Istio Certificate Authority (CA)
istio_ca [flags]
@@ -20,11 +20,6 @@
log to standard error as well as files
---ca-cert-ttl <duration>The TTL of self-signed CA root certificate (default `8760h0m0s`)
-
-
--cert-chain <string>Speicifies path to the certificate chain file (default ``)
@@ -50,12 +45,17 @@
Specifies path to kubeconfig file. This must be specified when not running inside a Kubernetes pod. (default ``)
---livenessProbeInterval <duration>--listened-namespace <string>Select a namespace for the CA to listen to. If unspecified, Istio CA tries to use the ${NAMESPACE} environment variable. If neither is set, Istio CA listens to all namespaces. (default ``)
+
+
+--liveness-probe-interval <duration>Interval of updating file for the liveness probe. (default `0s`)
---livenessProbePath <string>--liveness-probe-path <string>Path to the file for the liveness probe. (default ``)
@@ -125,9 +125,9 @@
The max TTL of issued workload certificates (default `168h0m0s`)
---namespace <string>--probe-check-interval <duration>Select a namespace for the CA to listen to. If unspecified, Istio CA tries to use the ${NAMESPACE} environment variable. If neither is set, Istio CA listens to all namespaces. (default ``)
+Interval of checking the liveness of the CA. (default `30s`)
--root-cert <string>Indicates whether to use auto-generated self-signed CA certificate. When set to true, the '--signing-cert' and '--signing-key' options are ignored.
+--self-signed-ca-cert-ttl <duration>The TTL of self-signed CA root certificate (default `8760h0m0s`)
+
+
--self-signed-ca-org <string>The issuer organization used in self-signed CA certificate (default to k8s.cluster.local) (default `k8s.cluster.local`)
@@ -186,6 +191,109 @@
+istio_ca probe
+Check the liveness or readiness of a locally-running server
+istio_ca probe [flags]
+
+
+
+Flags
+Shorthand
+Description
+
+
+
+--alsologtostderrlog to standard error as well as files
+
+
+--interval <duration>Duration used for checking the target file's last modified time. (default `0s`)
+
+
+--log_as_jsonWhether to format output as JSON or in plain console-friendly format
+
+
+--log_backtrace_at <traceLocation>when logging hits line file:N, emit a stack trace (default `:0`)
+
+
+--log_callersInclude caller information, useful for debugging
+
+
+--log_dir <string>If non-empty, write log files in this directory (default ``)
+
+
+--log_output_level <string>The minimum logging level of messages to output, can be one of "debug", "info", "warn", "error", or "none" (default `info`)
+
+
+--log_rotate <string>The path for the optional rotating log file (default ``)
+
+
+--log_rotate_max_age <int>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default `30`)
+
+
+--log_rotate_max_backups <int>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default `1000`)
+
+
+--log_rotate_max_size <int>The maximum size in megabytes of a log file beyond which the file is rotated (default `104857600`)
+
+
+--log_stacktrace_level <string>The minimum logging level at which stack traces are captured, can be one of "debug", "info", "warn", "error", or "none" (default `none`)
+
+
+--log_target <stringArray>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default `[stdout]`)
+
+
+--logtostderrlog to standard error instead of files
+
+
+--probe-path <string>Path of the file for checking the availability. (default ``)
+
+
+--stderrthreshold <severity>logs at or above this threshold go to stderr (default `2`)
+
+
+--v <Level>-vlog level for V logs (default `0`)
+
+
+--vmodule <moduleSpec>comma-separated list of pattern=N settings for file-filtered logging (default ``)
+
+
+
istio_ca version
Prints out build version information
istio_ca version [flags]
diff --git a/_docs/reference/commands/istioctl.html b/_docs/reference/commands/istioctl.html
index 482fdd1d53313..4755b2c762197 100644
--- a/_docs/reference/commands/istioctl.html
+++ b/_docs/reference/commands/istioctl.html
@@ -768,7 +768,12 @@ istioctl kube-inject
added as necessary.
The Istio project is continually evolving so the Istio sidecar
configuration may change unannounced. When in doubt re-run istioctl
-kube-inject on deployments to get the most up-to-date changes.
+kube-inject on deployments to get the most up-to-date changes.
+To override the sidecar injection template built into istioctl, the
+parameters --injectConfigFile or --injectConfigMapName can be used.
+Both options override any other template configuration parameters, eg.
+--hub and --tag. These options would typically be used with the
+file/configmap created with a new Istio release.
istioctl kube-inject [flags]
@@ -817,7 +822,12 @@ istioctl kube-inject
--injectConfigFile <string>injection configuration filename (default ``)
+injection configuration filename. Cannot be used with --injectConfigMapName (default ``)
+
+
+--injectConfigMapName <string>ConfigMap name for Istio sidecar injection, key should be "config".This option overrides any other sidecar injection config options, eg. --hub (default ``)
--istioNamespace <string>Examples
# Update an existing deployment.
kubectl get deployment -o yaml | istioctl kube-inject -f - | kubectl apply -f -
+# Create a persistent version of the deployment with Envoy sidecar
+# injected configuration from kubernetes configmap 'istio-inject'
+istioctl kube-inject -f deployment.yaml -o deployment-injected.yaml --injectConfigMapName istio-inject
+
istioctl proxy-config
diff --git a/_docs/reference/commands/mixs.html b/_docs/reference/commands/mixs.html
index 3a280e036c765..41e7d6f2e80ea 100644
--- a/_docs/reference/commands/mixs.html
+++ b/_docs/reference/commands/mixs.html
@@ -510,6 +510,11 @@
mixs server
URL of Zipkin collector (example: 'http://zipkin:9411/api/v1/spans'). (default ``)
+--useNewRuntimeUse the new runtime code for processing requests.
+
+
--v <Level>-vlog level for V logs (default `0`)
diff --git a/_docs/reference/config/adapters/list.html b/_docs/reference/config/adapters/list.html
index 50fc9b0ecd3d3..0ed11f451e5bf 100644
--- a/_docs/reference/config/adapters/list.html
+++ b/_docs/reference/config/adapters/list.html
@@ -12,6 +12,8 @@
Params
+Configuration format for the list adapter.
+