bytes,12,opt,name=excludeInboundPorts,proto3" json:"excludeInboundPorts,omitempty"`
	// Lists the excluded IP ranges of Istio egress traffic that the sidecar captures.
	ExcludeIPRanges string `protobuf:"bytes,13,opt,name=excludeIPRanges,proto3" json:"excludeIPRanges,omitempty"`
	// Image name or path for the proxy, default: "proxyv2".
	//
	// If registry or tag are not specified, global.hub and global.tag are used.
	//
	// Examples: my-proxy (uses global.hub/tag), docker.io/myrepo/my-proxy:v1.0.0
	Image string `protobuf:"bytes,14,opt,name=image,proto3" json:"image,omitempty"`
	// Lists the IP ranges of Istio egress traffic that the sidecar captures.
	//
	// Example: "172.30.0.0/16,172.20.0.0/16"
	// This would only capture egress traffic on those two IP Ranges, all other outbound traffic would # be allowed by the sidecar."
	IncludeIPRanges string `protobuf:"bytes,16,opt,name=includeIPRanges,proto3" json:"includeIPRanges,omitempty"`
	// Log level for proxy, applies to gateways and sidecars. If left empty, "warning" is used. Expected values are: trace\|debug\|info\|warning\|error\|critical\|off
	LogLevel string `protobuf:"bytes,18,opt,name=logLevel,proto3" json:"logLevel,omitempty"`
	// Path to the file to which the proxy will write outlier detection logs.
	//
	// Example: "/dev/stdout"
	// This would write the logs to standard output.
	OutlierLogPath string `protobuf:"bytes,42,opt,name=outlierLogPath,proto3" json:"outlierLogPath,omitempty"`
	// Enables privileged securityContext for the istio-proxy container.
	//
	// See https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	Privileged *wrapperspb.BoolValue `protobuf:"bytes,19,opt,name=privileged,proto3" json:"privileged,omitempty"`
	// Sets the initial delay for readiness probes in seconds.
	ReadinessInitialDelaySeconds uint32 `protobuf:"varint,20,opt,name=readinessInitialDelaySeconds,proto3" json:"readinessInitialDelaySeconds,omitempty"`
	// Sets the interval between readiness probes in seconds.
	ReadinessPeriodSeconds uint32 `protobuf:"varint,21,opt,name=readinessPeriodSeconds,proto3" json:"readinessPeriodSeconds,omitempty"`
	// Sets the number of successive failed probes before indicating readiness failure.
	ReadinessFailureThreshold uint32 `protobuf:"varint,22,opt,name=readinessFailureThreshold,proto3" json:"readinessFailureThreshold,omitempty"`
	// Configures the startup probe for the istio-proxy container.
	StartupProbe *StartupProbe `protobuf:"bytes,41,opt,name=startupProbe,proto3" json:"startupProbe,omitempty"`
	// Default port used for the Pilot agent's health checks.
	StatusPort uint32 `protobuf:"varint,23,opt,name=statusPort,proto3" json:"statusPort,omitempty"`
	// K8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Resources *Resources `protobuf:"bytes,24,opt,name=resources,proto3" json:"resources,omitempty"`
	// Specify which tracer to use. One of: zipkin, lightstep, datadog, stackdriver.
	// If using stackdriver tracer outside GCP, set env GOOGLE_APPLICATION_CREDENTIALS to the GCP credential file.
	Tracer Tracer `protobuf:"varint,25,opt,name=tracer,proto3,enum=istio.operator.v1alpha1.Tracer" json:"tracer,omitempty"`
	// A comma separated list of outbound ports to be excluded from redirection to Envoy.
	ExcludeOutboundPorts string `protobuf:"bytes,28,opt,name=excludeOutboundPorts,proto3" json:"excludeOutboundPorts,omitempty"`
	// The k8s lifecycle hooks definition (pod.spec.containers.lifecycle) for the proxy container.
	// More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
	Lifecycle *v1.Lifecycle `protobuf:"bytes,36,opt,name=lifecycle,proto3" json:"lifecycle,omitempty"`
	// Controls if sidecar is injected at the front of the container list and blocks the start of the other containers until the proxy is ready
	//
	// Deprecated: replaced by ProxyConfig setting which allows per-pod configuration of this behavior.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	HoldApplicationUntilProxyStarts *wrapperspb.BoolValue `protobuf:"bytes,37,opt,name=holdApplicationUntilProxyStarts,proto3" json:"holdApplicationUntilProxyStarts,omitempty"`
	// A comma separated list of inbound ports for which traffic is to be redirected to Envoy.
	// The wildcard character '*' can be used to configure redirection for all ports.
	IncludeInboundPorts string `protobuf:"bytes,38,opt,name=includeInboundPorts,proto3" json:"includeInboundPorts,omitempty"`
	// A comma separated list of outbound ports for which traffic is to be redirected to Envoy, regardless of the destination IP.
	IncludeOutboundPorts string `protobuf:"bytes,39,opt,name=includeOutboundPorts,proto3" json:"includeOutboundPorts,omitempty"`
	// contains filtered or unexported fields
}

Configuration for Proxy.

func (*ProxyConfig) Descriptor deprecated 

func (*ProxyConfig) Descriptor() ([]byte, []int)

Deprecated: Use ProxyConfig.ProtoReflect.Descriptor instead.

func (*ProxyConfig) GetAutoInject 

func (x *ProxyConfig) GetAutoInject() string

func (*ProxyConfig) GetClusterDomain 

func (x *ProxyConfig) GetClusterDomain() string

func (*ProxyConfig) GetComponentLogLevel 

func (x *ProxyConfig) GetComponentLogLevel() string

func (*ProxyConfig) GetEnableCoreDump deprecated 

func (x *ProxyConfig) GetEnableCoreDump() *wrapperspb.BoolValue

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*ProxyConfig) GetExcludeIPRanges 

func (x *ProxyConfig) GetExcludeIPRanges() string

func (*ProxyConfig) GetExcludeInboundPorts 

func (x *ProxyConfig) GetExcludeInboundPorts() string

func (*ProxyConfig) GetExcludeOutboundPorts 

func (x *ProxyConfig) GetExcludeOutboundPorts() string

func (*ProxyConfig) GetHoldApplicationUntilProxyStarts deprecated 

func (x *ProxyConfig) GetHoldApplicationUntilProxyStarts() *wrapperspb.BoolValue

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*ProxyConfig) GetImage 

func (x *ProxyConfig) GetImage() string

func (*ProxyConfig) GetIncludeIPRanges 

func (x *ProxyConfig) GetIncludeIPRanges() string

func (*ProxyConfig) GetIncludeInboundPorts 

func (x *ProxyConfig) GetIncludeInboundPorts() string

func (*ProxyConfig) GetIncludeOutboundPorts 

func (x *ProxyConfig) GetIncludeOutboundPorts() string

func (*ProxyConfig) GetLifecycle 

func (x *ProxyConfig) GetLifecycle() *v1.Lifecycle

func (*ProxyConfig) GetLogLevel 

func (x *ProxyConfig) GetLogLevel() string

func (*ProxyConfig) GetOutlierLogPath 

func (x *ProxyConfig) GetOutlierLogPath() string

func (*ProxyConfig) GetPrivileged 

func (x *ProxyConfig) GetPrivileged() *wrapperspb.BoolValue

func (*ProxyConfig) GetReadinessFailureThreshold 

func (x *ProxyConfig) GetReadinessFailureThreshold() uint32

func (*ProxyConfig) GetReadinessInitialDelaySeconds 

func (x *ProxyConfig) GetReadinessInitialDelaySeconds() uint32

func (*ProxyConfig) GetReadinessPeriodSeconds 

func (x *ProxyConfig) GetReadinessPeriodSeconds() uint32

func (*ProxyConfig) GetResources deprecated 

func (x *ProxyConfig) GetResources() *Resources

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*ProxyConfig) GetStartupProbe 

func (x *ProxyConfig) GetStartupProbe() *StartupProbe

func (*ProxyConfig) GetStatusPort 

func (x *ProxyConfig) GetStatusPort() uint32

func (*ProxyConfig) GetTracer 

func (x *ProxyConfig) GetTracer() Tracer

func (*ProxyConfig) ProtoMessage 

func (*ProxyConfig) ProtoMessage()

func (*ProxyConfig) ProtoReflect 

func (x *ProxyConfig) ProtoReflect() protoreflect.Message

func (*ProxyConfig) Reset 

func (x *ProxyConfig) Reset()

func (*ProxyConfig) String 

func (x *ProxyConfig) String() string

type ProxyInitConfig 

type ProxyInitConfig struct {

	// Specifies the image for the proxy_init container.
	Image string `protobuf:"bytes,1,opt,name=image,proto3" json:"image,omitempty"`
	// K8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Resources *Resources `protobuf:"bytes,5,opt,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

Configuration for proxy_init container which sets the pods' networking to intercept the inbound/outbound traffic.

func (*ProxyInitConfig) Descriptor deprecated 

func (*ProxyInitConfig) Descriptor() ([]byte, []int)

Deprecated: Use ProxyInitConfig.ProtoReflect.Descriptor instead.

func (*ProxyInitConfig) GetImage 

func (x *ProxyInitConfig) GetImage() string

func (*ProxyInitConfig) GetResources deprecated 

func (x *ProxyInitConfig) GetResources() *Resources

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*ProxyInitConfig) ProtoMessage 

func (*ProxyInitConfig) ProtoMessage()

func (*ProxyInitConfig) ProtoReflect 

func (x *ProxyInitConfig) ProtoReflect() protoreflect.Message

func (*ProxyInitConfig) Reset 

func (x *ProxyInitConfig) Reset()

func (*ProxyInitConfig) String 

func (x *ProxyInitConfig) String() string

type ResourceQuotas 

type ResourceQuotas struct {

	// Controls whether to create resource quotas or not for the CNI DaemonSet.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// The hard limit on the number of pods in the namespace where the CNI DaemonSet is deployed.
	Pods int64 `protobuf:"varint,2,opt,name=pods,proto3" json:"pods,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the resource quotas for the CNI DaemonSet.

func (*ResourceQuotas) Descriptor deprecated 

func (*ResourceQuotas) Descriptor() ([]byte, []int)

Deprecated: Use ResourceQuotas.ProtoReflect.Descriptor instead.

func (*ResourceQuotas) GetEnabled 

func (x *ResourceQuotas) GetEnabled() *wrapperspb.BoolValue

func (*ResourceQuotas) GetPods 

func (x *ResourceQuotas) GetPods() int64

func (*ResourceQuotas) ProtoMessage 

func (*ResourceQuotas) ProtoMessage()

func (*ResourceQuotas) ProtoReflect 

func (x *ResourceQuotas) ProtoReflect() protoreflect.Message

func (*ResourceQuotas) Reset 

func (x *ResourceQuotas) Reset()

func (*ResourceQuotas) String 

func (x *ResourceQuotas) String() string

type Resources 

type Resources struct {

	// The maximum amount of compute resources allowed.
	// More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
	Limits map[string]string `` /* 153-byte string literal not displayed */
	// The minimum amount of compute resources required. If Requests is omitted for a container,
	// it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value.
	// More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
	Requests map[string]string `` /* 157-byte string literal not displayed */
	// contains filtered or unexported fields
}

Compute resources required by a container.

func (*Resources) Descriptor deprecated 

func (*Resources) Descriptor() ([]byte, []int)

Deprecated: Use Resources.ProtoReflect.Descriptor instead.

func (*Resources) GetLimits 

func (x *Resources) GetLimits() map[string]string

func (*Resources) GetRequests 

func (x *Resources) GetRequests() map[string]string

func (*Resources) ProtoMessage 

func (*Resources) ProtoMessage()

func (*Resources) ProtoReflect 

func (x *Resources) ProtoReflect() protoreflect.Message

func (*Resources) Reset 

func (x *Resources) Reset()

func (*Resources) String 

func (x *Resources) String() string

type ResourcesRequestsConfig 

type ResourcesRequestsConfig struct {

	// CPU requests.
	Cpu string `protobuf:"bytes,1,opt,name=cpu,proto3" json:"cpu,omitempty"`
	// Memory requests.
	Memory string `protobuf:"bytes,2,opt,name=memory,proto3" json:"memory,omitempty"`
	// contains filtered or unexported fields
}

Configuration for K8s resource requests.

func (*ResourcesRequestsConfig) Descriptor deprecated 

func (*ResourcesRequestsConfig) Descriptor() ([]byte, []int)

Deprecated: Use ResourcesRequestsConfig.ProtoReflect.Descriptor instead.

func (*ResourcesRequestsConfig) GetCpu 

func (x *ResourcesRequestsConfig) GetCpu() string

func (*ResourcesRequestsConfig) GetMemory 

func (x *ResourcesRequestsConfig) GetMemory() string

func (*ResourcesRequestsConfig) ProtoMessage 

func (*ResourcesRequestsConfig) ProtoMessage()

func (*ResourcesRequestsConfig) ProtoReflect 

func (x *ResourcesRequestsConfig) ProtoReflect() protoreflect.Message

func (*ResourcesRequestsConfig) Reset 

func (x *ResourcesRequestsConfig) Reset()

func (*ResourcesRequestsConfig) String 

func (x *ResourcesRequestsConfig) String() string

type SDSConfig 

type SDSConfig struct {

	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Token *structpb.Struct `protobuf:"bytes,5,opt,name=token,proto3" json:"token,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the SecretDiscoveryService instead of using K8S secrets to mount the certificates.

func (*SDSConfig) Descriptor deprecated 

func (*SDSConfig) Descriptor() ([]byte, []int)

Deprecated: Use SDSConfig.ProtoReflect.Descriptor instead.

func (*SDSConfig) GetToken deprecated 

func (x *SDSConfig) GetToken() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*SDSConfig) ProtoMessage 

func (*SDSConfig) ProtoMessage()

func (*SDSConfig) ProtoReflect 

func (x *SDSConfig) ProtoReflect() protoreflect.Message

func (*SDSConfig) Reset 

func (x *SDSConfig) Reset()

func (*SDSConfig) String 

func (x *SDSConfig) String() string

type STSConfig 

type STSConfig struct {
	ServicePort uint32 `protobuf:"varint,1,opt,name=servicePort,proto3" json:"servicePort,omitempty"`
	// contains filtered or unexported fields
}

Configuration for Security Token Service (STS) server.

See https://tools.ietf.org/html/draft-ietf-oauth-token-exchange-16

func (*STSConfig) Descriptor deprecated 

func (*STSConfig) Descriptor() ([]byte, []int)

Deprecated: Use STSConfig.ProtoReflect.Descriptor instead.

func (*STSConfig) GetServicePort 

func (x *STSConfig) GetServicePort() uint32

func (*STSConfig) ProtoMessage 

func (*STSConfig) ProtoMessage()

func (*STSConfig) ProtoReflect 

func (x *STSConfig) ProtoReflect() protoreflect.Message

func (*STSConfig) Reset 

func (x *STSConfig) Reset()

func (*STSConfig) String 

func (x *STSConfig) String() string

type SecretVolume 

type SecretVolume struct {
	MountPath  string `protobuf:"bytes,1,opt,name=mountPath,proto3" json:"mountPath,omitempty"`
	Name       string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	SecretName string `protobuf:"bytes,3,opt,name=secretName,proto3" json:"secretName,omitempty"`
	// contains filtered or unexported fields
}

Configuration for secret volume mounts.

See https://kubernetes.io/docs/concepts/configuration/secret/#using-secrets.

func (*SecretVolume) Descriptor deprecated 

func (*SecretVolume) Descriptor() ([]byte, []int)

Deprecated: Use SecretVolume.ProtoReflect.Descriptor instead.

func (*SecretVolume) GetMountPath 

func (x *SecretVolume) GetMountPath() string

func (*SecretVolume) GetName 

func (x *SecretVolume) GetName() string

func (*SecretVolume) GetSecretName 

func (x *SecretVolume) GetSecretName() string

func (*SecretVolume) ProtoMessage 

func (*SecretVolume) ProtoMessage()

func (*SecretVolume) ProtoReflect 

func (x *SecretVolume) ProtoReflect() protoreflect.Message

func (*SecretVolume) Reset 

func (x *SecretVolume) Reset()

func (*SecretVolume) String 

func (x *SecretVolume) String() string

type ServiceAccount 

type ServiceAccount struct {
	Annotations *structpb.Struct `protobuf:"bytes,1,opt,name=annotations,proto3" json:"annotations,omitempty"`
	// contains filtered or unexported fields
}

Mirrors ServiceAccount for unmarshaling.

func (*ServiceAccount) Descriptor deprecated 

func (*ServiceAccount) Descriptor() ([]byte, []int)

Deprecated: Use ServiceAccount.ProtoReflect.Descriptor instead.

func (*ServiceAccount) GetAnnotations 

func (x *ServiceAccount) GetAnnotations() *structpb.Struct

func (*ServiceAccount) ProtoMessage 

func (*ServiceAccount) ProtoMessage()

func (*ServiceAccount) ProtoReflect 

func (x *ServiceAccount) ProtoReflect() protoreflect.Message

func (*ServiceAccount) Reset 

func (x *ServiceAccount) Reset()

func (*ServiceAccount) String 

func (x *ServiceAccount) String() string

type SidecarInjectorConfig 

type SidecarInjectorConfig struct {

	// Enables sidecar auto-injection in namespaces by default.
	EnableNamespacesByDefault *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=enableNamespacesByDefault,proto3" json:"enableNamespacesByDefault,omitempty"`
	// Setting this to `IfNeeded` will result in the sidecar injector being run again if additional mutations occur. Default: Never
	ReinvocationPolicy string `protobuf:"bytes,3,opt,name=reinvocationPolicy,proto3" json:"reinvocationPolicy,omitempty"`
	// Instructs Istio to not inject the sidecar on those pods, based on labels that are present in those pods.
	//
	// Annotations in the pods have higher precedence than the label selectors.
	// Order of evaluation: Pod Annotations → NeverInjectSelector → AlwaysInjectSelector → Default Policy.
	// See https://istio.io/docs/setup/kubernetes/additional-setup/sidecar-injection/#more-control-adding-exceptions
	NeverInjectSelector []*v11.LabelSelector `protobuf:"bytes,11,rep,name=neverInjectSelector,proto3" json:"neverInjectSelector,omitempty"`
	// See NeverInjectSelector.
	AlwaysInjectSelector []*v11.LabelSelector `protobuf:"bytes,12,rep,name=alwaysInjectSelector,proto3" json:"alwaysInjectSelector,omitempty"`
	// If true, webhook or istioctl injector will rewrite PodSpec for liveness health check to redirect request to sidecar. This makes liveness check work even when mTLS is enabled.
	RewriteAppHTTPProbe *wrapperspb.BoolValue `protobuf:"bytes,16,opt,name=rewriteAppHTTPProbe,proto3" json:"rewriteAppHTTPProbe,omitempty"`
	// injectedAnnotations are additional annotations that will be added to the pod spec after injection
	// This is primarily to support PSP annotations.
	InjectedAnnotations *structpb.Struct `protobuf:"bytes,19,opt,name=injectedAnnotations,proto3" json:"injectedAnnotations,omitempty"`
	// Configure the injection url for sidecar injector webhook
	InjectionURL string `protobuf:"bytes,22,opt,name=injectionURL,proto3" json:"injectionURL,omitempty"`
	// Templates defines a set of custom injection templates that can be used. For example, defining:
	//
	// templates:
	//
	//	hello: |
	//	  metadata:
	//	    labels:
	//	      hello: world
	//
	// Then starting a pod with the `inject.istio.io/templates: hello` annotation, will result in the pod
	// being injected with the hello=world labels.
	// This is intended for advanced configuration only; most users should use the built in template
	Templates *structpb.Struct `protobuf:"bytes,23,opt,name=templates,proto3" json:"templates,omitempty"`
	// defaultTemplates: ["sidecar", "hello"]
	DefaultTemplates []string `protobuf:"bytes,24,rep,name=defaultTemplates,proto3" json:"defaultTemplates,omitempty"`
	// contains filtered or unexported fields
}

SidecarInjectorConfig is described in istio.io documentation.

func (*SidecarInjectorConfig) Descriptor deprecated 

func (*SidecarInjectorConfig) Descriptor() ([]byte, []int)

Deprecated: Use SidecarInjectorConfig.ProtoReflect.Descriptor instead.

func (*SidecarInjectorConfig) GetAlwaysInjectSelector 

func (x *SidecarInjectorConfig) GetAlwaysInjectSelector() []*v11.LabelSelector

func (*SidecarInjectorConfig) GetDefaultTemplates 

func (x *SidecarInjectorConfig) GetDefaultTemplates() []string

func (*SidecarInjectorConfig) GetEnableNamespacesByDefault 

func (x *SidecarInjectorConfig) GetEnableNamespacesByDefault() *wrapperspb.BoolValue

func (*SidecarInjectorConfig) GetInjectedAnnotations 

func (x *SidecarInjectorConfig) GetInjectedAnnotations() *structpb.Struct

func (*SidecarInjectorConfig) GetInjectionURL 

func (x *SidecarInjectorConfig) GetInjectionURL() string

func (*SidecarInjectorConfig) GetNeverInjectSelector 

func (x *SidecarInjectorConfig) GetNeverInjectSelector() []*v11.LabelSelector

func (*SidecarInjectorConfig) GetReinvocationPolicy 

func (x *SidecarInjectorConfig) GetReinvocationPolicy() string

func (*SidecarInjectorConfig) GetRewriteAppHTTPProbe 

func (x *SidecarInjectorConfig) GetRewriteAppHTTPProbe() *wrapperspb.BoolValue

func (*SidecarInjectorConfig) GetTemplates 

func (x *SidecarInjectorConfig) GetTemplates() *structpb.Struct

func (*SidecarInjectorConfig) ProtoMessage 

func (*SidecarInjectorConfig) ProtoMessage()

func (*SidecarInjectorConfig) ProtoReflect 

func (x *SidecarInjectorConfig) ProtoReflect() protoreflect.Message

func (*SidecarInjectorConfig) Reset 

func (x *SidecarInjectorConfig) Reset()

func (*SidecarInjectorConfig) String 

func (x *SidecarInjectorConfig) String() string

type StartupProbe 

type StartupProbe struct {

	// Enables or disables a startup probe.
	// For optimal startup times, changing this should be tied to the readiness probe values.
	//
	// If the probe is enabled, it is recommended to have delay=0s,period=15s,failureThreshold=4.
	// This ensures the pod is marked ready immediately after the startup probe passes (which has a 1s poll interval),
	// and doesn't spam the readiness endpoint too much
	//
	// If the probe is disabled, it is recommended to have delay=1s,period=2s,failureThreshold=30.
	// This ensures the startup is reasonable fast (polling every 2s). 1s delay is used since the startup is not often ready instantly.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Minimum consecutive failures for the probe to be considered failed after having succeeded.
	FailureThreshold uint32 `protobuf:"varint,2,opt,name=failureThreshold,proto3" json:"failureThreshold,omitempty"`
	// contains filtered or unexported fields
}

func (*StartupProbe) Descriptor deprecated 

func (*StartupProbe) Descriptor() ([]byte, []int)

Deprecated: Use StartupProbe.ProtoReflect.Descriptor instead.

func (*StartupProbe) GetEnabled 

func (x *StartupProbe) GetEnabled() *wrapperspb.BoolValue

func (*StartupProbe) GetFailureThreshold 

func (x *StartupProbe) GetFailureThreshold() uint32

func (*StartupProbe) ProtoMessage 

func (*StartupProbe) ProtoMessage()

func (*StartupProbe) ProtoReflect 

func (x *StartupProbe) ProtoReflect() protoreflect.Message

func (*StartupProbe) Reset 

func (x *StartupProbe) Reset()

func (*StartupProbe) String 

func (x *StartupProbe) String() string

type TargetUtilizationConfig 

type TargetUtilizationConfig struct {

	// K8s utilization setting for HorizontalPodAutoscaler target.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	TargetAverageUtilization int32 `protobuf:"varint,1,opt,name=targetAverageUtilization,proto3" json:"targetAverageUtilization,omitempty"`
	// contains filtered or unexported fields
}

Configuration for CPU or memory target utilization for HorizontalPodAutoscaler target.

func (*TargetUtilizationConfig) Descriptor deprecated 

func (*TargetUtilizationConfig) Descriptor() ([]byte, []int)

Deprecated: Use TargetUtilizationConfig.ProtoReflect.Descriptor instead.

func (*TargetUtilizationConfig) GetTargetAverageUtilization 

func (x *TargetUtilizationConfig) GetTargetAverageUtilization() int32

func (*TargetUtilizationConfig) ProtoMessage 

func (*TargetUtilizationConfig) ProtoMessage()

func (*TargetUtilizationConfig) ProtoReflect 

func (x *TargetUtilizationConfig) ProtoReflect() protoreflect.Message

func (*TargetUtilizationConfig) Reset 

func (x *TargetUtilizationConfig) Reset()

func (*TargetUtilizationConfig) String 

func (x *TargetUtilizationConfig) String() string

type TelemetryConfig 

type TelemetryConfig struct {

	// Controls whether telemetry is exported for Pilot.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Configuration for Telemetry v2.
	V2 *TelemetryV2Config `protobuf:"bytes,3,opt,name=v2,proto3" json:"v2,omitempty"`
	// contains filtered or unexported fields
}

Controls telemetry configuration

func (*TelemetryConfig) Descriptor deprecated 

func (*TelemetryConfig) Descriptor() ([]byte, []int)

Deprecated: Use TelemetryConfig.ProtoReflect.Descriptor instead.

func (*TelemetryConfig) GetEnabled 

func (x *TelemetryConfig) GetEnabled() *wrapperspb.BoolValue

func (*TelemetryConfig) GetV2 

func (x *TelemetryConfig) GetV2() *TelemetryV2Config

func (*TelemetryConfig) ProtoMessage 

func (*TelemetryConfig) ProtoMessage()

func (*TelemetryConfig) ProtoReflect 

func (x *TelemetryConfig) ProtoReflect() protoreflect.Message

func (*TelemetryConfig) Reset 

func (x *TelemetryConfig) Reset()

func (*TelemetryConfig) String 

func (x *TelemetryConfig) String() string

type TelemetryV2Config 

type TelemetryV2Config struct {

	// Controls whether pilot will configure telemetry v2.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Telemetry v2 settings for prometheus.
	Prometheus *TelemetryV2PrometheusConfig `protobuf:"bytes,2,opt,name=prometheus,proto3" json:"prometheus,omitempty"`
	// Telemetry v2 settings for stackdriver.
	Stackdriver *TelemetryV2StackDriverConfig `protobuf:"bytes,3,opt,name=stackdriver,proto3" json:"stackdriver,omitempty"`
	// contains filtered or unexported fields
}

Controls whether pilot will configure telemetry v2.

func (*TelemetryV2Config) Descriptor deprecated 

func (*TelemetryV2Config) Descriptor() ([]byte, []int)

Deprecated: Use TelemetryV2Config.ProtoReflect.Descriptor instead.

func (*TelemetryV2Config) GetEnabled 

func (x *TelemetryV2Config) GetEnabled() *wrapperspb.BoolValue

func (*TelemetryV2Config) GetPrometheus 

func (x *TelemetryV2Config) GetPrometheus() *TelemetryV2PrometheusConfig

func (*TelemetryV2Config) GetStackdriver 

func (x *TelemetryV2Config) GetStackdriver() *TelemetryV2StackDriverConfig

func (*TelemetryV2Config) ProtoMessage 

func (*TelemetryV2Config) ProtoMessage()

func (*TelemetryV2Config) ProtoReflect 

func (x *TelemetryV2Config) ProtoReflect() protoreflect.Message

func (*TelemetryV2Config) Reset 

func (x *TelemetryV2Config) Reset()

func (*TelemetryV2Config) String 

func (x *TelemetryV2Config) String() string

type TelemetryV2PrometheusConfig 

type TelemetryV2PrometheusConfig struct {

	// Controls whether stats envoyfilter would be enabled or not.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

Controls telemetry v2 prometheus settings.

func (*TelemetryV2PrometheusConfig) Descriptor deprecated 

func (*TelemetryV2PrometheusConfig) Descriptor() ([]byte, []int)

Deprecated: Use TelemetryV2PrometheusConfig.ProtoReflect.Descriptor instead.

func (*TelemetryV2PrometheusConfig) GetEnabled 

func (x *TelemetryV2PrometheusConfig) GetEnabled() *wrapperspb.BoolValue

func (*TelemetryV2PrometheusConfig) ProtoMessage 

func (*TelemetryV2PrometheusConfig) ProtoMessage()

func (*TelemetryV2PrometheusConfig) ProtoReflect 

func (x *TelemetryV2PrometheusConfig) ProtoReflect() protoreflect.Message

func (*TelemetryV2PrometheusConfig) Reset 

func (x *TelemetryV2PrometheusConfig) Reset()

func (*TelemetryV2PrometheusConfig) String 

func (x *TelemetryV2PrometheusConfig) String() string

type TelemetryV2StackDriverConfig 

type TelemetryV2StackDriverConfig struct {
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

TelemetryV2StackDriverConfig controls telemetry v2 stackdriver settings.

func (*TelemetryV2StackDriverConfig) Descriptor deprecated 

func (*TelemetryV2StackDriverConfig) Descriptor() ([]byte, []int)

Deprecated: Use TelemetryV2StackDriverConfig.ProtoReflect.Descriptor instead.

func (*TelemetryV2StackDriverConfig) GetEnabled 

func (x *TelemetryV2StackDriverConfig) GetEnabled() *wrapperspb.BoolValue

func (*TelemetryV2StackDriverConfig) ProtoMessage 

func (*TelemetryV2StackDriverConfig) ProtoMessage()

func (*TelemetryV2StackDriverConfig) ProtoReflect 

func (x *TelemetryV2StackDriverConfig) ProtoReflect() protoreflect.Message

func (*TelemetryV2StackDriverConfig) Reset 

func (x *TelemetryV2StackDriverConfig) Reset()

func (*TelemetryV2StackDriverConfig) String 

func (x *TelemetryV2StackDriverConfig) String() string

type Tracer 

type Tracer int32

Specifies which tracer to use. 

const (
	Tracer_zipkin          Tracer = 0
	Tracer_lightstep       Tracer = 1
	Tracer_datadog         Tracer = 2
	Tracer_stackdriver     Tracer = 3
	Tracer_openCensusAgent Tracer = 4
	Tracer_none            Tracer = 5
)

func (Tracer) Descriptor 

func (Tracer) Descriptor() protoreflect.EnumDescriptor

func (Tracer) Enum 

func (x Tracer) Enum() *Tracer

func (Tracer) EnumDescriptor deprecated 

func (Tracer) EnumDescriptor() ([]byte, []int)

Deprecated: Use Tracer.Descriptor instead.

func (Tracer) Number 

func (x Tracer) Number() protoreflect.EnumNumber

func (Tracer) String 

func (x Tracer) String() string

func (Tracer) Type 

func (Tracer) Type() protoreflect.EnumType

type TracerConfig 

type TracerConfig struct {

	// Configuration for the datadog tracing service.
	Datadog *TracerDatadogConfig `protobuf:"bytes,1,opt,name=datadog,proto3" json:"datadog,omitempty"`
	// Configuration for the lightstep tracing service.
	Lightstep *TracerLightStepConfig `protobuf:"bytes,2,opt,name=lightstep,proto3" json:"lightstep,omitempty"`
	// Configuration for the zipkin tracing service.
	Zipkin *TracerZipkinConfig `protobuf:"bytes,3,opt,name=zipkin,proto3" json:"zipkin,omitempty"`
	// Configuration for the stackdriver tracing service.
	Stackdriver *TracerStackdriverConfig `protobuf:"bytes,4,opt,name=stackdriver,proto3" json:"stackdriver,omitempty"`
	// contains filtered or unexported fields
}

Configuration for each of the supported tracers.

func (*TracerConfig) Descriptor deprecated 

func (*TracerConfig) Descriptor() ([]byte, []int)

Deprecated: Use TracerConfig.ProtoReflect.Descriptor instead.

func (*TracerConfig) GetDatadog 

func (x *TracerConfig) GetDatadog() *TracerDatadogConfig

func (*TracerConfig) GetLightstep 

func (x *TracerConfig) GetLightstep() *TracerLightStepConfig

func (*TracerConfig) GetStackdriver 

func (x *TracerConfig) GetStackdriver() *TracerStackdriverConfig

func (*TracerConfig) GetZipkin 

func (x *TracerConfig) GetZipkin() *TracerZipkinConfig

func (*TracerConfig) ProtoMessage 

func (*TracerConfig) ProtoMessage()

func (*TracerConfig) ProtoReflect 

func (x *TracerConfig) ProtoReflect() protoreflect.Message

func (*TracerConfig) Reset 

func (x *TracerConfig) Reset()

func (*TracerConfig) String 

func (x *TracerConfig) String() string

type TracerDatadogConfig 

type TracerDatadogConfig struct {

	// Address in host:port format for reporting trace data to the Datadog agent.
	Address string `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the datadog tracing service.

func (*TracerDatadogConfig) Descriptor deprecated 

func (*TracerDatadogConfig) Descriptor() ([]byte, []int)

Deprecated: Use TracerDatadogConfig.ProtoReflect.Descriptor instead.

func (*TracerDatadogConfig) GetAddress 

func (x *TracerDatadogConfig) GetAddress() string

func (*TracerDatadogConfig) ProtoMessage 

func (*TracerDatadogConfig) ProtoMessage()

func (*TracerDatadogConfig) ProtoReflect 

func (x *TracerDatadogConfig) ProtoReflect() protoreflect.Message

func (*TracerDatadogConfig) Reset 

func (x *TracerDatadogConfig) Reset()

func (*TracerDatadogConfig) String 

func (x *TracerDatadogConfig) String() string

type TracerLightStepConfig 

type TracerLightStepConfig struct {

	// Sets the lightstep satellite pool address in host:port format for reporting trace data.
	Address string `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
	// Sets the lightstep access token.
	AccessToken string `protobuf:"bytes,2,opt,name=accessToken,proto3" json:"accessToken,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the lightstep tracing service.

func (*TracerLightStepConfig) Descriptor deprecated 

func (*TracerLightStepConfig) Descriptor() ([]byte, []int)

Deprecated: Use TracerLightStepConfig.ProtoReflect.Descriptor instead.

func (*TracerLightStepConfig) GetAccessToken 

func (x *TracerLightStepConfig) GetAccessToken() string

func (*TracerLightStepConfig) GetAddress 

func (x *TracerLightStepConfig) GetAddress() string

func (*TracerLightStepConfig) ProtoMessage 

func (*TracerLightStepConfig) ProtoMessage()

func (*TracerLightStepConfig) ProtoReflect 

func (x *TracerLightStepConfig) ProtoReflect() protoreflect.Message

func (*TracerLightStepConfig) Reset 

func (x *TracerLightStepConfig) Reset()

func (*TracerLightStepConfig) String 

func (x *TracerLightStepConfig) String() string

type TracerStackdriverConfig 

type TracerStackdriverConfig struct {

	// enables trace output to stdout.
	Debug *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=debug,proto3" json:"debug,omitempty"`
	// The global default max number of attributes per span.
	MaxNumberOfAttributes uint32 `protobuf:"varint,2,opt,name=maxNumberOfAttributes,proto3" json:"maxNumberOfAttributes,omitempty"`
	// The global default max number of annotation events per span.
	MaxNumberOfAnnotations uint32 `protobuf:"varint,3,opt,name=maxNumberOfAnnotations,proto3" json:"maxNumberOfAnnotations,omitempty"`
	// The global default max number of message events per span.
	MaxNumberOfMessageEvents uint32 `protobuf:"varint,4,opt,name=maxNumberOfMessageEvents,proto3" json:"maxNumberOfMessageEvents,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the stackdriver tracing service.

func (*TracerStackdriverConfig) Descriptor deprecated 

func (*TracerStackdriverConfig) Descriptor() ([]byte, []int)

Deprecated: Use TracerStackdriverConfig.ProtoReflect.Descriptor instead.

func (*TracerStackdriverConfig) GetDebug 

func (x *TracerStackdriverConfig) GetDebug() *wrapperspb.BoolValue

func (*TracerStackdriverConfig) GetMaxNumberOfAnnotations 

func (x *TracerStackdriverConfig) GetMaxNumberOfAnnotations() uint32

func (*TracerStackdriverConfig) GetMaxNumberOfAttributes 

func (x *TracerStackdriverConfig) GetMaxNumberOfAttributes() uint32

func (*TracerStackdriverConfig) GetMaxNumberOfMessageEvents 

func (x *TracerStackdriverConfig) GetMaxNumberOfMessageEvents() uint32

func (*TracerStackdriverConfig) ProtoMessage 

func (*TracerStackdriverConfig) ProtoMessage()

func (*TracerStackdriverConfig) ProtoReflect 

func (x *TracerStackdriverConfig) ProtoReflect() protoreflect.Message

func (*TracerStackdriverConfig) Reset 

func (x *TracerStackdriverConfig) Reset()

func (*TracerStackdriverConfig) String 

func (x *TracerStackdriverConfig) String() string

type TracerZipkinConfig 

type TracerZipkinConfig struct {

	// Address of zipkin instance in host:port format for reporting trace data.
	//
	// Example: <zipkin-collector-service>.<zipkin-collector-namespace>:941
	Address string `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the zipkin tracing service.

func (*TracerZipkinConfig) Descriptor deprecated 

func (*TracerZipkinConfig) Descriptor() ([]byte, []int)

Deprecated: Use TracerZipkinConfig.ProtoReflect.Descriptor instead.

func (*TracerZipkinConfig) GetAddress 

func (x *TracerZipkinConfig) GetAddress() string

func (*TracerZipkinConfig) ProtoMessage 

func (*TracerZipkinConfig) ProtoMessage()

func (*TracerZipkinConfig) ProtoReflect 

func (x *TracerZipkinConfig) ProtoReflect() protoreflect.Message

func (*TracerZipkinConfig) Reset 

func (x *TracerZipkinConfig) Reset()

func (*TracerZipkinConfig) String 

func (x *TracerZipkinConfig) String() string

type Values 

type Values struct {

	// Configuration for the Istio CNI plugin.
	Cni *CNIConfig `protobuf:"bytes,2,opt,name=cni,proto3" json:"cni,omitempty"`
	// Configuration for ingress and egress gateways.
	Gateways *GatewaysConfig `protobuf:"bytes,5,opt,name=gateways,proto3" json:"gateways,omitempty"`
	// Global configuration for Istio components.
	Global *GlobalConfig `protobuf:"bytes,6,opt,name=global,proto3" json:"global,omitempty"`
	// Configuration for the Pilot component.
	Pilot *PilotConfig `protobuf:"bytes,10,opt,name=pilot,proto3" json:"pilot,omitempty"`
	// Configuration for the ZTunnel component.
	Ztunnel *structpb.Value `protobuf:"bytes,41,opt,name=ztunnel,proto3" json:"ztunnel,omitempty"`
	// Controls whether telemetry is exported for Pilot.
	Telemetry *TelemetryConfig `protobuf:"bytes,23,opt,name=telemetry,proto3" json:"telemetry,omitempty"`
	// Configuration for the sidecar injector webhook.
	SidecarInjectorWebhook *SidecarInjectorConfig `protobuf:"bytes,13,opt,name=sidecarInjectorWebhook,proto3" json:"sidecarInjectorWebhook,omitempty"`
	// Configuration for the Istio CNI plugin.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	IstioCni *CNIUsageConfig `protobuf:"bytes,19,opt,name=istio_cni,json=istioCni,proto3" json:"istio_cni,omitempty"`
	// Identifies the revision this installation is associated with.
	Revision string `protobuf:"bytes,21,opt,name=revision,proto3" json:"revision,omitempty"`
	// Used internally to identify the owner of each resource.
	OwnerName string `protobuf:"bytes,22,opt,name=ownerName,proto3" json:"ownerName,omitempty"`
	// Defines runtime configuration of components, including Istiod and istio-agent behavior.
	// See https://istio.io/docs/reference/config/istio.mesh.v1alpha1/ for all available options.
	// TODO can this import the real mesh config API?
	MeshConfig *structpb.Value `protobuf:"bytes,36,opt,name=meshConfig,proto3" json:"meshConfig,omitempty"`
	// Configuration for the base component.
	Base *BaseConfig `protobuf:"bytes,37,opt,name=base,proto3" json:"base,omitempty"`
	// Configuration for istiod-remote.
	// DEPRECATED - istiod-remote chart is removed and replaced with
	// `istio-discovery --set values.istiodRemote.enabled=true`
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	IstiodRemote *IstiodRemoteConfig `protobuf:"bytes,38,opt,name=istiodRemote,proto3" json:"istiodRemote,omitempty"`
	// Specifies the aliases for the Istio control plane revision. A MutatingWebhookConfiguration
	// is created for each alias.
	RevisionTags []string `protobuf:"bytes,39,rep,name=revisionTags,proto3" json:"revisionTags,omitempty"`
	// The name of the default revision in the cluster.
	DefaultRevision string `protobuf:"bytes,40,opt,name=defaultRevision,proto3" json:"defaultRevision,omitempty"`
	// Specifies which installation configuration profile to apply.
	Profile string `protobuf:"bytes,42,opt,name=profile,proto3" json:"profile,omitempty"`
	// Specifies the compatibility version to use. When this is set, the control plane will
	// be configured with the same defaults as the specified version.
	CompatibilityVersion string `protobuf:"bytes,43,opt,name=compatibilityVersion,proto3" json:"compatibilityVersion,omitempty"`
	// Specifies experimental helm fields that could be removed or changed in the future
	Experimental *ExperimentalConfig `protobuf:"bytes,44,opt,name=experimental,proto3" json:"experimental,omitempty"`
	// contains filtered or unexported fields
}

func (*Values) Descriptor deprecated 

func (*Values) Descriptor() ([]byte, []int)

Deprecated: Use Values.ProtoReflect.Descriptor instead.

func (*Values) GetBase 

func (x *Values) GetBase() *BaseConfig

func (*Values) GetCni 

func (x *Values) GetCni() *CNIConfig

func (*Values) GetCompatibilityVersion 

func (x *Values) GetCompatibilityVersion() string

func (*Values) GetDefaultRevision 

func (x *Values) GetDefaultRevision() string

func (*Values) GetExperimental 

func (x *Values) GetExperimental() *ExperimentalConfig

func (*Values) GetGateways 

func (x *Values) GetGateways() *GatewaysConfig

func (*Values) GetGlobal 

func (x *Values) GetGlobal() *GlobalConfig

func (*Values) GetIstioCni deprecated 

func (x *Values) GetIstioCni() *CNIUsageConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*Values) GetIstiodRemote deprecated 

func (x *Values) GetIstiodRemote() *IstiodRemoteConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*Values) GetMeshConfig 

func (x *Values) GetMeshConfig() *structpb.Value

func (*Values) GetOwnerName 

func (x *Values) GetOwnerName() string

func (*Values) GetPilot 

func (x *Values) GetPilot() *PilotConfig

func (*Values) GetProfile 

func (x *Values) GetProfile() string

func (*Values) GetRevision 

func (x *Values) GetRevision() string

func (*Values) GetRevisionTags 

func (x *Values) GetRevisionTags() []string

func (*Values) GetSidecarInjectorWebhook 

func (x *Values) GetSidecarInjectorWebhook() *SidecarInjectorConfig

func (*Values) GetTelemetry 

func (x *Values) GetTelemetry() *TelemetryConfig

func (*Values) GetZtunnel 

func (x *Values) GetZtunnel() *structpb.Value

func (*Values) MarshalJSON 

func (in *Values) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for Values

func (*Values) ProtoMessage 

func (*Values) ProtoMessage()

func (*Values) ProtoReflect 

func (x *Values) ProtoReflect() protoreflect.Message

func (*Values) Reset 

func (x *Values) Reset()

func (*Values) String 

func (x *Values) String() string

func (*Values) UnmarshalJSON 

func (in *Values) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for Values

type WaypointConfig 

type WaypointConfig struct {

	// K8s resource settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	Resources *Resources `protobuf:"bytes,1,opt,name=resources,proto3" json:"resources,omitempty"`
	// K8s affinity settings for waypoint pods.
	//
	// See https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
	Affinity *v1.Affinity `protobuf:"bytes,2,opt,name=affinity,proto3" json:"affinity,omitempty"`
	// K8s topology spread constraints settings.
	//
	// See https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
	TopologySpreadConstraints []*v1.TopologySpreadConstraint `protobuf:"bytes,3,rep,name=topologySpreadConstraints,proto3" json:"topologySpreadConstraints,omitempty"`
	// K8s node labels settings.
	//
	// See https://kubernetes.io/docs/user-guide/node-selection/
	NodeSelector *v1.NodeSelector `protobuf:"bytes,4,opt,name=nodeSelector,proto3" json:"nodeSelector,omitempty"`
	// K8s tolerations settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
	Toleration []*v1.Toleration `protobuf:"bytes,5,rep,name=toleration,proto3" json:"toleration,omitempty"`
	// contains filtered or unexported fields
}

Configuration for Waypoint proxies.

func (*WaypointConfig) Descriptor deprecated 

func (*WaypointConfig) Descriptor() ([]byte, []int)

Deprecated: Use WaypointConfig.ProtoReflect.Descriptor instead.

func (*WaypointConfig) GetAffinity 

func (x *WaypointConfig) GetAffinity() *v1.Affinity

func (*WaypointConfig) GetNodeSelector 

func (x *WaypointConfig) GetNodeSelector() *v1.NodeSelector

func (*WaypointConfig) GetResources 

func (x *WaypointConfig) GetResources() *Resources

func (*WaypointConfig) GetToleration 

func (x *WaypointConfig) GetToleration() []*v1.Toleration

func (*WaypointConfig) GetTopologySpreadConstraints 

func (x *WaypointConfig) GetTopologySpreadConstraints() []*v1.TopologySpreadConstraint

func (*WaypointConfig) ProtoMessage 

func (*WaypointConfig) ProtoMessage()

func (*WaypointConfig) ProtoReflect 

func (x *WaypointConfig) ProtoReflect() protoreflect.Message

func (*WaypointConfig) Reset 

func (x *WaypointConfig) Reset()

func (*WaypointConfig) String 

func (x *WaypointConfig) String() string

type ZeroVPNConfig 

type ZeroVPNConfig struct {

	// Controls whether ZeroVPN is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	Suffix  string                `protobuf:"bytes,2,opt,name=suffix,proto3" json:"suffix,omitempty"`
	// contains filtered or unexported fields
}

ZeroVPNConfig enables cross-cluster access using SNI matching.

func (*ZeroVPNConfig) Descriptor deprecated 

func (*ZeroVPNConfig) Descriptor() ([]byte, []int)

Deprecated: Use ZeroVPNConfig.ProtoReflect.Descriptor instead.

func (*ZeroVPNConfig) GetEnabled 

func (x *ZeroVPNConfig) GetEnabled() *wrapperspb.BoolValue

func (*ZeroVPNConfig) GetSuffix 

func (x *ZeroVPNConfig) GetSuffix() string

func (*ZeroVPNConfig) ProtoMessage 

func (*ZeroVPNConfig) ProtoMessage()

func (*ZeroVPNConfig) ProtoReflect 

func (x *ZeroVPNConfig) ProtoReflect() protoreflect.Message

func (*ZeroVPNConfig) Reset 

func (x *ZeroVPNConfig) Reset()

func (*ZeroVPNConfig) String 

func (x *ZeroVPNConfig) String() string

Source Files

View all Source files

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.