Created
May 14, 2019 18:04
-
-
Save therealmitchconnors/748e4b0c8fc7642d65f7c07d08a9d7d4 to your computer and use it in GitHub Desktop.
Galley doc file with viper config documented
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- | |
title: galley | |
description: Galley provides configuration management services for Istio. | |
generator: pkg-collateral-docs | |
number_of_entries: 5 | |
--- | |
<p>Galley provides configuration management services for Istio.</p> | |
<table class="command-flags"> | |
<thead> | |
<tr> | |
<th>Flags</th> | |
<th>Shorthand</th> | |
<th>Description</th> | |
</tr> | |
</thead> | |
<tbody> | |
<tr> | |
<td><code>--config <string></code></td> | |
<td><code>-c</code></td> | |
<td>Config file containing args (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--log_as_json</code></td> | |
<td></td> | |
<td>Whether to format output as JSON or in plain console-friendly format </td> | |
</tr> | |
<tr> | |
<td><code>--log_caller <string></code></td> | |
<td></td> | |
<td>Comma-separated list of scopes for which to include caller information, scopes can be any of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--log_output_level <string></code></td> | |
<td></td> | |
<td>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate <string></code></td> | |
<td></td> | |
<td>The path for the optional rotating log file (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_age <int></code></td> | |
<td></td> | |
<td>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default `30`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_backups <int></code></td> | |
<td></td> | |
<td>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default `1000`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_size <int></code></td> | |
<td></td> | |
<td>The maximum size in megabytes of a log file beyond which the file is rotated (default `104857600`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_stacktrace_level <string></code></td> | |
<td></td> | |
<td>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_target <stringArray></code></td> | |
<td></td> | |
<td>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default `[stdout]`)</td> | |
</tr> | |
</tbody> | |
</table> | |
<h2 id="galley-probe">galley probe</h2> | |
<p>Check the liveness or readiness of a locally-running server</p> | |
<pre class="language-bash"><code>galley probe [flags] | |
</code></pre> | |
<table class="command-flags"> | |
<thead> | |
<tr> | |
<th>Flags</th> | |
<th>Shorthand</th> | |
<th>Description</th> | |
</tr> | |
</thead> | |
<tbody> | |
<tr> | |
<td><code>--config <string></code></td> | |
<td><code>-c</code></td> | |
<td>Config file containing args (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--interval <duration></code></td> | |
<td></td> | |
<td>Duration used for checking the target file's last modified time. (default `0s`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_as_json</code></td> | |
<td></td> | |
<td>Whether to format output as JSON or in plain console-friendly format </td> | |
</tr> | |
<tr> | |
<td><code>--log_caller <string></code></td> | |
<td></td> | |
<td>Comma-separated list of scopes for which to include caller information, scopes can be any of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--log_output_level <string></code></td> | |
<td></td> | |
<td>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate <string></code></td> | |
<td></td> | |
<td>The path for the optional rotating log file (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_age <int></code></td> | |
<td></td> | |
<td>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default `30`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_backups <int></code></td> | |
<td></td> | |
<td>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default `1000`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_size <int></code></td> | |
<td></td> | |
<td>The maximum size in megabytes of a log file beyond which the file is rotated (default `104857600`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_stacktrace_level <string></code></td> | |
<td></td> | |
<td>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_target <stringArray></code></td> | |
<td></td> | |
<td>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default `[stdout]`)</td> | |
</tr> | |
<tr> | |
<td><code>--probe-path <string></code></td> | |
<td></td> | |
<td>Path of the file for checking the availability. (default ``)</td> | |
</tr> | |
</tbody> | |
</table> | |
<h2 id="galley-server">galley server</h2> | |
<p>Starts Galley as a server</p> | |
<pre class="language-bash"><code>galley server [flags] | |
</code></pre> | |
<table class="command-flags"> | |
<thead> | |
<tr> | |
<th>Flags</th> | |
<th>Shorthand</th> | |
<th>Description</th> | |
</tr> | |
</thead> | |
<tbody> | |
<tr> | |
<td><code>--accessListFile <string></code></td> | |
<td></td> | |
<td>The access list yaml file that contains the allowd mTLS peer ids. (default `/etc/config/accesslist.yaml`)</td> | |
</tr> | |
<tr> | |
<td><code>--caCertFile <string></code></td> | |
<td></td> | |
<td>File containing the caBundle that signed the cert/key specified by --tlsCertFile and --tlsKeyFile. (default `/etc/certs/root-cert.pem`)</td> | |
</tr> | |
<tr> | |
<td><code>--config <string></code></td> | |
<td><code>-c</code></td> | |
<td>Config file containing args (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--configPath <string></code></td> | |
<td></td> | |
<td>Istio config file path (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--ctrlz_address <string></code></td> | |
<td></td> | |
<td>The IP Address to listen on for the ControlZ introspection facility. Use '*' to indicate all addresses. (default `127.0.0.1`)</td> | |
</tr> | |
<tr> | |
<td><code>--ctrlz_port <uint16></code></td> | |
<td></td> | |
<td>The IP port to use for the ControlZ introspection facility (default `9876`)</td> | |
</tr> | |
<tr> | |
<td><code>--deployment-name <string></code></td> | |
<td></td> | |
<td>Name of the deployment for the validation pod (default `istio-galley`)</td> | |
</tr> | |
<tr> | |
<td><code>--deployment-namespace <string></code></td> | |
<td></td> | |
<td>Namespace of the deployment for the validation pod (default `istio-system`)</td> | |
</tr> | |
<tr> | |
<td><code>--disableResourceReadyCheck</code></td> | |
<td></td> | |
<td>Disable resource readiness checks. This allows Galley to start if not all resource types are supported </td> | |
</tr> | |
<tr> | |
<td><code>--domain <string></code></td> | |
<td></td> | |
<td>DNS domain suffix (default `cluster.local`)</td> | |
</tr> | |
<tr> | |
<td><code>--enable-server</code></td> | |
<td></td> | |
<td>Run galley server mode </td> | |
</tr> | |
<tr> | |
<td><code>--enable-validation</code></td> | |
<td></td> | |
<td>Run galley validation mode </td> | |
</tr> | |
<tr> | |
<td><code>--enableProfiling</code></td> | |
<td></td> | |
<td>Enable profiling for Galley </td> | |
</tr> | |
<tr> | |
<td><code>--excludedResourceKinds <stringSlice></code></td> | |
<td></td> | |
<td>Comma-separated list of resource kinds that should not generate source events (default `[Endpoints,Node,Pod,Service]`)</td> | |
</tr> | |
<tr> | |
<td><code>--insecure</code></td> | |
<td></td> | |
<td>Use insecure gRPC communication </td> | |
</tr> | |
<tr> | |
<td><code>--kubeconfig <string></code></td> | |
<td></td> | |
<td>Use a Kubernetes configuration file instead of in-cluster configuration (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--livenessProbeInterval <duration></code></td> | |
<td></td> | |
<td>Interval of updating file for the Galley liveness probe. (default `2s`)</td> | |
</tr> | |
<tr> | |
<td><code>--livenessProbePath <string></code></td> | |
<td></td> | |
<td>Path to the file for the Galley liveness probe. (default `/healthLiveness`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_as_json</code></td> | |
<td></td> | |
<td>Whether to format output as JSON or in plain console-friendly format </td> | |
</tr> | |
<tr> | |
<td><code>--log_caller <string></code></td> | |
<td></td> | |
<td>Comma-separated list of scopes for which to include caller information, scopes can be any of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--log_output_level <string></code></td> | |
<td></td> | |
<td>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate <string></code></td> | |
<td></td> | |
<td>The path for the optional rotating log file (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_age <int></code></td> | |
<td></td> | |
<td>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default `30`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_backups <int></code></td> | |
<td></td> | |
<td>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default `1000`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_size <int></code></td> | |
<td></td> | |
<td>The maximum size in megabytes of a log file beyond which the file is rotated (default `104857600`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_stacktrace_level <string></code></td> | |
<td></td> | |
<td>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_target <stringArray></code></td> | |
<td></td> | |
<td>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default `[stdout]`)</td> | |
</tr> | |
<tr> | |
<td><code>--meshConfigFile <string></code></td> | |
<td></td> | |
<td>Path to the mesh config file (default `/etc/mesh-config/mesh`)</td> | |
</tr> | |
<tr> | |
<td><code>--monitoringPort <uint></code></td> | |
<td></td> | |
<td>Port to use for exposing self-monitoring information (default `15014`)</td> | |
</tr> | |
<tr> | |
<td><code>--pprofPort <uint></code></td> | |
<td></td> | |
<td>Port to use for exposing profiling (default `9094`)</td> | |
</tr> | |
<tr> | |
<td><code>--readinessProbeInterval <duration></code></td> | |
<td></td> | |
<td>Interval of updating file for the Galley readiness probe. (default `2s`)</td> | |
</tr> | |
<tr> | |
<td><code>--readinessProbePath <string></code></td> | |
<td></td> | |
<td>Path to the file for the Galley readiness probe. (default `/healthReadiness`)</td> | |
</tr> | |
<tr> | |
<td><code>--resyncPeriod <duration></code></td> | |
<td></td> | |
<td>Resync period for rescanning Kubernetes resources (default `0s`)</td> | |
</tr> | |
<tr> | |
<td><code>--server-address <string></code></td> | |
<td></td> | |
<td>Address to use for Galley's gRPC API, e.g. tcp://127.0.0.1:9092 or unix:///path/to/file (default `tcp://0.0.0.0:9901`)</td> | |
</tr> | |
<tr> | |
<td><code>--server-maxConcurrentStreams <uint></code></td> | |
<td></td> | |
<td>Maximum number of outstanding RPCs per connection (default `1024`)</td> | |
</tr> | |
<tr> | |
<td><code>--server-maxReceivedMessageSize <uint></code></td> | |
<td></td> | |
<td>Maximum size of individual gRPC messages (default `1048576`)</td> | |
</tr> | |
<tr> | |
<td><code>--service-name <string></code></td> | |
<td></td> | |
<td>Name of the validation service running in the same namespace as the deployment (default `istio-galley`)</td> | |
</tr> | |
<tr> | |
<td><code>--sinkAddress <string></code></td> | |
<td></td> | |
<td>Address of MCP Resource Sink server for Galley to connect to. Ex: 'foo.com:1234' (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--sinkAuthMode <string></code></td> | |
<td></td> | |
<td>Name of authentication plugin to use for connection to sink server. (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--sinkMeta <stringSlice></code></td> | |
<td></td> | |
<td>Comma-separated list of key=values to attach as metadata to outgoing sink connections. Ex: 'key=value,key2=value2' (default `[]`)</td> | |
</tr> | |
<tr> | |
<td><code>--tlsCertFile <string></code></td> | |
<td></td> | |
<td>File containing the x509 Certificate for HTTPS. (default `/etc/certs/cert-chain.pem`)</td> | |
</tr> | |
<tr> | |
<td><code>--tlsKeyFile <string></code></td> | |
<td></td> | |
<td>File containing the x509 private key matching --tlsCertFile. (default `/etc/certs/key.pem`)</td> | |
</tr> | |
<tr> | |
<td><code>--validation-port <uint></code></td> | |
<td></td> | |
<td>HTTPS port of the validation service. Must be 443 if service has more than one port (default `443`)</td> | |
</tr> | |
<tr> | |
<td><code>--validation-webhook-config-file <string></code></td> | |
<td></td> | |
<td>File that contains k8s validatingwebhookconfiguration yaml. Validation is disabled if file is not specified (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--webhook-name <string></code></td> | |
<td></td> | |
<td>Name of the k8s validatingwebhookconfiguration (default `istio-galley`)</td> | |
</tr> | |
</tbody> | |
</table> | |
<p/>Accepts deep config files, like: | |
<pre class="language-bash"><code>general: | |
introspection: | |
address: --ctrlz_address | |
port: --ctrlz_port | |
kubeconfig: --kubeconfig | |
processing: | |
domainsuffix: --domain | |
server: | |
address: --server-address | |
auth: | |
insecure: --insecure | |
enable: --enable-server | |
validation: | |
deploymentname: --deployment-name | |
deploymentnamespace: --deployment-namespace | |
enable: --enable-validation | |
servicename: --service-name | |
tls: | |
caCertificates: --validation.tls.caCertificates | |
clientCertificate: --validation.tls.clientCertificate | |
privateKey: --validation.tls.privateKey | |
webhookconfigfile: --validation-webhook-config-file | |
webhookname: --webhook-name | |
webhookport: --validation-port | |
</code></pre> | |
<h2 id="galley-version">galley version</h2> | |
<p>Prints out build version information</p> | |
<pre class="language-bash"><code>galley version [flags] | |
</code></pre> | |
<table class="command-flags"> | |
<thead> | |
<tr> | |
<th>Flags</th> | |
<th>Shorthand</th> | |
<th>Description</th> | |
</tr> | |
</thead> | |
<tbody> | |
<tr> | |
<td><code>--config <string></code></td> | |
<td><code>-c</code></td> | |
<td>Config file containing args (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--log_as_json</code></td> | |
<td></td> | |
<td>Whether to format output as JSON or in plain console-friendly format </td> | |
</tr> | |
<tr> | |
<td><code>--log_caller <string></code></td> | |
<td></td> | |
<td>Comma-separated list of scopes for which to include caller information, scopes can be any of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--log_output_level <string></code></td> | |
<td></td> | |
<td>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate <string></code></td> | |
<td></td> | |
<td>The path for the optional rotating log file (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_age <int></code></td> | |
<td></td> | |
<td>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default `30`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_backups <int></code></td> | |
<td></td> | |
<td>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default `1000`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_rotate_max_size <int></code></td> | |
<td></td> | |
<td>The maximum size in megabytes of a log file beyond which the file is rotated (default `104857600`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_stacktrace_level <string></code></td> | |
<td></td> | |
<td>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [attributes, conversions, default, grpcAdapter, kube, kube-converter, mcp, meshconfig, model, processing, rbac, runtime, server, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)</td> | |
</tr> | |
<tr> | |
<td><code>--log_target <stringArray></code></td> | |
<td></td> | |
<td>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default `[stdout]`)</td> | |
</tr> | |
<tr> | |
<td><code>--output <string></code></td> | |
<td><code>-o</code></td> | |
<td>One of 'yaml' or 'json'. (default ``)</td> | |
</tr> | |
<tr> | |
<td><code>--short</code></td> | |
<td><code>-s</code></td> | |
<td>Displays a short form of the version information </td> | |
</tr> | |
</tbody> | |
</table> | |
<h2 id="envvars">Environment variables</h2> | |
These environment variables affect the behavior of the <code>galley</code> command. | |
<table class="envvars"> | |
<thead> | |
<tr> | |
<th>Variable Name</th> | |
<th>Type</th> | |
<th>Default Value</th> | |
<th>Description</th> | |
</tr> | |
</thead> | |
<tbody> | |
<tr> | |
<td><code>AUTHZ_FAILURE_LOG_BURST_SIZE</code></td> | |
<td>Integer</td> | |
<td><code>1</code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>AUTHZ_FAILURE_LOG_FREQ</code></td> | |
<td>Time Duration</td> | |
<td><code>1m0s</code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>BYPASS_OOP_MTLS_SAN_VERIFICATION</code></td> | |
<td>Boolean</td> | |
<td><code>false</code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>ISTIO_GPRC_MAXSTREAMS</code></td> | |
<td>Integer</td> | |
<td><code>100000</code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>ISTIO_LANG</code></td> | |
<td>String</td> | |
<td><code></code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_CERT_DIR</code></td> | |
<td>String</td> | |
<td><code></code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_DEBOUNCE_AFTER</code></td> | |
<td>Time Duration</td> | |
<td><code>100ms</code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_DEBOUNCE_MAX</code></td> | |
<td>Time Duration</td> | |
<td><code>10s</code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_DEBUG_ADSZ_CONFIG</code></td> | |
<td>Boolean</td> | |
<td><code>false</code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_DISABLE_EDS_ISOLATION</code></td> | |
<td>String</td> | |
<td><code></code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_DISABLE_XDS_MARSHALING_TO_ANY</code></td> | |
<td>String</td> | |
<td><code></code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_ENABLE_FALLTHROUGH_ROUTE</code></td> | |
<td>Boolean</td> | |
<td><code>false</code></td> | |
<td>EnableFallthroughRoute provides an option to add a final wildcard match for routes. When ALLOW_ANY traffic policy is used, a Passthrough cluster is used. When REGISTRY_ONLY traffic policy is used, a 502 error is returned.</td> | |
</tr> | |
<tr> | |
<td><code>PILOT_ENABLE_LOCALITY_LOAD_BALANCING</code></td> | |
<td>String</td> | |
<td><code></code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_ENABLE_WAIT_CACHE_SYNC</code></td> | |
<td>String</td> | |
<td><code></code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_HTTP10</code></td> | |
<td>Boolean</td> | |
<td><code>false</code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_PUSH_BURST</code></td> | |
<td>Integer</td> | |
<td><code>100</code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_PUSH_THROTTLE</code></td> | |
<td>Integer</td> | |
<td><code>10</code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>PILOT_TRACE_SAMPLING</code></td> | |
<td>Floating-Point</td> | |
<td><code>100</code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>TERMINATION_DRAIN_DURATION_SECONDS</code></td> | |
<td>String</td> | |
<td><code></code></td> | |
<td></td> | |
</tr> | |
<tr> | |
<td><code>V2_REFRESH</code></td> | |
<td>Time Duration</td> | |
<td><code>0s</code></td> | |
<td></td> | |
</tr> | |
</tbody> | |
</table> | |
<h2 id="annotations">Annotations</h2> | |
These resource annotations are used by the <code>galley</code> command. | |
<table class="annotations"> | |
<thead> | |
<tr> | |
<th>Annotation Name</th> | |
<th>Description</th> | |
</tr> | |
</thead> | |
<tbody> | |
<tr> | |
<td><code>policy.istio.io/check</code></td> | |
<td>Determines the policy for behavior when unable to connect to Mixer. If not set, FAIL_CLOSE is set, rejecting requests.</td> | |
</tr> | |
<tr> | |
<td><code>policy.istio.io/checkBaseRetryWaitTime</code></td> | |
<td>Base time to wait between retries, will be adjusted by backoff and jitter. In duration format. If not set, this will be 80ms.</td> | |
</tr> | |
<tr> | |
<td><code>policy.istio.io/checkMaxRetryWaitTime</code></td> | |
<td>Maximum time to wait between retries to Mixer. In duration format. If not set, this will be 1000ms.</td> | |
</tr> | |
<tr> | |
<td><code>policy.istio.io/checkRetries</code></td> | |
<td>The maximum number of retries on transport errors to Mixer. If not set, this will be 0, indicating no retries.</td> | |
</tr> | |
<tr> | |
<td><code>policy.istio.io/lang</code></td> | |
<td>Select a language runtime</td> | |
</tr> | |
</tbody> | |
</table> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment