WasmPlugin
extensions.istio.io / v1alpha1
apiVersion: extensions.istio.io/v1alpha1
kind: WasmPlugin
metadata:
name: example
spec object required
Extend the functionality provided by the Istio proxy through WebAssembly filters. See more details at: https://istio.io/docs/reference/config/proxy_extensions/wasm-plugin.html
failStrategy
string
Specifies the failure behavior for the plugin due to fatal errors.
Valid Options: FAIL_CLOSE, FAIL_OPEN, FAIL_RELOAD
enum:
FAIL_CLOSE, FAIL_OPEN, FAIL_RELOAD
imagePullPolicy
string
The pull behaviour to be applied when fetching Wasm module by either OCI image or `http/https`.
Valid Options: IfNotPresent, Always
enum:
UNSPECIFIED_POLICY, IfNotPresent, Always
imagePullSecret
string
Credentials to use for OCI image pulling.
minLength:
1maxLength:
253match []object
Specifies the criteria to determine which traffic is passed to WasmPlugin.
mode
string
Criteria for selecting traffic by their direction.
Valid Options: CLIENT, SERVER, CLIENT_AND_SERVER
enum:
UNDEFINED, CLIENT, SERVER, CLIENT_AND_SERVERports []object
Criteria for selecting traffic by their destination port.
number
integer required
minimum:
1maximum:
65535
phase
string
Determines where in the filter chain this `WasmPlugin` is to be injected.
Valid Options: AUTHN, AUTHZ, STATS
enum:
UNSPECIFIED_PHASE, AUTHN, AUTHZ, STATS
pluginConfig
object
The configuration that will be passed on to the plugin.
pluginName
string
The plugin name to be used in the Envoy configuration (used to be called `rootID`).
minLength:
1maxLength:
256
priority
integer
Determines ordering of `WasmPlugins` in the same `phase`.
format:
int32selector object
Criteria used to select the specific set of pods/VMs on which this plugin configuration should be applied.
matchLabels
object
One or more labels that indicate a specific set of pods/VMs on which a policy should be applied.
sha256
string
SHA256 checksum that will be used to verify Wasm module or OCI container.
pattern:
(^$|^[a-f0-9]{64}$)targetRef object
group
string
group is the group of the target resource.
pattern:
^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$maxLength:
253
kind
string required
kind is kind of the target resource.
pattern:
^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$minLength:
1maxLength:
63
name
string required
name is the name of the target resource.
minLength:
1maxLength:
253
namespace
string
namespace is the namespace of the referent.
targetRefs []object
Optional.
maxItems:
16
group
string
group is the group of the target resource.
pattern:
^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$maxLength:
253
kind
string required
kind is kind of the target resource.
pattern:
^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$minLength:
1maxLength:
63
name
string required
name is the name of the target resource.
minLength:
1maxLength:
253
namespace
string
namespace is the namespace of the referent.
type
string
Specifies the type of Wasm Extension to be used.
Valid Options: HTTP, NETWORK
enum:
UNSPECIFIED_PLUGIN_TYPE, HTTP, NETWORK
url
string required
URL of a Wasm module or OCI container.
minLength:
1
verificationKey
string
vmConfig object
Configuration for a Wasm VM.
env []object
Specifies environment variables to be injected to this VM.
maxItems:
256
name
string required
Name of the environment variable.
minLength:
1maxLength:
256
value
string
Value for the environment variable.
maxLength:
2048
valueFrom
string
Source for the environment variable's value.
Valid Options: INLINE, HOST
enum:
INLINE, HOSTstatus object
conditions []object
Current service state of the resource.
lastProbeTime
string
Last time we probed the condition.
format:
date-time
lastTransitionTime
string
Last time the condition transitioned from one status to another.
format:
date-time
message
string
Human-readable message indicating details about last transition.
observedGeneration
string | integer
Resource Generation to which the Condition refers.
reason
string
Unique, one-word, CamelCase reason for the condition's last transition.
status
string
Status is the status of the condition.
type
string
Type is the type of the condition.
observedGeneration
string | integer
validationMessages []object
Includes any errors or warnings detected by Istio's analyzers.
documentationUrl
string
A url pointing to the Istio documentation for this specific error type.
level
string
Represents how severe a message is.
Valid Options: UNKNOWN, ERROR, WARNING, INFO
enum:
UNKNOWN, ERROR, WARNING, INFOtype object
code
string
A 7 character code matching `^IST[0-9]{4}$` intended to uniquely identify the message type.
name
string
A human-readable name for the message type.
No matches. Try .spec.failStrategy for an exact path