apis

package
v0.0.0-...-7929486 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Dec 25, 2024 License: Apache-2.0 Imports: 18 Imported by: 1

Documentation

Overview

Package v1alpha1 contains API Schema definitions for the istio v1alpha1 API group +k8s:deepcopy-gen=package,register +groupName=install.istio.io

Index

Constants

This section is empty.

Variables

View Source
var (
	IngressControllerMode_name = map[int32]string{
		0: "UNSPECIFIED",
		1: "DEFAULT",
		2: "STRICT",
		3: "OFF",
	}
	IngressControllerMode_value = map[string]int32{
		"UNSPECIFIED": 0,
		"DEFAULT":     1,
		"STRICT":      2,
		"OFF":         3,
	}
)

Enum value maps for IngressControllerMode.

View Source
var (
	Tracer_name = map[int32]string{
		0: "zipkin",
		1: "lightstep",
		2: "datadog",
		3: "stackdriver",
		4: "openCensusAgent",
		5: "none",
	}
	Tracer_value = map[string]int32{
		"zipkin":          0,
		"lightstep":       1,
		"datadog":         2,
		"stackdriver":     3,
		"openCensusAgent": 4,
		"none":            5,
	}
)

Enum value maps for Tracer.

View Source
var (
	OutboundTrafficPolicyConfig_Mode_name = map[int32]string{
		0: "ALLOW_ANY",
		1: "REGISTRY_ONLY",
	}
	OutboundTrafficPolicyConfig_Mode_value = map[string]int32{
		"ALLOW_ANY":     0,
		"REGISTRY_ONLY": 1,
	}
)

Enum value maps for OutboundTrafficPolicyConfig_Mode.

View Source
var File_pkg_apis_values_types_proto protoreflect.FileDescriptor
View Source
var IstioOperatorGVK = schema.GroupVersionKind{
	Version: "v1alpha1",
	Group:   "install.istio.io",
	Kind:    "IstioOperator",
}

IstioOperatorGVK is GVK for IstioOperator

Functions

This section is empty.

Types

type ArchConfig

type ArchConfig struct {

	// Sets pod scheduling weight for amd64 arch
	Amd64 uint32 `protobuf:"varint,1,opt,name=amd64,proto3" json:"amd64,omitempty"`
	// Sets pod scheduling weight for ppc64le arch.
	Ppc64Le uint32 `protobuf:"varint,2,opt,name=ppc64le,proto3" json:"ppc64le,omitempty"`
	// Sets pod scheduling weight for s390x arch.
	S390X uint32 `protobuf:"varint,3,opt,name=s390x,proto3" json:"s390x,omitempty"`
	// Sets pod scheduling weight for arm64 arch.
	Arm64 uint32 `protobuf:"varint,4,opt,name=arm64,proto3" json:"arm64,omitempty"`
	// contains filtered or unexported fields
}

ArchConfig specifies the pod scheduling target architecture(amd64, ppc64le, s390x, arm64) for all the Istio control plane components.

func (*ArchConfig) Descriptor deprecated

func (*ArchConfig) Descriptor() ([]byte, []int)

Deprecated: Use ArchConfig.ProtoReflect.Descriptor instead.

func (*ArchConfig) GetAmd64

func (x *ArchConfig) GetAmd64() uint32

func (*ArchConfig) GetArm64

func (x *ArchConfig) GetArm64() uint32

func (*ArchConfig) GetPpc64Le

func (x *ArchConfig) GetPpc64Le() uint32

func (*ArchConfig) GetS390X

func (x *ArchConfig) GetS390X() uint32

func (*ArchConfig) ProtoMessage

func (*ArchConfig) ProtoMessage()

func (*ArchConfig) ProtoReflect

func (x *ArchConfig) ProtoReflect() protoreflect.Message

func (*ArchConfig) Reset

func (x *ArchConfig) Reset()

func (*ArchConfig) String

func (x *ArchConfig) String() string

type BaseComponentSpec

type BaseComponentSpec struct {
	// Selects whether this component is installed.
	Enabled    *BoolValue           `json:"enabled,omitempty"`
	Kubernetes *KubernetesResources `json:"k8s,omitempty"`
}

type BaseConfig

type BaseConfig struct {

	// For Helm2 use, adds the CRDs to templates.
	EnableCRDTemplates *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enableCRDTemplates,proto3" json:"enableCRDTemplates,omitempty"`
	// CRDs to exclude. Requires `enableCRDTemplates`
	ExcludedCRDs []string `protobuf:"bytes,6,rep,name=excludedCRDs,proto3" json:"excludedCRDs,omitempty"`
	// URL to use for validating webhook.
	ValidationURL string `protobuf:"bytes,2,opt,name=validationURL,proto3" json:"validationURL,omitempty"`
	// For istioctl usage to disable istio config crds in base
	EnableIstioConfigCRDs *wrapperspb.BoolValue `protobuf:"bytes,3,opt,name=enableIstioConfigCRDs,proto3" json:"enableIstioConfigCRDs,omitempty"`
	ValidateGateway       *wrapperspb.BoolValue `protobuf:"bytes,4,opt,name=validateGateway,proto3" json:"validateGateway,omitempty"`
	// validation webhook CA bundle
	ValidationCABundle string `protobuf:"bytes,5,opt,name=validationCABundle,proto3" json:"validationCABundle,omitempty"`
	// contains filtered or unexported fields
}

func (*BaseConfig) Descriptor deprecated

func (*BaseConfig) Descriptor() ([]byte, []int)

Deprecated: Use BaseConfig.ProtoReflect.Descriptor instead.

func (*BaseConfig) GetEnableCRDTemplates

func (x *BaseConfig) GetEnableCRDTemplates() *wrapperspb.BoolValue

func (*BaseConfig) GetEnableIstioConfigCRDs

func (x *BaseConfig) GetEnableIstioConfigCRDs() *wrapperspb.BoolValue

func (*BaseConfig) GetExcludedCRDs

func (x *BaseConfig) GetExcludedCRDs() []string

func (*BaseConfig) GetValidateGateway

func (x *BaseConfig) GetValidateGateway() *wrapperspb.BoolValue

func (*BaseConfig) GetValidationCABundle

func (x *BaseConfig) GetValidationCABundle() string

func (*BaseConfig) GetValidationURL

func (x *BaseConfig) GetValidationURL() string

func (*BaseConfig) ProtoMessage

func (*BaseConfig) ProtoMessage()

func (*BaseConfig) ProtoReflect

func (x *BaseConfig) ProtoReflect() protoreflect.Message

func (*BaseConfig) Reset

func (x *BaseConfig) Reset()

func (*BaseConfig) String

func (x *BaseConfig) String() string

type BoolValue

type BoolValue struct {
	// contains filtered or unexported fields
}

func (*BoolValue) GetValueOrFalse

func (b *BoolValue) GetValueOrFalse() bool

func (*BoolValue) GetValueOrTrue

func (b *BoolValue) GetValueOrTrue() bool

func (*BoolValue) MarshalJSON

func (b *BoolValue) MarshalJSON() ([]byte, error)

func (*BoolValue) UnmarshalJSON

func (b *BoolValue) UnmarshalJSON(bytes []byte) error

type CNIAmbientConfig

type CNIAmbientConfig struct {

	// Controls whether ambient redirection is enabled
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// The directory path containing the configuration files for Ambient. Defaults to /etc/ambient-config.
	ConfigDir string `protobuf:"bytes,3,opt,name=configDir,proto3" json:"configDir,omitempty"`
	// If enabled, and ambient is enabled, DNS redirection will be enabled.
	DnsCapture *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=dnsCapture,proto3" json:"dnsCapture,omitempty"`
	// UNSTABLE: If enabled, and ambient is enabled, enables ipv6 support
	Ipv6 *wrapperspb.BoolValue `protobuf:"bytes,7,opt,name=ipv6,proto3" json:"ipv6,omitempty"`
	// contains filtered or unexported fields
}

func (*CNIAmbientConfig) Descriptor deprecated

func (*CNIAmbientConfig) Descriptor() ([]byte, []int)

Deprecated: Use CNIAmbientConfig.ProtoReflect.Descriptor instead.

func (*CNIAmbientConfig) GetConfigDir

func (x *CNIAmbientConfig) GetConfigDir() string

func (*CNIAmbientConfig) GetDnsCapture

func (x *CNIAmbientConfig) GetDnsCapture() *wrapperspb.BoolValue

func (*CNIAmbientConfig) GetEnabled

func (x *CNIAmbientConfig) GetEnabled() *wrapperspb.BoolValue

func (*CNIAmbientConfig) GetIpv6

func (x *CNIAmbientConfig) GetIpv6() *wrapperspb.BoolValue

func (*CNIAmbientConfig) ProtoMessage

func (*CNIAmbientConfig) ProtoMessage()

func (*CNIAmbientConfig) ProtoReflect

func (x *CNIAmbientConfig) ProtoReflect() protoreflect.Message

func (*CNIAmbientConfig) Reset

func (x *CNIAmbientConfig) Reset()

func (*CNIAmbientConfig) String

func (x *CNIAmbientConfig) String() string

type CNIConfig

type CNIConfig struct {

	// Controls whether CNI is installed.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Hub to pull the container image from. Image will be `Hub/Image:Tag-Variant`.
	Hub string `protobuf:"bytes,2,opt,name=hub,proto3" json:"hub,omitempty"`
	// The container image tag to pull. Image will be `Hub/Image:Tag-Variant`.
	Tag *structpb.Value `protobuf:"bytes,3,opt,name=tag,proto3" json:"tag,omitempty"`
	// The container image variant to pull. Options are "debug" or "distroless". Unset will use the default for the given version.
	Variant string `protobuf:"bytes,29,opt,name=variant,proto3" json:"variant,omitempty"`
	// Image name to pull from. Image will be `Hub/Image:Tag-Variant`.
	// If Image contains a "/", it will replace the entire `image` in the pod.
	Image string `protobuf:"bytes,4,opt,name=image,proto3" json:"image,omitempty"`
	// Specifies the image pull policy. one of Always, Never, IfNotPresent.
	// Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
	//
	// More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
	PullPolicy string `protobuf:"bytes,5,opt,name=pullPolicy,proto3" json:"pullPolicy,omitempty"`
	// The directory path within the cluster node's filesystem where the CNI binaries are to be installed. Typically /var/lib/cni/bin.
	CniBinDir string `protobuf:"bytes,6,opt,name=cniBinDir,proto3" json:"cniBinDir,omitempty"`
	// The directory path within the cluster node's filesystem where the CNI configuration files are to be installed. Typically /etc/cni/net.d.
	CniConfDir string `protobuf:"bytes,7,opt,name=cniConfDir,proto3" json:"cniConfDir,omitempty"`
	// The name of the CNI plugin configuration file. Defaults to istio-cni.conf.
	CniConfFileName string `protobuf:"bytes,8,opt,name=cniConfFileName,proto3" json:"cniConfFileName,omitempty"`
	// The directory path within the cluster node's filesystem where network namespaces are located.
	// Defaults to '/var/run/netns', in minikube/docker/others can be '/var/run/docker/netns'.
	CniNetnsDir string `protobuf:"bytes,31,opt,name=cniNetnsDir,proto3" json:"cniNetnsDir,omitempty"`
	// List of namespaces that should be ignored by the CNI plugin.
	ExcludeNamespaces []string `protobuf:"bytes,9,rep,name=excludeNamespaces,proto3" json:"excludeNamespaces,omitempty"`
	// K8s affinity to set on the istio-cni Pods. Can be used to exclude istio-cni from being scheduled on specified nodes.
	Affinity *v1.Affinity `protobuf:"bytes,20,opt,name=affinity,proto3" json:"affinity,omitempty"`
	// Additional annotations to apply to the istio-cni Pods.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAnnotations *structpb.Struct `protobuf:"bytes,10,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"`
	// PodSecurityPolicy cluster role. No longer used anywhere.
	PspClusterRole string `protobuf:"bytes,11,opt,name=psp_cluster_role,json=pspClusterRole,proto3" json:"psp_cluster_role,omitempty"`
	// DEPRECATED. Configuration log level of istio-cni binary. By default, istio-cni sends all logs to the UDS server.
	// To see the logs, change global.logging.level to cni:debug.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	LogLevel string `protobuf:"bytes,12,opt,name=logLevel,proto3" json:"logLevel,omitempty"`
	// Same as `global.logging.level`, but will override it if set
	Logging *GlobalLoggingConfig `protobuf:"bytes,25,opt,name=logging,proto3" json:"logging,omitempty"`
	// Configuration for the CNI Repair controller.
	Repair *CNIRepairConfig `protobuf:"bytes,13,opt,name=repair,proto3" json:"repair,omitempty"`
	// Configure the plugin as a chained CNI plugin. When true, the configuration is added to the CNI chain; when false,
	// the configuration is added as a standalone file in the CNI configuration directory.
	Chained *wrapperspb.BoolValue `protobuf:"bytes,14,opt,name=chained,proto3" json:"chained,omitempty"`
	// The resource quotas configration for the CNI DaemonSet.
	ResourceQuotas *ResourceQuotas `protobuf:"bytes,16,opt,name=resource_quotas,json=resourceQuotas,proto3" json:"resource_quotas,omitempty"`
	// The k8s resource requests and limits for the istio-cni Pods.
	Resources *Resources `protobuf:"bytes,17,opt,name=resources,proto3" json:"resources,omitempty"`
	// No longer used for CNI. See: https://github.com/istio/istio/issues/49004
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Privileged *wrapperspb.BoolValue `protobuf:"bytes,18,opt,name=privileged,proto3" json:"privileged,omitempty"`
	// The Container seccompProfile
	//
	// See: https://kubernetes.io/docs/tutorials/security/seccomp/
	SeccompProfile *v1.SeccompProfile `protobuf:"bytes,19,opt,name=seccompProfile,proto3" json:"seccompProfile,omitempty"`
	// Configuration for Istio Ambient.
	Ambient *CNIAmbientConfig `protobuf:"bytes,21,opt,name=ambient,proto3" json:"ambient,omitempty"`
	// Specifies the CNI provider. Can be either "default" or "multus". When set to "multus", an additional
	// NetworkAttachmentDefinition resource is deployed to the cluster to allow the istio-cni plugin to be
	// invoked in a cluster using the Multus CNI plugin.
	Provider string `protobuf:"bytes,22,opt,name=provider,proto3" json:"provider,omitempty"`
	// The number of pods that can be unavailable during a rolling update of the CNI DaemonSet (see
	// `updateStrategy.rollingUpdate.maxUnavailable` here:
	// https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/daemon-set-v1/#DaemonSetSpec).
	// May be specified as a number of pods or as a percent of the total number
	// of pods at the start of the update.
	RollingMaxUnavailable *IntOrString `protobuf:"bytes,23,opt,name=rollingMaxUnavailable,proto3" json:"rollingMaxUnavailable,omitempty"`
	// contains filtered or unexported fields
}

Configuration for CNI.

func (*CNIConfig) Descriptor deprecated

func (*CNIConfig) Descriptor() ([]byte, []int)

Deprecated: Use CNIConfig.ProtoReflect.Descriptor instead.

func (*CNIConfig) GetAffinity

func (x *CNIConfig) GetAffinity() *v1.Affinity

func (*CNIConfig) GetAmbient

func (x *CNIConfig) GetAmbient() *CNIAmbientConfig

func (*CNIConfig) GetChained

func (x *CNIConfig) GetChained() *wrapperspb.BoolValue

func (*CNIConfig) GetCniBinDir

func (x *CNIConfig) GetCniBinDir() string

func (*CNIConfig) GetCniConfDir

func (x *CNIConfig) GetCniConfDir() string

func (*CNIConfig) GetCniConfFileName

func (x *CNIConfig) GetCniConfFileName() string

func (*CNIConfig) GetCniNetnsDir

func (x *CNIConfig) GetCniNetnsDir() string

func (*CNIConfig) GetEnabled

func (x *CNIConfig) GetEnabled() *wrapperspb.BoolValue

func (*CNIConfig) GetExcludeNamespaces

func (x *CNIConfig) GetExcludeNamespaces() []string

func (*CNIConfig) GetHub

func (x *CNIConfig) GetHub() string

func (*CNIConfig) GetImage

func (x *CNIConfig) GetImage() string

func (*CNIConfig) GetLogLevel deprecated

func (x *CNIConfig) GetLogLevel() string

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*CNIConfig) GetLogging

func (x *CNIConfig) GetLogging() *GlobalLoggingConfig

func (*CNIConfig) GetPodAnnotations deprecated

func (x *CNIConfig) GetPodAnnotations() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*CNIConfig) GetPrivileged deprecated

func (x *CNIConfig) GetPrivileged() *wrapperspb.BoolValue

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*CNIConfig) GetProvider

func (x *CNIConfig) GetProvider() string

func (*CNIConfig) GetPspClusterRole

func (x *CNIConfig) GetPspClusterRole() string

func (*CNIConfig) GetPullPolicy

func (x *CNIConfig) GetPullPolicy() string

func (*CNIConfig) GetRepair

func (x *CNIConfig) GetRepair() *CNIRepairConfig

func (*CNIConfig) GetResourceQuotas

func (x *CNIConfig) GetResourceQuotas() *ResourceQuotas

func (*CNIConfig) GetResources

func (x *CNIConfig) GetResources() *Resources

func (*CNIConfig) GetRollingMaxUnavailable

func (x *CNIConfig) GetRollingMaxUnavailable() *IntOrString

func (*CNIConfig) GetSeccompProfile

func (x *CNIConfig) GetSeccompProfile() *v1.SeccompProfile

func (*CNIConfig) GetTag

func (x *CNIConfig) GetTag() *structpb.Value

func (*CNIConfig) GetVariant

func (x *CNIConfig) GetVariant() string

func (*CNIConfig) ProtoMessage

func (*CNIConfig) ProtoMessage()

func (*CNIConfig) ProtoReflect

func (x *CNIConfig) ProtoReflect() protoreflect.Message

func (*CNIConfig) Reset

func (x *CNIConfig) Reset()

func (*CNIConfig) String

func (x *CNIConfig) String() string

type CNIRepairConfig

type CNIRepairConfig struct {

	// Controls whether repair behavior is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Hub to pull the container image from. Image will be `Hub/Image:Tag-Variant`.
	Hub string `protobuf:"bytes,2,opt,name=hub,proto3" json:"hub,omitempty"`
	// The container image tag to pull. Image will be `Hub/Image:Tag-Variant`.
	Tag *structpb.Value `protobuf:"bytes,3,opt,name=tag,proto3" json:"tag,omitempty"`
	// Image name to pull from. Image will be `Hub/Image:Tag-Variant`.
	// If Image contains a "/", it will replace the entire `image` in the pod.
	Image string `protobuf:"bytes,4,opt,name=image,proto3" json:"image,omitempty"`
	// The Repair controller has 3 modes (labelPods, deletePods, and repairPods). Pick which one meets your use cases. Note only one may be used.
	// The mode defines the action the controller will take when a pod is detected as broken.
	// If labelPods is true, the controller will label all broken pods with <brokenPodLabelKey>=<brokenPodLabelValue>.
	// This is only capable of identifying broken pods; the user is responsible for fixing them (generally, by deleting them).
	// Note this gives the DaemonSet a relatively high privilege, as modifying pod metadata/status can have wider impacts.
	LabelPods bool `protobuf:"varint,5,opt,name=labelPods,proto3" json:"labelPods,omitempty"`
	// The Repair controller has 3 modes (labelPods, deletePods, and repairPods). Pick which one meets your use cases. Note only one may be used.
	// The mode defines the action the controller will take when a pod is detected as broken.
	// If repairPods is true, the controller will dynamically repair any broken pod by setting up the pod networking configuration even after it has started.
	// Note the pod will be crashlooping, so this may take a few minutes to become fully functional based on when the retry occurs.
	// This requires no RBAC privilege, but will require the CNI agent to run as a privileged pod.
	RepairPods bool `protobuf:"varint,11,opt,name=repairPods,proto3" json:"repairPods,omitempty"`
	// No longer used.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	CreateEvents string `protobuf:"bytes,6,opt,name=createEvents,proto3" json:"createEvents,omitempty"`
	// The Repair controller has 3 modes (labelPods, deletePods, and repairPods). Pick which one meets your use cases. Note only one may be used.
	// The mode defines the action the controller will take when a pod is detected as broken.
	// If deletePods is true, the controller will delete the broken pod. The pod will then be rescheduled, hopefully onto a node that is fully ready.
	// Note this gives the DaemonSet a relatively high privilege, as it can delete any Pod.
	DeletePods bool `protobuf:"varint,7,opt,name=deletePods,proto3" json:"deletePods,omitempty"`
	// The label key to apply to a broken pod when the controller is in labelPods mode.
	BrokenPodLabelKey string `protobuf:"bytes,8,opt,name=brokenPodLabelKey,proto3" json:"brokenPodLabelKey,omitempty"`
	// The label value to apply to a broken pod when the controller is in labelPods mode.
	BrokenPodLabelValue string `protobuf:"bytes,9,opt,name=brokenPodLabelValue,proto3" json:"brokenPodLabelValue,omitempty"`
	// The name of the init container to use for the repairPods mode.
	InitContainerName string `protobuf:"bytes,10,opt,name=initContainerName,proto3" json:"initContainerName,omitempty"`
	// contains filtered or unexported fields
}

func (*CNIRepairConfig) Descriptor deprecated

func (*CNIRepairConfig) Descriptor() ([]byte, []int)

Deprecated: Use CNIRepairConfig.ProtoReflect.Descriptor instead.

func (*CNIRepairConfig) GetBrokenPodLabelKey

func (x *CNIRepairConfig) GetBrokenPodLabelKey() string

func (*CNIRepairConfig) GetBrokenPodLabelValue

func (x *CNIRepairConfig) GetBrokenPodLabelValue() string

func (*CNIRepairConfig) GetCreateEvents deprecated

func (x *CNIRepairConfig) GetCreateEvents() string

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*CNIRepairConfig) GetDeletePods

func (x *CNIRepairConfig) GetDeletePods() bool

func (*CNIRepairConfig) GetEnabled

func (x *CNIRepairConfig) GetEnabled() *wrapperspb.BoolValue

func (*CNIRepairConfig) GetHub

func (x *CNIRepairConfig) GetHub() string

func (*CNIRepairConfig) GetImage

func (x *CNIRepairConfig) GetImage() string

func (*CNIRepairConfig) GetInitContainerName

func (x *CNIRepairConfig) GetInitContainerName() string

func (*CNIRepairConfig) GetLabelPods

func (x *CNIRepairConfig) GetLabelPods() bool

func (*CNIRepairConfig) GetRepairPods

func (x *CNIRepairConfig) GetRepairPods() bool

func (*CNIRepairConfig) GetTag

func (x *CNIRepairConfig) GetTag() *structpb.Value

func (*CNIRepairConfig) ProtoMessage

func (*CNIRepairConfig) ProtoMessage()

func (*CNIRepairConfig) ProtoReflect

func (x *CNIRepairConfig) ProtoReflect() protoreflect.Message

func (*CNIRepairConfig) Reset

func (x *CNIRepairConfig) Reset()

func (*CNIRepairConfig) String

func (x *CNIRepairConfig) String() string

type CNIUsageConfig

type CNIUsageConfig struct {

	// Controls whether CNI should be used.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Chained *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=chained,proto3" json:"chained,omitempty"`
	// Specifies the CNI provider. Can be either "default" or "multus". When set to "multus", an annotation
	// `k8s.v1.cni.cncf.io/networks` is set on injected pods to point to a NetworkAttachmentDefinition
	Provider string `protobuf:"bytes,3,opt,name=provider,proto3" json:"provider,omitempty"`
	// contains filtered or unexported fields
}

func (*CNIUsageConfig) Descriptor deprecated

func (*CNIUsageConfig) Descriptor() ([]byte, []int)

Deprecated: Use CNIUsageConfig.ProtoReflect.Descriptor instead.

func (*CNIUsageConfig) GetChained deprecated

func (x *CNIUsageConfig) GetChained() *wrapperspb.BoolValue

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*CNIUsageConfig) GetEnabled

func (x *CNIUsageConfig) GetEnabled() *wrapperspb.BoolValue

func (*CNIUsageConfig) GetProvider

func (x *CNIUsageConfig) GetProvider() string

func (*CNIUsageConfig) ProtoMessage

func (*CNIUsageConfig) ProtoMessage()

func (*CNIUsageConfig) ProtoReflect

func (x *CNIUsageConfig) ProtoReflect() protoreflect.Message

func (*CNIUsageConfig) Reset

func (x *CNIUsageConfig) Reset()

func (*CNIUsageConfig) String

func (x *CNIUsageConfig) String() string

type ComponentSpec

type ComponentSpec struct {
	// Selects whether this component is installed.
	Enabled *BoolValue `json:"enabled,omitempty"`
	// Namespace for the component.
	Namespace string `json:"namespace,omitempty"`
	// Hub for the component (overrides top level hub setting).
	Hub string `json:"hub,omitempty"`
	// Tag for the component (overrides top level tag setting).
	// This is "any" because people put `tag: 1` in their config and we supported that historically.
	Tag any `json:"tag,omitempty"`
	// Kubernetes resource spec.
	Kubernetes *KubernetesResources `json:"k8s,omitempty"`
	// Raw is the raw inputs. This allows distinguishing unset vs zero-values for KubernetesResources
	Raw map[string]any `json:"-"`
}

type DefaultPodDisruptionBudgetConfig

type DefaultPodDisruptionBudgetConfig struct {

	// Controls whether a PodDisruptionBudget with a default minAvailable value of 1 is created for each deployment.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

DefaultPodDisruptionBudgetConfig specifies the default pod disruption budget configuration.

See https://kubernetes.io/docs/concepts/workloads/pods/disruptions/

func (*DefaultPodDisruptionBudgetConfig) Descriptor deprecated

func (*DefaultPodDisruptionBudgetConfig) Descriptor() ([]byte, []int)

Deprecated: Use DefaultPodDisruptionBudgetConfig.ProtoReflect.Descriptor instead.

func (*DefaultPodDisruptionBudgetConfig) GetEnabled

func (*DefaultPodDisruptionBudgetConfig) ProtoMessage

func (*DefaultPodDisruptionBudgetConfig) ProtoMessage()

func (*DefaultPodDisruptionBudgetConfig) ProtoReflect

func (*DefaultPodDisruptionBudgetConfig) Reset

func (*DefaultPodDisruptionBudgetConfig) String

type DefaultResourcesConfig

type DefaultResourcesConfig struct {

	// k8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	Requests *ResourcesRequestsConfig `protobuf:"bytes,1,opt,name=requests,proto3" json:"requests,omitempty"`
	// contains filtered or unexported fields
}

DefaultResourcesConfig specifies the default k8s resources settings for all Istio control plane components.

func (*DefaultResourcesConfig) Descriptor deprecated

func (*DefaultResourcesConfig) Descriptor() ([]byte, []int)

Deprecated: Use DefaultResourcesConfig.ProtoReflect.Descriptor instead.

func (*DefaultResourcesConfig) GetRequests

func (*DefaultResourcesConfig) ProtoMessage

func (*DefaultResourcesConfig) ProtoMessage()

func (*DefaultResourcesConfig) ProtoReflect

func (x *DefaultResourcesConfig) ProtoReflect() protoreflect.Message

func (*DefaultResourcesConfig) Reset

func (x *DefaultResourcesConfig) Reset()

func (*DefaultResourcesConfig) String

func (x *DefaultResourcesConfig) String() string

type EgressGatewayConfig

type EgressGatewayConfig struct {

	// Controls whether auto scaling with a HorizontalPodAutoscaler is enabled.
	AutoscaleEnabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=autoscaleEnabled,proto3" json:"autoscaleEnabled,omitempty"`
	// maxReplicas setting for HorizontalPodAutoscaler.
	AutoscaleMax uint32 `protobuf:"varint,2,opt,name=autoscaleMax,proto3" json:"autoscaleMax,omitempty"`
	// minReplicas setting for HorizontalPodAutoscaler.
	AutoscaleMin uint32 `protobuf:"varint,3,opt,name=autoscaleMin,proto3" json:"autoscaleMin,omitempty"`
	// K8s memory utilization setting for HorizontalPodAutoscaler target.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Memory *TargetUtilizationConfig `protobuf:"bytes,4,opt,name=memory,proto3" json:"memory,omitempty"`
	// K8s utilization setting for HorizontalPodAutoscaler target.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Cpu           *TargetUtilizationConfig `protobuf:"bytes,5,opt,name=cpu,proto3" json:"cpu,omitempty"`
	CustomService *wrapperspb.BoolValue    `protobuf:"bytes,6,opt,name=customService,proto3" json:"customService,omitempty"`
	// Controls whether an egress gateway is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,7,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Environment variables passed to the proxy container.
	Env    *structpb.Struct  `protobuf:"bytes,8,opt,name=env,proto3" json:"env,omitempty"`
	Labels map[string]string `` /* 153-byte string literal not displayed */
	Name   string            `protobuf:"bytes,25,opt,name=name,proto3" json:"name,omitempty"`
	// K8s node selector.
	//
	// See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	NodeSelector *structpb.Struct `protobuf:"bytes,10,opt,name=nodeSelector,proto3" json:"nodeSelector,omitempty"`
	// K8s annotations for pods.
	//
	// See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAnnotations *structpb.Struct `protobuf:"bytes,11,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"`
	// Pod anti-affinity label selector.
	//
	// Specify the pod anti-affinity that allows you to constrain which nodes
	// your pod is eligible to be scheduled based on labels on pods that are
	// already running on the node rather than based on labels on nodes.
	// There are currently two types of anti-affinity:
	//
	//	"requiredDuringSchedulingIgnoredDuringExecution"
	//	"preferredDuringSchedulingIgnoredDuringExecution"
	//
	// which denote “hard” vs. “soft” requirements, you can define your values
	// in "podAntiAffinityLabelSelector" and "podAntiAffinityTermLabelSelector"
	// correspondingly.
	// See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
	//
	// Examples:
	// podAntiAffinityLabelSelector:
	//   - key: security
	//     operator: In
	//     values: S1,S2
	//     topologyKey: "kubernetes.io/hostname"
	//     This pod anti-affinity rule says that the pod requires not to be scheduled
	//     onto a node if that node is already running a pod with label having key
	//     “security” and value “S1”.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAntiAffinityLabelSelector []*v11.LabelSelector `protobuf:"bytes,12,rep,name=podAntiAffinityLabelSelector,proto3" json:"podAntiAffinityLabelSelector,omitempty"`
	// See PodAntiAffinityLabelSelector.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAntiAffinityTermLabelSelector []*v11.LabelSelector `protobuf:"bytes,13,rep,name=podAntiAffinityTermLabelSelector,proto3" json:"podAntiAffinityTermLabelSelector,omitempty"`
	// Ports Configuration for the egress gateway service.
	Ports []*PortsConfig `protobuf:"bytes,14,rep,name=ports,proto3" json:"ports,omitempty"`
	// K8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Resources *Resources `protobuf:"bytes,15,opt,name=resources,proto3" json:"resources,omitempty"`
	// Config for secret volume mounts.
	SecretVolumes []*SecretVolume `protobuf:"bytes,16,rep,name=secretVolumes,proto3" json:"secretVolumes,omitempty"`
	// Annotations to add to the egress gateway service.
	ServiceAnnotations *structpb.Struct `protobuf:"bytes,17,opt,name=serviceAnnotations,proto3" json:"serviceAnnotations,omitempty"`
	// Service type.
	//
	// See https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types
	Type string `protobuf:"bytes,18,opt,name=type,proto3" json:"type,omitempty"`
	// Enables cross-cluster access using SNI matching.
	Zvpn *ZeroVPNConfig `protobuf:"bytes,19,opt,name=zvpn,proto3" json:"zvpn,omitempty"`
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Tolerations []*v1.Toleration `protobuf:"bytes,20,rep,name=tolerations,proto3" json:"tolerations,omitempty"`
	// K8s rolling update strategy
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxSurge *IntOrString `protobuf:"bytes,21,opt,name=rollingMaxSurge,proto3" json:"rollingMaxSurge,omitempty"`
	// The number of pods that can be unavailable during a rolling update (see
	// `strategy.rollingUpdate.maxUnavailable` here:
	// https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/deployment-v1/#DeploymentSpec).
	// May be specified as a number of pods or as a percent of the total number
	// of pods at the start of the update.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxUnavailable *IntOrString          `protobuf:"bytes,22,opt,name=rollingMaxUnavailable,proto3" json:"rollingMaxUnavailable,omitempty"`
	ConfigVolumes         []*structpb.Struct    `protobuf:"bytes,23,rep,name=configVolumes,proto3" json:"configVolumes,omitempty"`
	AdditionalContainers  []*structpb.Struct    `protobuf:"bytes,24,rep,name=additionalContainers,proto3" json:"additionalContainers,omitempty"`
	RunAsRoot             *wrapperspb.BoolValue `protobuf:"bytes,26,opt,name=runAsRoot,proto3" json:"runAsRoot,omitempty"`
	// The injection template to use for the gateway. If not set, no injection will be performed.
	InjectionTemplate string          `protobuf:"bytes,27,opt,name=injectionTemplate,proto3" json:"injectionTemplate,omitempty"`
	ServiceAccount    *ServiceAccount `protobuf:"bytes,28,opt,name=serviceAccount,proto3" json:"serviceAccount,omitempty"`
	// Defines which IP family to use for single stack or the order of IP families for dual-stack.
	// Valid list items are "IPv4", "IPv6".
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilies []string `protobuf:"bytes,29,rep,name=ipFamilies,proto3" json:"ipFamilies,omitempty"`
	// Controls whether Services are configured to use IPv4, IPv6, or both. Valid options
	// are PreferDualStack, RequireDualStack, and SingleStack.
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilyPolicy string `protobuf:"bytes,30,opt,name=ipFamilyPolicy,proto3" json:"ipFamilyPolicy,omitempty"` // Next available 31.
	// contains filtered or unexported fields
}

Configuration for an egress gateway.

func (*EgressGatewayConfig) Descriptor deprecated

func (*EgressGatewayConfig) Descriptor() ([]byte, []int)

Deprecated: Use EgressGatewayConfig.ProtoReflect.Descriptor instead.

func (*EgressGatewayConfig) GetAdditionalContainers

func (x *EgressGatewayConfig) GetAdditionalContainers() []*structpb.Struct

func (*EgressGatewayConfig) GetAutoscaleEnabled

func (x *EgressGatewayConfig) GetAutoscaleEnabled() *wrapperspb.BoolValue

func (*EgressGatewayConfig) GetAutoscaleMax

func (x *EgressGatewayConfig) GetAutoscaleMax() uint32

func (*EgressGatewayConfig) GetAutoscaleMin

func (x *EgressGatewayConfig) GetAutoscaleMin() uint32

func (*EgressGatewayConfig) GetConfigVolumes

func (x *EgressGatewayConfig) GetConfigVolumes() []*structpb.Struct

func (*EgressGatewayConfig) GetCpu deprecated

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetCustomService

func (x *EgressGatewayConfig) GetCustomService() *wrapperspb.BoolValue

func (*EgressGatewayConfig) GetEnabled

func (x *EgressGatewayConfig) GetEnabled() *wrapperspb.BoolValue

func (*EgressGatewayConfig) GetEnv

func (x *EgressGatewayConfig) GetEnv() *structpb.Struct

func (*EgressGatewayConfig) GetInjectionTemplate

func (x *EgressGatewayConfig) GetInjectionTemplate() string

func (*EgressGatewayConfig) GetIpFamilies

func (x *EgressGatewayConfig) GetIpFamilies() []string

func (*EgressGatewayConfig) GetIpFamilyPolicy

func (x *EgressGatewayConfig) GetIpFamilyPolicy() string

func (*EgressGatewayConfig) GetLabels

func (x *EgressGatewayConfig) GetLabels() map[string]string

func (*EgressGatewayConfig) GetMemory deprecated

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetName

func (x *EgressGatewayConfig) GetName() string

func (*EgressGatewayConfig) GetNodeSelector deprecated

func (x *EgressGatewayConfig) GetNodeSelector() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetPodAnnotations deprecated

func (x *EgressGatewayConfig) GetPodAnnotations() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetPodAntiAffinityLabelSelector deprecated

func (x *EgressGatewayConfig) GetPodAntiAffinityLabelSelector() []*v11.LabelSelector

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetPodAntiAffinityTermLabelSelector deprecated

func (x *EgressGatewayConfig) GetPodAntiAffinityTermLabelSelector() []*v11.LabelSelector

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetPorts

func (x *EgressGatewayConfig) GetPorts() []*PortsConfig

func (*EgressGatewayConfig) GetResources deprecated

func (x *EgressGatewayConfig) GetResources() *Resources

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetRollingMaxSurge deprecated

func (x *EgressGatewayConfig) GetRollingMaxSurge() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetRollingMaxUnavailable deprecated

func (x *EgressGatewayConfig) GetRollingMaxUnavailable() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetRunAsRoot

func (x *EgressGatewayConfig) GetRunAsRoot() *wrapperspb.BoolValue

func (*EgressGatewayConfig) GetSecretVolumes

func (x *EgressGatewayConfig) GetSecretVolumes() []*SecretVolume

func (*EgressGatewayConfig) GetServiceAccount

func (x *EgressGatewayConfig) GetServiceAccount() *ServiceAccount

func (*EgressGatewayConfig) GetServiceAnnotations

func (x *EgressGatewayConfig) GetServiceAnnotations() *structpb.Struct

func (*EgressGatewayConfig) GetTolerations deprecated

func (x *EgressGatewayConfig) GetTolerations() []*v1.Toleration

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*EgressGatewayConfig) GetType

func (x *EgressGatewayConfig) GetType() string

func (*EgressGatewayConfig) GetZvpn

func (x *EgressGatewayConfig) GetZvpn() *ZeroVPNConfig

func (*EgressGatewayConfig) ProtoMessage

func (*EgressGatewayConfig) ProtoMessage()

func (*EgressGatewayConfig) ProtoReflect

func (x *EgressGatewayConfig) ProtoReflect() protoreflect.Message

func (*EgressGatewayConfig) Reset

func (x *EgressGatewayConfig) Reset()

func (*EgressGatewayConfig) String

func (x *EgressGatewayConfig) String() string

type ExperimentalConfig

type ExperimentalConfig struct {

	// Controls whether the experimental feature is enabled.
	StableValidationPolicy *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=stableValidationPolicy,proto3" json:"stableValidationPolicy,omitempty"`
	// contains filtered or unexported fields
}

ExperimentalConfig is a placeholder for experimental installation features.

func (*ExperimentalConfig) Descriptor deprecated

func (*ExperimentalConfig) Descriptor() ([]byte, []int)

Deprecated: Use ExperimentalConfig.ProtoReflect.Descriptor instead.

func (*ExperimentalConfig) GetStableValidationPolicy

func (x *ExperimentalConfig) GetStableValidationPolicy() *wrapperspb.BoolValue

func (*ExperimentalConfig) ProtoMessage

func (*ExperimentalConfig) ProtoMessage()

func (*ExperimentalConfig) ProtoReflect

func (x *ExperimentalConfig) ProtoReflect() protoreflect.Message

func (*ExperimentalConfig) Reset

func (x *ExperimentalConfig) Reset()

func (*ExperimentalConfig) String

func (x *ExperimentalConfig) String() string

type GatewayComponentSpec

type GatewayComponentSpec struct {
	ComponentSpec
	// Name for the component.
	Name string `json:"name,omitempty"`
	// Labels for the component.
	Label map[string]string `json:"label,omitempty"`
}

type GatewaysConfig

type GatewaysConfig struct {

	// Configuration for an egress gateway.
	IstioEgressgateway *EgressGatewayConfig `protobuf:"bytes,1,opt,name=istio_egressgateway,json=istio-egressgateway,proto3" json:"istio_egressgateway,omitempty"`
	// Controls whether any gateways are enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Configuration for an ingress gateway.
	IstioIngressgateway *IngressGatewayConfig `protobuf:"bytes,4,opt,name=istio_ingressgateway,json=istio-ingressgateway,proto3" json:"istio_ingressgateway,omitempty"`
	SecurityContext     *structpb.Value       `protobuf:"bytes,10,opt,name=securityContext,proto3" json:"securityContext,omitempty"`
	SeccompProfile      *structpb.Value       `protobuf:"bytes,12,opt,name=seccompProfile,proto3" json:"seccompProfile,omitempty"`
	// contains filtered or unexported fields
}

Configuration for gateways.

func (*GatewaysConfig) Descriptor deprecated

func (*GatewaysConfig) Descriptor() ([]byte, []int)

Deprecated: Use GatewaysConfig.ProtoReflect.Descriptor instead.

func (*GatewaysConfig) GetEnabled

func (x *GatewaysConfig) GetEnabled() *wrapperspb.BoolValue

func (*GatewaysConfig) GetIstioEgressgateway

func (x *GatewaysConfig) GetIstioEgressgateway() *EgressGatewayConfig

func (*GatewaysConfig) GetIstioIngressgateway

func (x *GatewaysConfig) GetIstioIngressgateway() *IngressGatewayConfig

func (*GatewaysConfig) GetSeccompProfile

func (x *GatewaysConfig) GetSeccompProfile() *structpb.Value

func (*GatewaysConfig) GetSecurityContext

func (x *GatewaysConfig) GetSecurityContext() *structpb.Value

func (*GatewaysConfig) ProtoMessage

func (*GatewaysConfig) ProtoMessage()

func (*GatewaysConfig) ProtoReflect

func (x *GatewaysConfig) ProtoReflect() protoreflect.Message

func (*GatewaysConfig) Reset

func (x *GatewaysConfig) Reset()

func (*GatewaysConfig) String

func (x *GatewaysConfig) String() string

type GlobalConfig

type GlobalConfig struct {

	// Specifies pod scheduling arch(amd64, ppc64le, s390x, arm64) and weight as follows:
	//
	//	0 - Never scheduled
	//	1 - Least preferred
	//	2 - No preference
	//	3 - Most preferred
	//
	// Deprecated: replaced by the affinity k8s settings which allows architecture nodeAffinity configuration of this behavior.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Arch *ArchConfig `protobuf:"bytes,1,opt,name=arch,proto3" json:"arch,omitempty"`
	// List of certSigners to allow "approve" action in the ClusterRole
	CertSigners []string `protobuf:"bytes,68,rep,name=certSigners,proto3" json:"certSigners,omitempty"`
	// Controls whether the server-side validation is enabled.
	ConfigValidation *wrapperspb.BoolValue `protobuf:"bytes,3,opt,name=configValidation,proto3" json:"configValidation,omitempty"`
	// Default k8s node selector for all the Istio control plane components
	//
	// See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	DefaultNodeSelector *structpb.Struct `protobuf:"bytes,6,opt,name=defaultNodeSelector,proto3" json:"defaultNodeSelector,omitempty"`
	// Specifies the default pod disruption budget configuration.
	DefaultPodDisruptionBudget *DefaultPodDisruptionBudgetConfig `protobuf:"bytes,7,opt,name=defaultPodDisruptionBudget,proto3" json:"defaultPodDisruptionBudget,omitempty"`
	// Default k8s resources settings for all Istio control plane components.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	DefaultResources *DefaultResourcesConfig `protobuf:"bytes,9,opt,name=defaultResources,proto3" json:"defaultResources,omitempty"`
	// Default node tolerations to be applied to all deployments so that all pods can be
	// scheduled to nodes with matching taints. Each component can overwrite
	// these default values by adding its tolerations block in the relevant section below
	// and setting the desired values.
	// Configure this field in case that all pods of Istio control plane are expected to
	// be scheduled to particular nodes with specified taints.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	DefaultTolerations []*v1.Toleration `protobuf:"bytes,55,rep,name=defaultTolerations,proto3" json:"defaultTolerations,omitempty"`
	// Specifies the docker hub for Istio images.
	Hub string `protobuf:"bytes,12,opt,name=hub,proto3" json:"hub,omitempty"`
	// Specifies the image pull policy for the Istio images. one of Always, Never, IfNotPresent.
	// Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. Cannot be updated.
	//
	// More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
	ImagePullPolicy string `protobuf:"bytes,13,opt,name=imagePullPolicy,proto3" json:"imagePullPolicy,omitempty"`
	// ImagePullSecrets for the control plane ServiceAccount, list of secrets in the same namespace
	// to use for pulling any images in pods that reference this ServiceAccount.
	// Must be set for any cluster configured with private docker registry.
	ImagePullSecrets []string `protobuf:"bytes,37,rep,name=imagePullSecrets,proto3" json:"imagePullSecrets,omitempty"`
	// Specifies the default namespace for the Istio control plane components.
	IstioNamespace string `protobuf:"bytes,14,opt,name=istioNamespace,proto3" json:"istioNamespace,omitempty"`
	// Specifies whether istio components should output logs in json format by adding --log_as_json argument to each container.
	LogAsJson *wrapperspb.BoolValue `protobuf:"bytes,36,opt,name=logAsJson,proto3" json:"logAsJson,omitempty"`
	// Specifies the global logging level settings for the Istio control plane components.
	Logging *GlobalLoggingConfig `protobuf:"bytes,17,opt,name=logging,proto3" json:"logging,omitempty"`
	// The Mesh Identifier. It should be unique within the scope where
	// meshes will interact with each other, but it is not required to be
	// globally/universally unique. For example, if any of the following are true,
	// then two meshes must have different Mesh IDs:
	// - Meshes will have their telemetry aggregated in one place
	// - Meshes will be federated together
	// - Policy will be written referencing one mesh from the other
	//
	// If an administrator expects that any of these conditions may become true in
	// the future, they should ensure their meshes have different Mesh IDs
	// assigned.
	//
	// Within a multicluster mesh, each cluster must be (manually or auto)
	// configured to have the same Mesh ID value. If an existing cluster 'joins' a
	// multicluster mesh, it will need to be migrated to the new mesh ID. Details
	// of migration TBD, and it may be a disruptive operation to change the Mesh
	// ID post-install.
	//
	// If the mesh admin does not specify a value, Istio will use the value of the
	// mesh's Trust Domain. The best practice is to select a proper Trust Domain
	// value.
	MeshID string `protobuf:"bytes,53,opt,name=meshID,proto3" json:"meshID,omitempty"`
	// Configure the mesh networks to be used by the Split Horizon EDS.
	//
	// The following example defines two networks with different endpoints association methods.
	// For `network1` all endpoints that their IP belongs to the provided CIDR range will be
	// mapped to network1. The gateway for this network example is specified by its public IP
	// address and port.
	// The second network, `network2`, in this example is defined differently with all endpoints
	// retrieved through the specified Multi-Cluster registry being mapped to network2. The
	// gateway is also defined differently with the name of the gateway service on the remote
	// cluster. The public IP for the gateway will be determined from that remote service (only
	// LoadBalancer gateway service type is currently supported, for a NodePort type gateway service,
	// it still need to be configured manually).
	//
	// meshNetworks:
	//
	//	network1:
	//	  endpoints:
	//	  - fromCidr: "192.168.0.1/24"
	//	  gateways:
	//	  - address: 1.1.1.1
	//	    port: 80
	//	network2:
	//	  endpoints:
	//	  - fromRegistry: reg1
	//	  gateways:
	//	  - registryServiceName: istio-ingressgateway.istio-system.svc.cluster.local
	//	    port: 443
	MeshNetworks *structpb.Struct `protobuf:"bytes,19,opt,name=meshNetworks,proto3" json:"meshNetworks,omitempty"`
	// Specifies the Configuration for Istio mesh across multiple clusters through Istio gateways.
	MultiCluster *MultiClusterConfig `protobuf:"bytes,22,opt,name=multiCluster,proto3" json:"multiCluster,omitempty"`
	// Network defines the network this cluster belong to. This name
	// corresponds to the networks in the map of mesh networks.
	Network string `protobuf:"bytes,39,opt,name=network,proto3" json:"network,omitempty"`
	// Custom DNS config for the pod to resolve names of services in other
	// clusters. Use this to add additional search domains, and other settings.
	// see https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#dns-config
	// This does not apply to gateway pods as they typically need a different
	// set of DNS settings than the normal application pods (e.g. in multicluster scenarios).
	PodDNSSearchNamespaces []string `protobuf:"bytes,43,rep,name=podDNSSearchNamespaces,proto3" json:"podDNSSearchNamespaces,omitempty"`
	// Controls whether the creation of the sidecar injector ConfigMap should be skipped.
	// Defaults to false. When set to true, the sidecar injector ConfigMap will not be created.
	OmitSidecarInjectorConfigMap *wrapperspb.BoolValue `protobuf:"bytes,38,opt,name=omitSidecarInjectorConfigMap,proto3" json:"omitSidecarInjectorConfigMap,omitempty"`
	// Controls whether the WebhookConfiguration resource(s) should be created. The current behavior
	// of Istiod is to manage its own webhook configurations.
	// When this option is set to true, Istio Operator, instead of webhooks, manages the
	// webhook configurations. When this option is set as false, webhooks manage their
	// own webhook configurations.
	OperatorManageWebhooks *wrapperspb.BoolValue `protobuf:"bytes,41,opt,name=operatorManageWebhooks,proto3" json:"operatorManageWebhooks,omitempty"`
	// Specifies the k8s priorityClassName for the istio control plane components.
	//
	// See https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/#priorityclass
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PriorityClassName string `protobuf:"bytes,27,opt,name=priorityClassName,proto3" json:"priorityClassName,omitempty"`
	// Specifies how proxies are configured within Istio.
	Proxy *ProxyConfig `protobuf:"bytes,28,opt,name=proxy,proto3" json:"proxy,omitempty"`
	// Specifies the Configuration for proxy_init container which sets the pods' networking to intercept the inbound/outbound traffic.
	ProxyInit *ProxyInitConfig `protobuf:"bytes,29,opt,name=proxy_init,proto3" json:"proxy_init,omitempty"`
	// Specifies the Configuration for the SecretDiscoveryService instead of using K8S secrets to mount the certificates.
	Sds *SDSConfig `protobuf:"bytes,30,opt,name=sds,proto3" json:"sds,omitempty"`
	// Specifies the tag for the Istio docker images.
	Tag *structpb.Value `protobuf:"bytes,31,opt,name=tag,proto3" json:"tag,omitempty"`
	// The variant of the Istio container images to use. Options are "debug" or "distroless". Unset will use the default for the given version.
	Variant string `protobuf:"bytes,67,opt,name=variant,proto3" json:"variant,omitempty"`
	// Specifies the Configuration for each of the supported tracers.
	Tracer *TracerConfig `protobuf:"bytes,33,opt,name=tracer,proto3" json:"tracer,omitempty"`
	// Specifies the Istio control plane’s pilot Pod IP address or remote cluster DNS resolvable hostname.
	RemotePilotAddress string `protobuf:"bytes,48,opt,name=remotePilotAddress,proto3" json:"remotePilotAddress,omitempty"`
	// Specifies the configution of istiod
	Istiod *IstiodConfig `protobuf:"bytes,54,opt,name=istiod,proto3" json:"istiod,omitempty"`
	// Configure the Pilot certificate provider.
	// Currently, four providers are supported: "kubernetes", "istiod", "custom" and "none".
	PilotCertProvider string `protobuf:"bytes,56,opt,name=pilotCertProvider,proto3" json:"pilotCertProvider,omitempty"`
	// Configure the policy for validating JWT.
	// This is deprecated and has no effect.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	JwtPolicy string `protobuf:"bytes,57,opt,name=jwtPolicy,proto3" json:"jwtPolicy,omitempty"`
	// Specifies the configuration for Security Token Service.
	Sts *STSConfig `protobuf:"bytes,58,opt,name=sts,proto3" json:"sts,omitempty"`
	// Configures the revision this control plane is a part of
	Revision string `protobuf:"bytes,59,opt,name=revision,proto3" json:"revision,omitempty"`
	// Controls whether the in-cluster MTLS key and certs are loaded from the secret volume mounts.
	MountMtlsCerts *wrapperspb.BoolValue `protobuf:"bytes,60,opt,name=mountMtlsCerts,proto3" json:"mountMtlsCerts,omitempty"`
	// The address of the CA for CSR.
	CaAddress string `protobuf:"bytes,61,opt,name=caAddress,proto3" json:"caAddress,omitempty"`
	// Controls whether one external istiod is enabled.
	ExternalIstiod *wrapperspb.BoolValue `protobuf:"bytes,62,opt,name=externalIstiod,proto3" json:"externalIstiod,omitempty"`
	// Controls whether a remote cluster is the config cluster for an external istiod
	ConfigCluster *wrapperspb.BoolValue `protobuf:"bytes,64,opt,name=configCluster,proto3" json:"configCluster,omitempty"`
	// The name of the CA for workloads.
	// For example, when caName=GkeWorkloadCertificate, GKE workload certificates
	// will be used as the certificates for workloads.
	// The default value is "" and when caName="", the CA will be configured by other
	// mechanisms (e.g., environmental variable CA_PROVIDER).
	CaName string `protobuf:"bytes,65,opt,name=caName,proto3" json:"caName,omitempty"`
	// Platform in which Istio is deployed. Possible values are: "openshift" and "gcp"
	// An empty value means it is a vanilla Kubernetes distribution, therefore no special
	// treatment will be considered.
	Platform string `protobuf:"bytes,69,opt,name=platform,proto3" json:"platform,omitempty"`
	// Defines which IP family to use for single stack or the order of IP families for dual-stack.
	// Valid list items are "IPv4", "IPv6".
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilies []string `protobuf:"bytes,70,rep,name=ipFamilies,proto3" json:"ipFamilies,omitempty"`
	// Controls whether Services are configured to use IPv4, IPv6, or both. Valid options
	// are PreferDualStack, RequireDualStack, and SingleStack.
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilyPolicy string `protobuf:"bytes,71,opt,name=ipFamilyPolicy,proto3" json:"ipFamilyPolicy,omitempty"`
	// Specifies how waypoints are configured within Istio.
	Waypoint *WaypointConfig `protobuf:"bytes,72,opt,name=waypoint,proto3" json:"waypoint,omitempty"` // The next available key is 73
	// contains filtered or unexported fields
}

Global Configuration for Istio components.

func (*GlobalConfig) Descriptor deprecated

func (*GlobalConfig) Descriptor() ([]byte, []int)

Deprecated: Use GlobalConfig.ProtoReflect.Descriptor instead.

func (*GlobalConfig) GetArch deprecated

func (x *GlobalConfig) GetArch() *ArchConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetCaAddress

func (x *GlobalConfig) GetCaAddress() string

func (*GlobalConfig) GetCaName

func (x *GlobalConfig) GetCaName() string

func (*GlobalConfig) GetCertSigners

func (x *GlobalConfig) GetCertSigners() []string

func (*GlobalConfig) GetConfigCluster

func (x *GlobalConfig) GetConfigCluster() *wrapperspb.BoolValue

func (*GlobalConfig) GetConfigValidation

func (x *GlobalConfig) GetConfigValidation() *wrapperspb.BoolValue

func (*GlobalConfig) GetDefaultNodeSelector deprecated

func (x *GlobalConfig) GetDefaultNodeSelector() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetDefaultPodDisruptionBudget

func (x *GlobalConfig) GetDefaultPodDisruptionBudget() *DefaultPodDisruptionBudgetConfig

func (*GlobalConfig) GetDefaultResources deprecated

func (x *GlobalConfig) GetDefaultResources() *DefaultResourcesConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetDefaultTolerations deprecated

func (x *GlobalConfig) GetDefaultTolerations() []*v1.Toleration

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetExternalIstiod

func (x *GlobalConfig) GetExternalIstiod() *wrapperspb.BoolValue

func (*GlobalConfig) GetHub

func (x *GlobalConfig) GetHub() string

func (*GlobalConfig) GetImagePullPolicy

func (x *GlobalConfig) GetImagePullPolicy() string

func (*GlobalConfig) GetImagePullSecrets

func (x *GlobalConfig) GetImagePullSecrets() []string

func (*GlobalConfig) GetIpFamilies

func (x *GlobalConfig) GetIpFamilies() []string

func (*GlobalConfig) GetIpFamilyPolicy

func (x *GlobalConfig) GetIpFamilyPolicy() string

func (*GlobalConfig) GetIstioNamespace

func (x *GlobalConfig) GetIstioNamespace() string

func (*GlobalConfig) GetIstiod

func (x *GlobalConfig) GetIstiod() *IstiodConfig

func (*GlobalConfig) GetJwtPolicy deprecated

func (x *GlobalConfig) GetJwtPolicy() string

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetLogAsJson

func (x *GlobalConfig) GetLogAsJson() *wrapperspb.BoolValue

func (*GlobalConfig) GetLogging

func (x *GlobalConfig) GetLogging() *GlobalLoggingConfig

func (*GlobalConfig) GetMeshID

func (x *GlobalConfig) GetMeshID() string

func (*GlobalConfig) GetMeshNetworks

func (x *GlobalConfig) GetMeshNetworks() *structpb.Struct

func (*GlobalConfig) GetMountMtlsCerts

func (x *GlobalConfig) GetMountMtlsCerts() *wrapperspb.BoolValue

func (*GlobalConfig) GetMultiCluster

func (x *GlobalConfig) GetMultiCluster() *MultiClusterConfig

func (*GlobalConfig) GetNetwork

func (x *GlobalConfig) GetNetwork() string

func (*GlobalConfig) GetOmitSidecarInjectorConfigMap

func (x *GlobalConfig) GetOmitSidecarInjectorConfigMap() *wrapperspb.BoolValue

func (*GlobalConfig) GetOperatorManageWebhooks

func (x *GlobalConfig) GetOperatorManageWebhooks() *wrapperspb.BoolValue

func (*GlobalConfig) GetPilotCertProvider

func (x *GlobalConfig) GetPilotCertProvider() string

func (*GlobalConfig) GetPlatform

func (x *GlobalConfig) GetPlatform() string

func (*GlobalConfig) GetPodDNSSearchNamespaces

func (x *GlobalConfig) GetPodDNSSearchNamespaces() []string

func (*GlobalConfig) GetPriorityClassName deprecated

func (x *GlobalConfig) GetPriorityClassName() string

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*GlobalConfig) GetProxy

func (x *GlobalConfig) GetProxy() *ProxyConfig

func (*GlobalConfig) GetProxyInit

func (x *GlobalConfig) GetProxyInit() *ProxyInitConfig

func (*GlobalConfig) GetRemotePilotAddress

func (x *GlobalConfig) GetRemotePilotAddress() string

func (*GlobalConfig) GetRevision

func (x *GlobalConfig) GetRevision() string

func (*GlobalConfig) GetSds

func (x *GlobalConfig) GetSds() *SDSConfig

func (*GlobalConfig) GetSts

func (x *GlobalConfig) GetSts() *STSConfig

func (*GlobalConfig) GetTag

func (x *GlobalConfig) GetTag() *structpb.Value

func (*GlobalConfig) GetTracer

func (x *GlobalConfig) GetTracer() *TracerConfig

func (*GlobalConfig) GetVariant

func (x *GlobalConfig) GetVariant() string

func (*GlobalConfig) GetWaypoint

func (x *GlobalConfig) GetWaypoint() *WaypointConfig

func (*GlobalConfig) ProtoMessage

func (*GlobalConfig) ProtoMessage()

func (*GlobalConfig) ProtoReflect

func (x *GlobalConfig) ProtoReflect() protoreflect.Message

func (*GlobalConfig) Reset

func (x *GlobalConfig) Reset()

func (*GlobalConfig) String

func (x *GlobalConfig) String() string

type GlobalLoggingConfig

type GlobalLoggingConfig struct {

	// Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>
	// The control plane has different scopes depending on component, but can configure default log level across all components
	// If empty, default scope and level will be used as configured in code
	Level string `protobuf:"bytes,1,opt,name=level,proto3" json:"level,omitempty"`
	// contains filtered or unexported fields
}

GlobalLoggingConfig specifies the global logging level settings for the Istio control plane components.

func (*GlobalLoggingConfig) Descriptor deprecated

func (*GlobalLoggingConfig) Descriptor() ([]byte, []int)

Deprecated: Use GlobalLoggingConfig.ProtoReflect.Descriptor instead.

func (*GlobalLoggingConfig) GetLevel

func (x *GlobalLoggingConfig) GetLevel() string

func (*GlobalLoggingConfig) ProtoMessage

func (*GlobalLoggingConfig) ProtoMessage()

func (*GlobalLoggingConfig) ProtoReflect

func (x *GlobalLoggingConfig) ProtoReflect() protoreflect.Message

func (*GlobalLoggingConfig) Reset

func (x *GlobalLoggingConfig) Reset()

func (*GlobalLoggingConfig) String

func (x *GlobalLoggingConfig) String() string

type IngressControllerMode

type IngressControllerMode int32

Mode for the ingress controller.

const (
	// Unspecified Istio ingress controller.
	IngressControllerMode_UNSPECIFIED IngressControllerMode = 0
	// Selects all Ingress resources, with or without Istio annotation.
	IngressControllerMode_DEFAULT IngressControllerMode = 1
	// Selects only resources with istio annotation.
	IngressControllerMode_STRICT IngressControllerMode = 2
	// No ingress or sync.
	IngressControllerMode_OFF IngressControllerMode = 3
)

func (IngressControllerMode) Descriptor

func (IngressControllerMode) Enum

func (IngressControllerMode) EnumDescriptor deprecated

func (IngressControllerMode) EnumDescriptor() ([]byte, []int)

Deprecated: Use IngressControllerMode.Descriptor instead.

func (IngressControllerMode) Number

func (IngressControllerMode) String

func (x IngressControllerMode) String() string

func (IngressControllerMode) Type

type IngressGatewayConfig

type IngressGatewayConfig struct {

	// Controls whether auto scaling with a HorizontalPodAutoscaler is enabled.
	AutoscaleEnabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=autoscaleEnabled,proto3" json:"autoscaleEnabled,omitempty"`
	// maxReplicas setting for HorizontalPodAutoscaler.
	AutoscaleMax uint32 `protobuf:"varint,2,opt,name=autoscaleMax,proto3" json:"autoscaleMax,omitempty"`
	// minReplicas setting for HorizontalPodAutoscaler.
	AutoscaleMin uint32 `protobuf:"varint,3,opt,name=autoscaleMin,proto3" json:"autoscaleMin,omitempty"`
	// K8s memory utilization setting for HorizontalPodAutoscaler target.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Memory *TargetUtilizationConfig `protobuf:"bytes,4,opt,name=memory,proto3" json:"memory,omitempty"`
	// K8s cpu utilization setting for HorizontalPodAutoscaler target.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Cpu           *TargetUtilizationConfig `protobuf:"bytes,5,opt,name=cpu,proto3" json:"cpu,omitempty"`
	CustomService *wrapperspb.BoolValue    `protobuf:"bytes,6,opt,name=customService,proto3" json:"customService,omitempty"`
	// Controls whether an ingress gateway is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,10,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Environment variables passed to the proxy container.
	Env                      *structpb.Struct  `protobuf:"bytes,11,opt,name=env,proto3" json:"env,omitempty"`
	Labels                   map[string]string `` /* 154-byte string literal not displayed */
	LoadBalancerIP           string            `protobuf:"bytes,16,opt,name=loadBalancerIP,proto3" json:"loadBalancerIP,omitempty"`
	LoadBalancerSourceRanges []string          `protobuf:"bytes,17,rep,name=loadBalancerSourceRanges,proto3" json:"loadBalancerSourceRanges,omitempty"`
	Name                     string            `protobuf:"bytes,44,opt,name=name,proto3" json:"name,omitempty"`
	// K8s node selector.
	//
	// See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	NodeSelector *structpb.Struct `protobuf:"bytes,19,opt,name=nodeSelector,proto3" json:"nodeSelector,omitempty"`
	// K8s annotations for pods.
	//
	// See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAnnotations *structpb.Struct `protobuf:"bytes,20,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"`
	// See EgressGatewayConfig.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAntiAffinityLabelSelector []*v11.LabelSelector `protobuf:"bytes,21,rep,name=podAntiAffinityLabelSelector,proto3" json:"podAntiAffinityLabelSelector,omitempty"`
	// See EgressGatewayConfig.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAntiAffinityTermLabelSelector []*v11.LabelSelector `protobuf:"bytes,22,rep,name=podAntiAffinityTermLabelSelector,proto3" json:"podAntiAffinityTermLabelSelector,omitempty"`
	// Port Configuration for the ingress gateway.
	Ports []*PortsConfig `protobuf:"bytes,23,rep,name=ports,proto3" json:"ports,omitempty"`
	// Number of replicas for the ingress gateway Deployment.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	ReplicaCount uint32 `protobuf:"varint,24,opt,name=replicaCount,proto3" json:"replicaCount,omitempty"`
	// K8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Resources *structpb.Struct `protobuf:"bytes,25,opt,name=resources,proto3" json:"resources,omitempty"`
	// Config for secret volume mounts.
	SecretVolumes []*SecretVolume `protobuf:"bytes,27,rep,name=secretVolumes,proto3" json:"secretVolumes,omitempty"`
	// Annotations to add to the egress gateway service.
	ServiceAnnotations *structpb.Struct `protobuf:"bytes,28,opt,name=serviceAnnotations,proto3" json:"serviceAnnotations,omitempty"`
	// Service type.
	//
	// See https://kubernetes.io/docs/concepts/services-networking/service/#publishing-services-service-types
	Type string `protobuf:"bytes,29,opt,name=type,proto3" json:"type,omitempty"`
	// Enables cross-cluster access using SNI matching.
	Zvpn *IngressGatewayZvpnConfig `protobuf:"bytes,30,opt,name=zvpn,proto3" json:"zvpn,omitempty"`
	// K8s rolling update strategy
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxSurge *IntOrString `protobuf:"bytes,31,opt,name=rollingMaxSurge,proto3" json:"rollingMaxSurge,omitempty"`
	// The number of pods that can be unavailable during a rolling update (see
	// `strategy.rollingUpdate.maxUnavailable` here:
	// https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/deployment-v1/#DeploymentSpec).
	// May be specified as a number of pods or as a percent of the total number
	// of pods at the start of the update.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxUnavailable *IntOrString `protobuf:"bytes,32,opt,name=rollingMaxUnavailable,proto3" json:"rollingMaxUnavailable,omitempty"`
	ExternalTrafficPolicy string       `protobuf:"bytes,34,opt,name=externalTrafficPolicy,proto3" json:"externalTrafficPolicy,omitempty"`
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Tolerations          []*v1.Toleration      `protobuf:"bytes,35,rep,name=tolerations,proto3" json:"tolerations,omitempty"`
	IngressPorts         []*structpb.Struct    `protobuf:"bytes,36,rep,name=ingressPorts,proto3" json:"ingressPorts,omitempty"`
	AdditionalContainers []*structpb.Struct    `protobuf:"bytes,37,rep,name=additionalContainers,proto3" json:"additionalContainers,omitempty"`
	ConfigVolumes        []*structpb.Struct    `protobuf:"bytes,38,rep,name=configVolumes,proto3" json:"configVolumes,omitempty"`
	RunAsRoot            *wrapperspb.BoolValue `protobuf:"bytes,45,opt,name=runAsRoot,proto3" json:"runAsRoot,omitempty"`
	// The injection template to use for the gateway. If not set, no injection will be performed.
	InjectionTemplate string          `protobuf:"bytes,46,opt,name=injectionTemplate,proto3" json:"injectionTemplate,omitempty"`
	ServiceAccount    *ServiceAccount `protobuf:"bytes,47,opt,name=serviceAccount,proto3" json:"serviceAccount,omitempty"`
	// Defines which IP family to use for single stack or the order of IP families for dual-stack.
	// Valid list items are "IPv4", "IPv6".
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilies []string `protobuf:"bytes,48,rep,name=ipFamilies,proto3" json:"ipFamilies,omitempty"`
	// Controls whether Services are configured to use IPv4, IPv6, or both. Valid options
	// are PreferDualStack, RequireDualStack, and SingleStack.
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilyPolicy string `protobuf:"bytes,49,opt,name=ipFamilyPolicy,proto3" json:"ipFamilyPolicy,omitempty"` // Next available 50.
	// contains filtered or unexported fields
}

Configuration for an ingress gateway.

func (*IngressGatewayConfig) Descriptor deprecated

func (*IngressGatewayConfig) Descriptor() ([]byte, []int)

Deprecated: Use IngressGatewayConfig.ProtoReflect.Descriptor instead.

func (*IngressGatewayConfig) GetAdditionalContainers

func (x *IngressGatewayConfig) GetAdditionalContainers() []*structpb.Struct

func (*IngressGatewayConfig) GetAutoscaleEnabled

func (x *IngressGatewayConfig) GetAutoscaleEnabled() *wrapperspb.BoolValue

func (*IngressGatewayConfig) GetAutoscaleMax

func (x *IngressGatewayConfig) GetAutoscaleMax() uint32

func (*IngressGatewayConfig) GetAutoscaleMin

func (x *IngressGatewayConfig) GetAutoscaleMin() uint32

func (*IngressGatewayConfig) GetConfigVolumes

func (x *IngressGatewayConfig) GetConfigVolumes() []*structpb.Struct

func (*IngressGatewayConfig) GetCpu deprecated

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetCustomService

func (x *IngressGatewayConfig) GetCustomService() *wrapperspb.BoolValue

func (*IngressGatewayConfig) GetEnabled

func (x *IngressGatewayConfig) GetEnabled() *wrapperspb.BoolValue

func (*IngressGatewayConfig) GetEnv

func (x *IngressGatewayConfig) GetEnv() *structpb.Struct

func (*IngressGatewayConfig) GetExternalTrafficPolicy

func (x *IngressGatewayConfig) GetExternalTrafficPolicy() string

func (*IngressGatewayConfig) GetIngressPorts

func (x *IngressGatewayConfig) GetIngressPorts() []*structpb.Struct

func (*IngressGatewayConfig) GetInjectionTemplate

func (x *IngressGatewayConfig) GetInjectionTemplate() string

func (*IngressGatewayConfig) GetIpFamilies

func (x *IngressGatewayConfig) GetIpFamilies() []string

func (*IngressGatewayConfig) GetIpFamilyPolicy

func (x *IngressGatewayConfig) GetIpFamilyPolicy() string

func (*IngressGatewayConfig) GetLabels

func (x *IngressGatewayConfig) GetLabels() map[string]string

func (*IngressGatewayConfig) GetLoadBalancerIP

func (x *IngressGatewayConfig) GetLoadBalancerIP() string

func (*IngressGatewayConfig) GetLoadBalancerSourceRanges

func (x *IngressGatewayConfig) GetLoadBalancerSourceRanges() []string

func (*IngressGatewayConfig) GetMemory deprecated

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetName

func (x *IngressGatewayConfig) GetName() string

func (*IngressGatewayConfig) GetNodeSelector deprecated

func (x *IngressGatewayConfig) GetNodeSelector() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetPodAnnotations deprecated

func (x *IngressGatewayConfig) GetPodAnnotations() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetPodAntiAffinityLabelSelector deprecated

func (x *IngressGatewayConfig) GetPodAntiAffinityLabelSelector() []*v11.LabelSelector

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetPodAntiAffinityTermLabelSelector deprecated

func (x *IngressGatewayConfig) GetPodAntiAffinityTermLabelSelector() []*v11.LabelSelector

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetPorts

func (x *IngressGatewayConfig) GetPorts() []*PortsConfig

func (*IngressGatewayConfig) GetReplicaCount deprecated

func (x *IngressGatewayConfig) GetReplicaCount() uint32

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetResources deprecated

func (x *IngressGatewayConfig) GetResources() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetRollingMaxSurge deprecated

func (x *IngressGatewayConfig) GetRollingMaxSurge() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetRollingMaxUnavailable deprecated

func (x *IngressGatewayConfig) GetRollingMaxUnavailable() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetRunAsRoot

func (x *IngressGatewayConfig) GetRunAsRoot() *wrapperspb.BoolValue

func (*IngressGatewayConfig) GetSecretVolumes

func (x *IngressGatewayConfig) GetSecretVolumes() []*SecretVolume

func (*IngressGatewayConfig) GetServiceAccount

func (x *IngressGatewayConfig) GetServiceAccount() *ServiceAccount

func (*IngressGatewayConfig) GetServiceAnnotations

func (x *IngressGatewayConfig) GetServiceAnnotations() *structpb.Struct

func (*IngressGatewayConfig) GetTolerations deprecated

func (x *IngressGatewayConfig) GetTolerations() []*v1.Toleration

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*IngressGatewayConfig) GetType

func (x *IngressGatewayConfig) GetType() string

func (*IngressGatewayConfig) GetZvpn

func (*IngressGatewayConfig) ProtoMessage

func (*IngressGatewayConfig) ProtoMessage()

func (*IngressGatewayConfig) ProtoReflect

func (x *IngressGatewayConfig) ProtoReflect() protoreflect.Message

func (*IngressGatewayConfig) Reset

func (x *IngressGatewayConfig) Reset()

func (*IngressGatewayConfig) String

func (x *IngressGatewayConfig) String() string

type IngressGatewayZvpnConfig

type IngressGatewayZvpnConfig struct {

	// Controls whether ZeroVPN is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	Suffix  string                `protobuf:"bytes,2,opt,name=suffix,proto3" json:"suffix,omitempty"`
	// contains filtered or unexported fields
}

IngressGatewayZvpnConfig enables cross-cluster access using SNI matching.

func (*IngressGatewayZvpnConfig) Descriptor deprecated

func (*IngressGatewayZvpnConfig) Descriptor() ([]byte, []int)

Deprecated: Use IngressGatewayZvpnConfig.ProtoReflect.Descriptor instead.

func (*IngressGatewayZvpnConfig) GetEnabled

func (*IngressGatewayZvpnConfig) GetSuffix

func (x *IngressGatewayZvpnConfig) GetSuffix() string

func (*IngressGatewayZvpnConfig) ProtoMessage

func (*IngressGatewayZvpnConfig) ProtoMessage()

func (*IngressGatewayZvpnConfig) ProtoReflect

func (x *IngressGatewayZvpnConfig) ProtoReflect() protoreflect.Message

func (*IngressGatewayZvpnConfig) Reset

func (x *IngressGatewayZvpnConfig) Reset()

func (*IngressGatewayZvpnConfig) String

func (x *IngressGatewayZvpnConfig) String() string

type IntOrString

type IntOrString struct {
	Type   int64                   `protobuf:"varint,1,opt,name=type,proto3" json:"type,omitempty"`
	IntVal *wrapperspb.Int32Value  `protobuf:"bytes,2,opt,name=intVal,proto3" json:"intVal,omitempty"`
	StrVal *wrapperspb.StringValue `protobuf:"bytes,3,opt,name=strVal,proto3" json:"strVal,omitempty"`
	// contains filtered or unexported fields
}

IntOrString is a type that can hold an int32 or a string. When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type. This allows you to have, for example, a JSON field that can accept a name or number. TODO: Rename to Int32OrString

+protobuf=true +protobuf.options.(gogoproto.goproto_stringer)=false +k8s:openapi-gen=true

func (*IntOrString) Descriptor deprecated

func (*IntOrString) Descriptor() ([]byte, []int)

Deprecated: Use IntOrString.ProtoReflect.Descriptor instead.

func (*IntOrString) GetIntVal

func (x *IntOrString) GetIntVal() *wrapperspb.Int32Value

func (*IntOrString) GetStrVal

func (x *IntOrString) GetStrVal() *wrapperspb.StringValue

func (*IntOrString) GetType

func (x *IntOrString) GetType() int64

func (*IntOrString) MarshalJSON

func (i *IntOrString) MarshalJSON() ([]byte, error)

func (*IntOrString) MarshalJSONPB

func (*IntOrString) ProtoMessage

func (*IntOrString) ProtoMessage()

func (*IntOrString) ProtoReflect

func (x *IntOrString) ProtoReflect() protoreflect.Message

func (*IntOrString) Reset

func (x *IntOrString) Reset()

func (*IntOrString) String

func (x *IntOrString) String() string

func (*IntOrString) ToKubernetes

func (i *IntOrString) ToKubernetes() intstr.IntOrString

func (*IntOrString) UnmarshalJSON

func (i *IntOrString) UnmarshalJSON(value []byte) error

UnmarshalJSON implements the json.Unmarshaller interface.

func (*IntOrString) UnmarshalJSONPB

func (i *IntOrString) UnmarshalJSONPB(_ *github_com_golang_protobuf_jsonpb.Unmarshaler, value []byte) error

type IstioComponentSpec

type IstioComponentSpec struct {
	Base    *BaseComponentSpec `json:"base,omitempty"`
	Pilot   *ComponentSpec     `json:"pilot,omitempty"`
	Cni     *ComponentSpec     `json:"cni,omitempty"`
	Ztunnel *ComponentSpec     `json:"ztunnel,omitempty"`
	// Remote cluster using an external control plane.
	IstiodRemote    *ComponentSpec         `json:"istiodRemote,omitempty"`
	IngressGateways []GatewayComponentSpec `json:"ingressGateways,omitempty"`
	EgressGateways  []GatewayComponentSpec `json:"egressGateways,omitempty"`
}

type IstioOperator

type IstioOperator struct {
	metav1.TypeMeta `json:",inline"`
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty""`

	// Spec defines the implementation of this definition.
	// +optional
	Spec IstioOperatorSpec `json:"spec,omitempty"`
}

IstioOperatorSpec defines the desired installed state of Istio components. The spec is a used to define a customization of the default profile values that are supplied with each Istio release. Because the spec is a customization API, specifying an empty IstioOperatorSpec results in a default Istio component values.

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  profile: default
  hub: gcr.io/istio-testing
  tag: latest
  revision: 1-8-0
  meshConfig:
    accessLogFile: /dev/stdout
    enableTracing: true
  components:
    egressGateways:
    - name: istio-egressgateway
      enabled: true

+kubetype-gen +kubetype-gen:groupVersion=install.istio.io/v1alpha1 +k8s:deepcopy-gen=true

type IstioOperatorSpec

type IstioOperatorSpec struct {
	// Path or name for the profile e.g.
	//
	// * minimal (looks in profiles dir for a file called minimal.yaml)
	// * /tmp/istio/install/values/custom/custom-install.yaml (local file path)
	//
	// default profile is used if this field is unset.
	Profile string `json:"profile,omitempty"`
	// Path for the install package. e.g.
	//
	// * /tmp/istio-installer/nightly (local file path)
	InstallPackagePath string `json:"installPackagePath,omitempty"`
	// Root for docker image paths e.g. `docker.io/istio`
	Hub string `json:"hub,omitempty"`
	// Version tag for docker images e.g. `1.7.2`
	Tag any `json:"tag,omitempty"`
	// Namespace to install control plane resources into. If unset, Istio will be installed into the same namespace
	// as the `IstioOperator` CR. You must also set `values.global.istioNamespace` if you wish to install Istio in
	// a custom namespace.
	// If you have enabled CNI, you must  exclude this namespace by adding it to the list `values.cni.excludeNamespaces`.
	Namespace string `json:"namespace,omitempty"`
	// Identify the revision this installation is associated with.
	// This option is currently experimental.
	Revision string `json:"revision,omitempty"`
	// Compatibility version allows configuring Istio to behave like an older version by tuning various settings to align with a
	// previous versions defaults. This accepts a `major.minor` format, such as `1.23`.
	// This option is currently experimental.
	CompatibilityVersion string `json:"compatibilityVersion,omitempty"`
	// Config used by control plane components internally.
	MeshConfig json.RawMessage `json:"meshConfig,omitempty"`
	// Kubernetes resource settings, enablement and component-specific settings that are not internal to the
	// component.
	Components *IstioComponentSpec `json:"components,omitempty"`
	// Overrides for default `values.yaml`. This is a validated pass-through to Helm templates.
	// See the [Helm installation options](https://istio.io/v1.5/docs/reference/config/installation-options/) for schema details.
	// Anything that is available in `IstioOperatorSpec` should be set above rather than using the passthrough. This
	// includes Kubernetes resource settings for components in `KubernetesResourcesSpec`.
	Values json.RawMessage `json:"values,omitempty"`
	// Unvalidated overrides for default `values.yaml`. Used for custom templates where new parameters are added.
	UnvalidatedValues any `json:"unvalidatedValues,omitempty"`
}

type IstiodConfig

type IstiodConfig struct {

	// If enabled, istiod will perform config analysis
	EnableAnalysis *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=enableAnalysis,proto3" json:"enableAnalysis,omitempty"`
	// contains filtered or unexported fields
}

func (*IstiodConfig) Descriptor deprecated

func (*IstiodConfig) Descriptor() ([]byte, []int)

Deprecated: Use IstiodConfig.ProtoReflect.Descriptor instead.

func (*IstiodConfig) GetEnableAnalysis

func (x *IstiodConfig) GetEnableAnalysis() *wrapperspb.BoolValue

func (*IstiodConfig) ProtoMessage

func (*IstiodConfig) ProtoMessage()

func (*IstiodConfig) ProtoReflect

func (x *IstiodConfig) ProtoReflect() protoreflect.Message

func (*IstiodConfig) Reset

func (x *IstiodConfig) Reset()

func (*IstiodConfig) String

func (x *IstiodConfig) String() string

type IstiodRemoteConfig

type IstiodRemoteConfig struct {

	// URL to use for sidecar injector webhook.
	InjectionURL string `protobuf:"bytes,1,opt,name=injectionURL,proto3" json:"injectionURL,omitempty"`
	// Path to use for the sidecar injector webhook service.
	InjectionPath string `protobuf:"bytes,2,opt,name=injectionPath,proto3" json:"injectionPath,omitempty"`
	// injector ca bundle
	InjectionCABundle string `protobuf:"bytes,3,opt,name=injectionCABundle,proto3" json:"injectionCABundle,omitempty"`
	// Indicates if this cluster/install should consume a "remote" istiod instance,
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

func (*IstiodRemoteConfig) Descriptor deprecated

func (*IstiodRemoteConfig) Descriptor() ([]byte, []int)

Deprecated: Use IstiodRemoteConfig.ProtoReflect.Descriptor instead.

func (*IstiodRemoteConfig) GetEnabled

func (x *IstiodRemoteConfig) GetEnabled() *wrapperspb.BoolValue

func (*IstiodRemoteConfig) GetInjectionCABundle

func (x *IstiodRemoteConfig) GetInjectionCABundle() string

func (*IstiodRemoteConfig) GetInjectionPath

func (x *IstiodRemoteConfig) GetInjectionPath() string

func (*IstiodRemoteConfig) GetInjectionURL

func (x *IstiodRemoteConfig) GetInjectionURL() string

func (*IstiodRemoteConfig) ProtoMessage

func (*IstiodRemoteConfig) ProtoMessage()

func (*IstiodRemoteConfig) ProtoReflect

func (x *IstiodRemoteConfig) ProtoReflect() protoreflect.Message

func (*IstiodRemoteConfig) Reset

func (x *IstiodRemoteConfig) Reset()

func (*IstiodRemoteConfig) String

func (x *IstiodRemoteConfig) String() string

type KubernetesOverlay

type KubernetesOverlay struct {
	// Resource API version.
	ApiVersion string `json:"apiVersion,omitempty"`
	// Resource kind.
	Kind string `json:"kind,omitempty"`
	// Name of resource.
	// Namespace is always the component namespace.
	Name string `json:"name,omitempty"`
	// List of patches to apply to resource.
	Patches []Patch `json:"patches,omitempty"`
}

KubernetesOverlay for an existing Kubernetes resource.

type KubernetesResources

type KubernetesResources struct {
	// Kubernetes affinity.
	Affinity *corev1.Affinity `json:"affinity,omitempty"`
	// Deployment environment variables.
	Env []*corev1.EnvVar `json:"env,omitempty"`
	// Kubernetes HorizontalPodAutoscaler settings.
	HpaSpec *autoscaling.HorizontalPodAutoscalerSpec `json:"hpaSpec,omitempty"`
	// Kubernetes imagePullPolicy.
	ImagePullPolicy string `json:"imagePullPolicy,omitempty"`
	// Kubernetes nodeSelector.
	NodeSelector map[string]string `json:"nodeSelector,omitempty"`
	// Kubernetes PodDisruptionBudget settings.
	PodDisruptionBudget *policy.PodDisruptionBudgetSpec `json:"podDisruptionBudget,omitempty"`
	// Kubernetes pod annotations.
	PodAnnotations map[string]string `json:"podAnnotations,omitempty"`
	// Kubernetes priorityClassName. Default for all resources unless overridden.
	PriorityClassName string `json:"priorityClassName,omitempty"`
	// Kubernetes readinessProbe settings.
	ReadinessProbe *corev1.Probe `json:"readinessProbe,omitempty"`
	// Kubernetes Deployment replicas setting.
	ReplicaCount uint32 `json:"replicaCount,omitempty"`
	// Kubernetes resources settings.
	Resources *corev1.ResourceRequirements `json:"resources,omitempty"`
	// Kubernetes Service settings.
	Service *corev1.ServiceSpec `json:"service,omitempty"`
	// Kubernetes deployment strategy.
	Strategy *appsv1.DeploymentStrategy `json:"strategy,omitempty"`
	// Kubernetes toleration
	Tolerations []*corev1.Toleration `json:"tolerations,omitempty"`
	// Kubernetes service annotations.
	ServiceAnnotations map[string]string `json:"serviceAnnotations,omitempty"`
	// Kubernetes pod security context
	SecurityContext *corev1.PodSecurityContext `json:"securityContext,omitempty"`
	// Kubernetes volumes
	// Volumes defines the collection of Volume to inject into the pod.
	Volumes []*corev1.Volume `json:"volumes,omitempty"`
	// Kubernetes volumeMounts
	// VolumeMounts defines the collection of VolumeMount to inject into containers.
	VolumeMounts []*corev1.VolumeMount `json:"volumeMounts,omitempty"`
	// Overlays for Kubernetes resources in rendered manifests.
	Overlays []KubernetesOverlay `json:"overlays,omitempty"`
}

KubernetesResources is a common set of Kubernetes resource configs for components.

type MultiClusterConfig

type MultiClusterConfig struct {

	// Enables the connection between two kubernetes clusters via their respective ingressgateway services.
	// Use if the pods in each cluster cannot directly talk to one another.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// The name of the cluster this installation will run in. This is required for sidecar injection
	// to properly label proxies
	ClusterName string `protobuf:"bytes,2,opt,name=clusterName,proto3" json:"clusterName,omitempty"`
	// The suffix for global service names.
	GlobalDomainSuffix string `protobuf:"bytes,3,opt,name=globalDomainSuffix,proto3" json:"globalDomainSuffix,omitempty"`
	// Enable envoy filter to translate `globalDomainSuffix` to cluster local suffix for cross cluster communication.
	IncludeEnvoyFilter *wrapperspb.BoolValue `protobuf:"bytes,4,opt,name=includeEnvoyFilter,proto3" json:"includeEnvoyFilter,omitempty"`
	// contains filtered or unexported fields
}

MultiClusterConfig specifies the Configuration for Istio mesh across multiple clusters through the istio gateways.

func (*MultiClusterConfig) Descriptor deprecated

func (*MultiClusterConfig) Descriptor() ([]byte, []int)

Deprecated: Use MultiClusterConfig.ProtoReflect.Descriptor instead.

func (*MultiClusterConfig) GetClusterName

func (x *MultiClusterConfig) GetClusterName() string

func (*MultiClusterConfig) GetEnabled

func (x *MultiClusterConfig) GetEnabled() *wrapperspb.BoolValue

func (*MultiClusterConfig) GetGlobalDomainSuffix

func (x *MultiClusterConfig) GetGlobalDomainSuffix() string

func (*MultiClusterConfig) GetIncludeEnvoyFilter

func (x *MultiClusterConfig) GetIncludeEnvoyFilter() *wrapperspb.BoolValue

func (*MultiClusterConfig) ProtoMessage

func (*MultiClusterConfig) ProtoMessage()

func (*MultiClusterConfig) ProtoReflect

func (x *MultiClusterConfig) ProtoReflect() protoreflect.Message

func (*MultiClusterConfig) Reset

func (x *MultiClusterConfig) Reset()

func (*MultiClusterConfig) String

func (x *MultiClusterConfig) String() string

type OutboundTrafficPolicyConfig

type OutboundTrafficPolicyConfig struct {
	Mode OutboundTrafficPolicyConfig_Mode `protobuf:"varint,2,opt,name=mode,proto3,enum=istio.operator.v1alpha1.OutboundTrafficPolicyConfig_Mode" json:"mode,omitempty"`
	// contains filtered or unexported fields
}

OutboundTrafficPolicyConfig controls the default behavior of the sidecar for handling outbound traffic from the application.

func (*OutboundTrafficPolicyConfig) Descriptor deprecated

func (*OutboundTrafficPolicyConfig) Descriptor() ([]byte, []int)

Deprecated: Use OutboundTrafficPolicyConfig.ProtoReflect.Descriptor instead.

func (*OutboundTrafficPolicyConfig) GetMode

func (*OutboundTrafficPolicyConfig) ProtoMessage

func (*OutboundTrafficPolicyConfig) ProtoMessage()

func (*OutboundTrafficPolicyConfig) ProtoReflect

func (*OutboundTrafficPolicyConfig) Reset

func (x *OutboundTrafficPolicyConfig) Reset()

func (*OutboundTrafficPolicyConfig) String

func (x *OutboundTrafficPolicyConfig) String() string

type OutboundTrafficPolicyConfig_Mode

type OutboundTrafficPolicyConfig_Mode int32

Specifies the sidecar's default behavior when handling outbound traffic from the application.

const (
	// Outbound traffic to unknown destinations will be allowed, in case there are no services or ServiceEntries for the destination port
	OutboundTrafficPolicyConfig_ALLOW_ANY OutboundTrafficPolicyConfig_Mode = 0
	// Restrict outbound traffic to services defined in the service registry as well as those defined through ServiceEntries
	OutboundTrafficPolicyConfig_REGISTRY_ONLY OutboundTrafficPolicyConfig_Mode = 1
)

func (OutboundTrafficPolicyConfig_Mode) Descriptor

func (OutboundTrafficPolicyConfig_Mode) Enum

func (OutboundTrafficPolicyConfig_Mode) EnumDescriptor deprecated

func (OutboundTrafficPolicyConfig_Mode) EnumDescriptor() ([]byte, []int)

Deprecated: Use OutboundTrafficPolicyConfig_Mode.Descriptor instead.

func (OutboundTrafficPolicyConfig_Mode) Number

func (OutboundTrafficPolicyConfig_Mode) String

func (OutboundTrafficPolicyConfig_Mode) Type

type Patch

type Patch struct {
	// Path of the form a.[key1:value1].b.[:value2]
	// Where [key1:value1] is a selector for a key-value pair to identify a list element and [:value] is a value
	// selector to identify a list element in a leaf list.
	// All path intermediate nodes must exist.
	Path string `json:"path,omitempty"`
	// Value to add, delete or replace.
	// For add, the path should be a new leaf.
	// For delete, value should be unset.
	// For replace, path should reference an existing node.
	// All values are strings but are converted into appropriate type based on schema.
	Value any `json:"value,omitempty"`
}

type PilotConfig

type PilotConfig struct {

	// Controls whether Pilot is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Controls whether a HorizontalPodAutoscaler is installed for Pilot.
	AutoscaleEnabled *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=autoscaleEnabled,proto3" json:"autoscaleEnabled,omitempty"`
	// Minimum number of replicas in the HorizontalPodAutoscaler for Pilot.
	AutoscaleMin uint32 `protobuf:"varint,3,opt,name=autoscaleMin,proto3" json:"autoscaleMin,omitempty"`
	// Maximum number of replicas in the HorizontalPodAutoscaler for Pilot.
	AutoscaleMax uint32 `protobuf:"varint,4,opt,name=autoscaleMax,proto3" json:"autoscaleMax,omitempty"`
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/#configurable-scaling-behavior
	AutoscaleBehavior *structpb.Struct `protobuf:"bytes,40,opt,name=autoscaleBehavior,proto3" json:"autoscaleBehavior,omitempty"`
	// Number of replicas in the Pilot Deployment.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	ReplicaCount uint32 `protobuf:"varint,5,opt,name=replicaCount,proto3" json:"replicaCount,omitempty"`
	// Image name used for Pilot.
	//
	// This can be set either to image name if hub is also set, or can be set to the full hub:name string.
	//
	// Examples: custom-pilot, docker.io/someuser:custom-pilot
	Image string `protobuf:"bytes,6,opt,name=image,proto3" json:"image,omitempty"`
	// Trace sampling fraction.
	//
	// Used to set the fraction of time that traces are sampled. Higher values are more accurate but add CPU overhead.
	//
	// Allowed values: 0.0 to 1.0
	TraceSampling float64 `protobuf:"fixed64,8,opt,name=traceSampling,proto3" json:"traceSampling,omitempty"`
	// K8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Resources *Resources `protobuf:"bytes,9,opt,name=resources,proto3" json:"resources,omitempty"`
	// Target CPU utilization used in HorizontalPodAutoscaler.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Cpu *TargetUtilizationConfig `protobuf:"bytes,11,opt,name=cpu,proto3" json:"cpu,omitempty"`
	// K8s node selector.
	//
	// See https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	NodeSelector *structpb.Struct `protobuf:"bytes,12,opt,name=nodeSelector,proto3" json:"nodeSelector,omitempty"`
	// Maximum duration that a sidecar can be connected to a pilot.
	//
	// This setting balances out load across pilot instances, but adds some resource overhead.
	//
	// Examples: 300s, 30m, 1h
	KeepaliveMaxServerConnectionAge *durationpb.Duration `protobuf:"bytes,13,opt,name=keepaliveMaxServerConnectionAge,proto3" json:"keepaliveMaxServerConnectionAge,omitempty"`
	// Labels that are added to Pilot deployment.
	//
	// See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
	DeploymentLabels *structpb.Struct `protobuf:"bytes,14,opt,name=deploymentLabels,proto3" json:"deploymentLabels,omitempty"`
	// Labels that are added to Pilot pods.
	//
	// See https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
	PodLabels *structpb.Struct `protobuf:"bytes,36,opt,name=podLabels,proto3" json:"podLabels,omitempty"`
	// Configuration settings passed to Pilot as a ConfigMap.
	//
	// This controls whether the mesh config map, generated from values.yaml is generated.
	// If false, pilot wil use default values or user-supplied values, in that order of preference.
	ConfigMap *wrapperspb.BoolValue `protobuf:"bytes,18,opt,name=configMap,proto3" json:"configMap,omitempty"`
	// Environment variables passed to the Pilot container.
	//
	// Examples:
	// env:
	//
	//	ENV_VAR_1: value1
	//	ENV_VAR_2: value2
	Env *structpb.Struct `protobuf:"bytes,21,opt,name=env,proto3" json:"env,omitempty"`
	// K8s affinity to set on the Pilot Pods.
	Affinity *v1.Affinity `protobuf:"bytes,22,opt,name=affinity,proto3" json:"affinity,omitempty"`
	// K8s rolling update strategy
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxSurge *IntOrString `protobuf:"bytes,24,opt,name=rollingMaxSurge,proto3" json:"rollingMaxSurge,omitempty"`
	// The number of pods that can be unavailable during a rolling update (see
	// `strategy.rollingUpdate.maxUnavailable` here:
	// https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/deployment-v1/#DeploymentSpec).
	// May be specified as a number of pods or as a percent of the total number
	// of pods at the start of the update.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	RollingMaxUnavailable *IntOrString `protobuf:"bytes,25,opt,name=rollingMaxUnavailable,proto3" json:"rollingMaxUnavailable,omitempty"`
	// The node tolerations to be applied to the Pilot deployment so that it can be
	// scheduled to particular nodes with matching taints.
	// More info: https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#scheduling
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Tolerations []*v1.Toleration `protobuf:"bytes,26,rep,name=tolerations,proto3" json:"tolerations,omitempty"`
	// K8s annotations for pods.
	//
	// See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	PodAnnotations *structpb.Struct `protobuf:"bytes,30,opt,name=podAnnotations,proto3" json:"podAnnotations,omitempty"`
	// K8s annotations for the Service.
	//
	// See: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
	ServiceAnnotations *structpb.Struct `protobuf:"bytes,37,opt,name=serviceAnnotations,proto3" json:"serviceAnnotations,omitempty"`
	// K8s annotations for the service account
	ServiceAccountAnnotations *structpb.Struct `protobuf:"bytes,56,opt,name=serviceAccountAnnotations,proto3" json:"serviceAccountAnnotations,omitempty"`
	// Specifies an extra root certificate in PEM format. This certificate will be trusted
	// by pilot when resolving JWKS URIs.
	JwksResolverExtraRootCA string `protobuf:"bytes,32,opt,name=jwksResolverExtraRootCA,proto3" json:"jwksResolverExtraRootCA,omitempty"`
	// Hub to pull the container image from. Image will be `Hub/Image:Tag-Variant`.
	Hub string `protobuf:"bytes,34,opt,name=hub,proto3" json:"hub,omitempty"`
	// The container image tag to pull. Image will be `Hub/Image:Tag-Variant`.
	Tag *structpb.Value `protobuf:"bytes,35,opt,name=tag,proto3" json:"tag,omitempty"`
	// The container image variant to pull. Options are "debug" or "distroless". Unset will use the default for the given version.
	Variant string `protobuf:"bytes,39,opt,name=variant,proto3" json:"variant,omitempty"`
	// The seccompProfile for the Pilot container.
	//
	// See: https://kubernetes.io/docs/tutorials/security/seccomp/
	SeccompProfile *v1.SeccompProfile `protobuf:"bytes,38,opt,name=seccompProfile,proto3" json:"seccompProfile,omitempty"`
	// The k8s topologySpreadConstraints for the Pilot pods.
	TopologySpreadConstraints []*v1.TopologySpreadConstraint `protobuf:"bytes,41,rep,name=topologySpreadConstraints,proto3" json:"topologySpreadConstraints,omitempty"`
	// Additional container arguments for the Pilot container.
	ExtraContainerArgs []*structpb.Struct `protobuf:"bytes,42,rep,name=extraContainerArgs,proto3" json:"extraContainerArgs,omitempty"`
	// Additional volumeMounts to add to the Pilot container.
	VolumeMounts []*v1.VolumeMount `protobuf:"bytes,49,rep,name=volumeMounts,proto3" json:"volumeMounts,omitempty"`
	// Additional volumes to add to the Pilot Pod.
	Volumes []*v1.Volume `protobuf:"bytes,51,rep,name=volumes,proto3" json:"volumes,omitempty"`
	// Defines which IP family to use for single stack or the order of IP families for dual-stack.
	// Valid list items are "IPv4", "IPv6".
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilies []string `protobuf:"bytes,52,rep,name=ipFamilies,proto3" json:"ipFamilies,omitempty"`
	// Controls whether Services are configured to use IPv4, IPv6, or both. Valid options
	// are PreferDualStack, RequireDualStack, and SingleStack.
	// More info: https://kubernetes.io/docs/concepts/services-networking/dual-stack/#services
	IpFamilyPolicy string `protobuf:"bytes,53,opt,name=ipFamilyPolicy,proto3" json:"ipFamilyPolicy,omitempty"`
	// Target memory utilization used in HorizontalPodAutoscaler.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Memory *TargetUtilizationConfig `protobuf:"bytes,54,opt,name=memory,proto3" json:"memory,omitempty"`
	// Configures whether to use an existing CNI installation for workloads
	Cni   *CNIUsageConfig             `protobuf:"bytes,55,opt,name=cni,proto3" json:"cni,omitempty"`
	Taint *PilotTaintControllerConfig `protobuf:"bytes,57,opt,name=taint,proto3" json:"taint,omitempty"`
	// If set, `istiod` will allow connections from trusted node proxy ztunnels
	// in the provided namespace.
	TrustedZtunnelNamespace string `protobuf:"bytes,59,opt,name=trustedZtunnelNamespace,proto3" json:"trustedZtunnelNamespace,omitempty"`
	// Configuration for the istio-discovery chart when istiod is running in a remote cluster (e.g. "remote control plane").
	IstiodRemote *IstiodRemoteConfig `protobuf:"bytes,61,opt,name=istiodRemote,proto3" json:"istiodRemote,omitempty"`
	// contains filtered or unexported fields
}

Configuration for Pilot.

func (*PilotConfig) Descriptor deprecated

func (*PilotConfig) Descriptor() ([]byte, []int)

Deprecated: Use PilotConfig.ProtoReflect.Descriptor instead.

func (*PilotConfig) GetAffinity

func (x *PilotConfig) GetAffinity() *v1.Affinity

func (*PilotConfig) GetAutoscaleBehavior

func (x *PilotConfig) GetAutoscaleBehavior() *structpb.Struct

func (*PilotConfig) GetAutoscaleEnabled

func (x *PilotConfig) GetAutoscaleEnabled() *wrapperspb.BoolValue

func (*PilotConfig) GetAutoscaleMax

func (x *PilotConfig) GetAutoscaleMax() uint32

func (*PilotConfig) GetAutoscaleMin

func (x *PilotConfig) GetAutoscaleMin() uint32

func (*PilotConfig) GetCni

func (x *PilotConfig) GetCni() *CNIUsageConfig

func (*PilotConfig) GetConfigMap

func (x *PilotConfig) GetConfigMap() *wrapperspb.BoolValue

func (*PilotConfig) GetCpu deprecated

func (x *PilotConfig) GetCpu() *TargetUtilizationConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetDeploymentLabels

func (x *PilotConfig) GetDeploymentLabels() *structpb.Struct

func (*PilotConfig) GetEnabled

func (x *PilotConfig) GetEnabled() *wrapperspb.BoolValue

func (*PilotConfig) GetEnv

func (x *PilotConfig) GetEnv() *structpb.Struct

func (*PilotConfig) GetExtraContainerArgs

func (x *PilotConfig) GetExtraContainerArgs() []*structpb.Struct

func (*PilotConfig) GetHub

func (x *PilotConfig) GetHub() string

func (*PilotConfig) GetImage

func (x *PilotConfig) GetImage() string

func (*PilotConfig) GetIpFamilies

func (x *PilotConfig) GetIpFamilies() []string

func (*PilotConfig) GetIpFamilyPolicy

func (x *PilotConfig) GetIpFamilyPolicy() string

func (*PilotConfig) GetIstiodRemote

func (x *PilotConfig) GetIstiodRemote() *IstiodRemoteConfig

func (*PilotConfig) GetJwksResolverExtraRootCA

func (x *PilotConfig) GetJwksResolverExtraRootCA() string

func (*PilotConfig) GetKeepaliveMaxServerConnectionAge

func (x *PilotConfig) GetKeepaliveMaxServerConnectionAge() *durationpb.Duration

func (*PilotConfig) GetMemory deprecated

func (x *PilotConfig) GetMemory() *TargetUtilizationConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetNodeSelector deprecated

func (x *PilotConfig) GetNodeSelector() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetPodAnnotations deprecated

func (x *PilotConfig) GetPodAnnotations() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetPodLabels

func (x *PilotConfig) GetPodLabels() *structpb.Struct

func (*PilotConfig) GetReplicaCount deprecated

func (x *PilotConfig) GetReplicaCount() uint32

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetResources deprecated

func (x *PilotConfig) GetResources() *Resources

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetRollingMaxSurge deprecated

func (x *PilotConfig) GetRollingMaxSurge() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetRollingMaxUnavailable deprecated

func (x *PilotConfig) GetRollingMaxUnavailable() *IntOrString

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetSeccompProfile

func (x *PilotConfig) GetSeccompProfile() *v1.SeccompProfile

func (*PilotConfig) GetServiceAccountAnnotations

func (x *PilotConfig) GetServiceAccountAnnotations() *structpb.Struct

func (*PilotConfig) GetServiceAnnotations

func (x *PilotConfig) GetServiceAnnotations() *structpb.Struct

func (*PilotConfig) GetTag

func (x *PilotConfig) GetTag() *structpb.Value

func (*PilotConfig) GetTaint

func (x *PilotConfig) GetTaint() *PilotTaintControllerConfig

func (*PilotConfig) GetTolerations deprecated

func (x *PilotConfig) GetTolerations() []*v1.Toleration

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*PilotConfig) GetTopologySpreadConstraints

func (x *PilotConfig) GetTopologySpreadConstraints() []*v1.TopologySpreadConstraint

func (*PilotConfig) GetTraceSampling

func (x *PilotConfig) GetTraceSampling() float64

func (*PilotConfig) GetTrustedZtunnelNamespace

func (x *PilotConfig) GetTrustedZtunnelNamespace() string

func (*PilotConfig) GetVariant

func (x *PilotConfig) GetVariant() string

func (*PilotConfig) GetVolumeMounts

func (x *PilotConfig) GetVolumeMounts() []*v1.VolumeMount

func (*PilotConfig) GetVolumes

func (x *PilotConfig) GetVolumes() []*v1.Volume

func (*PilotConfig) ProtoMessage

func (*PilotConfig) ProtoMessage()

func (*PilotConfig) ProtoReflect

func (x *PilotConfig) ProtoReflect() protoreflect.Message

func (*PilotConfig) Reset

func (x *PilotConfig) Reset()

func (*PilotConfig) String

func (x *PilotConfig) String() string

type PilotIngressConfig

type PilotIngressConfig struct {

	// Sets the type ingress service for Pilot.
	//
	// If empty, node-port is assumed.
	//
	// Allowed values: node-port, istio-ingressgateway, ingress
	IngressService        string                `protobuf:"bytes,1,opt,name=ingressService,proto3" json:"ingressService,omitempty"`
	IngressControllerMode IngressControllerMode `` /* 147-byte string literal not displayed */
	// If mode is STRICT, this value must be set on "kubernetes.io/ingress.class" annotation to activate.
	IngressClass string `protobuf:"bytes,3,opt,name=ingressClass,proto3" json:"ingressClass,omitempty"`
	// contains filtered or unexported fields
}

Controls legacy k8s ingress. Only one pilot profile should enable ingress support.

func (*PilotIngressConfig) Descriptor deprecated

func (*PilotIngressConfig) Descriptor() ([]byte, []int)

Deprecated: Use PilotIngressConfig.ProtoReflect.Descriptor instead.

func (*PilotIngressConfig) GetIngressClass

func (x *PilotIngressConfig) GetIngressClass() string

func (*PilotIngressConfig) GetIngressControllerMode

func (x *PilotIngressConfig) GetIngressControllerMode() IngressControllerMode

func (*PilotIngressConfig) GetIngressService

func (x *PilotIngressConfig) GetIngressService() string

func (*PilotIngressConfig) ProtoMessage

func (*PilotIngressConfig) ProtoMessage()

func (*PilotIngressConfig) ProtoReflect

func (x *PilotIngressConfig) ProtoReflect() protoreflect.Message

func (*PilotIngressConfig) Reset

func (x *PilotIngressConfig) Reset()

func (*PilotIngressConfig) String

func (x *PilotIngressConfig) String() string

type PilotPolicyConfig

type PilotPolicyConfig struct {

	// Controls whether Istio policy is applied to Pilot.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

Controls whether Istio policy is applied to Pilot.

func (*PilotPolicyConfig) Descriptor deprecated

func (*PilotPolicyConfig) Descriptor() ([]byte, []int)

Deprecated: Use PilotPolicyConfig.ProtoReflect.Descriptor instead.

func (*PilotPolicyConfig) GetEnabled

func (x *PilotPolicyConfig) GetEnabled() *wrapperspb.BoolValue

func (*PilotPolicyConfig) ProtoMessage

func (*PilotPolicyConfig) ProtoMessage()

func (*PilotPolicyConfig) ProtoReflect

func (x *PilotPolicyConfig) ProtoReflect() protoreflect.Message

func (*PilotPolicyConfig) Reset

func (x *PilotPolicyConfig) Reset()

func (*PilotPolicyConfig) String

func (x *PilotPolicyConfig) String() string

type PilotTaintControllerConfig

type PilotTaintControllerConfig struct {

	// Enable the untaint controller for new nodes. This aims to solve a race for CNI installation on
	// new nodes. For this to work, the newly added nodes need to have the istio CNI taint as they are
	// added to the cluster. This is usually done by configuring the cluster infra provider.
	Enabled bool `protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// The namespace of the CNI daemonset, incase it's not the same as istiod.
	Namespace string `protobuf:"bytes,2,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// contains filtered or unexported fields
}

func (*PilotTaintControllerConfig) Descriptor deprecated

func (*PilotTaintControllerConfig) Descriptor() ([]byte, []int)

Deprecated: Use PilotTaintControllerConfig.ProtoReflect.Descriptor instead.

func (*PilotTaintControllerConfig) GetEnabled

func (x *PilotTaintControllerConfig) GetEnabled() bool

func (*PilotTaintControllerConfig) GetNamespace

func (x *PilotTaintControllerConfig) GetNamespace() string

func (*PilotTaintControllerConfig) ProtoMessage

func (*PilotTaintControllerConfig) ProtoMessage()

func (*PilotTaintControllerConfig) ProtoReflect

func (*PilotTaintControllerConfig) Reset

func (x *PilotTaintControllerConfig) Reset()

func (*PilotTaintControllerConfig) String

func (x *PilotTaintControllerConfig) String() string

type PortsConfig

type PortsConfig struct {

	// Port name.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Port number.
	Port int32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
	// NodePort number.
	NodePort int32 `protobuf:"varint,3,opt,name=nodePort,proto3" json:"nodePort,omitempty"`
	// Target port number.
	TargetPort int32 `protobuf:"varint,4,opt,name=targetPort,proto3" json:"targetPort,omitempty"`
	// Protocol name.
	Protocol string `protobuf:"bytes,5,opt,name=protocol,proto3" json:"protocol,omitempty"`
	// contains filtered or unexported fields
}

Configuration for a port.

func (*PortsConfig) Descriptor deprecated

func (*PortsConfig) Descriptor() ([]byte, []int)

Deprecated: Use PortsConfig.ProtoReflect.Descriptor instead.

func (*PortsConfig) GetName

func (x *PortsConfig) GetName() string

func (*PortsConfig) GetNodePort

func (x *PortsConfig) GetNodePort() int32

func (*PortsConfig) GetPort

func (x *PortsConfig) GetPort() int32

func (*PortsConfig) GetProtocol

func (x *PortsConfig) GetProtocol() string

func (*PortsConfig) GetTargetPort

func (x *PortsConfig) GetTargetPort() int32

func (*PortsConfig) ProtoMessage

func (*PortsConfig) ProtoMessage()

func (*PortsConfig) ProtoReflect

func (x *PortsConfig) ProtoReflect() protoreflect.Message

func (*PortsConfig) Reset

func (x *PortsConfig) Reset()

func (*PortsConfig) String

func (x *PortsConfig) String() string

type ProxyConfig

type ProxyConfig struct {

	// Controls the 'policy' in the sidecar injector.
	AutoInject string `protobuf:"bytes,4,opt,name=autoInject,proto3" json:"autoInject,omitempty"`
	// Domain for the cluster, default: "cluster.local".
	//
	// K8s allows this to be customized, see https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/
	ClusterDomain string `protobuf:"bytes,5,opt,name=clusterDomain,proto3" json:"clusterDomain,omitempty"`
	// Per Component log level for proxy, applies to gateways and sidecars.
	//
	// If a component level is not set, then the global "logLevel" will be used. If left empty, "misc:error" is used.
	ComponentLogLevel string `protobuf:"bytes,6,opt,name=componentLogLevel,proto3" json:"componentLogLevel,omitempty"`
	// Enables core dumps for newly injected sidecars.
	//
	// If set, newly injected sidecars will have core dumps enabled.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	EnableCoreDump *wrapperspb.BoolValue `protobuf:"bytes,9,opt,name=enableCoreDump,proto3" json:"enableCoreDump,omitempty"`
	// Specifies the Istio ingress ports not to capture.
	ExcludeInboundPorts string `protobuf:"bytes,12,opt,name=excludeInboundPorts,proto3" json:"excludeInboundPorts,omitempty"`
	// Lists the excluded IP ranges of Istio egress traffic that the sidecar captures.
	ExcludeIPRanges string `protobuf:"bytes,13,opt,name=excludeIPRanges,proto3" json:"excludeIPRanges,omitempty"`
	// Image name or path for the proxy, default: "proxyv2".
	//
	// If registry or tag are not specified, global.hub and global.tag are used.
	//
	// Examples: my-proxy (uses global.hub/tag), docker.io/myrepo/my-proxy:v1.0.0
	Image string `protobuf:"bytes,14,opt,name=image,proto3" json:"image,omitempty"`
	// Lists the IP ranges of Istio egress traffic that the sidecar captures.
	//
	// Example: "172.30.0.0/16,172.20.0.0/16"
	// This would only capture egress traffic on those two IP Ranges, all other outbound traffic would # be allowed by the sidecar."
	IncludeIPRanges string `protobuf:"bytes,16,opt,name=includeIPRanges,proto3" json:"includeIPRanges,omitempty"`
	// Log level for proxy, applies to gateways and sidecars. If left empty, "warning" is used. Expected values are: trace\|debug\|info\|warning\|error\|critical\|off
	LogLevel string `protobuf:"bytes,18,opt,name=logLevel,proto3" json:"logLevel,omitempty"`
	// Path to the file to which the proxy will write outlier detection logs.
	//
	// Example: "/dev/stdout"
	// This would write the logs to standard output.
	OutlierLogPath string `protobuf:"bytes,42,opt,name=outlierLogPath,proto3" json:"outlierLogPath,omitempty"`
	// Enables privileged securityContext for the istio-proxy container.
	//
	// See https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
	Privileged *wrapperspb.BoolValue `protobuf:"bytes,19,opt,name=privileged,proto3" json:"privileged,omitempty"`
	// Sets the initial delay for readiness probes in seconds.
	ReadinessInitialDelaySeconds uint32 `protobuf:"varint,20,opt,name=readinessInitialDelaySeconds,proto3" json:"readinessInitialDelaySeconds,omitempty"`
	// Sets the interval between readiness probes in seconds.
	ReadinessPeriodSeconds uint32 `protobuf:"varint,21,opt,name=readinessPeriodSeconds,proto3" json:"readinessPeriodSeconds,omitempty"`
	// Sets the number of successive failed probes before indicating readiness failure.
	ReadinessFailureThreshold uint32 `protobuf:"varint,22,opt,name=readinessFailureThreshold,proto3" json:"readinessFailureThreshold,omitempty"`
	// Configures the startup probe for the istio-proxy container.
	StartupProbe *StartupProbe `protobuf:"bytes,41,opt,name=startupProbe,proto3" json:"startupProbe,omitempty"`
	// Default port used for the Pilot agent's health checks.
	StatusPort uint32 `protobuf:"varint,23,opt,name=statusPort,proto3" json:"statusPort,omitempty"`
	// K8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Resources *Resources `protobuf:"bytes,24,opt,name=resources,proto3" json:"resources,omitempty"`
	// Specify which tracer to use. One of: zipkin, lightstep, datadog, stackdriver.
	// If using stackdriver tracer outside GCP, set env GOOGLE_APPLICATION_CREDENTIALS to the GCP credential file.
	Tracer Tracer `protobuf:"varint,25,opt,name=tracer,proto3,enum=istio.operator.v1alpha1.Tracer" json:"tracer,omitempty"`
	// A comma separated list of outbound ports to be excluded from redirection to Envoy.
	ExcludeOutboundPorts string `protobuf:"bytes,28,opt,name=excludeOutboundPorts,proto3" json:"excludeOutboundPorts,omitempty"`
	// The k8s lifecycle hooks definition (pod.spec.containers.lifecycle) for the proxy container.
	// More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks
	Lifecycle *v1.Lifecycle `protobuf:"bytes,36,opt,name=lifecycle,proto3" json:"lifecycle,omitempty"`
	// Controls if sidecar is injected at the front of the container list and blocks the start of the other containers until the proxy is ready
	//
	// Deprecated: replaced by ProxyConfig setting which allows per-pod configuration of this behavior.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	HoldApplicationUntilProxyStarts *wrapperspb.BoolValue `protobuf:"bytes,37,opt,name=holdApplicationUntilProxyStarts,proto3" json:"holdApplicationUntilProxyStarts,omitempty"`
	// A comma separated list of inbound ports for which traffic is to be redirected to Envoy.
	// The wildcard character '*' can be used to configure redirection for all ports.
	IncludeInboundPorts string `protobuf:"bytes,38,opt,name=includeInboundPorts,proto3" json:"includeInboundPorts,omitempty"`
	// A comma separated list of outbound ports for which traffic is to be redirected to Envoy, regardless of the destination IP.
	IncludeOutboundPorts string `protobuf:"bytes,39,opt,name=includeOutboundPorts,proto3" json:"includeOutboundPorts,omitempty"`
	// contains filtered or unexported fields
}

Configuration for Proxy.

func (*ProxyConfig) Descriptor deprecated

func (*ProxyConfig) Descriptor() ([]byte, []int)

Deprecated: Use ProxyConfig.ProtoReflect.Descriptor instead.

func (*ProxyConfig) GetAutoInject

func (x *ProxyConfig) GetAutoInject() string

func (*ProxyConfig) GetClusterDomain

func (x *ProxyConfig) GetClusterDomain() string

func (*ProxyConfig) GetComponentLogLevel

func (x *ProxyConfig) GetComponentLogLevel() string

func (*ProxyConfig) GetEnableCoreDump deprecated

func (x *ProxyConfig) GetEnableCoreDump() *wrapperspb.BoolValue

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*ProxyConfig) GetExcludeIPRanges

func (x *ProxyConfig) GetExcludeIPRanges() string

func (*ProxyConfig) GetExcludeInboundPorts

func (x *ProxyConfig) GetExcludeInboundPorts() string

func (*ProxyConfig) GetExcludeOutboundPorts

func (x *ProxyConfig) GetExcludeOutboundPorts() string

func (*ProxyConfig) GetHoldApplicationUntilProxyStarts deprecated

func (x *ProxyConfig) GetHoldApplicationUntilProxyStarts() *wrapperspb.BoolValue

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*ProxyConfig) GetImage

func (x *ProxyConfig) GetImage() string

func (*ProxyConfig) GetIncludeIPRanges

func (x *ProxyConfig) GetIncludeIPRanges() string

func (*ProxyConfig) GetIncludeInboundPorts

func (x *ProxyConfig) GetIncludeInboundPorts() string

func (*ProxyConfig) GetIncludeOutboundPorts

func (x *ProxyConfig) GetIncludeOutboundPorts() string

func (*ProxyConfig) GetLifecycle

func (x *ProxyConfig) GetLifecycle() *v1.Lifecycle

func (*ProxyConfig) GetLogLevel

func (x *ProxyConfig) GetLogLevel() string

func (*ProxyConfig) GetOutlierLogPath

func (x *ProxyConfig) GetOutlierLogPath() string

func (*ProxyConfig) GetPrivileged

func (x *ProxyConfig) GetPrivileged() *wrapperspb.BoolValue

func (*ProxyConfig) GetReadinessFailureThreshold

func (x *ProxyConfig) GetReadinessFailureThreshold() uint32

func (*ProxyConfig) GetReadinessInitialDelaySeconds

func (x *ProxyConfig) GetReadinessInitialDelaySeconds() uint32

func (*ProxyConfig) GetReadinessPeriodSeconds

func (x *ProxyConfig) GetReadinessPeriodSeconds() uint32

func (*ProxyConfig) GetResources deprecated

func (x *ProxyConfig) GetResources() *Resources

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*ProxyConfig) GetStartupProbe

func (x *ProxyConfig) GetStartupProbe() *StartupProbe

func (*ProxyConfig) GetStatusPort

func (x *ProxyConfig) GetStatusPort() uint32

func (*ProxyConfig) GetTracer

func (x *ProxyConfig) GetTracer() Tracer

func (*ProxyConfig) ProtoMessage

func (*ProxyConfig) ProtoMessage()

func (*ProxyConfig) ProtoReflect

func (x *ProxyConfig) ProtoReflect() protoreflect.Message

func (*ProxyConfig) Reset

func (x *ProxyConfig) Reset()

func (*ProxyConfig) String

func (x *ProxyConfig) String() string

type ProxyInitConfig

type ProxyInitConfig struct {

	// Specifies the image for the proxy_init container.
	Image string `protobuf:"bytes,1,opt,name=image,proto3" json:"image,omitempty"`
	// K8s resources settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Resources *Resources `protobuf:"bytes,5,opt,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

Configuration for proxy_init container which sets the pods' networking to intercept the inbound/outbound traffic.

func (*ProxyInitConfig) Descriptor deprecated

func (*ProxyInitConfig) Descriptor() ([]byte, []int)

Deprecated: Use ProxyInitConfig.ProtoReflect.Descriptor instead.

func (*ProxyInitConfig) GetImage

func (x *ProxyInitConfig) GetImage() string

func (*ProxyInitConfig) GetResources deprecated

func (x *ProxyInitConfig) GetResources() *Resources

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*ProxyInitConfig) ProtoMessage

func (*ProxyInitConfig) ProtoMessage()

func (*ProxyInitConfig) ProtoReflect

func (x *ProxyInitConfig) ProtoReflect() protoreflect.Message

func (*ProxyInitConfig) Reset

func (x *ProxyInitConfig) Reset()

func (*ProxyInitConfig) String

func (x *ProxyInitConfig) String() string

type ResourceQuotas

type ResourceQuotas struct {

	// Controls whether to create resource quotas or not for the CNI DaemonSet.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// The hard limit on the number of pods in the namespace where the CNI DaemonSet is deployed.
	Pods int64 `protobuf:"varint,2,opt,name=pods,proto3" json:"pods,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the resource quotas for the CNI DaemonSet.

func (*ResourceQuotas) Descriptor deprecated

func (*ResourceQuotas) Descriptor() ([]byte, []int)

Deprecated: Use ResourceQuotas.ProtoReflect.Descriptor instead.

func (*ResourceQuotas) GetEnabled

func (x *ResourceQuotas) GetEnabled() *wrapperspb.BoolValue

func (*ResourceQuotas) GetPods

func (x *ResourceQuotas) GetPods() int64

func (*ResourceQuotas) ProtoMessage

func (*ResourceQuotas) ProtoMessage()

func (*ResourceQuotas) ProtoReflect

func (x *ResourceQuotas) ProtoReflect() protoreflect.Message

func (*ResourceQuotas) Reset

func (x *ResourceQuotas) Reset()

func (*ResourceQuotas) String

func (x *ResourceQuotas) String() string

type Resources

type Resources struct {

	// The maximum amount of compute resources allowed.
	// More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
	Limits map[string]string `` /* 153-byte string literal not displayed */
	// The minimum amount of compute resources required. If Requests is omitted for a container,
	// it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value.
	// More info: https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/
	Requests map[string]string `` /* 157-byte string literal not displayed */
	// contains filtered or unexported fields
}

Compute resources required by a container.

func (*Resources) Descriptor deprecated

func (*Resources) Descriptor() ([]byte, []int)

Deprecated: Use Resources.ProtoReflect.Descriptor instead.

func (*Resources) GetLimits

func (x *Resources) GetLimits() map[string]string

func (*Resources) GetRequests

func (x *Resources) GetRequests() map[string]string

func (*Resources) ProtoMessage

func (*Resources) ProtoMessage()

func (*Resources) ProtoReflect

func (x *Resources) ProtoReflect() protoreflect.Message

func (*Resources) Reset

func (x *Resources) Reset()

func (*Resources) String

func (x *Resources) String() string

type ResourcesRequestsConfig

type ResourcesRequestsConfig struct {

	// CPU requests.
	Cpu string `protobuf:"bytes,1,opt,name=cpu,proto3" json:"cpu,omitempty"`
	// Memory requests.
	Memory string `protobuf:"bytes,2,opt,name=memory,proto3" json:"memory,omitempty"`
	// contains filtered or unexported fields
}

Configuration for K8s resource requests.

func (*ResourcesRequestsConfig) Descriptor deprecated

func (*ResourcesRequestsConfig) Descriptor() ([]byte, []int)

Deprecated: Use ResourcesRequestsConfig.ProtoReflect.Descriptor instead.

func (*ResourcesRequestsConfig) GetCpu

func (x *ResourcesRequestsConfig) GetCpu() string

func (*ResourcesRequestsConfig) GetMemory

func (x *ResourcesRequestsConfig) GetMemory() string

func (*ResourcesRequestsConfig) ProtoMessage

func (*ResourcesRequestsConfig) ProtoMessage()

func (*ResourcesRequestsConfig) ProtoReflect

func (x *ResourcesRequestsConfig) ProtoReflect() protoreflect.Message

func (*ResourcesRequestsConfig) Reset

func (x *ResourcesRequestsConfig) Reset()

func (*ResourcesRequestsConfig) String

func (x *ResourcesRequestsConfig) String() string

type SDSConfig

type SDSConfig struct {

	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	Token *structpb.Struct `protobuf:"bytes,5,opt,name=token,proto3" json:"token,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the SecretDiscoveryService instead of using K8S secrets to mount the certificates.

func (*SDSConfig) Descriptor deprecated

func (*SDSConfig) Descriptor() ([]byte, []int)

Deprecated: Use SDSConfig.ProtoReflect.Descriptor instead.

func (*SDSConfig) GetToken deprecated

func (x *SDSConfig) GetToken() *structpb.Struct

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*SDSConfig) ProtoMessage

func (*SDSConfig) ProtoMessage()

func (*SDSConfig) ProtoReflect

func (x *SDSConfig) ProtoReflect() protoreflect.Message

func (*SDSConfig) Reset

func (x *SDSConfig) Reset()

func (*SDSConfig) String

func (x *SDSConfig) String() string

type STSConfig

type STSConfig struct {
	ServicePort uint32 `protobuf:"varint,1,opt,name=servicePort,proto3" json:"servicePort,omitempty"`
	// contains filtered or unexported fields
}

Configuration for Security Token Service (STS) server.

See https://tools.ietf.org/html/draft-ietf-oauth-token-exchange-16

func (*STSConfig) Descriptor deprecated

func (*STSConfig) Descriptor() ([]byte, []int)

Deprecated: Use STSConfig.ProtoReflect.Descriptor instead.

func (*STSConfig) GetServicePort

func (x *STSConfig) GetServicePort() uint32

func (*STSConfig) ProtoMessage

func (*STSConfig) ProtoMessage()

func (*STSConfig) ProtoReflect

func (x *STSConfig) ProtoReflect() protoreflect.Message

func (*STSConfig) Reset

func (x *STSConfig) Reset()

func (*STSConfig) String

func (x *STSConfig) String() string

type SecretVolume

type SecretVolume struct {
	MountPath  string `protobuf:"bytes,1,opt,name=mountPath,proto3" json:"mountPath,omitempty"`
	Name       string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	SecretName string `protobuf:"bytes,3,opt,name=secretName,proto3" json:"secretName,omitempty"`
	// contains filtered or unexported fields
}

Configuration for secret volume mounts.

See https://kubernetes.io/docs/concepts/configuration/secret/#using-secrets.

func (*SecretVolume) Descriptor deprecated

func (*SecretVolume) Descriptor() ([]byte, []int)

Deprecated: Use SecretVolume.ProtoReflect.Descriptor instead.

func (*SecretVolume) GetMountPath

func (x *SecretVolume) GetMountPath() string

func (*SecretVolume) GetName

func (x *SecretVolume) GetName() string

func (*SecretVolume) GetSecretName

func (x *SecretVolume) GetSecretName() string

func (*SecretVolume) ProtoMessage

func (*SecretVolume) ProtoMessage()

func (*SecretVolume) ProtoReflect

func (x *SecretVolume) ProtoReflect() protoreflect.Message

func (*SecretVolume) Reset

func (x *SecretVolume) Reset()

func (*SecretVolume) String

func (x *SecretVolume) String() string

type ServiceAccount

type ServiceAccount struct {
	Annotations *structpb.Struct `protobuf:"bytes,1,opt,name=annotations,proto3" json:"annotations,omitempty"`
	// contains filtered or unexported fields
}

Mirrors ServiceAccount for unmarshaling.

func (*ServiceAccount) Descriptor deprecated

func (*ServiceAccount) Descriptor() ([]byte, []int)

Deprecated: Use ServiceAccount.ProtoReflect.Descriptor instead.

func (*ServiceAccount) GetAnnotations

func (x *ServiceAccount) GetAnnotations() *structpb.Struct

func (*ServiceAccount) ProtoMessage

func (*ServiceAccount) ProtoMessage()

func (*ServiceAccount) ProtoReflect

func (x *ServiceAccount) ProtoReflect() protoreflect.Message

func (*ServiceAccount) Reset

func (x *ServiceAccount) Reset()

func (*ServiceAccount) String

func (x *ServiceAccount) String() string

type SidecarInjectorConfig

type SidecarInjectorConfig struct {

	// Enables sidecar auto-injection in namespaces by default.
	EnableNamespacesByDefault *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=enableNamespacesByDefault,proto3" json:"enableNamespacesByDefault,omitempty"`
	// Setting this to `IfNeeded` will result in the sidecar injector being run again if additional mutations occur. Default: Never
	ReinvocationPolicy string `protobuf:"bytes,3,opt,name=reinvocationPolicy,proto3" json:"reinvocationPolicy,omitempty"`
	// Instructs Istio to not inject the sidecar on those pods, based on labels that are present in those pods.
	//
	// Annotations in the pods have higher precedence than the label selectors.
	// Order of evaluation: Pod Annotations → NeverInjectSelector → AlwaysInjectSelector → Default Policy.
	// See https://istio.io/docs/setup/kubernetes/additional-setup/sidecar-injection/#more-control-adding-exceptions
	NeverInjectSelector []*v11.LabelSelector `protobuf:"bytes,11,rep,name=neverInjectSelector,proto3" json:"neverInjectSelector,omitempty"`
	// See NeverInjectSelector.
	AlwaysInjectSelector []*v11.LabelSelector `protobuf:"bytes,12,rep,name=alwaysInjectSelector,proto3" json:"alwaysInjectSelector,omitempty"`
	// If true, webhook or istioctl injector will rewrite PodSpec for liveness health check to redirect request to sidecar. This makes liveness check work even when mTLS is enabled.
	RewriteAppHTTPProbe *wrapperspb.BoolValue `protobuf:"bytes,16,opt,name=rewriteAppHTTPProbe,proto3" json:"rewriteAppHTTPProbe,omitempty"`
	// injectedAnnotations are additional annotations that will be added to the pod spec after injection
	// This is primarily to support PSP annotations.
	InjectedAnnotations *structpb.Struct `protobuf:"bytes,19,opt,name=injectedAnnotations,proto3" json:"injectedAnnotations,omitempty"`
	// Configure the injection url for sidecar injector webhook
	InjectionURL string `protobuf:"bytes,22,opt,name=injectionURL,proto3" json:"injectionURL,omitempty"`
	// Templates defines a set of custom injection templates that can be used. For example, defining:
	//
	// templates:
	//
	//	hello: |
	//	  metadata:
	//	    labels:
	//	      hello: world
	//
	// Then starting a pod with the `inject.istio.io/templates: hello` annotation, will result in the pod
	// being injected with the hello=world labels.
	// This is intended for advanced configuration only; most users should use the built in template
	Templates *structpb.Struct `protobuf:"bytes,23,opt,name=templates,proto3" json:"templates,omitempty"`
	// defaultTemplates: ["sidecar", "hello"]
	DefaultTemplates []string `protobuf:"bytes,24,rep,name=defaultTemplates,proto3" json:"defaultTemplates,omitempty"`
	// contains filtered or unexported fields
}

SidecarInjectorConfig is described in istio.io documentation.

func (*SidecarInjectorConfig) Descriptor deprecated

func (*SidecarInjectorConfig) Descriptor() ([]byte, []int)

Deprecated: Use SidecarInjectorConfig.ProtoReflect.Descriptor instead.

func (*SidecarInjectorConfig) GetAlwaysInjectSelector

func (x *SidecarInjectorConfig) GetAlwaysInjectSelector() []*v11.LabelSelector

func (*SidecarInjectorConfig) GetDefaultTemplates

func (x *SidecarInjectorConfig) GetDefaultTemplates() []string

func (*SidecarInjectorConfig) GetEnableNamespacesByDefault

func (x *SidecarInjectorConfig) GetEnableNamespacesByDefault() *wrapperspb.BoolValue

func (*SidecarInjectorConfig) GetInjectedAnnotations

func (x *SidecarInjectorConfig) GetInjectedAnnotations() *structpb.Struct

func (*SidecarInjectorConfig) GetInjectionURL

func (x *SidecarInjectorConfig) GetInjectionURL() string

func (*SidecarInjectorConfig) GetNeverInjectSelector

func (x *SidecarInjectorConfig) GetNeverInjectSelector() []*v11.LabelSelector

func (*SidecarInjectorConfig) GetReinvocationPolicy

func (x *SidecarInjectorConfig) GetReinvocationPolicy() string

func (*SidecarInjectorConfig) GetRewriteAppHTTPProbe

func (x *SidecarInjectorConfig) GetRewriteAppHTTPProbe() *wrapperspb.BoolValue

func (*SidecarInjectorConfig) GetTemplates

func (x *SidecarInjectorConfig) GetTemplates() *structpb.Struct

func (*SidecarInjectorConfig) ProtoMessage

func (*SidecarInjectorConfig) ProtoMessage()

func (*SidecarInjectorConfig) ProtoReflect

func (x *SidecarInjectorConfig) ProtoReflect() protoreflect.Message

func (*SidecarInjectorConfig) Reset

func (x *SidecarInjectorConfig) Reset()

func (*SidecarInjectorConfig) String

func (x *SidecarInjectorConfig) String() string

type StartupProbe

type StartupProbe struct {

	// Enables or disables a startup probe.
	// For optimal startup times, changing this should be tied to the readiness probe values.
	//
	// If the probe is enabled, it is recommended to have delay=0s,period=15s,failureThreshold=4.
	// This ensures the pod is marked ready immediately after the startup probe passes (which has a 1s poll interval),
	// and doesn't spam the readiness endpoint too much
	//
	// If the probe is disabled, it is recommended to have delay=1s,period=2s,failureThreshold=30.
	// This ensures the startup is reasonable fast (polling every 2s). 1s delay is used since the startup is not often ready instantly.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Minimum consecutive failures for the probe to be considered failed after having succeeded.
	FailureThreshold uint32 `protobuf:"varint,2,opt,name=failureThreshold,proto3" json:"failureThreshold,omitempty"`
	// contains filtered or unexported fields
}

func (*StartupProbe) Descriptor deprecated

func (*StartupProbe) Descriptor() ([]byte, []int)

Deprecated: Use StartupProbe.ProtoReflect.Descriptor instead.

func (*StartupProbe) GetEnabled

func (x *StartupProbe) GetEnabled() *wrapperspb.BoolValue

func (*StartupProbe) GetFailureThreshold

func (x *StartupProbe) GetFailureThreshold() uint32

func (*StartupProbe) ProtoMessage

func (*StartupProbe) ProtoMessage()

func (*StartupProbe) ProtoReflect

func (x *StartupProbe) ProtoReflect() protoreflect.Message

func (*StartupProbe) Reset

func (x *StartupProbe) Reset()

func (*StartupProbe) String

func (x *StartupProbe) String() string

type TargetUtilizationConfig

type TargetUtilizationConfig struct {

	// K8s utilization setting for HorizontalPodAutoscaler target.
	//
	// See https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
	TargetAverageUtilization int32 `protobuf:"varint,1,opt,name=targetAverageUtilization,proto3" json:"targetAverageUtilization,omitempty"`
	// contains filtered or unexported fields
}

Configuration for CPU or memory target utilization for HorizontalPodAutoscaler target.

func (*TargetUtilizationConfig) Descriptor deprecated

func (*TargetUtilizationConfig) Descriptor() ([]byte, []int)

Deprecated: Use TargetUtilizationConfig.ProtoReflect.Descriptor instead.

func (*TargetUtilizationConfig) GetTargetAverageUtilization

func (x *TargetUtilizationConfig) GetTargetAverageUtilization() int32

func (*TargetUtilizationConfig) ProtoMessage

func (*TargetUtilizationConfig) ProtoMessage()

func (*TargetUtilizationConfig) ProtoReflect

func (x *TargetUtilizationConfig) ProtoReflect() protoreflect.Message

func (*TargetUtilizationConfig) Reset

func (x *TargetUtilizationConfig) Reset()

func (*TargetUtilizationConfig) String

func (x *TargetUtilizationConfig) String() string

type TelemetryConfig

type TelemetryConfig struct {

	// Controls whether telemetry is exported for Pilot.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Configuration for Telemetry v2.
	V2 *TelemetryV2Config `protobuf:"bytes,3,opt,name=v2,proto3" json:"v2,omitempty"`
	// contains filtered or unexported fields
}

Controls telemetry configuration

func (*TelemetryConfig) Descriptor deprecated

func (*TelemetryConfig) Descriptor() ([]byte, []int)

Deprecated: Use TelemetryConfig.ProtoReflect.Descriptor instead.

func (*TelemetryConfig) GetEnabled

func (x *TelemetryConfig) GetEnabled() *wrapperspb.BoolValue

func (*TelemetryConfig) GetV2

func (x *TelemetryConfig) GetV2() *TelemetryV2Config

func (*TelemetryConfig) ProtoMessage

func (*TelemetryConfig) ProtoMessage()

func (*TelemetryConfig) ProtoReflect

func (x *TelemetryConfig) ProtoReflect() protoreflect.Message

func (*TelemetryConfig) Reset

func (x *TelemetryConfig) Reset()

func (*TelemetryConfig) String

func (x *TelemetryConfig) String() string

type TelemetryV2Config

type TelemetryV2Config struct {

	// Controls whether pilot will configure telemetry v2.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Telemetry v2 settings for prometheus.
	Prometheus *TelemetryV2PrometheusConfig `protobuf:"bytes,2,opt,name=prometheus,proto3" json:"prometheus,omitempty"`
	// Telemetry v2 settings for stackdriver.
	Stackdriver *TelemetryV2StackDriverConfig `protobuf:"bytes,3,opt,name=stackdriver,proto3" json:"stackdriver,omitempty"`
	// contains filtered or unexported fields
}

Controls whether pilot will configure telemetry v2.

func (*TelemetryV2Config) Descriptor deprecated

func (*TelemetryV2Config) Descriptor() ([]byte, []int)

Deprecated: Use TelemetryV2Config.ProtoReflect.Descriptor instead.

func (*TelemetryV2Config) GetEnabled

func (x *TelemetryV2Config) GetEnabled() *wrapperspb.BoolValue

func (*TelemetryV2Config) GetPrometheus

func (x *TelemetryV2Config) GetPrometheus() *TelemetryV2PrometheusConfig

func (*TelemetryV2Config) GetStackdriver

func (x *TelemetryV2Config) GetStackdriver() *TelemetryV2StackDriverConfig

func (*TelemetryV2Config) ProtoMessage

func (*TelemetryV2Config) ProtoMessage()

func (*TelemetryV2Config) ProtoReflect

func (x *TelemetryV2Config) ProtoReflect() protoreflect.Message

func (*TelemetryV2Config) Reset

func (x *TelemetryV2Config) Reset()

func (*TelemetryV2Config) String

func (x *TelemetryV2Config) String() string

type TelemetryV2PrometheusConfig

type TelemetryV2PrometheusConfig struct {

	// Controls whether stats envoyfilter would be enabled or not.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

Controls telemetry v2 prometheus settings.

func (*TelemetryV2PrometheusConfig) Descriptor deprecated

func (*TelemetryV2PrometheusConfig) Descriptor() ([]byte, []int)

Deprecated: Use TelemetryV2PrometheusConfig.ProtoReflect.Descriptor instead.

func (*TelemetryV2PrometheusConfig) GetEnabled

func (*TelemetryV2PrometheusConfig) ProtoMessage

func (*TelemetryV2PrometheusConfig) ProtoMessage()

func (*TelemetryV2PrometheusConfig) ProtoReflect

func (*TelemetryV2PrometheusConfig) Reset

func (x *TelemetryV2PrometheusConfig) Reset()

func (*TelemetryV2PrometheusConfig) String

func (x *TelemetryV2PrometheusConfig) String() string

type TelemetryV2StackDriverConfig

type TelemetryV2StackDriverConfig struct {
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// contains filtered or unexported fields
}

TelemetryV2StackDriverConfig controls telemetry v2 stackdriver settings.

func (*TelemetryV2StackDriverConfig) Descriptor deprecated

func (*TelemetryV2StackDriverConfig) Descriptor() ([]byte, []int)

Deprecated: Use TelemetryV2StackDriverConfig.ProtoReflect.Descriptor instead.

func (*TelemetryV2StackDriverConfig) GetEnabled

func (*TelemetryV2StackDriverConfig) ProtoMessage

func (*TelemetryV2StackDriverConfig) ProtoMessage()

func (*TelemetryV2StackDriverConfig) ProtoReflect

func (*TelemetryV2StackDriverConfig) Reset

func (x *TelemetryV2StackDriverConfig) Reset()

func (*TelemetryV2StackDriverConfig) String

type Tracer

type Tracer int32

Specifies which tracer to use.

const (
	Tracer_zipkin          Tracer = 0
	Tracer_lightstep       Tracer = 1
	Tracer_datadog         Tracer = 2
	Tracer_stackdriver     Tracer = 3
	Tracer_openCensusAgent Tracer = 4
	Tracer_none            Tracer = 5
)

func (Tracer) Descriptor

func (Tracer) Descriptor() protoreflect.EnumDescriptor

func (Tracer) Enum

func (x Tracer) Enum() *Tracer

func (Tracer) EnumDescriptor deprecated

func (Tracer) EnumDescriptor() ([]byte, []int)

Deprecated: Use Tracer.Descriptor instead.

func (Tracer) Number

func (x Tracer) Number() protoreflect.EnumNumber

func (Tracer) String

func (x Tracer) String() string

func (Tracer) Type

func (Tracer) Type() protoreflect.EnumType

type TracerConfig

type TracerConfig struct {

	// Configuration for the datadog tracing service.
	Datadog *TracerDatadogConfig `protobuf:"bytes,1,opt,name=datadog,proto3" json:"datadog,omitempty"`
	// Configuration for the lightstep tracing service.
	Lightstep *TracerLightStepConfig `protobuf:"bytes,2,opt,name=lightstep,proto3" json:"lightstep,omitempty"`
	// Configuration for the zipkin tracing service.
	Zipkin *TracerZipkinConfig `protobuf:"bytes,3,opt,name=zipkin,proto3" json:"zipkin,omitempty"`
	// Configuration for the stackdriver tracing service.
	Stackdriver *TracerStackdriverConfig `protobuf:"bytes,4,opt,name=stackdriver,proto3" json:"stackdriver,omitempty"`
	// contains filtered or unexported fields
}

Configuration for each of the supported tracers.

func (*TracerConfig) Descriptor deprecated

func (*TracerConfig) Descriptor() ([]byte, []int)

Deprecated: Use TracerConfig.ProtoReflect.Descriptor instead.

func (*TracerConfig) GetDatadog

func (x *TracerConfig) GetDatadog() *TracerDatadogConfig

func (*TracerConfig) GetLightstep

func (x *TracerConfig) GetLightstep() *TracerLightStepConfig

func (*TracerConfig) GetStackdriver

func (x *TracerConfig) GetStackdriver() *TracerStackdriverConfig

func (*TracerConfig) GetZipkin

func (x *TracerConfig) GetZipkin() *TracerZipkinConfig

func (*TracerConfig) ProtoMessage

func (*TracerConfig) ProtoMessage()

func (*TracerConfig) ProtoReflect

func (x *TracerConfig) ProtoReflect() protoreflect.Message

func (*TracerConfig) Reset

func (x *TracerConfig) Reset()

func (*TracerConfig) String

func (x *TracerConfig) String() string

type TracerDatadogConfig

type TracerDatadogConfig struct {

	// Address in host:port format for reporting trace data to the Datadog agent.
	Address string `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the datadog tracing service.

func (*TracerDatadogConfig) Descriptor deprecated

func (*TracerDatadogConfig) Descriptor() ([]byte, []int)

Deprecated: Use TracerDatadogConfig.ProtoReflect.Descriptor instead.

func (*TracerDatadogConfig) GetAddress

func (x *TracerDatadogConfig) GetAddress() string

func (*TracerDatadogConfig) ProtoMessage

func (*TracerDatadogConfig) ProtoMessage()

func (*TracerDatadogConfig) ProtoReflect

func (x *TracerDatadogConfig) ProtoReflect() protoreflect.Message

func (*TracerDatadogConfig) Reset

func (x *TracerDatadogConfig) Reset()

func (*TracerDatadogConfig) String

func (x *TracerDatadogConfig) String() string

type TracerLightStepConfig

type TracerLightStepConfig struct {

	// Sets the lightstep satellite pool address in host:port format for reporting trace data.
	Address string `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
	// Sets the lightstep access token.
	AccessToken string `protobuf:"bytes,2,opt,name=accessToken,proto3" json:"accessToken,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the lightstep tracing service.

func (*TracerLightStepConfig) Descriptor deprecated

func (*TracerLightStepConfig) Descriptor() ([]byte, []int)

Deprecated: Use TracerLightStepConfig.ProtoReflect.Descriptor instead.

func (*TracerLightStepConfig) GetAccessToken

func (x *TracerLightStepConfig) GetAccessToken() string

func (*TracerLightStepConfig) GetAddress

func (x *TracerLightStepConfig) GetAddress() string

func (*TracerLightStepConfig) ProtoMessage

func (*TracerLightStepConfig) ProtoMessage()

func (*TracerLightStepConfig) ProtoReflect

func (x *TracerLightStepConfig) ProtoReflect() protoreflect.Message

func (*TracerLightStepConfig) Reset

func (x *TracerLightStepConfig) Reset()

func (*TracerLightStepConfig) String

func (x *TracerLightStepConfig) String() string

type TracerStackdriverConfig

type TracerStackdriverConfig struct {

	// enables trace output to stdout.
	Debug *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=debug,proto3" json:"debug,omitempty"`
	// The global default max number of attributes per span.
	MaxNumberOfAttributes uint32 `protobuf:"varint,2,opt,name=maxNumberOfAttributes,proto3" json:"maxNumberOfAttributes,omitempty"`
	// The global default max number of annotation events per span.
	MaxNumberOfAnnotations uint32 `protobuf:"varint,3,opt,name=maxNumberOfAnnotations,proto3" json:"maxNumberOfAnnotations,omitempty"`
	// The global default max number of message events per span.
	MaxNumberOfMessageEvents uint32 `protobuf:"varint,4,opt,name=maxNumberOfMessageEvents,proto3" json:"maxNumberOfMessageEvents,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the stackdriver tracing service.

func (*TracerStackdriverConfig) Descriptor deprecated

func (*TracerStackdriverConfig) Descriptor() ([]byte, []int)

Deprecated: Use TracerStackdriverConfig.ProtoReflect.Descriptor instead.

func (*TracerStackdriverConfig) GetDebug

func (*TracerStackdriverConfig) GetMaxNumberOfAnnotations

func (x *TracerStackdriverConfig) GetMaxNumberOfAnnotations() uint32

func (*TracerStackdriverConfig) GetMaxNumberOfAttributes

func (x *TracerStackdriverConfig) GetMaxNumberOfAttributes() uint32

func (*TracerStackdriverConfig) GetMaxNumberOfMessageEvents

func (x *TracerStackdriverConfig) GetMaxNumberOfMessageEvents() uint32

func (*TracerStackdriverConfig) ProtoMessage

func (*TracerStackdriverConfig) ProtoMessage()

func (*TracerStackdriverConfig) ProtoReflect

func (x *TracerStackdriverConfig) ProtoReflect() protoreflect.Message

func (*TracerStackdriverConfig) Reset

func (x *TracerStackdriverConfig) Reset()

func (*TracerStackdriverConfig) String

func (x *TracerStackdriverConfig) String() string

type TracerZipkinConfig

type TracerZipkinConfig struct {

	// Address of zipkin instance in host:port format for reporting trace data.
	//
	// Example: <zipkin-collector-service>.<zipkin-collector-namespace>:941
	Address string `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
	// contains filtered or unexported fields
}

Configuration for the zipkin tracing service.

func (*TracerZipkinConfig) Descriptor deprecated

func (*TracerZipkinConfig) Descriptor() ([]byte, []int)

Deprecated: Use TracerZipkinConfig.ProtoReflect.Descriptor instead.

func (*TracerZipkinConfig) GetAddress

func (x *TracerZipkinConfig) GetAddress() string

func (*TracerZipkinConfig) ProtoMessage

func (*TracerZipkinConfig) ProtoMessage()

func (*TracerZipkinConfig) ProtoReflect

func (x *TracerZipkinConfig) ProtoReflect() protoreflect.Message

func (*TracerZipkinConfig) Reset

func (x *TracerZipkinConfig) Reset()

func (*TracerZipkinConfig) String

func (x *TracerZipkinConfig) String() string

type Values

type Values struct {

	// Configuration for the Istio CNI plugin.
	Cni *CNIConfig `protobuf:"bytes,2,opt,name=cni,proto3" json:"cni,omitempty"`
	// Configuration for ingress and egress gateways.
	Gateways *GatewaysConfig `protobuf:"bytes,5,opt,name=gateways,proto3" json:"gateways,omitempty"`
	// Global configuration for Istio components.
	Global *GlobalConfig `protobuf:"bytes,6,opt,name=global,proto3" json:"global,omitempty"`
	// Configuration for the Pilot component.
	Pilot *PilotConfig `protobuf:"bytes,10,opt,name=pilot,proto3" json:"pilot,omitempty"`
	// Configuration for the ZTunnel component.
	Ztunnel *structpb.Value `protobuf:"bytes,41,opt,name=ztunnel,proto3" json:"ztunnel,omitempty"`
	// Controls whether telemetry is exported for Pilot.
	Telemetry *TelemetryConfig `protobuf:"bytes,23,opt,name=telemetry,proto3" json:"telemetry,omitempty"`
	// Configuration for the sidecar injector webhook.
	SidecarInjectorWebhook *SidecarInjectorConfig `protobuf:"bytes,13,opt,name=sidecarInjectorWebhook,proto3" json:"sidecarInjectorWebhook,omitempty"`
	// Configuration for the Istio CNI plugin.
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	IstioCni *CNIUsageConfig `protobuf:"bytes,19,opt,name=istio_cni,json=istioCni,proto3" json:"istio_cni,omitempty"`
	// Identifies the revision this installation is associated with.
	Revision string `protobuf:"bytes,21,opt,name=revision,proto3" json:"revision,omitempty"`
	// Used internally to identify the owner of each resource.
	OwnerName string `protobuf:"bytes,22,opt,name=ownerName,proto3" json:"ownerName,omitempty"`
	// Defines runtime configuration of components, including Istiod and istio-agent behavior.
	// See https://istio.io/docs/reference/config/istio.mesh.v1alpha1/ for all available options.
	// TODO can this import the real mesh config API?
	MeshConfig *structpb.Value `protobuf:"bytes,36,opt,name=meshConfig,proto3" json:"meshConfig,omitempty"`
	// Configuration for the base component.
	Base *BaseConfig `protobuf:"bytes,37,opt,name=base,proto3" json:"base,omitempty"`
	// Configuration for istiod-remote.
	// DEPRECATED - istiod-remote chart is removed and replaced with
	// `istio-discovery --set values.istiodRemote.enabled=true`
	//
	// Deprecated: Marked as deprecated in pkg/apis/values_types.proto.
	IstiodRemote *IstiodRemoteConfig `protobuf:"bytes,38,opt,name=istiodRemote,proto3" json:"istiodRemote,omitempty"`
	// Specifies the aliases for the Istio control plane revision. A MutatingWebhookConfiguration
	// is created for each alias.
	RevisionTags []string `protobuf:"bytes,39,rep,name=revisionTags,proto3" json:"revisionTags,omitempty"`
	// The name of the default revision in the cluster.
	DefaultRevision string `protobuf:"bytes,40,opt,name=defaultRevision,proto3" json:"defaultRevision,omitempty"`
	// Specifies which installation configuration profile to apply.
	Profile string `protobuf:"bytes,42,opt,name=profile,proto3" json:"profile,omitempty"`
	// Specifies the compatibility version to use. When this is set, the control plane will
	// be configured with the same defaults as the specified version.
	CompatibilityVersion string `protobuf:"bytes,43,opt,name=compatibilityVersion,proto3" json:"compatibilityVersion,omitempty"`
	// Specifies experimental helm fields that could be removed or changed in the future
	Experimental *ExperimentalConfig `protobuf:"bytes,44,opt,name=experimental,proto3" json:"experimental,omitempty"`
	// contains filtered or unexported fields
}

func (*Values) Descriptor deprecated

func (*Values) Descriptor() ([]byte, []int)

Deprecated: Use Values.ProtoReflect.Descriptor instead.

func (*Values) GetBase

func (x *Values) GetBase() *BaseConfig

func (*Values) GetCni

func (x *Values) GetCni() *CNIConfig

func (*Values) GetCompatibilityVersion

func (x *Values) GetCompatibilityVersion() string

func (*Values) GetDefaultRevision

func (x *Values) GetDefaultRevision() string

func (*Values) GetExperimental

func (x *Values) GetExperimental() *ExperimentalConfig

func (*Values) GetGateways

func (x *Values) GetGateways() *GatewaysConfig

func (*Values) GetGlobal

func (x *Values) GetGlobal() *GlobalConfig

func (*Values) GetIstioCni deprecated

func (x *Values) GetIstioCni() *CNIUsageConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*Values) GetIstiodRemote deprecated

func (x *Values) GetIstiodRemote() *IstiodRemoteConfig

Deprecated: Marked as deprecated in pkg/apis/values_types.proto.

func (*Values) GetMeshConfig

func (x *Values) GetMeshConfig() *structpb.Value

func (*Values) GetOwnerName

func (x *Values) GetOwnerName() string

func (*Values) GetPilot

func (x *Values) GetPilot() *PilotConfig

func (*Values) GetProfile

func (x *Values) GetProfile() string

func (*Values) GetRevision

func (x *Values) GetRevision() string

func (*Values) GetRevisionTags

func (x *Values) GetRevisionTags() []string

func (*Values) GetSidecarInjectorWebhook

func (x *Values) GetSidecarInjectorWebhook() *SidecarInjectorConfig

func (*Values) GetTelemetry

func (x *Values) GetTelemetry() *TelemetryConfig

func (*Values) GetZtunnel

func (x *Values) GetZtunnel() *structpb.Value

func (*Values) MarshalJSON

func (in *Values) MarshalJSON() ([]byte, error)

MarshalJSON is a custom marshaler for Values

func (*Values) ProtoMessage

func (*Values) ProtoMessage()

func (*Values) ProtoReflect

func (x *Values) ProtoReflect() protoreflect.Message

func (*Values) Reset

func (x *Values) Reset()

func (*Values) String

func (x *Values) String() string

func (*Values) UnmarshalJSON

func (in *Values) UnmarshalJSON(b []byte) error

UnmarshalJSON is a custom unmarshaler for Values

type WaypointConfig

type WaypointConfig struct {

	// K8s resource settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container
	Resources *Resources `protobuf:"bytes,1,opt,name=resources,proto3" json:"resources,omitempty"`
	// K8s affinity settings for waypoint pods.
	//
	// See https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
	Affinity *v1.Affinity `protobuf:"bytes,2,opt,name=affinity,proto3" json:"affinity,omitempty"`
	// K8s topology spread constraints settings.
	//
	// See https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
	TopologySpreadConstraints []*v1.TopologySpreadConstraint `protobuf:"bytes,3,rep,name=topologySpreadConstraints,proto3" json:"topologySpreadConstraints,omitempty"`
	// K8s node labels settings.
	//
	// See https://kubernetes.io/docs/user-guide/node-selection/
	NodeSelector *v1.NodeSelector `protobuf:"bytes,4,opt,name=nodeSelector,proto3" json:"nodeSelector,omitempty"`
	// K8s tolerations settings.
	//
	// See https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
	Toleration []*v1.Toleration `protobuf:"bytes,5,rep,name=toleration,proto3" json:"toleration,omitempty"`
	// contains filtered or unexported fields
}

Configuration for Waypoint proxies.

func (*WaypointConfig) Descriptor deprecated

func (*WaypointConfig) Descriptor() ([]byte, []int)

Deprecated: Use WaypointConfig.ProtoReflect.Descriptor instead.

func (*WaypointConfig) GetAffinity

func (x *WaypointConfig) GetAffinity() *v1.Affinity

func (*WaypointConfig) GetNodeSelector

func (x *WaypointConfig) GetNodeSelector() *v1.NodeSelector

func (*WaypointConfig) GetResources

func (x *WaypointConfig) GetResources() *Resources

func (*WaypointConfig) GetToleration

func (x *WaypointConfig) GetToleration() []*v1.Toleration

func (*WaypointConfig) GetTopologySpreadConstraints

func (x *WaypointConfig) GetTopologySpreadConstraints() []*v1.TopologySpreadConstraint

func (*WaypointConfig) ProtoMessage

func (*WaypointConfig) ProtoMessage()

func (*WaypointConfig) ProtoReflect

func (x *WaypointConfig) ProtoReflect() protoreflect.Message

func (*WaypointConfig) Reset

func (x *WaypointConfig) Reset()

func (*WaypointConfig) String

func (x *WaypointConfig) String() string

type ZeroVPNConfig

type ZeroVPNConfig struct {

	// Controls whether ZeroVPN is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	Suffix  string                `protobuf:"bytes,2,opt,name=suffix,proto3" json:"suffix,omitempty"`
	// contains filtered or unexported fields
}

ZeroVPNConfig enables cross-cluster access using SNI matching.

func (*ZeroVPNConfig) Descriptor deprecated

func (*ZeroVPNConfig) Descriptor() ([]byte, []int)

Deprecated: Use ZeroVPNConfig.ProtoReflect.Descriptor instead.

func (*ZeroVPNConfig) GetEnabled

func (x *ZeroVPNConfig) GetEnabled() *wrapperspb.BoolValue

func (*ZeroVPNConfig) GetSuffix

func (x *ZeroVPNConfig) GetSuffix() string

func (*ZeroVPNConfig) ProtoMessage

func (*ZeroVPNConfig) ProtoMessage()

func (*ZeroVPNConfig) ProtoReflect

func (x *ZeroVPNConfig) ProtoReflect() protoreflect.Message

func (*ZeroVPNConfig) Reset

func (x *ZeroVPNConfig) Reset()

func (*ZeroVPNConfig) String

func (x *ZeroVPNConfig) String() string

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL