Skip to content

Commit bb7ffb1

Browse files
author
Shriram Rajagopalan
committed
update yamls
1 parent 946dc99 commit bb7ffb1

File tree

3 files changed

+159
-36
lines changed

3 files changed

+159
-36
lines changed

‎install/kubernetes/istio-auth.yaml‎

Lines changed: 53 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -554,21 +554,62 @@ data:
554554
mesh: |-
555555
# Uncomment the following line to enable mutual TLS between proxies
556556
authPolicy: MUTUAL_TLS
557+
#
558+
# Set the following variable to true to disable policy checks by the Mixer.
559+
# Note that metrics will still be reported to the Mixer.
560+
disablePolicyChecks: false
561+
# Set enableTracing to false to disable request tracing.
562+
enableTracing: true
563+
#
564+
# To disable the mixer completely (including metrics), comment out
565+
# the following line
566+
mixerAddress: istio-mixer.istio-system:9091
567+
#
557568
ingressService: istio-ingress.istio-system
558569
egressProxyAddress: istio-egress.istio-system:80
559-
mixerAddress: istio-mixer.istio-system:9091
570+
#
571+
# Along with discoveryRefreshDelay, this setting determines how
572+
# frequently should Envoy fetch and update its internal configuration
573+
# from Istio Pilot. Lower refresh delay results in higher CPU
574+
# utilization and potential performance loss in exchange for faster
575+
# convergence. Tweak this value according to your setup.
576+
rdsRefreshDelay: 30s
577+
#
560578
defaultConfig:
561-
configPath: "/etc/istio/proxy"
562-
binaryPath: "/usr/local/bin/envoy"
563-
serviceCluster: istio-proxy
564-
drainDuration: 2s
565-
parentShutdownDuration: 3s
566-
discoveryAddress: istio-pilot.istio-system:8080
567-
discoveryRefreshDelay: 1s
568-
connectTimeout: 1s
569-
proxyAdminPort: 15000
570-
zipkinAddress: zipkin.istio-system:9411
571-
statsdUdpAddress: istio-mixer.istio-system:9125
579+
# See rdsRefreshDelay for explanation about this setting.
580+
discoveryRefreshDelay: 30s
581+
#
582+
# TCP connection timeout between Envoy & the application, and between Envoys.
583+
connectTimeout: 10s
584+
#
585+
### ADVANCED SETTINGS #############
586+
# Where should envoy's configuration be stored in the istio-proxy container
587+
configPath: "/etc/istio/proxy"
588+
binaryPath: "/usr/local/bin/envoy"
589+
# The pseudo service name used for Envoy.
590+
serviceCluster: istio-proxy
591+
# These settings that determine how long an old Envoy
592+
# process should be kept alive after an occasional reload.
593+
drainDuration: 45s
594+
parentShutdownDuration: 1m0s
595+
#
596+
# Port where Envoy listens (on local host) for admin commands
597+
# You can exec into the istio-proxy container in a pod and
598+
# curl the admin port (curl http://localhost:15000/) to obtain
599+
# diagnostic information from Envoy. See
600+
# https://lyft.github.io/envoy/docs/operations/admin.html
601+
# for more details
602+
proxyAdminPort: 15000
603+
#
604+
# Address where Istio Pilot service is running
605+
discoveryAddress: istio-pilot.istio-system:8080
606+
#
607+
# Zipkin trace collector
608+
zipkinAddress: zipkin.istio-system:9411
609+
#
610+
# Statsd metrics collector. Istio mixer exposes a UDP endpoint
611+
# to collect and convert statsd metrics into Prometheus metrics.
612+
statsdUdpAddress: istio-mixer.istio-system:9125
572613
---
573614
apiVersion: v1
574615
kind: Service

‎install/kubernetes/istio-cluster-wide.yaml‎

Lines changed: 53 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -554,21 +554,62 @@ data:
554554
mesh: |-
555555
# Uncomment the following line to enable mutual TLS between proxies
556556
authPolicy: MUTUAL_TLS
557+
#
558+
# Set the following variable to true to disable policy checks by the Mixer.
559+
# Note that metrics will still be reported to the Mixer.
560+
disablePolicyChecks: false
561+
# Set enableTracing to false to disable request tracing.
562+
enableTracing: true
563+
#
564+
# To disable the mixer completely (including metrics), comment out
565+
# the following line
566+
mixerAddress: istio-mixer.istio-system:9091
567+
#
557568
ingressService: istio-ingress.istio-system
558569
egressProxyAddress: istio-egress.istio-system:80
559-
mixerAddress: istio-mixer.istio-system:9091
570+
#
571+
# Along with discoveryRefreshDelay, this setting determines how
572+
# frequently should Envoy fetch and update its internal configuration
573+
# from Istio Pilot. Lower refresh delay results in higher CPU
574+
# utilization and potential performance loss in exchange for faster
575+
# convergence. Tweak this value according to your setup.
576+
rdsRefreshDelay: 30s
577+
#
560578
defaultConfig:
561-
configPath: "/etc/istio/proxy"
562-
binaryPath: "/usr/local/bin/envoy"
563-
serviceCluster: istio-proxy
564-
drainDuration: 2s
565-
parentShutdownDuration: 3s
566-
discoveryAddress: istio-pilot.istio-system:8080
567-
discoveryRefreshDelay: 1s
568-
connectTimeout: 1s
569-
proxyAdminPort: 15000
570-
zipkinAddress: zipkin.istio-system:9411
571-
statsdUdpAddress: istio-mixer.istio-system:9125
579+
# See rdsRefreshDelay for explanation about this setting.
580+
discoveryRefreshDelay: 30s
581+
#
582+
# TCP connection timeout between Envoy & the application, and between Envoys.
583+
connectTimeout: 10s
584+
#
585+
### ADVANCED SETTINGS #############
586+
# Where should envoy's configuration be stored in the istio-proxy container
587+
configPath: "/etc/istio/proxy"
588+
binaryPath: "/usr/local/bin/envoy"
589+
# The pseudo service name used for Envoy.
590+
serviceCluster: istio-proxy
591+
# These settings that determine how long an old Envoy
592+
# process should be kept alive after an occasional reload.
593+
drainDuration: 45s
594+
parentShutdownDuration: 1m0s
595+
#
596+
# Port where Envoy listens (on local host) for admin commands
597+
# You can exec into the istio-proxy container in a pod and
598+
# curl the admin port (curl http://localhost:15000/) to obtain
599+
# diagnostic information from Envoy. See
600+
# https://lyft.github.io/envoy/docs/operations/admin.html
601+
# for more details
602+
proxyAdminPort: 15000
603+
#
604+
# Address where Istio Pilot service is running
605+
discoveryAddress: istio-pilot.istio-system:8080
606+
#
607+
# Zipkin trace collector
608+
zipkinAddress: zipkin.istio-system:9411
609+
#
610+
# Statsd metrics collector. Istio mixer exposes a UDP endpoint
611+
# to collect and convert statsd metrics into Prometheus metrics.
612+
statsdUdpAddress: istio-mixer.istio-system:9125
572613
---
573614
apiVersion: v1
574615
kind: Service

‎install/kubernetes/istio.yaml‎

Lines changed: 53 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -554,21 +554,62 @@ data:
554554
mesh: |-
555555
# Uncomment the following line to enable mutual TLS between proxies
556556
# authPolicy: MUTUAL_TLS
557+
#
558+
# Set the following variable to true to disable policy checks by the Mixer.
559+
# Note that metrics will still be reported to the Mixer.
560+
disablePolicyChecks: false
561+
# Set enableTracing to false to disable request tracing.
562+
enableTracing: true
563+
#
564+
# To disable the mixer completely (including metrics), comment out
565+
# the following line
566+
mixerAddress: istio-mixer.istio-system:9091
567+
#
557568
ingressService: istio-ingress.istio-system
558569
egressProxyAddress: istio-egress.istio-system:80
559-
mixerAddress: istio-mixer.istio-system:9091
570+
#
571+
# Along with discoveryRefreshDelay, this setting determines how
572+
# frequently should Envoy fetch and update its internal configuration
573+
# from Istio Pilot. Lower refresh delay results in higher CPU
574+
# utilization and potential performance loss in exchange for faster
575+
# convergence. Tweak this value according to your setup.
576+
rdsRefreshDelay: 30s
577+
#
560578
defaultConfig:
561-
configPath: "/etc/istio/proxy"
562-
binaryPath: "/usr/local/bin/envoy"
563-
serviceCluster: istio-proxy
564-
drainDuration: 2s
565-
parentShutdownDuration: 3s
566-
discoveryAddress: istio-pilot.istio-system:8080
567-
discoveryRefreshDelay: 1s
568-
connectTimeout: 1s
569-
proxyAdminPort: 15000
570-
zipkinAddress: zipkin.istio-system:9411
571-
statsdUdpAddress: istio-mixer.istio-system:9125
579+
# See rdsRefreshDelay for explanation about this setting.
580+
discoveryRefreshDelay: 30s
581+
#
582+
# TCP connection timeout between Envoy & the application, and between Envoys.
583+
connectTimeout: 10s
584+
#
585+
### ADVANCED SETTINGS #############
586+
# Where should envoy's configuration be stored in the istio-proxy container
587+
configPath: "/etc/istio/proxy"
588+
binaryPath: "/usr/local/bin/envoy"
589+
# The pseudo service name used for Envoy.
590+
serviceCluster: istio-proxy
591+
# These settings that determine how long an old Envoy
592+
# process should be kept alive after an occasional reload.
593+
drainDuration: 45s
594+
parentShutdownDuration: 1m0s
595+
#
596+
# Port where Envoy listens (on local host) for admin commands
597+
# You can exec into the istio-proxy container in a pod and
598+
# curl the admin port (curl http://localhost:15000/) to obtain
599+
# diagnostic information from Envoy. See
600+
# https://lyft.github.io/envoy/docs/operations/admin.html
601+
# for more details
602+
proxyAdminPort: 15000
603+
#
604+
# Address where Istio Pilot service is running
605+
discoveryAddress: istio-pilot.istio-system:8080
606+
#
607+
# Zipkin trace collector
608+
zipkinAddress: zipkin.istio-system:9411
609+
#
610+
# Statsd metrics collector. Istio mixer exposes a UDP endpoint
611+
# to collect and convert statsd metrics into Prometheus metrics.
612+
statsdUdpAddress: istio-mixer.istio-system:9125
572613
---
573614
apiVersion: v1
574615
kind: Service

0 commit comments

Comments
 (0)