WasmPlugin
extensions.istio.io / v1alpha1
apiVersion: extensions.istio.io/v1alpha1
kind: WasmPlugin
metadata:
name: example
spec object required
Extend the functionality provided by the Istio proxy through WebAssembly filters. See more details at: https://istio.io/docs/reference/config/proxy_extensions/wasm-plugin.html
failStrategy
string
Specifies the failure behavior for the plugin due to fatal errors.
Valid Options: FAIL_CLOSE, FAIL_OPEN
enum:
FAIL_CLOSE, FAIL_OPEN
imagePullPolicy
string
The pull behaviour to be applied when fetching Wasm module by either OCI image or `http/https`.
Valid Options: IfNotPresent, Always
enum:
UNSPECIFIED_POLICY, IfNotPresent, Always
imagePullSecret
string
Credentials to use for OCI image pulling.
minLength:
1maxLength:
253match []object
Specifies the criteria to determine which traffic is passed to WasmPlugin.
mode
string
Criteria for selecting traffic by their direction.
Valid Options: CLIENT, SERVER, CLIENT_AND_SERVER
enum:
UNDEFINED, CLIENT, SERVER, CLIENT_AND_SERVERports []object
Criteria for selecting traffic by their destination port.
number
integer required
minimum:
1maximum:
65535
phase
string
Determines where in the filter chain this `WasmPlugin` is to be injected.
Valid Options: AUTHN, AUTHZ, STATS
enum:
UNSPECIFIED_PHASE, AUTHN, AUTHZ, STATS
pluginConfig
object
The configuration that will be passed on to the plugin.
pluginName
string
The plugin name to be used in the Envoy configuration (used to be called `rootID`).
minLength:
1maxLength:
256
priority
integer
Determines ordering of `WasmPlugins` in the same `phase`.
format:
int32selector object
Criteria used to select the specific set of pods/VMs on which this plugin configuration should be applied.
matchLabels
object
One or more labels that indicate a specific set of pods/VMs on which a policy should be applied.
sha256
string
SHA256 checksum that will be used to verify Wasm module or OCI container.
pattern:
(^$|^[a-f0-9]{64}$)targetRef object
group
string
group is the group of the target resource.
pattern:
^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$maxLength:
253
kind
string required
kind is kind of the target resource.
pattern:
^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$minLength:
1maxLength:
63
name
string required
name is the name of the target resource.
minLength:
1maxLength:
253
namespace
string
namespace is the namespace of the referent.
targetRefs []object
Optional.
group
string
group is the group of the target resource.
pattern:
^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$maxLength:
253
kind
string required
kind is kind of the target resource.
pattern:
^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$minLength:
1maxLength:
63
name
string required
name is the name of the target resource.
minLength:
1maxLength:
253
namespace
string
namespace is the namespace of the referent.
type
string
Specifies the type of Wasm Extension to be used.
Valid Options: HTTP, NETWORK
enum:
UNSPECIFIED_PLUGIN_TYPE, HTTP, NETWORK
url
string required
URL of a Wasm module or OCI container.
minLength:
1
verificationKey
string
vmConfig object
Configuration for a Wasm VM.
env []object
Specifies environment variables to be injected to this VM.
maxItems:
256
name
string required
Name of the environment variable.
minLength:
1maxLength:
256
value
string
Value for the environment variable.
maxLength:
2048
valueFrom
string
Source for the environment variable's value.
Valid Options: INLINE, HOST
enum:
INLINE, HOST
status
object
No matches. Try .spec.failStrategy for an exact path