Last active
May 14, 2019 22:15
-
-
Save karthikt-yahoo/0f980e730a3bcf73638ad3dbd8d674f8 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| "listener":{ | |
| "name":"2.2.2.2_4080", | |
| "address":{ | |
| "socket_address":{ | |
| "address":"2.2.2.2", | |
| "port_value":4080 | |
| } | |
| }, | |
| "filter_chains":[ | |
| { | |
| "filter_chain_match":{ | |
| "application_protocols":[ | |
| "istio" | |
| ] | |
| }, | |
| "tls_context":{ | |
| "common_tls_context":{ | |
| "tls_certificates":[ | |
| { | |
| "certificate_chain":{ | |
| "filename":"/etc/certs/cert-chain.pem" | |
| }, | |
| "private_key":{ | |
| "filename":"/etc/certs/key.pem" | |
| } | |
| } | |
| ], | |
| "validation_context":{ | |
| "trusted_ca":{ | |
| "filename":"/etc/certs/root-cert.pem" | |
| } | |
| }, | |
| "alpn_protocols":[ | |
| "h2", | |
| "http/1.1" | |
| ] | |
| }, | |
| "require_client_certificate":true | |
| }, | |
| "filters":[ | |
| { | |
| "name":"envoy.http_connection_manager", | |
| "config":{ | |
| "use_remote_address":false, | |
| "stat_prefix":"2.2.2.2_4080", | |
| "set_current_client_cert_details":{ | |
| "dns":true, | |
| "uri":true, | |
| "subject":true | |
| }, | |
| "stream_idle_timeout":"0s", | |
| "forward_client_cert_details":"APPEND_FORWARD", | |
| "server_name":"istio-envoy", | |
| "access_log":[ | |
| { | |
| "name":"envoy.file_access_log", | |
| "config":{ | |
| "format":"start_time=[%START_TIME%] method=%REQ(:METHOD)% path=%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)% protocol=%PROTOCOL% resp_code=%RESPONSE_CODE% resp_flags=%RESPONSE_FLAGS% bytes_received=%BYTES_RECEIVED% bytes_sent=%BYTES_SENT% duration=%DURATION% service_time=%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)% x_forwarded_for=%REQ(X-FORWARDED-FOR)% user_agent=%REQ(USER-AGENT)% x_request_id=%REQ(X-REQUEST-ID)% authority=%REQ(:AUTHORITY)% upstream_host=%UPSTREAM_HOST% y_rid=%REQ(Y-RID)% | |
| ", | |
| "path":"/dev/stdout" | |
| } | |
| } | |
| ], | |
| "http_filters":[ | |
| { | |
| "config":{ | |
| "policy":{ | |
| "peers":[ | |
| { | |
| "mtls":{ | |
| "mode":"PERMISSIVE" | |
| } | |
| } | |
| ] | |
| } | |
| }, | |
| "name":"istio_authn" | |
| }, | |
| { | |
| "name":"mixer", | |
| "config":{ | |
| "transport":{ | |
| "check_cluster":"outbound|9091||istio-policy.istio-system.svc.cluster.local", | |
| "network_fail_policy":{ | |
| "max_retry_wait":"1s", | |
| "base_retry_wait":"0.080s" | |
| }, | |
| "report_cluster":"outbound|9091||istio-telemetry.istio-system.svc.cluster.local" | |
| }, | |
| "service_configs":{ | |
| "default":{ | |
| "disable_check_calls":true | |
| } | |
| }, | |
| "default_destination_service":"default", | |
| "mixer_attributes":{ | |
| "attributes":{ | |
| "context.reporter.uid":{ | |
| "string_value":"kubernetes://service_b46w77.test" | |
| }, | |
| "destination.namespace":{ | |
| "string_value":"test" | |
| }, | |
| "destination.ip":{ | |
| "bytes_value":"AAAAAAAAAAAAAP//CsoCzQ==" | |
| }, | |
| "destination.uid":{ | |
| "string_value":"kubernetes://service_b46w77.test" | |
| }, | |
| "context.reporter.kind":{ | |
| "string_value":"inbound" | |
| }, | |
| "destination.port":{ | |
| "int64_value":"4080" | |
| } | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name":"envoy.cors" | |
| }, | |
| { | |
| "name":"envoy.fault" | |
| }, | |
| { | |
| "name":"envoy.router" | |
| } | |
| ], | |
| "route_config":{ | |
| "name":"inbound|4080|http|service_b.test.svc.cluster.local", | |
| "validate_clusters":false, | |
| "virtual_hosts":[ | |
| { | |
| "routes":[ | |
| { | |
| "route":{ | |
| "max_grpc_timeout":"0s", | |
| "cluster":"inbound|4080|http|service_b.test.svc.cluster.local", | |
| "timeout":"0s" | |
| }, | |
| "decorator":{ | |
| "operation":"service_b.test.svc.cluster.local:4080/*" | |
| }, | |
| "match":{ | |
| "prefix":"/" | |
| }, | |
| "per_filter_config":{ | |
| "mixer":{ | |
| "mixer_attributes":{ | |
| "attributes":{ | |
| "destination.service.namespace":{ | |
| "string_value":"test" | |
| }, | |
| "destination.service.name":{ | |
| "string_value":"service_b" | |
| }, | |
| "destination.service.host":{ | |
| "string_value":"service_b.test.svc.cluster.local" | |
| }, | |
| "destination.service.uid":{ | |
| "string_value":"istio://test/services/service_b" | |
| } | |
| } | |
| }, | |
| "disable_check_calls":true | |
| } | |
| } | |
| } | |
| ], | |
| "domains":[ | |
| "*" | |
| ], | |
| "name":"inbound|http|4080" | |
| } | |
| ] | |
| }, | |
| "generate_request_id":true, | |
| "upgrade_configs":[ | |
| { | |
| "upgrade_type":"websocket" | |
| } | |
| ], | |
| "tracing":{ | |
| "client_sampling":{ | |
| "value":100 | |
| }, | |
| "overall_sampling":{ | |
| "value":100 | |
| }, | |
| "random_sampling":{ | |
| "value":100 | |
| } | |
| } | |
| } | |
| } | |
| ] | |
| }, | |
| { | |
| "filter_chain_match":{ | |
| }, | |
| "filters":[ | |
| { | |
| "name":"envoy.http_connection_manager", | |
| "config":{ | |
| "generate_request_id":true, | |
| "upgrade_configs":[ | |
| { | |
| "upgrade_type":"websocket" | |
| } | |
| ], | |
| "tracing":{ | |
| "overall_sampling":{ | |
| "value":100 | |
| }, | |
| "random_sampling":{ | |
| "value":100 | |
| }, | |
| "client_sampling":{ | |
| "value":100 | |
| } | |
| }, | |
| "use_remote_address":false, | |
| "stat_prefix":"2.2.2.2_4080", | |
| "set_current_client_cert_details":{ | |
| "uri":true, | |
| "subject":true, | |
| "dns":true | |
| }, | |
| "stream_idle_timeout":"0s", | |
| "forward_client_cert_details":"APPEND_FORWARD", | |
| "access_log":[ | |
| { | |
| "name":"envoy.file_access_log", | |
| "config":{ | |
| "path":"/dev/stdout", | |
| "format":"start_time=[%START_TIME%] method=%REQ(:METHOD)% path=%REQ(X-ENVOY-ORIGINAL-PATH?:PATH)% protocol=%PROTOCOL% resp_code=%RESPONSE_CODE% resp_flags=%RESPONSE_FLAGS% bytes_received=%BYTES_RECEIVED% bytes_sent=%BYTES_SENT% duration=%DURATION% service_time=%RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)% x_forwarded_for=%REQ(X-FORWARDED-FOR)% user_agent=%REQ(USER-AGENT)% x_request_id=%REQ(X-REQUEST-ID)% authority=%REQ(:AUTHORITY)% upstream_host=%UPSTREAM_HOST% y_rid=%REQ(Y-RID)% | |
| " | |
| } | |
| } | |
| ], | |
| "server_name":"istio-envoy", | |
| "http_filters":[ | |
| { | |
| "name":"istio_authn", | |
| "config":{ | |
| "policy":{ | |
| "peers":[ | |
| { | |
| "mtls":{ | |
| "mode":"PERMISSIVE" | |
| } | |
| } | |
| ] | |
| } | |
| } | |
| }, | |
| { | |
| "name":"mixer", | |
| "config":{ | |
| "default_destination_service":"default", | |
| "mixer_attributes":{ | |
| "attributes":{ | |
| "destination.port":{ | |
| "int64_value":"4080" | |
| }, | |
| "context.reporter.uid":{ | |
| "string_value":"kubernetes://service_b46w77.test" | |
| }, | |
| "destination.namespace":{ | |
| "string_value":"test" | |
| }, | |
| "destination.ip":{ | |
| "bytes_value":"AAAAAAAAAAAAAP//CsoCzQ==" | |
| }, | |
| "destination.uid":{ | |
| "string_value":"kubernetes://service_b46w77.test" | |
| }, | |
| "context.reporter.kind":{ | |
| "string_value":"inbound" | |
| } | |
| } | |
| }, | |
| "transport":{ | |
| "check_cluster":"outbound|9091||istio-policy.istio-system.svc.cluster.local", | |
| "network_fail_policy":{ | |
| "max_retry_wait":"1s", | |
| "base_retry_wait":"0.080s" | |
| }, | |
| "report_cluster":"outbound|9091||istio-telemetry.istio-system.svc.cluster.local" | |
| }, | |
| "service_configs":{ | |
| "default":{ | |
| "disable_check_calls":true | |
| } | |
| } | |
| } | |
| }, | |
| { | |
| "name":"envoy.cors" | |
| }, | |
| { | |
| "name":"envoy.fault" | |
| }, | |
| { | |
| "name":"envoy.router" | |
| } | |
| ], | |
| "route_config":{ | |
| "name":"inbound|4080|http|service_b.test.svc.cluster.local", | |
| "validate_clusters":false, | |
| "virtual_hosts":[ | |
| { | |
| "routes":[ | |
| { | |
| "decorator":{ | |
| "operation":"service_b.test.svc.cluster.local:4080/*" | |
| }, | |
| "route":{ | |
| "cluster":"inbound|4080|http|service_b.test.svc.cluster.local", | |
| "timeout":"0s", | |
| "max_grpc_timeout":"0s" | |
| }, | |
| "per_filter_config":{ | |
| "mixer":{ | |
| "mixer_attributes":{ | |
| "attributes":{ | |
| "destination.service.host":{ | |
| "string_value":"service_b.test.svc.cluster.local" | |
| }, | |
| "destination.service.uid":{ | |
| "string_value":"istio://test/services/service_b" | |
| }, | |
| "destination.service.name":{ | |
| "string_value":"service_b" | |
| }, | |
| "destination.service.namespace":{ | |
| "string_value":"test" | |
| } | |
| } | |
| }, | |
| "disable_check_calls":true | |
| } | |
| }, | |
| "match":{ | |
| "prefix":"/" | |
| } | |
| } | |
| ], | |
| "domains":[ | |
| "*" | |
| ], | |
| "name":"inbound|http|4080" | |
| } | |
| ] | |
| } | |
| } | |
| } | |
| ] | |
| } | |
| ], | |
| "deprecated_v1":{ | |
| "bind_to_port":false | |
| }, | |
| "listener_filters":[ | |
| { | |
| "name":"envoy.listener.tls_inspector" | |
| } | |
| ] | |
| }, | |
| "last_updated":"2019-05-11T02:04:04.731Z" | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment