istio

1
{
2
  "stats_config": {
3
    "use_all_default_tags": false
4
  },
5
  "admin": {
6
    "access_log_path": "/dev/stdout",
7
    "address": {
8
      "socket_address": {
9
        "address": "127.0.0.1",
10
        "port_value": 17000
11
      }
12
    }
13
  },
14
  "dynamic_resources": {
15
    "lds_config": {
16
      "api_config_source": {
17
        "api_type": "GRPC",
18
        "grpc_services": {
19
          "envoy_grpc": {
20
            "cluster_name": "xds-grpc"
21
          }
22
        },
23
        "refresh_delay": {
24
          "seconds": 30,
25
          "nanos": 0
26
        }
27
      }
28
    },
29
    "cds_config": {
30
      "api_config_source": {
31
        "api_type": "GRPC",
32
        "grpc_services": {
33
          "envoy_grpc": {
34
            "cluster_name": "xds-grpc"
35
          }
36
        },
37
        "refresh_delay": {
38
          "seconds": 30,
39
          "nanos": 0
40
        }
41
      }
42
    },
43
    "deprecated_v1": {
44
      "sds_config": {
45
        "api_config_source": {
46
          "api_type": "GRPC",
47
          "grpc_services": {
48
            "envoy_grpc": {
49
              "cluster_name": "xds-grpc"
50
            }
51
          },
52
          "refresh_delay": {
53
            "seconds": 30,
54
            "nanos": 0
55
          }
56
        }
57
      }
58
    }
59
  },
60
  "static_resources": {
61
    "listeners": [
62
      {
63
        "name": "legacy15003",
64
        "address": {
65
          "socket_address": {
66
            "address": "0.0.0.0",
67
            "port_value": 17003
68
          }
69
        },
70
        "filter_chains": [
71
          {
72
            "filters": [
73
              {
74
                "name": "envoy.tcp_proxy",
75
                "config": {
76
                  "deprecated_v1": true,
77
                  "value": {
78
                    "stat_prefix": "legacy15003",
79
                    "route_config": {
80
                      "routes": [
81
                        {
82
                          "cluster": "pilot_http"
83
                        }
84
                      ]
85
                    }
86
                  }
87
                }
88
              }
89
            ]
90
          }
91
        ]
92
      },
93
      {
94
        "name": "iptables",
95
        "address": {
96
          "socket_address": {
97
            "address": "0.0.0.0",
98
            "port_value": 17001
99
          }
100
        },
101
        "use_original_dst": {
102
            "value": true
103
        },
104
        "filter_chains": [
105
          {
106
            "filters": [
107
              {
108
                "name": "envoy.tcp_proxy",
109
                "config": {
110
                  "stat_prefix": "iptables"
111
                }
112
              }
113
            ]
114
          }
115
        ],
116
        "listener_filters": [
117
          {
118
            "name": "envoy.listener.original_dst"
119
          }
120
        ]
121
      },
122
      {
123
        "name": "http_proxy",
124
        "address": {
125
          "socket_address": {
126
            "address": "0.0.0.0",
127
            "port_value": 17002
128
          }
129
        },
130
        "filter_chains": [
131
          {
132
            "filters": [
133
              {
134
                "name": "envoy.http_connection_manager",
135
                "config": {
136
                  "codec_type": "AUTO",
137
                  "stat_prefix": "http_proxy",
138
                  "http_filters": [
139
                    {"name": "envoy.filters.http.router"
140
                    }
141
                  ],
142
                  "route_config": {
143

144
                  },
145
                  "http_protocol_options": {
146
                    "allow_absolute_url": true
147
                  }
148

149
                }
150
              }
151
            ]
152
          }
153
        ]
154
      },
155
      {
156
        "name": "httpproxy",
157
        "address": {
158
          "socket_address": {
159
            "address": "0.0.0.0",
160
            "port_value": 17008
161
          }
162
        },
163
        "filter_chains": [
164
          {
165
            "filters": [
166
              {
167
                "name": "envoy.tcp_proxy",
168
                "config": {
169
                  "deprecated_v1": true,
170
                  "value": {
171
                    "stat_prefix": "legacy15003",
172
                    "route_config": {
173
                      "routes": [
174
                        {
175
                          "cluster": "pilot_http"
176
                        }
177
                      ]
178
                    }
179
                  }
180
                }
181
              }
182
            ]
183
          }
184
        ]
185
      },
186
      {
187
        "name": "grpc15011",
188
        "address": {
189
          "socket_address": {
190
            "address": "0.0.0.0",
191
            "port_value": 17011
192
          }
193
        },
194
        "filter_chains": [
195
          {
196
            "tls_context": {
197
              "common_tls_context": {
198
                "tls_certificates": [
199
                  {
200
                    "certificate_chain": {
201
                      "inline_string": "-----BEGIN CERTIFICATE-----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\nWk0TvcghAZWBVHOSFR6rTKCSFoU7Oop9Pac3BNtYTMSwJ8o=\n-----END CERTIFICATE-----\n"
202
                    },
203
                    "private_key": {
204
                      "inline_string": "-----BEGIN RSA PRIVATE KEY-----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\nvddliXeyrXMUTSTO/E8XUnRbsfDrTtO4o8NecEwSrZ9Ayr7g/e/z\n-----END RSA PRIVATE KEY-----\n"
205
                    }
206
                  }
207
                ],
208
                "validation_context": {
209
                  "trusted_ca": {
210
                    "filename": "./security/samples/plugin_ca_certs/cert-chain.pem"
211
                  }
212
                }
213
              },
214
              "require_client_certificate": true
215
            },
216
            "filters": [
217
              {
218
                "name": "envoy.tcp_proxy",
219
                "config": {
220
                  "deprecated_v1": true,
221
                  "value": {
222
                    "stat_prefix": "grpc15011",
223
                    "route_config": {
224
                      "routes": [
225
                        {
226
                          "cluster": "pilot_grpc"
227
                        }
228
                      ]
229
                    }
230
                  }
231
                }
232
              }
233
            ]
234
          }
235
        ]
236
      }
237

238
    ],
239
    "clusters": [
240
      {
241
        "name": "rds",
242
        "type": "STRICT_DNS",
243
        "connect_timeout": {
244
          "seconds": 5,
245
          "nanos": 0
246
        },
247
        "lb_policy": "ROUND_ROBIN",
248
        "hosts": [
249
          {
250
            "socket_address": {
251
              "address": "127.0.0.1",
252
              "port_value": 17007
253
            }
254
          }
255
        ]
256
      },
257
      {
258
        "name": "xds-grpc",
259
        "type": "STRICT_DNS",
260
        "connect_timeout": {
261
          "seconds": 5,
262
          "nanos": 0
263
        },
264
        "lb_policy": "ROUND_ROBIN",
265
        "hosts": [
266
          {
267
            "socket_address": {
268
              "address": "127.0.0.1",
269
              "port_value": 15010
270
            }
271
          }
272
        ],
273
        "http2_protocol_options": {}
274
      },
275
      {
276
        "name": "pilot_http",
277
        "type": "STRICT_DNS",
278
        "connect_timeout": {
279
          "seconds": 5,
280
          "nanos": 0
281
        },
282
        "lb_policy": "ROUND_ROBIN",
283
        "hosts": [
284
          {
285
            "socket_address": {
286
              "address": "127.0.0.1",
287
              "port_value": 17007
288
            }
289
          }
290
        ],
291
        "http2_protocol_options": {}
292
      },
293
      {
294
        "name": "pilot_grpc",
295
        "type": "STRICT_DNS",
296
        "connect_timeout": {
297
          "seconds": 5,
298
          "nanos": 0
299
        },
300
        "lb_policy": "ROUND_ROBIN",
301
        "hosts": [
302
          {
303
            "socket_address": {
304
              "address": "127.0.0.1",
305
              "port_value": 17010
306
            }
307
          }
308
        ]
309
      }
310

311
    ]
312
  }
313
}
314