istio.io/istio@v0.0.0-20240520182934-d79c90f27776/istioctl/pkg/kubeinject/testdata/mesh-config.yaml (about)

     1  # Set enableTracing to false to disable request tracing.
     2  enableTracing: true
     3  # This is the ingress service name, update if you used a different name
     4  ingressService: istio-ingress
     5  #
     6  defaultConfig:
     7    # NOTE: If you change any values in this section, make sure to make
     8    # the same changes in start up args in istio-ingress pods.
     9    #
    10    # TCP connection timeout between Envoy & the application, and between Envoys.
    11    connectTimeout: 1s
    12    #
    13    ### ADVANCED SETTINGS #############
    14    # Where should envoy's configuration be stored in the istio-proxy container
    15    configPath: "/etc/istio/proxy"
    16    binaryPath: "/usr/local/bin/envoy"
    17    # The pseudo service name used for Envoy.
    18    serviceCluster: istio-proxy
    19    # These settings that determine how long an old Envoy
    20    # process should be kept alive after an occasional reload.
    21    drainDuration: 2s
    22    #
    23    # The mode used to redirect inbound connections to Envoy. This setting
    24    # has no effect on outbound traffic: iptables REDIRECT is always used for
    25    # outbound connections.
    26    # If "REDIRECT", use iptables REDIRECT to NAT and redirect to Envoy.
    27    # The "REDIRECT" mode loses source addresses during redirection.
    28    # If "TPROXY", use iptables TPROXY to redirect to Envoy.
    29    # The "TPROXY" mode preserves both the source and destination IP
    30    # addresses and ports, so that they can be used for advanced filtering
    31    # and manipulation.
    32    # The "TPROXY" mode also configures the sidecar to run with the
    33    # CAP_NET_ADMIN capability, which is required to use TPROXY.
    34    #interceptionMode: REDIRECT
    35    #
    36    # Port where Envoy listens (on local host) for admin commands
    37    # You can exec into the istio-proxy container in a pod and
    38    # curl the admin port (curl http://localhost:15000/) to obtain
    39    # diagnostic information from Envoy. See
    40    # https://lyft.github.io/envoy/docs/operations/admin.html
    41    # for more details
    42    proxyAdminPort: 15000
    43    #
    44    # Zipkin trace collector
    45    zipkinAddress: ""
    46    #
    47    # Statsd metrics collector converts statsd metrics into Prometheus metrics.
    48    statsdUdpAddress: ""
    49    #
    50    # Mutual TLS authentication between sidecars and istio control plane.
    51    controlPlaneAuthPolicy: NONE
    52    #
    53    # Address where istio Pilot service is running
    54    discoveryAddress: istio-pilot:15007