IstioOperator Options

The differences between TSB and TSE API

Tetrate Service Express (TSE) utilizes many of the same components as the Tetrate Service Bridge(TSB) product but has the several distinctions. Go to Comparing TSE and TSB for more details.

Configuration affecting Istio control plane installation version and shape. Note: unlike other Istio protos, field names must use camelCase. This is asserted in tests. Without camelCase, the json tag on the Go struct will not match the user's JSON representation. This leads to Kubernetes merge libraries, which rely on this tag, to fail. All other usages use jsonpb which does not use the json tag.

istio.operator.v1alpha1.Affinity

See k8s.io.api.core.v1.Affinity.

Field	Description	Validation Rule
nodeAffinity	istio.operator.v1alpha1.NodeAffinity	–
podAffinity	istio.operator.v1alpha1.PodAffinity	–
podAntiAffinity	istio.operator.v1alpha1.PodAntiAffinity	–

istio.operator.v1alpha1.BaseComponentSpec

Configuration for base component.

Field	Description	Validation Rule
enabled	google.protobuf.BoolValue Selects whether this component is installed.	–
k8s	istio.operator.v1alpha1.KubernetesResourcesSpec Kubernetes resource spec.	–

istio.operator.v1alpha1.ClientIPConfig

See k8s.io.api.core.v1.ClientIPConfig.

Field	Description	Validation Rule
timeoutSeconds	int32	–

istio.operator.v1alpha1.ComponentSpec

Configuration for internal components.

Field	Description	Validation Rule
enabled	google.protobuf.BoolValue Selects whether this component is installed.	–
namespace	string Namespace for the component.	–
hub	string Hub for the component (overrides top level hub setting).	–
tag	google.protobuf.Value Tag for the component (overrides top level tag setting).	–
spec	google.protobuf.Struct Arbitrary install time configuration for the component.	–
k8s	istio.operator.v1alpha1.KubernetesResourcesSpec Kubernetes resource spec.	–

istio.operator.v1alpha1.ConfigMapKeySelector

See k8s.io.api.core.v1.ConfigMapKeySelector.

Field	Description	Validation Rule
localObjectReference	istio.operator.v1alpha1.LocalObjectReference	–
key	string	–
optional	bool	–

istio.operator.v1alpha1.ContainerResourceMetricSource

See k8s.io.api.autoscaling.v2beta2.ContainerResourceMetricSource.

Field	Description	Validation Rule
name	string	–
target	istio.operator.v1alpha1.MetricTarget	–
container	string	–

istio.operator.v1alpha1.ContainerResourceMetricStatus

See k8s.io.api.autoscaling.v2beta2.ContainerResourceMetricStatus.

Field	Description	Validation Rule
name	string	–
current	istio.operator.v1alpha1.MetricValueStatus	–
container	string	–

istio.operator.v1alpha1.CrossVersionObjectReference

See k8s.io.api.autoscaling.v2beta2.CrossVersionObjectReference.

Field	Description	Validation Rule
kind	string	–
name	string	–
apiVersion	string	–

istio.operator.v1alpha1.DeploymentStrategy

See k8s.io.api.apps.v1.DeploymentStrategy.

Field	Description	Validation Rule
type	string	–
rollingUpdate	istio.operator.v1alpha1.RollingUpdateDeployment	–

istio.operator.v1alpha1.EnvVar

See k8s.io.api.core.v1.EnvVar.

Field	Description	Validation Rule
name	string	–
value	string	–
valueFrom	istio.operator.v1alpha1.EnvVarSource	–

istio.operator.v1alpha1.EnvVarSource

See k8s.io.api.core.v1.EnvVarSource.

Field	Description	Validation Rule
fieldRef	istio.operator.v1alpha1.ObjectFieldSelector	–
resourceFieldRef	istio.operator.v1alpha1.ResourceFieldSelector	–
configMapKeyRef	istio.operator.v1alpha1.ConfigMapKeySelector	–
secretKeyRef	istio.operator.v1alpha1.SecretKeySelector	–

istio.operator.v1alpha1.ExecAction

See k8s.io.api.core.v1.ExecAction.

Field	Description	Validation Rule
command	List of string	–

istio.operator.v1alpha1.ExternalComponentSpec

Configuration for external components.

Field	Description	Validation Rule
enabled	google.protobuf.BoolValue Selects whether this component is installed.	–
namespace	string Namespace for the component.	–
spec	google.protobuf.Struct Arbitrary install time configuration for the component.	–
chartPath	string Chart path for addon components.	–
schema	google.protobuf.Any Optional schema to validate spec against.	–
k8s	istio.operator.v1alpha1.KubernetesResourcesSpec Kubernetes resource spec.	–

istio.operator.v1alpha1.ExternalMetricSource

See k8s.io.api.autoscaling.v2beta2.ExternalMetricSource.

Field	Description	Validation Rule
metricName	string	–
metricSelector	k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector	–
targetValue	istio.operator.v1alpha1.IntOrString	–
targetAverageValue	istio.operator.v1alpha1.IntOrString	–
metric	istio.operator.v1alpha1.MetricIdentifier	–
target	istio.operator.v1alpha1.MetricTarget	–

istio.operator.v1alpha1.ExternalMetricStatus

See k8s.io.autoscaling.v2beta2.ExternalMetricStatus.

Field	Description	Validation Rule
metric	istio.operator.v1alpha1.MetricIdentifier	–
current	istio.operator.v1alpha1.MetricValueStatus	–

istio.operator.v1alpha1.GatewaySpec

Configuration for gateways.

Field	Description	Validation Rule
enabled	google.protobuf.BoolValue Selects whether this gateway is installed.	–
namespace	string Namespace for the gateway.	–
name	string Name for the gateway.	–
label	map<string, string> Labels for the gateway.	–
hub	string Hub for the component (overrides top level hub setting).	–
tag	google.protobuf.Value Tag for the component (overrides top level tag setting).	–
k8s	istio.operator.v1alpha1.KubernetesResourcesSpec Kubernetes resource spec.	–

istio.operator.v1alpha1.HPAScalingPolicy

See k8s.io.autoscaling.v2beta2.HPAScalingPolicy.

Field	Description	Validation Rule
type	string	–
value	int32	–
periodSeconds	int32	–

istio.operator.v1alpha1.HPAScalingRules

See k8s.io.autoscaling.v2beta2.HPAScalingRules.

Field	Description	Validation Rule
stabilizationWindowSeconds	int32	–
selectPolicy	string	–
policies	istio.operator.v1alpha1.HPAScalingPolicy	–

istio.operator.v1alpha1.HTTPGetAction

See k8s.io.api.core.v1.HTTPGetAction.

Field	Description	Validation Rule
path	string	–
port	istio.operator.v1alpha1.IntOrString	–
host	string	–
scheme	string	–
httpHeaders	List of istio.operator.v1alpha1.HTTPHeader	–

istio.operator.v1alpha1.HTTPHeader

See k8s.io.api.core.v1.HTTPHeader.

Field	Description	Validation Rule
name	string	–
value	string	–

istio.operator.v1alpha1.HorizontalPodAutoScalerBehavior

See k8s.io.autoscaling.v2beta2.HorizontalPodAutoScalerBehavior.

Field	Description	Validation Rule
scaleUp	istio.operator.v1alpha1.HPAScalingRules	–
scaleDown	istio.operator.v1alpha1.HPAScalingRules	–

istio.operator.v1alpha1.HorizontalPodAutoscalerSpec

See k8s.io.api.autoscaling.v2beta1.HorizontalPodAutoscalerSpec.

Field	Description	Validation Rule
scaleTargetRef	istio.operator.v1alpha1.CrossVersionObjectReference	–
minReplicas	int32	–
maxReplicas	int32	–
metrics	List of istio.operator.v1alpha1.MetricSpec	–
behavior	istio.operator.v1alpha1.HorizontalPodAutoScalerBehavior	–

istio.operator.v1alpha1.InstallStatus

Observed state of IstioOperator

Field	Description	Validation Rule
status	istio.operator.v1alpha1.InstallStatus.Status Overall status of all components controlled by the operator. If all components have status NONE, overall status is NONE. If all components are HEALTHY, overall status is HEALTHY. If one or more components are RECONCILING and others are HEALTHY, overall status is RECONCILING. If one or more components are UPDATING and others are HEALTHY, overall status is UPDATING. If components are a mix of RECONCILING, UPDATING and HEALTHY, overall status is UPDATING. If any component is in ERROR state, overall status is ERROR. If further action is needed for reconciliation to proceed, overall status is ACTION_REQUIRED.	–
message	string Optional message providing additional information about the existing overall status.	–
componentStatus	map<string, istio.operator.v1alpha1.InstallStatus.VersionStatus> Individual status of each component controlled by the operator. The map key is the name of the component.	–

istio.operator.v1alpha1.InstallStatus.VersionStatus

VersionStatus is the status and version of a component.

Field	Description	Validation Rule
version	string	–
status	istio.operator.v1alpha1.InstallStatus.Status	–
error	string	–

istio.operator.v1alpha1.IntOrString

IntOrString is a type that can hold an int32 or a string. When used in JSON or YAML marshalling and unmarshalling, it produces or consumes the inner type. This allows you to have, for example, a JSON field that can accept a name or number.

Field	Description	Validation Rule
type	int64	–
intVal	google.protobuf.Int32Value	–
strVal	google.protobuf.StringValue	–

istio.operator.v1alpha1.IstioComponentSetSpec

IstioComponentSpec defines the desired installed state of Istio components.

Field	Description	Validation Rule
base	istio.operator.v1alpha1.BaseComponentSpec	–
pilot	istio.operator.v1alpha1.ComponentSpec	–
cni	istio.operator.v1alpha1.ComponentSpec	–
istiodRemote	istio.operator.v1alpha1.ComponentSpec Remote cluster using an external control plane.	–
ingressGateways	List of istio.operator.v1alpha1.GatewaySpec	–
egressGateways	List of istio.operator.v1alpha1.GatewaySpec	–

istio.operator.v1alpha1.IstioOperatorSpec

IstioOperatorSpec defines the desired installed state of Istio components. The spec is a used to define a customization of the default profile values that are supplied with each Istio release. Because the spec is a customization API, specifying an empty IstioOperatorSpec results in a default Istio component values.

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  profile: default
  hub: gcr.io/istio-testing
  tag: latest
  revision: 1-8-0
  meshConfig:
    accessLogFile: /dev/stdout
    enableTracing: true
  components:
    egressGateways:
    - name: istio-egressgateway
      enabled: true

Field	Description	Validation Rule
profile	string Path or name for the profile e.g. minimal (looks in profiles dir for a file called minimal.yaml) /tmp/istio/install/values/custom/custom-install.yaml (local file path) default profile is used if this field is unset.	–
installPackagePath	string Path for the install package. e.g. /tmp/istio-installer/nightly (local file path)	–
hub	string Root for docker image paths e.g. docker.io/istio	–
tag	google.protobuf.Value Version tag for docker images e.g. 1.7.2	–
namespace	string Namespace to install control plane resources into. If unset, Istio will be installed into the same namespace as the IstioOperator CR. You must also set values.global.istioNamespace if you wish to install Istio in a custom namespace. If you have enabled CNI, you must exclude this namespace by adding it to the list values.cni.excludeNamespaces.	–
revision	string Identify the revision this installation is associated with. This option is currently experimental.	–
defaultRevision	bool Identify whether this revision is the default revision for the cluster This option is currently experimental.	–
meshConfig	google.protobuf.Struct Config used by control plane components internally.	–
components	istio.operator.v1alpha1.IstioComponentSetSpec Kubernetes resource settings, enablement and component-specific settings that are not internal to the component.	–
addonComponents	map<string, istio.operator.v1alpha1.ExternalComponentSpec> Deprecated. Users should manage the installation of addon components on their own. Refer to samples/addons for demo installation of addon components.	–
values	google.protobuf.Struct Overrides for default values.yaml. This is a validated pass-through to Helm templates. See the Helm installation options for schema details. Anything that is available in IstioOperatorSpec should be set above rather than using the passthrough. This includes Kubernetes resource settings for components in KubernetesResourcesSpec.	–
unvalidatedValues	google.protobuf.Struct Unvalidated overrides for default values.yaml. Used for custom templates where new parameters are added.	–

istio.operator.v1alpha1.K8sObjectOverlay

Patch for an existing k8s resource.

Field	Description	Validation Rule
apiVersion	string Resource API version.	–
kind	string Resource kind.	–
name	string Name of resource. Namespace is always the component namespace.	–
patches	List of istio.operator.v1alpha1.K8sObjectOverlay.PathValue List of patches to apply to resource.	–

istio.operator.v1alpha1.K8sObjectOverlay.PathValue

Field	Description	Validation Rule
path	string Path of the form a.[key1:value1].b.[:value2] Where [key1:value1] is a selector for a key-value pair to identify a list element and [:value] is a value selector to identify a list element in a leaf list. All path intermediate nodes must exist.	–
value	google.protobuf.Value Value to add, delete or replace. For add, the path should be a new leaf. For delete, value should be unset. For replace, path should reference an existing node. All values are strings but are converted into appropriate type based on schema.	–

istio.operator.v1alpha1.KubernetesResourcesSpec

KubernetesResourcesConfig is a common set of k8s resource configs for components.

Field	Description	Validation Rule
affinity	istio.operator.v1alpha1.Affinity k8s affinity. https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity	–
env	List of istio.operator.v1alpha1.EnvVar Deployment environment variables. https://kubernetes.io/docs/tasks/inject-data-application/define-environment-variable-container/	–
hpaSpec	istio.operator.v1alpha1.HorizontalPodAutoscalerSpec k8s HorizontalPodAutoscaler settings. https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/	–
imagePullPolicy	string k8s imagePullPolicy. https://kubernetes.io/docs/concepts/containers/images/	–
nodeSelector	map<string, string> k8s nodeSelector. https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector	–
podDisruptionBudget	istio.operator.v1alpha1.PodDisruptionBudgetSpec k8s PodDisruptionBudget settings. https://kubernetes.io/docs/concepts/workloads/pods/disruptions/#how-disruption-budgets-work	–
podAnnotations	map<string, string> k8s pod annotations. https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/	–
priorityClassName	string k8s priority_class_name. Default for all resources unless overridden. https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/#priorityclass	–
readinessProbe	istio.operator.v1alpha1.ReadinessProbe k8s readinessProbe settings. https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/ k8s.io.api.core.v1.Probe readiness_probe = 9;	–
replicaCount	uint32 k8s Deployment replicas setting. https://kubernetes.io/docs/concepts/workloads/controllers/deployment/	–
resources	istio.operator.v1alpha1.Resources k8s resources settings. https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container	–
service	istio.operator.v1alpha1.ServiceSpec k8s Service settings. https://kubernetes.io/docs/concepts/services-networking/service/	–
strategy	istio.operator.v1alpha1.DeploymentStrategy k8s deployment strategy. https://kubernetes.io/docs/concepts/workloads/controllers/deployment/	–
tolerations	List of istio.operator.v1alpha1.Toleration k8s toleration https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/	–
serviceAnnotations	map<string, string> k8s service annotations. https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/	–
securityContext	istio.operator.v1alpha1.PodSecurityContext k8s pod security context https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod	–
volumes	List of k8s.io.api.core.v1.Volume k8s volume https://kubernetes.io/docs/concepts/storage/volumes/ Volumes defines the collection of Volume to inject into the pod.	–
volumeMounts	List of k8s.io.api.core.v1.VolumeMount k8s volumeMounts VolumeMounts defines the collection of VolumeMount to inject into containers.	–
overlays	List of istio.operator.v1alpha1.K8sObjectOverlay Overlays for k8s resources in rendered manifests.	–

istio.operator.v1alpha1.LocalObjectReference

See k8s.io.api.core.v1.LocalObjectReference.

Field	Description	Validation Rule
name	string	–

istio.operator.v1alpha1.MetricIdentifier

See k8s.io.autoscaling.v2beta2.MetricIdentifier.

Field	Description	Validation Rule
name	string oneof __name	–
selector	k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector	–

istio.operator.v1alpha1.MetricSpec

See k8s.io.autoscaling.v2beta2.MetricSpec.

Field	Description	Validation Rule
type	string	–
object	istio.operator.v1alpha1.ObjectMetricSource	–
pods	istio.operator.v1alpha1.PodsMetricSource	–
resource	istio.operator.v1alpha1.ResourceMetricSource	–
containerResource	istio.operator.v1alpha1.ContainerResourceMetricSource	–
external	istio.operator.v1alpha1.ExternalMetricSource	–

istio.operator.v1alpha1.MetricStatus

See k8s.io.autoscaling.v2beta2.MetricStatus.

Field	Description	Validation Rule
type	string	–
object	istio.operator.v1alpha1.ObjectMetricStatus	–
pods	istio.operator.v1alpha1.PodsMetricStatus	–
resource	istio.operator.v1alpha1.ResourceMetricStatus	–
containerResource	istio.operator.v1alpha1.ContainerResourceMetricStatus	–
external	istio.operator.v1alpha1.ExternalMetricStatus	–

istio.operator.v1alpha1.MetricTarget

See k8s.io.autoscaling.v2beta2.MetricTarget.

Field	Description	Validation Rule
type	string	–
value	istio.operator.v1alpha1.IntOrString	–
averageValue	istio.operator.v1alpha1.IntOrString	–
averageUtilization	int32	–

istio.operator.v1alpha1.MetricValueStatus

See k8s.io.autoscaling.v2beta2.MetricValueStatus.

Field	Description	Validation Rule
value	istio.operator.v1alpha1.IntOrString	–
averageValue	istio.operator.v1alpha1.IntOrString	–
averageUtilization	int32	–

istio.operator.v1alpha1.NodeAffinity

See k8s.io.api.core.v1.NodeAffinity.

Field	Description	Validation Rule
requiredDuringSchedulingIgnoredDuringExecution	istio.operator.v1alpha1.NodeSelector	–
preferredDuringSchedulingIgnoredDuringExecution	List of istio.operator.v1alpha1.PreferredSchedulingTerm	–

istio.operator.v1alpha1.NodeSelector

See k8s.io.api.core.v1.NodeSelector.

Field	Description	Validation Rule
nodeSelectorTerms	List of istio.operator.v1alpha1.NodeSelectorTerm	–

istio.operator.v1alpha1.NodeSelectorRequirement

See k8s.io.api.core.v1.NodeSelectorRequirement.

Field	Description	Validation Rule
key	string	–
operator	string	–
values	List of string	–

istio.operator.v1alpha1.NodeSelectorTerm

See k8s.io.api.core.v1.NodeSelectorTerm.

Field	Description	Validation Rule
matchExpressions	List of istio.operator.v1alpha1.NodeSelectorRequirement	–
matchFields	List of istio.operator.v1alpha1.NodeSelectorRequirement	–

istio.operator.v1alpha1.ObjectFieldSelector

See k8s.io.api.core.v1.ObjectFieldSelector.

Field	Description	Validation Rule
apiVersion	string	–
fieldPath	string	–

istio.operator.v1alpha1.ObjectMeta

From k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta.

Field	Description	Validation Rule
name	string	–
namespace	string	–

istio.operator.v1alpha1.ObjectMetricSource

See k8s.io.autoscaling.v2beta2.ObjectMetricSource.

Field	Description	Validation Rule
metricName	string	–
targetValue	istio.operator.v1alpha1.IntOrString	–
selector	k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector	–
averageValue	istio.operator.v1alpha1.IntOrString	–
target	google.protobuf.Value Type changes from CrossVersionObjectReference to ResourceMetricTarget in autoscaling v2beta2/v2 compared with v2beta1 Change it to dynamic type to keep backward compatible	–
describedObject	istio.operator.v1alpha1.CrossVersionObjectReference	–
metric	istio.operator.v1alpha1.MetricIdentifier	–

istio.operator.v1alpha1.ObjectMetricStatus

See k8s.io.autoscaling.v2beta2.ObjectMetricStatus.

Field	Description	Validation Rule
metric	istio.operator.v1alpha1.MetricIdentifier	–
current	istio.operator.v1alpha1.MetricValueStatus	–
describedObject	istio.operator.v1alpha1.CrossVersionObjectReference	–

istio.operator.v1alpha1.PodAffinity

See k8s.io.api.core.v1.PodAffinity.

Field	Description	Validation Rule
requiredDuringSchedulingIgnoredDuringExecution	List of istio.operator.v1alpha1.PodAffinityTerm	–
preferredDuringSchedulingIgnoredDuringExecution	List of istio.operator.v1alpha1.WeightedPodAffinityTerm	–

istio.operator.v1alpha1.PodAffinityTerm

See k8s.io.api.core.v1.PodAntiAffinity.

Field	Description	Validation Rule
labelSelector	k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector	–
namespaces	List of string	–
topologyKey	string	–

istio.operator.v1alpha1.PodAntiAffinity

See k8s.io.api.core.v1.PodAntiAffinity.

Field	Description	Validation Rule
requiredDuringSchedulingIgnoredDuringExecution	List of istio.operator.v1alpha1.PodAffinityTerm	–
preferredDuringSchedulingIgnoredDuringExecution	List of istio.operator.v1alpha1.WeightedPodAffinityTerm	–

istio.operator.v1alpha1.PodDisruptionBudgetSpec

See k8s.io.api.policy.v1beta1.PodDisruptionBudget.

Field	Description	Validation Rule
minAvailable	istio.operator.v1alpha1.IntOrString	–
selector	k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector	–
maxUnavailable	istio.operator.v1alpha1.IntOrString	–

istio.operator.v1alpha1.PodSecurityContext

See k8s.io.api.core.v1.PodSecurityContext.

Field	Description	Validation Rule
seLinuxOptions	istio.operator.v1alpha1.SELinuxOptions	–
runAsUser	int64	–
runAsNonRoot	bool	–
supplementalGroups	List of int64	–
fsGroup	int64	–
runAsGroup	int64	–
sysctls	List of istio.operator.v1alpha1.Sysctl	–
windowsOptions	istio.operator.v1alpha1.WindowsSecurityContextOptions	–
fsGroupChangePolicy	string	–
seccompProfile	istio.operator.v1alpha1.SeccompProfile	–

istio.operator.v1alpha1.PodsMetricSource

See k8s.io.autoscaling.v2beta2.PodsMetricSource.

Field	Description	Validation Rule
metricName	string	–
targetAverageValue	istio.operator.v1alpha1.IntOrString	–
selector	k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector	–
metric	istio.operator.v1alpha1.MetricIdentifier v2beta2/v2 fields	–
target	istio.operator.v1alpha1.MetricTarget	–

istio.operator.v1alpha1.PodsMetricStatus

See k8s.io.autoscaling.v2beta2.PodsMetricStatus.

Field	Description	Validation Rule
metric	istio.operator.v1alpha1.MetricIdentifier	–
current	istio.operator.v1alpha1.MetricValueStatus	–

istio.operator.v1alpha1.PreferredSchedulingTerm

See k8s.io.api.core.v1.PreferredSchedulingTerm.

Field	Description	Validation Rule
weight	int32	–
preference	istio.operator.v1alpha1.NodeSelectorTerm	–

istio.operator.v1alpha1.ReadinessProbe

See k8s.io.api.core.v1.ReadinessProbe.

Field	Description	Validation Rule
exec	istio.operator.v1alpha1.ExecAction	–
httpGet	istio.operator.v1alpha1.HTTPGetAction	–
tcpSocket	istio.operator.v1alpha1.TCPSocketAction	–
initialDelaySeconds	int32	–
timeoutSeconds	int32	–
periodSeconds	int32	–
successThreshold	int32	–
failureThreshold	int32	–

istio.operator.v1alpha1.ResourceFieldSelector

See k8s.io.api.core.v1..

Field	Description	Validation Rule
containerName	string	–
resource	string	–
divisor	istio.operator.v1alpha1.IntOrString	–

istio.operator.v1alpha1.ResourceMetricSource

See k8s.io.autoscaling.v2beta2.ResourceMetricSource.

Field	Description	Validation Rule
name	string	–
targetAverageUtilization	int32	–
targetAverageValue	istio.operator.v1alpha1.IntOrString	–
target	istio.operator.v1alpha1.MetricTarget	–

istio.operator.v1alpha1.ResourceMetricStatus

See k8s.io.autoscaling.v2beta2.ResourceMetricStatus.

Field	Description	Validation Rule
name	string	–
current	istio.operator.v1alpha1.MetricValueStatus	–

istio.operator.v1alpha1.Resources

See k8s.io.api.core.v1.ResourceRequirements.

Field	Description	Validation Rule
limits	map<string, string>	–
requests	map<string, string>	–

istio.operator.v1alpha1.RollingUpdateDeployment

See k8s.io.api.apps.v1.RollingUpdateDeployment.

Field	Description	Validation Rule
maxUnavailable	istio.operator.v1alpha1.IntOrString	–
maxSurge	istio.operator.v1alpha1.IntOrString	–

istio.operator.v1alpha1.SELinuxOptions

See k8s.io.api.core.v1.SELinuxOptions.

Field	Description	Validation Rule
user	string	–
role	string	–
type	string	–
level	string	–

istio.operator.v1alpha1.SeccompProfile

See k8s.io.api.core.v1.SeccompProfile.

Field	Description	Validation Rule
type	string	–
localhostProfile	string	–

istio.operator.v1alpha1.SecretKeySelector

See k8s.io.api.core.v1.SecretKeySelector.

Field	Description	Validation Rule
localObjectReference	istio.operator.v1alpha1.LocalObjectReference	–
key	string	–
optional	bool	–

istio.operator.v1alpha1.ServicePort

See k8s.io.api.core.v1..

Field	Description	Validation Rule
name	string	–
protocol	string	–
port	int32	–
targetPort	istio.operator.v1alpha1.IntOrString	–
nodePort	int32	–

istio.operator.v1alpha1.ServiceSpec

See k8s.io.api.core.v1.ServiceSpec.

Field	Description	Validation Rule
ports	List of istio.operator.v1alpha1.ServicePort	–
selector	map<string, string>	–
clusterIP	string	–
type	string	–
externalIPs	List of string	–
sessionAffinity	string	–
loadBalancerIP	string	–
loadBalancerSourceRanges	List of string	–
externalName	string	–
externalTrafficPolicy	string	–
healthCheckNodePort	int32	–
publishNotReadyAddresses	bool	–
sessionAffinityConfig	istio.operator.v1alpha1.SessionAffinityConfig	–

istio.operator.v1alpha1.SessionAffinityConfig

See k8s.io.api.core.v1.SessionAffinityConfig.

Field	Description	Validation Rule
clientIP	istio.operator.v1alpha1.ClientIPConfig	–

istio.operator.v1alpha1.Sysctl

See k8s.io.api.core.v1.Sysctl.

Field	Description	Validation Rule
name	string	–
value	string	–

istio.operator.v1alpha1.TCPSocketAction

See k8s.io.api.core.v1.TCPSocketAction.

Field	Description	Validation Rule
port	istio.operator.v1alpha1.IntOrString	–
host	string	–

istio.operator.v1alpha1.Toleration

See k8s.io.api.core.v1.Toleration.

Field	Description	Validation Rule
key	string	–
operator	string	–
value	string	–
effect	string	–
tolerationSeconds	int64	–

istio.operator.v1alpha1.WeightedPodAffinityTerm

See k8s.io.api.core.v1.WeightedPodAffinityTerm.

Field	Description	Validation Rule
weight	int32	–
podAffinityTerm	istio.operator.v1alpha1.PodAffinityTerm	–

istio.operator.v1alpha1.WindowsSecurityContextOptions

See k8s.io.api.core.v1.WindowsSecurityContextOptions.

Field	Description	Validation Rule
gmsaCredentialSpecName	string	–
gmsaCredentialSpec	string	–
runAsUserName	string	–

istio.operator.v1alpha1.InstallStatus.Status

Status describes the current state of a component.

Field	Number	Description
NONE	0	Component is not present.
UPDATING	1	Component is being updated to a different version.
RECONCILING	2	Controller has started but not yet completed reconciliation loop for the component.
HEALTHY	3	Component is healthy.
ERROR	4	Component is in an error state.
ACTION_REQUIRED	5	Overall status only and would not be set as a component status. Action is needed from the user for reconciliation to proceed e.g. There are proxies still pointing to the control plane revision when try to remove an IstioOperator CR.