summaryrefslogtreecommitdiffstats
path: root/docs/sections/resources/yaml/istiod.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'docs/sections/resources/yaml/istiod.yaml')
-rw-r--r--docs/sections/resources/yaml/istiod.yaml21
1 files changed, 21 insertions, 0 deletions
diff --git a/docs/sections/resources/yaml/istiod.yaml b/docs/sections/resources/yaml/istiod.yaml
new file mode 100644
index 0000000000..47380125b8
--- /dev/null
+++ b/docs/sections/resources/yaml/istiod.yaml
@@ -0,0 +1,21 @@
+global:
+ proxy:
+ # Controls if sidecar is injected at the front of the container list and blocks the start of the other containers until the proxy is ready
+ holdApplicationUntilProxyStarts: true
+ #logging:
+ # level: "default:debug"
+meshConfig:
+ rootNamespace: istio-config
+ extensionProviders:
+ - name: oauth2-proxy
+ envoyExtAuthzHttp:
+ service: oauth2-proxy.default.svc.cluster.local
+ port: 80
+ timeout: 1.5s
+ includeHeadersInCheck: ["authorization", "cookie"]
+ headersToUpstreamOnAllow: ["x-forwarded-access-token", "authorization", "path", "x-auth-request-user", "x-auth-request-email", "x-auth-request-access-token"]
+ headersToDownstreamOnDeny: ["content-type", "set-cookie"]
+pilot:
+ env:
+ PILOT_ENABLE_MYSQL_FILTER: true
+ PILOT_HTTP10: true \ No newline at end of file