Skip to main content
logoTetrate Service BridgeVersion: 1.8.x

IstioOperator Options

Configuration affecting Istio control plane installation version and shape. Note: unlike other Istio protos, field names must use camelCase. This is asserted in tests. Without camelCase, the json tag on the Go struct will not match the user's JSON representation. This leads to Kubernetes merge libraries, which rely on this tag, to fail. All other usages use jsonpb which does not use the json tag.

istio.operator.v1alpha1.Affinity

See k8s.io.api.core.v1.Affinity.

FieldDescriptionValidation Rule

nodeAffinity

istio.operator.v1alpha1.NodeAffinity

podAffinity

istio.operator.v1alpha1.PodAffinity

podAntiAffinity

istio.operator.v1alpha1.PodAntiAffinity

istio.operator.v1alpha1.BaseComponentSpec

Configuration for base component.

FieldDescriptionValidation Rule

enabled

google.protobuf.BoolValue
Selects whether this component is installed.

k8s

istio.operator.v1alpha1.KubernetesResourcesSpec
Kubernetes resource spec.

istio.operator.v1alpha1.ClientIPConfig

See k8s.io.api.core.v1.ClientIPConfig.

FieldDescriptionValidation Rule

timeoutSeconds

int32

istio.operator.v1alpha1.ComponentSpec

Configuration for internal components.

FieldDescriptionValidation Rule

enabled

google.protobuf.BoolValue
Selects whether this component is installed.

namespace

string
Namespace for the component.

hub

string
Hub for the component (overrides top level hub setting).

tag

google.protobuf.Value
Tag for the component (overrides top level tag setting).

spec

google.protobuf.Struct
Arbitrary install time configuration for the component.

k8s

istio.operator.v1alpha1.KubernetesResourcesSpec
Kubernetes resource spec.

istio.operator.v1alpha1.ConfigMapKeySelector

See k8s.io.api.core.v1.ConfigMapKeySelector.

FieldDescriptionValidation Rule

localObjectReference

istio.operator.v1alpha1.LocalObjectReference

key

string

optional

bool

istio.operator.v1alpha1.ContainerResourceMetricSource

See k8s.io.api.autoscaling.v2beta2.ContainerResourceMetricSource.

FieldDescriptionValidation Rule

name

string

target

istio.operator.v1alpha1.MetricTarget

container

string

istio.operator.v1alpha1.ContainerResourceMetricStatus

See k8s.io.api.autoscaling.v2beta2.ContainerResourceMetricStatus.

FieldDescriptionValidation Rule

name

string

current

istio.operator.v1alpha1.MetricValueStatus

container

string

istio.operator.v1alpha1.CrossVersionObjectReference

See k8s.io.api.autoscaling.v2beta2.CrossVersionObjectReference.

FieldDescriptionValidation Rule

kind

string

name

string

apiVersion

string

istio.operator.v1alpha1.DeploymentStrategy

See k8s.io.api.apps.v1.DeploymentStrategy.

FieldDescriptionValidation Rule

type

string

rollingUpdate

istio.operator.v1alpha1.RollingUpdateDeployment

istio.operator.v1alpha1.EnvVar

See k8s.io.api.core.v1.EnvVar.

FieldDescriptionValidation Rule

name

string

value

string

valueFrom

istio.operator.v1alpha1.EnvVarSource

istio.operator.v1alpha1.EnvVarSource

See k8s.io.api.core.v1.EnvVarSource.

FieldDescriptionValidation Rule

fieldRef

istio.operator.v1alpha1.ObjectFieldSelector

resourceFieldRef

istio.operator.v1alpha1.ResourceFieldSelector

configMapKeyRef

istio.operator.v1alpha1.ConfigMapKeySelector

secretKeyRef

istio.operator.v1alpha1.SecretKeySelector

istio.operator.v1alpha1.ExecAction

See k8s.io.api.core.v1.ExecAction.

FieldDescriptionValidation Rule

command

List of string

istio.operator.v1alpha1.ExternalComponentSpec

Configuration for external components.

FieldDescriptionValidation Rule

enabled

google.protobuf.BoolValue
Selects whether this component is installed.

namespace

string
Namespace for the component.

spec

google.protobuf.Struct
Arbitrary install time configuration for the component.

chartPath

string
Chart path for addon components.

schema

google.protobuf.Any
Optional schema to validate spec against.

k8s

istio.operator.v1alpha1.KubernetesResourcesSpec
Kubernetes resource spec.

istio.operator.v1alpha1.ExternalMetricSource

See k8s.io.api.autoscaling.v2beta2.ExternalMetricSource.

FieldDescriptionValidation Rule

metricName

string

metricSelector

k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector

targetValue

istio.operator.v1alpha1.IntOrString

targetAverageValue

istio.operator.v1alpha1.IntOrString

metric

istio.operator.v1alpha1.MetricIdentifier

target

istio.operator.v1alpha1.MetricTarget

istio.operator.v1alpha1.ExternalMetricStatus

See k8s.io.autoscaling.v2beta2.ExternalMetricStatus.

FieldDescriptionValidation Rule

metric

istio.operator.v1alpha1.MetricIdentifier

current

istio.operator.v1alpha1.MetricValueStatus

istio.operator.v1alpha1.GatewaySpec

Configuration for gateways.

FieldDescriptionValidation Rule

enabled

google.protobuf.BoolValue
Selects whether this gateway is installed.

namespace

string
Namespace for the gateway.

name

string
Name for the gateway.

label

map<string, string>
Labels for the gateway.

hub

string
Hub for the component (overrides top level hub setting).

tag

google.protobuf.Value
Tag for the component (overrides top level tag setting).

k8s

istio.operator.v1alpha1.KubernetesResourcesSpec
Kubernetes resource spec.

istio.operator.v1alpha1.HPAScalingPolicy

See k8s.io.autoscaling.v2beta2.HPAScalingPolicy.

FieldDescriptionValidation Rule

type

string

value

int32

periodSeconds

int32

istio.operator.v1alpha1.HPAScalingRules

See k8s.io.autoscaling.v2beta2.HPAScalingRules.

FieldDescriptionValidation Rule

stabilizationWindowSeconds

int32

selectPolicy

string

policies

istio.operator.v1alpha1.HPAScalingPolicy

istio.operator.v1alpha1.HTTPGetAction

See k8s.io.api.core.v1.HTTPGetAction.

FieldDescriptionValidation Rule

path

string

port

istio.operator.v1alpha1.IntOrString

host

string

scheme

string

httpHeaders

List of istio.operator.v1alpha1.HTTPHeader

istio.operator.v1alpha1.HTTPHeader

See k8s.io.api.core.v1.HTTPHeader.

FieldDescriptionValidation Rule

name

string

value

string

istio.operator.v1alpha1.HorizontalPodAutoScalerBehavior

See k8s.io.autoscaling.v2beta2.HorizontalPodAutoScalerBehavior.

FieldDescriptionValidation Rule

scaleUp

istio.operator.v1alpha1.HPAScalingRules

scaleDown

istio.operator.v1alpha1.HPAScalingRules

istio.operator.v1alpha1.HorizontalPodAutoscalerSpec

See k8s.io.api.autoscaling.v2beta1.HorizontalPodAutoscalerSpec.

FieldDescriptionValidation Rule

scaleTargetRef

istio.operator.v1alpha1.CrossVersionObjectReference

minReplicas

int32

maxReplicas

int32

metrics

List of istio.operator.v1alpha1.MetricSpec

behavior

istio.operator.v1alpha1.HorizontalPodAutoScalerBehavior

istio.operator.v1alpha1.InstallStatus

Observed state of IstioOperator

FieldDescriptionValidation Rule

status

istio.operator.v1alpha1.InstallStatus.Status
Overall status of all components controlled by the operator.

  • If all components have status NONE, overall status is NONE.
  • If all components are HEALTHY, overall status is HEALTHY.
  • If one or more components are RECONCILING and others are HEALTHY, overall status is RECONCILING.
  • If one or more components are UPDATING and others are HEALTHY, overall status is UPDATING.
  • If components are a mix of RECONCILING, UPDATING and HEALTHY, overall status is UPDATING.
  • If any component is in ERROR state, overall status is ERROR.
  • If further action is needed for reconciliation to proceed, overall status is ACTION_REQUIRED.

message

string
Optional message providing additional information about the existing overall status.

componentStatus

map<string, istio.operator.v1alpha1.InstallStatus.VersionStatus>
Individual status of each component controlled by the operator. The map key is the name of the component.

istio.operator.v1alpha1.InstallStatus.VersionStatus

VersionStatus is the status and version of a component.

FieldDescriptionValidation Rule

version

string

status

istio.operator.v1alpha1.InstallStatus.Status

error

string

istio.operator.v1alpha1.IntOrString

IntOrString is a type that can hold an int32 or a string. When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type. This allows you to have, for example, a JSON field that can accept a name or number.

FieldDescriptionValidation Rule

type

int64

intVal

google.protobuf.Int32Value

strVal

google.protobuf.StringValue

istio.operator.v1alpha1.IstioComponentSetSpec

IstioComponentSpec defines the desired installed state of Istio components.

FieldDescriptionValidation Rule

base

istio.operator.v1alpha1.BaseComponentSpec

pilot

istio.operator.v1alpha1.ComponentSpec

cni

istio.operator.v1alpha1.ComponentSpec

istiodRemote

istio.operator.v1alpha1.ComponentSpec
Remote cluster using an external control plane.

ingressGateways

List of istio.operator.v1alpha1.GatewaySpec

egressGateways

List of istio.operator.v1alpha1.GatewaySpec

istio.operator.v1alpha1.IstioOperatorSpec

IstioOperatorSpec defines the desired installed state of Istio components. The spec is a used to define a customization of the default profile values that are supplied with each Istio release. Because the spec is a customization API, specifying an empty IstioOperatorSpec results in a default Istio component values.

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
profile: default
hub: gcr.io/istio-testing
tag: latest
revision: 1-8-0
meshConfig:
accessLogFile: /dev/stdout
enableTracing: true
components:
egressGateways:
- name: istio-egressgateway
enabled: true
FieldDescriptionValidation Rule

profile

string
Path or name for the profile e.g.

  • minimal (looks in profiles dir for a file called minimal.yaml)
  • /tmp/istio/install/values/custom/custom-install.yaml (local file path)

default profile is used if this field is unset.

installPackagePath

string
Path for the install package. e.g.

  • /tmp/istio-installer/nightly (local file path)

hub

string
Root for docker image paths e.g. docker.io/istio

tag

google.protobuf.Value
Version tag for docker images e.g. 1.7.2

namespace

string
Namespace to install control plane resources into. If unset, Istio will be installed into the same namespace as the IstioOperator CR. You must also set values.global.istioNamespace if you wish to install Istio in a custom namespace. If you have enabled CNI, you must exclude this namespace by adding it to the list values.cni.excludeNamespaces.

revision

string
Identify the revision this installation is associated with. This option is currently experimental.

defaultRevision

bool
Identify whether this revision is the default revision for the cluster This option is currently experimental.

meshConfig

google.protobuf.Struct
Config used by control plane components internally.

components

istio.operator.v1alpha1.IstioComponentSetSpec
Kubernetes resource settings, enablement and component-specific settings that are not internal to the component.

addonComponents

map<string, istio.operator.v1alpha1.ExternalComponentSpec>
Deprecated. Users should manage the installation of addon components on their own. Refer to samples/addons for demo installation of addon components.

values

google.protobuf.Struct
Overrides for default values.yaml. This is a validated pass-through to Helm templates. See the Helm installation options for schema details. Anything that is available in IstioOperatorSpec should be set above rather than using the passthrough. This includes Kubernetes resource settings for components in KubernetesResourcesSpec.

unvalidatedValues

google.protobuf.Struct
Unvalidated overrides for default values.yaml. Used for custom templates where new parameters are added.

istio.operator.v1alpha1.K8sObjectOverlay

Patch for an existing k8s resource.

FieldDescriptionValidation Rule

apiVersion

string
Resource API version.

kind

string
Resource kind.

name

string
Name of resource. Namespace is always the component namespace.

patches

List of istio.operator.v1alpha1.K8sObjectOverlay.PathValue
List of patches to apply to resource.

istio.operator.v1alpha1.K8sObjectOverlay.PathValue

FieldDescriptionValidation Rule

path

string
Path of the form a.[key1:value1].b.[:value2] Where [key1:value1] is a selector for a key-value pair to identify a list element and [:value] is a value selector to identify a list element in a leaf list. All path intermediate nodes must exist.

value

google.protobuf.Value
Value to add, delete or replace. For add, the path should be a new leaf. For delete, value should be unset. For replace, path should reference an existing node. All values are strings but are converted into appropriate type based on schema.

istio.operator.v1alpha1.KubernetesResourcesSpec

KubernetesResourcesConfig is a common set of k8s resource configs for components.

FieldDescriptionValidation Rule

affinity

istio.operator.v1alpha1.Affinity
k8s affinity. https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity

env

List of istio.operator.v1alpha1.EnvVar
Deployment environment variables. https://kubernetes.io/docs/tasks/inject-data-application/define-environment-variable-container/

hpaSpec

istio.operator.v1alpha1.HorizontalPodAutoscalerSpec
k8s HorizontalPodAutoscaler settings. https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/

imagePullPolicy

string
k8s imagePullPolicy. https://kubernetes.io/docs/concepts/containers/images/

nodeSelector

map<string, string>
k8s nodeSelector. https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector

podDisruptionBudget

istio.operator.v1alpha1.PodDisruptionBudgetSpec
k8s PodDisruptionBudget settings. https://kubernetes.io/docs/concepts/workloads/pods/disruptions/#how-disruption-budgets-work

podAnnotations

map<string, string>
k8s pod annotations. https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/

priorityClassName

string
k8s priority_class_name. Default for all resources unless overridden. https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/#priorityclass

readinessProbe

istio.operator.v1alpha1.ReadinessProbe
k8s readinessProbe settings. https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/ k8s.io.api.core.v1.Probe readiness_probe = 9;

replicaCount

uint32
k8s Deployment replicas setting. https://kubernetes.io/docs/concepts/workloads/controllers/deployment/

resources

istio.operator.v1alpha1.Resources
k8s resources settings. https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container

service

istio.operator.v1alpha1.ServiceSpec
k8s Service settings. https://kubernetes.io/docs/concepts/services-networking/service/

strategy

istio.operator.v1alpha1.DeploymentStrategy
k8s deployment strategy. https://kubernetes.io/docs/concepts/workloads/controllers/deployment/

tolerations

List of istio.operator.v1alpha1.Toleration
k8s toleration https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/

serviceAnnotations

map<string, string>
k8s service annotations. https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/

securityContext

istio.operator.v1alpha1.PodSecurityContext
k8s pod security context https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod

volumes

List of k8s.io.api.core.v1.Volume
k8s volume https://kubernetes.io/docs/concepts/storage/volumes/ Volumes defines the collection of Volume to inject into the pod.

volumeMounts

List of k8s.io.api.core.v1.VolumeMount
k8s volumeMounts VolumeMounts defines the collection of VolumeMount to inject into containers.

overlays

List of istio.operator.v1alpha1.K8sObjectOverlay
Overlays for k8s resources in rendered manifests.

istio.operator.v1alpha1.LocalObjectReference

See k8s.io.api.core.v1.LocalObjectReference.

FieldDescriptionValidation Rule

name

string

istio.operator.v1alpha1.MetricIdentifier

See k8s.io.autoscaling.v2beta2.MetricIdentifier.

FieldDescriptionValidation Rule

name

string oneof __name

selector

k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector

istio.operator.v1alpha1.MetricSpec

See k8s.io.autoscaling.v2beta2.MetricSpec.

FieldDescriptionValidation Rule

type

string

object

istio.operator.v1alpha1.ObjectMetricSource

pods

istio.operator.v1alpha1.PodsMetricSource

resource

istio.operator.v1alpha1.ResourceMetricSource

containerResource

istio.operator.v1alpha1.ContainerResourceMetricSource

external

istio.operator.v1alpha1.ExternalMetricSource

istio.operator.v1alpha1.MetricStatus

See k8s.io.autoscaling.v2beta2.MetricStatus.

FieldDescriptionValidation Rule

type

string

object

istio.operator.v1alpha1.ObjectMetricStatus

pods

istio.operator.v1alpha1.PodsMetricStatus

resource

istio.operator.v1alpha1.ResourceMetricStatus

containerResource

istio.operator.v1alpha1.ContainerResourceMetricStatus

external

istio.operator.v1alpha1.ExternalMetricStatus

istio.operator.v1alpha1.MetricTarget

See k8s.io.autoscaling.v2beta2.MetricTarget.

FieldDescriptionValidation Rule

type

string

value

istio.operator.v1alpha1.IntOrString

averageValue

istio.operator.v1alpha1.IntOrString

averageUtilization

int32

istio.operator.v1alpha1.MetricValueStatus

See k8s.io.autoscaling.v2beta2.MetricValueStatus.

FieldDescriptionValidation Rule

value

istio.operator.v1alpha1.IntOrString

averageValue

istio.operator.v1alpha1.IntOrString

averageUtilization

int32

istio.operator.v1alpha1.NodeAffinity

See k8s.io.api.core.v1.NodeAffinity.

FieldDescriptionValidation Rule

requiredDuringSchedulingIgnoredDuringExecution

istio.operator.v1alpha1.NodeSelector

preferredDuringSchedulingIgnoredDuringExecution

List of istio.operator.v1alpha1.PreferredSchedulingTerm

istio.operator.v1alpha1.NodeSelector

See k8s.io.api.core.v1.NodeSelector.

FieldDescriptionValidation Rule

nodeSelectorTerms

List of istio.operator.v1alpha1.NodeSelectorTerm

istio.operator.v1alpha1.NodeSelectorRequirement

See k8s.io.api.core.v1.NodeSelectorRequirement.

FieldDescriptionValidation Rule

key

string

operator

string

values

List of string

istio.operator.v1alpha1.NodeSelectorTerm

See k8s.io.api.core.v1.NodeSelectorTerm.

FieldDescriptionValidation Rule

matchExpressions

List of istio.operator.v1alpha1.NodeSelectorRequirement

matchFields

List of istio.operator.v1alpha1.NodeSelectorRequirement

istio.operator.v1alpha1.ObjectFieldSelector

See k8s.io.api.core.v1.ObjectFieldSelector.

FieldDescriptionValidation Rule

apiVersion

string

fieldPath

string

istio.operator.v1alpha1.ObjectMeta

From k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta.

FieldDescriptionValidation Rule

name

string

namespace

string

istio.operator.v1alpha1.ObjectMetricSource

See k8s.io.autoscaling.v2beta2.ObjectMetricSource.

FieldDescriptionValidation Rule

metricName

string

targetValue

istio.operator.v1alpha1.IntOrString

selector

k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector

averageValue

istio.operator.v1alpha1.IntOrString

target

google.protobuf.Value
Type changes from CrossVersionObjectReference to ResourceMetricTarget in autoscaling v2beta2/v2 compared with v2beta1 Change it to dynamic type to keep backward compatible

describedObject

istio.operator.v1alpha1.CrossVersionObjectReference

metric

istio.operator.v1alpha1.MetricIdentifier

istio.operator.v1alpha1.ObjectMetricStatus

See k8s.io.autoscaling.v2beta2.ObjectMetricStatus.

FieldDescriptionValidation Rule

metric

istio.operator.v1alpha1.MetricIdentifier

current

istio.operator.v1alpha1.MetricValueStatus

describedObject

istio.operator.v1alpha1.CrossVersionObjectReference

istio.operator.v1alpha1.PodAffinity

See k8s.io.api.core.v1.PodAffinity.

FieldDescriptionValidation Rule

requiredDuringSchedulingIgnoredDuringExecution

List of istio.operator.v1alpha1.PodAffinityTerm

preferredDuringSchedulingIgnoredDuringExecution

List of istio.operator.v1alpha1.WeightedPodAffinityTerm

istio.operator.v1alpha1.PodAffinityTerm

See k8s.io.api.core.v1.PodAntiAffinity.

FieldDescriptionValidation Rule

labelSelector

k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector

namespaces

List of string

topologyKey

string

istio.operator.v1alpha1.PodAntiAffinity

See k8s.io.api.core.v1.PodAntiAffinity.

FieldDescriptionValidation Rule

requiredDuringSchedulingIgnoredDuringExecution

List of istio.operator.v1alpha1.PodAffinityTerm

preferredDuringSchedulingIgnoredDuringExecution

List of istio.operator.v1alpha1.WeightedPodAffinityTerm

istio.operator.v1alpha1.PodDisruptionBudgetSpec

See k8s.io.api.policy.v1beta1.PodDisruptionBudget.

FieldDescriptionValidation Rule

minAvailable

istio.operator.v1alpha1.IntOrString

selector

k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector

maxUnavailable

istio.operator.v1alpha1.IntOrString

istio.operator.v1alpha1.PodSecurityContext

See k8s.io.api.core.v1.PodSecurityContext.

FieldDescriptionValidation Rule

seLinuxOptions

istio.operator.v1alpha1.SELinuxOptions

runAsUser

int64

runAsNonRoot

bool

supplementalGroups

List of int64

fsGroup

int64

runAsGroup

int64

sysctls

List of istio.operator.v1alpha1.Sysctl

windowsOptions

istio.operator.v1alpha1.WindowsSecurityContextOptions

fsGroupChangePolicy

string

seccompProfile

istio.operator.v1alpha1.SeccompProfile

istio.operator.v1alpha1.PodsMetricSource

See k8s.io.autoscaling.v2beta2.PodsMetricSource.

FieldDescriptionValidation Rule

metricName

string

targetAverageValue

istio.operator.v1alpha1.IntOrString

selector

k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector

metric

istio.operator.v1alpha1.MetricIdentifier
v2beta2/v2 fields

target

istio.operator.v1alpha1.MetricTarget

istio.operator.v1alpha1.PodsMetricStatus

See k8s.io.autoscaling.v2beta2.PodsMetricStatus.

FieldDescriptionValidation Rule

metric

istio.operator.v1alpha1.MetricIdentifier

current

istio.operator.v1alpha1.MetricValueStatus

istio.operator.v1alpha1.PreferredSchedulingTerm

See k8s.io.api.core.v1.PreferredSchedulingTerm.

FieldDescriptionValidation Rule

weight

int32

preference

istio.operator.v1alpha1.NodeSelectorTerm

istio.operator.v1alpha1.ReadinessProbe

See k8s.io.api.core.v1.ReadinessProbe.

FieldDescriptionValidation Rule

exec

istio.operator.v1alpha1.ExecAction

httpGet

istio.operator.v1alpha1.HTTPGetAction

tcpSocket

istio.operator.v1alpha1.TCPSocketAction

initialDelaySeconds

int32

timeoutSeconds

int32

periodSeconds

int32

successThreshold

int32

failureThreshold

int32

istio.operator.v1alpha1.ResourceFieldSelector

See k8s.io.api.core.v1..

FieldDescriptionValidation Rule

containerName

string

resource

string

divisor

istio.operator.v1alpha1.IntOrString

istio.operator.v1alpha1.ResourceMetricSource

See k8s.io.autoscaling.v2beta2.ResourceMetricSource.

FieldDescriptionValidation Rule

name

string

targetAverageUtilization

int32

targetAverageValue

istio.operator.v1alpha1.IntOrString

target

istio.operator.v1alpha1.MetricTarget

istio.operator.v1alpha1.ResourceMetricStatus

See k8s.io.autoscaling.v2beta2.ResourceMetricStatus.

FieldDescriptionValidation Rule

name

string

current

istio.operator.v1alpha1.MetricValueStatus

istio.operator.v1alpha1.Resources

See k8s.io.api.core.v1.ResourceRequirements.

FieldDescriptionValidation Rule

limits

map<string, string>

requests

map<string, string>

istio.operator.v1alpha1.RollingUpdateDeployment

See k8s.io.api.apps.v1.RollingUpdateDeployment.

FieldDescriptionValidation Rule

maxUnavailable

istio.operator.v1alpha1.IntOrString

maxSurge

istio.operator.v1alpha1.IntOrString

istio.operator.v1alpha1.SELinuxOptions

See k8s.io.api.core.v1.SELinuxOptions.

FieldDescriptionValidation Rule

user

string

role

string

type

string

level

string

istio.operator.v1alpha1.SeccompProfile

See k8s.io.api.core.v1.SeccompProfile.

FieldDescriptionValidation Rule

type

string

localhostProfile

string

istio.operator.v1alpha1.SecretKeySelector

See k8s.io.api.core.v1.SecretKeySelector.

FieldDescriptionValidation Rule

localObjectReference

istio.operator.v1alpha1.LocalObjectReference

key

string

optional

bool

istio.operator.v1alpha1.ServicePort

See k8s.io.api.core.v1..

FieldDescriptionValidation Rule

name

string

protocol

string

port

int32

targetPort

istio.operator.v1alpha1.IntOrString

nodePort

int32

istio.operator.v1alpha1.ServiceSpec

See k8s.io.api.core.v1.ServiceSpec.

FieldDescriptionValidation Rule

ports

List of istio.operator.v1alpha1.ServicePort

selector

map<string, string>

clusterIP

string

type

string

externalIPs

List of string

sessionAffinity

string

loadBalancerIP

string

loadBalancerSourceRanges

List of string

externalName

string

externalTrafficPolicy

string

healthCheckNodePort

int32

publishNotReadyAddresses

bool

sessionAffinityConfig

istio.operator.v1alpha1.SessionAffinityConfig

istio.operator.v1alpha1.SessionAffinityConfig

See k8s.io.api.core.v1.SessionAffinityConfig.

FieldDescriptionValidation Rule

clientIP

istio.operator.v1alpha1.ClientIPConfig

istio.operator.v1alpha1.Sysctl

See k8s.io.api.core.v1.Sysctl.

FieldDescriptionValidation Rule

name

string

value

string

istio.operator.v1alpha1.TCPSocketAction

See k8s.io.api.core.v1.TCPSocketAction.

FieldDescriptionValidation Rule

port

istio.operator.v1alpha1.IntOrString

host

string

istio.operator.v1alpha1.Toleration

See k8s.io.api.core.v1.Toleration.

FieldDescriptionValidation Rule

key

string

operator

string

value

string

effect

string

tolerationSeconds

int64

istio.operator.v1alpha1.WeightedPodAffinityTerm

See k8s.io.api.core.v1.WeightedPodAffinityTerm.

FieldDescriptionValidation Rule

weight

int32

podAffinityTerm

istio.operator.v1alpha1.PodAffinityTerm

istio.operator.v1alpha1.WindowsSecurityContextOptions

See k8s.io.api.core.v1.WindowsSecurityContextOptions.

FieldDescriptionValidation Rule

gmsaCredentialSpecName

string

gmsaCredentialSpec

string

runAsUserName

string

istio.operator.v1alpha1.InstallStatus.Status

Status describes the current state of a component.

FieldNumberDescription

NONE

0

Component is not present.

UPDATING

1

Component is being updated to a different version.

RECONCILING

2

Controller has started but not yet completed reconciliation loop for the component.

HEALTHY

3

Component is healthy.

ERROR

4

Component is in an error state.

ACTION_REQUIRED

5

Overall status only and would not be set as a component status. Action is needed from the user for reconciliation to proceed e.g. There are proxies still pointing to the control plane revision when try to remove an IstioOperator CR.