1{ 2 "configs": [ 3 { 4 "@type": "type.googleapis.com/envoy.admin.v3.BootstrapConfigDump" 5 }, 6 { 7 "@type": "type.googleapis.com/envoy.admin.v3.ClustersConfigDump", 8 "versionInfo": "2020-03-06T21:51:34Z/47", 9 "dynamic_active_clusters": [ 10 { 11 "cluster": { 12 "@type": "type.googleapis.com/envoy.api.v2.Cluster", 13 "name": "BlackHoleCluster", 14 "type": "STATIC", 15 "connectTimeout": "1s", 16 "filters": [ 17 { 18 "name": "envoy.filters.network.upstream.metadata_exchange", 19 "typedConfig": { 20 "@type": "type.googleapis.com/udpa.type.v1.TypedStruct", 21 "typeUrl": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange", 22 "value": { 23 "protocol": "istio-peer-exchange" 24 } 25 } 26 } 27 ] 28 } 29 } 30 ] 31 }, 32 { 33 "@type": "type.googleapis.com/envoy.admin.v3.ListenersConfigDump", 34 "versionInfo": "2020-03-06T21:51:34Z/47", 35 "dynamicListeners": [ 36 { 37 "activeState": { 38 "listener": { 39 "@type": "type.googleapis.com/envoy.api.v2.Listener", 40 "name": "172.30.150.195_9080", 41 "address": { 42 "socketAddress": { 43 "address": "172.30.150.195", 44 "portValue": 9080 45 } 46 }, 47 "filterChains": [ 48 { 49 "filters": [ 50 { 51 "name": "envoy.filters.network.metadata_exchange", 52 "config": { 53 "protocol": "istio-peer-exchange" 54 } 55 }, 56 { 57 "name": "envoy.http_connection_manager", 58 "typedConfig": { 59 "@type": "type.googleapis.com/envoy.config.filter.network.http_connection_manager.v2.HttpConnectionManager", 60 "statPrefix": "inbound_172.30.150.195_9080", 61 "routeConfig": { 62 "name": "inbound|9080|http|details.default.svc.cluster.local", 63 "virtualHosts": [ 64 { 65 "name": "inbound|http|9080", 66 "domains": [ 67 "*" 68 ], 69 "routes": [ 70 { 71 "name": "default", 72 "match": { 73 "prefix": "/" 74 }, 75 "route": { 76 "cluster": "inbound|9080|http|details.default.svc.cluster.local", 77 "timeout": "0s", 78 "maxGrpcTimeout": "0s" 79 }, 80 "decorator": { 81 "operation": "details.default.svc.cluster.local:9080/*" 82 } 83 } 84 ] 85 } 86 ], 87 "validateClusters": false 88 }, 89 "httpFilters": [ 90 { 91 "name": "envoy.filters.http.wasm", 92 "typedConfig": { 93 "@type": "type.googleapis.com/udpa.type.v1.TypedStruct", 94 "typeUrl": "type.googleapis.com/envoy.config.filter.http.wasm.v2.Wasm", 95 "value": { 96 "config": { 97 "configuration": "envoy.wasm.metadata_exchange", 98 "vm_config": { 99 "code": { 100 "local": { 101 "inline_string": "envoy.wasm.metadata_exchange" 102 } 103 }, 104 "runtime": "envoy.wasm.runtime.null" 105 } 106 } 107 } 108 } 109 }, 110 { 111 "name": "istio_authn", 112 "typedConfig": { 113 "@type": "type.googleapis.com/istio.envoy.config.filter.http.authn.v2alpha1.FilterConfig", 114 "policy": { 115 "peers": [ 116 { 117 "mtls": { 118 119 } 120 } 121 ] 122 } 123 } 124 }, 125 { 126 "name": "envoy.cors" 127 }, 128 { 129 "name": "envoy.fault" 130 }, 131 { 132 "name": "envoy.filters.http.wasm", 133 "typedConfig": { 134 "@type": "type.googleapis.com/udpa.type.v1.TypedStruct", 135 "typeUrl": "type.googleapis.com/envoy.config.filter.http.wasm.v2.Wasm", 136 "value": { 137 "config": { 138 "configuration": "{\n \"debug\": \"false\",\n \"stat_prefix\": \"istio\",\n}\n", 139 "root_id": "stats_inbound", 140 "vm_config": { 141 "code": { 142 "local": { 143 "inline_string": "envoy.wasm.stats" 144 } 145 }, 146 "runtime": "envoy.wasm.runtime.null", 147 "vm_id": "stats_inbound" 148 } 149 } 150 } 151 } 152 }, 153 { 154 "name": "envoy.router" 155 } 156 ], 157 "tracing": { 158 "clientSampling": { 159 "value": 100 160 }, 161 "randomSampling": { 162 "value": 1 163 }, 164 "overallSampling": { 165 "value": 100 166 } 167 }, 168 "serverName": "istio-envoy", 169 "streamIdleTimeout": "0s", 170 "useRemoteAddress": false, 171 "generateRequestId": true, 172 "forwardClientCertDetails": "APPEND_FORWARD", 173 "setCurrentClientCertDetails": { 174 "subject": true, 175 "dns": true, 176 "uri": true 177 }, 178 "upgradeConfigs": [ 179 { 180 "upgradeType": "websocket" 181 } 182 ], 183 "normalizePath": true 184 } 185 } 186 ], 187 "transportSocket": { 188 "name": "envoy.transport_sockets.tls", 189 "typedConfig": { 190 "@type": "type.googleapis.com/envoy.api.v2.auth.DownstreamTlsContext", 191 "commonTlsContext": { 192 "tlsCertificateSdsSecretConfigs": [ 193 { 194 "name": "default", 195 "sdsConfig": { 196 "apiConfigSource": { 197 "apiType": "GRPC", 198 "grpcServices": [ 199 { 200 "envoyGrpc": { 201 "clusterName": "sds-grpc" 202 } 203 } 204 ] 205 } 206 } 207 } 208 ], 209 "combinedValidationContext": { 210 "defaultValidationContext": { 211 212 }, 213 "validationContextSdsSecretConfig": { 214 "name": "ROOTCA", 215 "sdsConfig": { 216 "apiConfigSource": { 217 "apiType": "GRPC", 218 "grpcServices": [ 219 { 220 "envoyGrpc": { 221 "clusterName": "sds-grpc" 222 } 223 } 224 ] 225 } 226 } 227 } 228 }, 229 "alpnProtocols": [ 230 "istio-peer-exchange", 231 "h2", 232 "http/1.1" 233 ] 234 }, 235 "requireClientCertificate": true 236 } 237 } 238 } 239 ], 240 "deprecatedV1": { 241 "bindToPort": false 242 }, 243 "listenerFilters": [ 244 { 245 "name": "envoy.listener.tls_inspector" 246 } 247 ], 248 "listenerFiltersTimeout": "0.100s", 249 "continueOnListenerFiltersTimeout": true, 250 "trafficDirection": "INBOUND" 251 } 252 } 253 } 254 ] 255 }, 256 { 257 "@type": "type.googleapis.com/envoy.admin.v3.RoutesConfigDump", 258 "dynamicRouteConfigs": [ 259 { 260 "routeConfig": { 261 "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration", 262 "name": "kubernetes-dashboard.kube-system.svc.cluster.local:443", 263 "virtualHosts": [ 264 { 265 "name": "kubernetes-dashboard.kube-system.svc.cluster.local:443", 266 "domains": [ 267 "kubernetes-dashboard.kube-system.svc.cluster.local", 268 "kubernetes-dashboard.kube-system.svc.cluster.local:443", 269 "kubernetes-dashboard.kube-system", 270 "kubernetes-dashboard.kube-system:443", 271 "kubernetes-dashboard.kube-system.svc.cluster", 272 "kubernetes-dashboard.kube-system.svc.cluster:443", 273 "kubernetes-dashboard.kube-system.svc", 274 "kubernetes-dashboard.kube-system.svc:443", 275 "172.21.58.5", 276 "172.21.58.5:443" 277 ], 278 "routes": [ 279 { 280 "name": "default", 281 "match": { 282 "prefix": "/" 283 }, 284 "route": { 285 "cluster": "outbound|443||kubernetes-dashboard.kube-system.svc.cluster.local", 286 "timeout": "0s", 287 "retryPolicy": { 288 "retryOn": "connect-failure,refused-stream,unavailable,cancelled,resource-exhausted,retriable-status-codes", 289 "numRetries": 2, 290 "retryHostPredicate": [ 291 { 292 "name": "envoy.retry_host_predicates.previous_hosts" 293 } 294 ], 295 "hostSelectionRetryMaxAttempts": "5", 296 "retriableStatusCodes": [ 297 503 298 ] 299 }, 300 "maxGrpcTimeout": "0s" 301 }, 302 "decorator": { 303 "operation": "kubernetes-dashboard.kube-system.svc.cluster.local:443/*" 304 } 305 } 306 ] 307 } 308 ], 309 "validateClusters": false 310 } 311 }, 312 { 313 "routeConfig": { 314 "@type": "type.googleapis.com/envoy.api.v2.RouteConfiguration", 315 "name": "8080", 316 "virtualHosts": [ 317 { 318 "name": "foo.default.svc.cluster.local:8080", 319 "domains": [ 320 "foo.default.svc.cluster.local", 321 "foo.default.svc.cluster.local:8080", 322 "foo", 323 "foo:8080", 324 "foo.default.svc.cluster", 325 "foo.default.svc.cluster:8080", 326 "foo.default.svc", 327 "foo.default.svc:8080", 328 "foo.default", 329 "foo.default:8080", 330 "172.21.57.104", 331 "172.21.57.104:8080" 332 ], 333 "routes": [ 334 { 335 "name": "default", 336 "match": { 337 "prefix": "/" 338 }, 339 "route": { 340 "cluster": "outbound|8080||foo.default.svc.cluster.local", 341 "timeout": "0s", 342 "retryPolicy": { 343 "retryOn": "connect-failure,refused-stream,unavailable,cancelled,resource-exhausted,retriable-status-codes", 344 "numRetries": 2, 345 "retryHostPredicate": [ 346 { 347 "name": "envoy.retry_host_predicates.previous_hosts" 348 } 349 ], 350 "hostSelectionRetryMaxAttempts": "5", 351 "retriableStatusCodes": [ 352 503 353 ] 354 }, 355 "maxGrpcTimeout": "0s" 356 }, 357 "decorator": { 358 "operation": "foo.default.svc.cluster.local:8080/*" 359 } 360 } 361 ] 362 }, 363 { 364 "name": "istio-pilot.istio-system.svc.cluster.local:8080", 365 "domains": [ 366 "istio-pilot.istio-system.svc.cluster.local", 367 "istio-pilot.istio-system.svc.cluster.local:8080", 368 "istio-pilot.istio-system", 369 "istio-pilot.istio-system:8080", 370 "istio-pilot.istio-system.svc.cluster", 371 "istio-pilot.istio-system.svc.cluster:8080", 372 "istio-pilot.istio-system.svc", 373 "istio-pilot.istio-system.svc:8080", 374 "172.21.34.2", 375 "172.21.34.2:8080" 376 ], 377 "routes": [ 378 { 379 "name": "default", 380 "match": { 381 "prefix": "/" 382 }, 383 "route": { 384 "cluster": "outbound|8080||istio-pilot.istio-system.svc.cluster.local", 385 "timeout": "0s", 386 "retryPolicy": { 387 "retryOn": "connect-failure,refused-stream,unavailable,cancelled,resource-exhausted,retriable-status-codes", 388 "numRetries": 2, 389 "retryHostPredicate": [ 390 { 391 "name": "envoy.retry_host_predicates.previous_hosts" 392 } 393 ], 394 "hostSelectionRetryMaxAttempts": "5", 395 "retriableStatusCodes": [ 396 503 397 ] 398 }, 399 "maxGrpcTimeout": "0s" 400 }, 401 "decorator": { 402 "operation": "istio-pilot.istio-system.svc.cluster.local:8080/*" 403 } 404 } 405 ] 406 }, 407 { 408 "name": "allow_any", 409 "domains": [ 410 "*" 411 ], 412 "routes": [ 413 { 414 "match": { 415 "prefix": "/" 416 }, 417 "route": { 418 "cluster": "PassthroughCluster", 419 "timeout": "0s" 420 } 421 } 422 ] 423 } 424 ], 425 "validateClusters": false 426 } 427 } 428 ] 429 } 430 ] 431} 432