extensions.istio.io / v1alpha1 / WasmPlugin

• object required

  .spec

  Extend the functionality provided by the Istio proxy through WebAssembly filters. See more details at: https://istio.io/docs/reference/config/proxy_extensions/wasm-plugin.html

• string

  .spec .failStrategy

  Specifies the failure behavior for the plugin due to fatal errors.

  Valid Options: FAIL_CLOSE, FAIL_OPEN, FAIL_RELOAD

• string

  .spec .imagePullPolicy

  The pull behaviour to be applied when fetching Wasm module by either OCI image or http/https.

  Valid Options: IfNotPresent, Always

• string

  .spec .imagePullSecret

  Credentials to use for OCI image pulling.

• array

  .spec .match

  Specifies the criteria to determine which traffic is passed to WasmPlugin.

• string

  .spec .match[] .mode

  Criteria for selecting traffic by their direction.

  Valid Options: CLIENT, SERVER, CLIENT_AND_SERVER

• array

  .spec .match[] .ports

  Criteria for selecting traffic by their destination port.

• integer required

  .spec .match[] .ports[] .number

• string

  .spec .phase

  Determines where in the filter chain this WasmPlugin is to be injected.

  Valid Options: AUTHN, AUTHZ, STATS

• object

  .spec .pluginConfig

  The configuration that will be passed on to the plugin.

• string

  .spec .pluginName

  The plugin name to be used in the Envoy configuration (used to be called rootID).

• integer | null

  .spec .priority

  Determines ordering of WasmPlugins in the same phase.

• object

  .spec .selector

  Criteria used to select the specific set of pods/VMs on which this plugin configuration should be applied.

• object

  .spec .selector .matchLabels

  One or more labels that indicate a specific set of pods/VMs on which a policy should be applied.

• string

  .spec .sha256

  SHA256 checksum that will be used to verify Wasm module or OCI container.

• object

  .spec .targetRef

• string

  .spec .targetRef .group

  group is the group of the target resource.

• string required

  .spec .targetRef .kind

  kind is kind of the target resource.

• string required

  .spec .targetRef .name

  name is the name of the target resource.

• string

  .spec .targetRef .namespace

  namespace is the namespace of the referent.

• array

  .spec .targetRefs

  Optional.

• string

  .spec .targetRefs[] .group

  group is the group of the target resource.

• string required

  .spec .targetRefs[] .kind

  kind is kind of the target resource.

• string required

  .spec .targetRefs[] .name

  name is the name of the target resource.

• string

  .spec .targetRefs[] .namespace

  namespace is the namespace of the referent.

• string

  .spec .type

  Specifies the type of Wasm Extension to be used.

  Valid Options: HTTP, NETWORK

• string required

  .spec .url

  URL of a Wasm module or OCI container.

• string

  .spec .verificationKey

• object

  .spec .vmConfig

  Configuration for a Wasm VM.

• array

  .spec .vmConfig .env

  Specifies environment variables to be injected to this VM.

• string required

  .spec .vmConfig .env[] .name

  Name of the environment variable.

• string

  .spec .vmConfig .env[] .value

  Value for the environment variable.

• string

  .spec .vmConfig .env[] .valueFrom

  Source for the environment variable’s value.

  Valid Options: INLINE, HOST

• object

  .status

• array

  .status .conditions

  Current service state of the resource.

• string

  .status .conditions[] .lastProbeTime

  Last time we probed the condition.

• string

  .status .conditions[] .lastTransitionTime

  Last time the condition transitioned from one status to another.

• string

  .status .conditions[] .message

  Human-readable message indicating details about last transition.

• integer | string

  .status .conditions[] .observedGeneration

  Resource Generation to which the Condition refers.

• string

  .status .conditions[] .reason

  Unique, one-word, CamelCase reason for the condition’s last transition.

• string

  .status .conditions[] .status

  Status is the status of the condition.

• string

  .status .conditions[] .type

  Type is the type of the condition.

• integer | string

  .status .observedGeneration

• array

  .status .validationMessages

  Includes any errors or warnings detected by Istio’s analyzers.

• string

  .status .validationMessages[] .documentationUrl

  A url pointing to the Istio documentation for this specific error type.

• string

  .status .validationMessages[] .level

  Represents how severe a message is.

  Valid Options: UNKNOWN, ERROR, WARNING, INFO

• object

  .status .validationMessages[] .type

• string

  .status .validationMessages[] .type .code

  A 7 character code matching ^IST[0-9]{4}$ intended to uniquely identify the message type.

• string

  .status .validationMessages[] .type .name

  A human-readable name for the message type.