options

Documentation

Index

• Variables
• func NewAgentOptions(proxy *ProxyArgs, cfg *meshconfig.ProxyConfig, ...) *istioagent.AgentOptions
• func NewSecurityOptions(proxyConfig *meshconfig.ProxyConfig, stsPort int, tokenManagerPlugin string) (*security.Options, error)
• func NewStatusServerOptions(ipv6 bool, t model.NodeType, proxyConfig *meshconfig.ProxyConfig, ...) *status.Options
• func SetupSecurityOptions(proxyConfig *meshconfig.ProxyConfig, secOpt *security.Options, ...) (*security.Options, error)
• type ProxyArgs
  • func NewProxyArgs() ProxyArgs

Variables

var (
	InstanceIPVar   = env.Register("INSTANCE_IP", "", "")
	PodNameVar      = env.Register("POD_NAME", "", "")
	PodNamespaceVar = env.Register("POD_NAMESPACE", "", "")

	ProxyConfigEnv = env.Register(
		"PROXY_CONFIG",
		"",
		"The proxy configuration. This will be set by the injection - gateways will use file mounts.",
	).Get()

	// DNSCaptureByAgent is a copy of the env var in the init code.
	DNSCaptureByAgent = env.Register("ISTIO_META_DNS_CAPTURE", false,
		"If set to true, enable the capture of outgoing DNS packets on port 53, redirecting to istio-agent on :15053")
	// EnableDNSAtGateway enables DNS server at Gateways.
	EnableDNSAtGateway = env.Register("ISTIO_META_ENABLE_DNS_SERVER", false,
		"If set to true, starts the DNS server on :15053. This won't automatically capture the DNS traffic and can be used "+
			"when we want Gateways to resolve DNS using this as Resolver for use cases like Dynamic Forward Proxy")

	// DNSCaptureAddr is the address to listen.
	DNSCaptureAddr = env.Register("DNS_PROXY_ADDR", "localhost:15053",
		"Custom address for the DNS proxy. If it ends with :53 and running as root allows running without iptable DNS capture")

	DNSForwardParallel = env.Register("DNS_FORWARD_PARALLEL", false,
		"If set to true, agent will send parallel DNS queries to all upstream nameservers")
)

Functions

func NewAgentOptions

func NewAgentOptions(proxy *ProxyArgs, cfg *meshconfig.ProxyConfig, sds istioagent.SDSServiceFactory) *istioagent.AgentOptions

func NewSecurityOptions

func NewSecurityOptions(proxyConfig *meshconfig.ProxyConfig, stsPort int, tokenManagerPlugin string) (*security.Options, error)

func NewStatusServerOptions

func NewStatusServerOptions(ipv6 bool, t model.NodeType, proxyConfig *meshconfig.ProxyConfig, agent *istioagent.Agent) *status.Options

func SetupSecurityOptions

func SetupSecurityOptions(proxyConfig *meshconfig.ProxyConfig, secOpt *security.Options, jwtPolicy,
	credFetcherTypeEnv, credIdentityProvider string,
) (*security.Options, error)

Types

type ProxyArgs

type ProxyArgs struct {
	istioagent.Proxy

	StsPort            int
	TokenManagerPlugin string

	MeshConfigFile string

	// proxy config flags (named identically)
	ServiceCluster         string
	ProxyLogLevel          string
	ProxyComponentLogLevel string
	Concurrency            int
	TemplateFile           string
	OutlierLogPath         string

	PodName      string
	PodNamespace string

	// enableProfiling enables profiling via web interface host:port/debug/pprof/
	EnableProfiling bool
}

ProxyArgs provides all of the configuration parameters for the Pilot proxy.

func NewProxyArgs

func NewProxyArgs() ProxyArgs

NewProxyArgs constructs proxyArgs with default values.