networking.istio.io / v1alpha3 / EnvoyFilter

• object

  .spec

  Customizing Envoy configuration generated by Istio. See more details at: https://istio.io/docs/reference/config/networking/envoy-filter.html

• array

  .spec .configPatches

  One or more patches with match conditions.

• string

  .spec .configPatches[] .applyTo

  Specifies where in the Envoy configuration, the patch should be applied.

  Valid Options: LISTENER, FILTER_CHAIN, NETWORK_FILTER, HTTP_FILTER, ROUTE_CONFIGURATION, VIRTUAL_HOST, HTTP_ROUTE, CLUSTER, EXTENSION_CONFIG, BOOTSTRAP, LISTENER_FILTER

• object

  .spec .configPatches[] .match

  Match on listener/route configuration/cluster.

• object

  .spec .configPatches[] .match .cluster

  Match on envoy cluster attributes.

• string

  .spec .configPatches[] .match .cluster .name

  The exact name of the cluster to match.

• integer

  .spec .configPatches[] .match .cluster .portNumber

  The service port for which this cluster was generated.

• string

  .spec .configPatches[] .match .cluster .service

  The fully qualified service name for this cluster.

• string

  .spec .configPatches[] .match .cluster .subset

  The subset associated with the service.

• string

  .spec .configPatches[] .match .context

  The specific config generation context to match on.

  Valid Options: ANY, SIDECAR_INBOUND, SIDECAR_OUTBOUND, GATEWAY

• object

  .spec .configPatches[] .match .listener

  Match on envoy listener attributes.

• object

  .spec .configPatches[] .match .listener .filterChain

  Match a specific filter chain in a listener.

• string

  .spec .configPatches[] .match .listener .filterChain .applicationProtocols

  Applies only to sidecars.

• integer

  .spec .configPatches[] .match .listener .filterChain .destinationPort

  The destination_port value used by a filter chain’s match condition.

• object

  .spec .configPatches[] .match .listener .filterChain .filter

  The name of a specific filter to apply the patch to.

• string

  .spec .configPatches[] .match .listener .filterChain .filter .name

  The filter name to match on.

• object

  .spec .configPatches[] .match .listener .filterChain .filter .subFilter

  The next level filter within this filter to match upon.

• string

  .spec .configPatches[] .match .listener .filterChain .filter .subFilter .name

  The filter name to match on.

• string

  .spec .configPatches[] .match .listener .filterChain .name

  The name assigned to the filter chain.

• string

  .spec .configPatches[] .match .listener .filterChain .sni

  The SNI value used by a filter chain’s match condition.

• string

  .spec .configPatches[] .match .listener .filterChain .transportProtocol

  Applies only to SIDECAR_INBOUND context.

• string

  .spec .configPatches[] .match .listener .listenerFilter

  Match a specific listener filter.

• string

  .spec .configPatches[] .match .listener .name

  Match a specific listener by its name.

• string

  .spec .configPatches[] .match .listener .portName

• integer

  .spec .configPatches[] .match .listener .portNumber

  The service port/gateway port to which traffic is being sent/received.

• object

  .spec .configPatches[] .match .proxy

  Match on properties associated with a proxy.

• object

  .spec .configPatches[] .match .proxy .metadata

  Match on the node metadata supplied by a proxy when connecting to istiod.

• string

  .spec .configPatches[] .match .proxy .proxyVersion

  A regular expression in golang regex format (RE2) that can be used to select proxies using a specific version of istio proxy.

• object

  .spec .configPatches[] .match .routeConfiguration

  Match on envoy HTTP route configuration attributes.

• string

  .spec .configPatches[] .match .routeConfiguration .gateway

  The Istio gateway config’s namespace/name for which this route configuration was generated.

• string

  .spec .configPatches[] .match .routeConfiguration .name

  Route configuration name to match on.

• string

  .spec .configPatches[] .match .routeConfiguration .portName

  Applicable only for GATEWAY context.

• integer

  .spec .configPatches[] .match .routeConfiguration .portNumber

  The service port number or gateway server port number for which this route configuration was generated.

• object

  .spec .configPatches[] .match .routeConfiguration .vhost

  Match a specific virtual host in a route configuration and apply the patch to the virtual host.

• string

  .spec .configPatches[] .match .routeConfiguration .vhost .domainName

  Match a domain name in a virtual host.

• string

  .spec .configPatches[] .match .routeConfiguration .vhost .name

  The VirtualHosts objects generated by Istio are named as host:port, where the host typically corresponds to the VirtualService’s host field or the hostname of a service in the registry.

• object

  .spec .configPatches[] .match .routeConfiguration .vhost .route

  Match a specific route within the virtual host.

• string

  .spec .configPatches[] .match .routeConfiguration .vhost .route .action

  Match a route with specific action type.

  Valid Options: ANY, ROUTE, REDIRECT, DIRECT_RESPONSE

• string

  .spec .configPatches[] .match .routeConfiguration .vhost .route .name

  The Route objects generated by default are named as default.

• object

  .spec .configPatches[] .patch

  The patch to apply along with the operation.

• string

  .spec .configPatches[] .patch .filterClass

  Determines the filter insertion order.

  Valid Options: AUTHN, AUTHZ, STATS

• string

  .spec .configPatches[] .patch .operation

  Determines how the patch should be applied.

  Valid Options: MERGE, ADD, REMOVE, INSERT_BEFORE, INSERT_AFTER, INSERT_FIRST, REPLACE

• object

  .spec .configPatches[] .patch .value

  The JSON config of the object being patched.

• integer

  .spec .priority

  Priority defines the order in which patch sets are applied within a context.

• array

  .spec .targetRefs

  Optional.

• string

  .spec .targetRefs[] .group

  group is the group of the target resource.

• string required

  .spec .targetRefs[] .kind

  kind is kind of the target resource.

• string required

  .spec .targetRefs[] .name

  name is the name of the target resource.

• string

  .spec .targetRefs[] .namespace

  namespace is the namespace of the referent.

• object

  .spec .workloadSelector

  Criteria used to select the specific set of pods/VMs on which this patch configuration should be applied.

• object

  .spec .workloadSelector .labels

  One or more labels that indicate a specific set of pods/VMs on which the configuration should be applied.

• object

  .status

• array

  .status .conditions

  Current service state of the resource.

• string

  .status .conditions[] .lastProbeTime

  Last time we probed the condition.

• string

  .status .conditions[] .lastTransitionTime

  Last time the condition transitioned from one status to another.

• string

  .status .conditions[] .message

  Human-readable message indicating details about last transition.

• integer | string

  .status .conditions[] .observedGeneration

  Resource Generation to which the Condition refers.

• string

  .status .conditions[] .reason

  Unique, one-word, CamelCase reason for the condition’s last transition.

• string

  .status .conditions[] .status

  Status is the status of the condition.

• string

  .status .conditions[] .type

  Type is the type of the condition.

• integer | string

  .status .observedGeneration

• array

  .status .validationMessages

  Includes any errors or warnings detected by Istio’s analyzers.

• string

  .status .validationMessages[] .documentationUrl

  A url pointing to the Istio documentation for this specific error type.

• string

  .status .validationMessages[] .level

  Represents how severe a message is.

  Valid Options: UNKNOWN, ERROR, WARNING, INFO

• object

  .status .validationMessages[] .type

• string

  .status .validationMessages[] .type .code

  A 7 character code matching ^IST[0-9]{4}$ intended to uniquely identify the message type.

• string

  .status .validationMessages[] .type .name

  A human-readable name for the message type.