EnvoyFilter
networking.istio.io / v1alpha3
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
name: example
spec object
Customizing Envoy configuration generated by Istio. See more details at: https://istio.io/docs/reference/config/networking/envoy-filter.html
configPatches []object
One or more patches with match conditions.
applyTo
string
Specifies where in the Envoy configuration, the patch should be applied.
Valid Options: LISTENER, FILTER_CHAIN, NETWORK_FILTER, HTTP_FILTER, ROUTE_CONFIGURATION, VIRTUAL_HOST, HTTP_ROUTE, CLUSTER, EXTENSION_CONFIG, BOOTSTRAP, LISTENER_FILTER
enum:
INVALID, LISTENER, FILTER_CHAIN, NETWORK_FILTER, HTTP_FILTER, ROUTE_CONFIGURATION, VIRTUAL_HOST, HTTP_ROUTE, CLUSTER, EXTENSION_CONFIG, BOOTSTRAP, LISTENER_FILTERmatch object
Match on listener/route configuration/cluster.
cluster object
Match on envoy cluster attributes.
name
string
The exact name of the cluster to match.
portNumber
integer
The service port for which this cluster was generated.
minimum:
0maximum:
4.294967295e+09
service
string
The fully qualified service name for this cluster.
subset
string
The subset associated with the service.
context
string
The specific config generation context to match on.
Valid Options: ANY, SIDECAR_INBOUND, SIDECAR_OUTBOUND, GATEWAY
enum:
ANY, SIDECAR_INBOUND, SIDECAR_OUTBOUND, GATEWAYlistener object
Match on envoy listener attributes.
filterChain object
Match a specific filter chain in a listener.
applicationProtocols
string
Applies only to sidecars.
destinationPort
integer
The destination_port value used by a filter chain's match condition.
minimum:
0maximum:
4.294967295e+09filter object
The name of a specific filter to apply the patch to.
name
string
The filter name to match on.
subFilter object
The next level filter within this filter to match upon.
name
string
The filter name to match on.
name
string
The name assigned to the filter chain.
sni
string
The SNI value used by a filter chain's match condition.
transportProtocol
string
Applies only to `SIDECAR_INBOUND` context.
listenerFilter
string
Match a specific listener filter.
name
string
Match a specific listener by its name.
portName
string
portNumber
integer
The service port/gateway port to which traffic is being sent/received.
minimum:
0maximum:
4.294967295e+09proxy object
Match on properties associated with a proxy.
metadata
object
Match on the node metadata supplied by a proxy when connecting to Istio Pilot.
proxyVersion
string
A regular expression in golang regex format (RE2) that can be used to select proxies using a specific version of istio proxy.
routeConfiguration object
Match on envoy HTTP route configuration attributes.
gateway
string
The Istio gateway config's namespace/name for which this route configuration was generated.
name
string
Route configuration name to match on.
portName
string
Applicable only for GATEWAY context.
portNumber
integer
The service port number or gateway server port number for which this route configuration was generated.
minimum:
0maximum:
4.294967295e+09vhost object
Match a specific virtual host in a route configuration and apply the patch to the virtual host.
name
string
The VirtualHosts objects generated by Istio are named as host:port, where the host typically corresponds to the VirtualService's host field or the hostname of a service in the registry.
route object
Match a specific route within the virtual host.
action
string
Match a route with specific action type.
Valid Options: ANY, ROUTE, REDIRECT, DIRECT_RESPONSE
enum:
ANY, ROUTE, REDIRECT, DIRECT_RESPONSE
name
string
The Route objects generated by default are named as default.
patch object
The patch to apply along with the operation.
filterClass
string
Determines the filter insertion order.
Valid Options: AUTHN, AUTHZ, STATS
enum:
UNSPECIFIED, AUTHN, AUTHZ, STATS
operation
string
Determines how the patch should be applied.
Valid Options: MERGE, ADD, REMOVE, INSERT_BEFORE, INSERT_AFTER, INSERT_FIRST, REPLACE
enum:
INVALID, MERGE, ADD, REMOVE, INSERT_BEFORE, INSERT_AFTER, INSERT_FIRST, REPLACE
value
object
The JSON config of the object being patched.
priority
integer
Priority defines the order in which patch sets are applied within a context.
format:
int32targetRefs []object
Optional.
group
string
group is the group of the target resource.
pattern:
^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$maxLength:
253
kind
string required
kind is kind of the target resource.
pattern:
^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$minLength:
1maxLength:
63
name
string required
name is the name of the target resource.
minLength:
1maxLength:
253
namespace
string
namespace is the namespace of the referent.
workloadSelector object
Criteria used to select the specific set of pods/VMs on which this patch configuration should be applied.
labels
object
One or more labels that indicate a specific set of pods/VMs on which the configuration should be applied.
status
object
No matches. Try .spec.configPatches for an exact path