API Resources

Istio API Resources #

kubectl api-resources

25 个 Istio CRD：

  • adapter
  • attributemanifest
    • describes a set of Attributes produced by some component of an Istio deployment.
  • handler
  • HTTPAPISpecBinding
  • HTTPAPISpec
  • instance
  • QuotaSpecBinding
  • QuotaSpec
  • rule
  • template
  • IstioOperator
    • defines the desired installed state of Istio components
  • DestinationRule
    • defines policies that apply to traffic intended for a service after routing has occurred.
  • EnvoyFilter
    • provides a mechanism to customize the Envoy configuration generated by Istio Pilot.
  • Gateway
    • describes a load balancer operating at the edge of the mesh receiving incoming or outgoing HTTP/TCP connections.
  • ServiceEntry
  • Sidecar
  • VirtualService
    • Configuration affecting traffic routing.
  • WorkloadEntry
    • enables operators to describe the properties of a single non-Kubernetes workload such as a VM or a bare metal server as it is onboarded into the mesh.
  • ClusterRbacConfig
  • RbacConfig
  • ServiceRoleBinding
  • ServiceRole
  • AuthorizationPolicy
  • PeerAuthentication
  • RequestAuthentication

相比于 1.4.6

  • 多了
    • IstioOperator
    • WorkloadEntry
  • 少了
    • MeshPolicy
    • Policy
NAMESHORTNAMESAPIGROUPNAMESPACEDKIND定义代码备注
bindingstrueBinding
componentstatusescsfalseComponentStatus
configmapscmtrueConfigMap
endpointseptrueEndpoints
eventsevtrueEvent
limitrangeslimitstrueLimitRange
namespacesnsfalseNamespace
nodesnofalseNode
persistentvolumeclaimspvctruePersistentVolumeClaim
persistentvolumespvfalsePersistentVolume
podspotruePod
podtemplatestruePodTemplate
replicationcontrollersrctrueReplicationController
resourcequotasquotatrueResourceQuota
secretstrueSecret
serviceaccountssatrueServiceAccount
servicessvctrueService
mutatingwebhookconfigurationsadmissionregistration.k8s.iofalseMutatingWebhookConfiguration
validatingwebhookconfigurationsadmissionregistration.k8s.iofalseValidatingWebhookConfiguration
customresourcedefinitionscrd,crdsapiextensions.k8s.iofalseCustomResourceDefinition
apiservicesapiregistration.k8s.iofalseAPIService
controllerrevisionsappstrueControllerRevision
daemonsetsdsappstrueDaemonSet
deploymentsdeployappstrueDeployment
replicasetsrsappstrueReplicaSet
statefulsetsstsappstrueStatefulSet
tokenreviewsauthentication.k8s.iofalseTokenReview
localsubjectaccessreviewsauthorization.k8s.iotrueLocalSubjectAccessReview
selfsubjectaccessreviewsauthorization.k8s.iofalseSelfSubjectAccessReview
selfsubjectrulesreviewsauthorization.k8s.iofalseSelfSubjectRulesReview
subjectaccessreviewsauthorization.k8s.iofalseSubjectAccessReview
horizontalpodautoscalershpaautoscalingtrueHorizontalPodAutoscaler
cronjobscjbatchtrueCronJob
jobsbatchtrueJob
certificatesigningrequestscsrcertificates.k8s.iofalseCertificateSigningRequest
adaptersconfig.istio.iotrueadapter
attributemanifestsconfig.istio.iotrueattributemanifest
handlersconfig.istio.iotruehandler
httpapispecbindingsconfig.istio.iotrueHTTPAPISpecBinding
httpapispecsconfig.istio.iotrueHTTPAPISpec
instancesconfig.istio.iotrueinstance
quotaspecbindingsconfig.istio.iotrueQuotaSpecBinding
quotaspecsconfig.istio.iotrueQuotaSpec
rulesconfig.istio.iotruerule
templatesconfig.istio.iotruetemplate
leasescoordination.k8s.iotrueLease
endpointslicesdiscovery.k8s.iotrueEndpointSlice
eventsevevents.k8s.iotrueEvent
ingressesingextensionstrueIngress
istiooperatorsiopinstall.istio.iotrueIstioOperator
destinationrulesdrnetworking.istio.iotrueDestinationRule
envoyfiltersnetworking.istio.iotrueEnvoyFilter
gatewaysgwnetworking.istio.iotrueGateway
serviceentriessenetworking.istio.iotrueServiceEntry
sidecarsnetworking.istio.iotrueSidecar
virtualservicesvsnetworking.istio.iotrueVirtualService
workloadentrieswenetworking.istio.iotrueWorkloadEntry
ingressclassesnetworking.k8s.iofalseIngressClass
ingressesingnetworking.k8s.iotrueIngress
networkpoliciesnetpolnetworking.k8s.iotrueNetworkPolicy
runtimeclassesnode.k8s.iofalseRuntimeClass
poddisruptionbudgetspdbpolicytruePodDisruptionBudget
podsecuritypoliciespsppolicyfalsePodSecurityPolicy
clusterrolebindingsrbac.authorization.k8s.iofalseClusterRoleBinding
clusterrolesrbac.authorization.k8s.iofalseClusterRole
rolebindingsrbac.authorization.k8s.iotrueRoleBinding
rolesrbac.authorization.k8s.iotrueRole
clusterrbacconfigsrbac.istio.iofalseClusterRbacConfig
rbacconfigsrbac.istio.iotrueRbacConfig
servicerolebindingsrbac.istio.iotrueServiceRoleBinding
servicerolesrbac.istio.iotrueServiceRole
priorityclassespcscheduling.k8s.iofalsePriorityClass
authorizationpoliciessecurity.istio.iotrueAuthorizationPolicy
peerauthenticationspasecurity.istio.iotruePeerAuthentication
requestauthenticationsrasecurity.istio.iotrueRequestAuthentication
csidriversstorage.k8s.iofalseCSIDriver
csinodesstorage.k8s.iofalseCSINode
storageclassesscstorage.k8s.iofalseStorageClass
volumeattachmentsstorage.k8s.iofalseVolumeAttachment

25 个 Istio CRD：

  • MeshPolicy
  • Policy
  • adapter
  • attributemanifest
  • handler
  • HTTPAPISpecBinding
  • HTTPAPISpec
  • instance
  • QuotaSpecBinding
  • QuotaSpec
  • rule
  • template
  • DestinationRule
  • EnvoyFilter
  • Gateway
  • ServiceEntry
  • Sidecar
  • VirtualService
  • ClusterRbacConfig
  • RbacConfig
  • ServiceRoleBinding
  • ServiceRole
  • AuthorizationPolicy
  • PeerAuthentication
  • RequestAuthentication
NAMESHORTNAMESAPIGROUPNAMESPACEDKIND定义代码备注
bindingstrueBinding
componentstatusescsfalseComponentStatus
configmapscmtrueConfigMap
endpointseptrueEndpoints
eventsevtrueEvent
limitrangeslimitstrueLimitRange
namespacesnsfalseNamespace
nodesnofalseNode
persistentvolumeclaimspvctruePersistentVolumeClaim
persistentvolumespvfalsePersistentVolume
podspotruePod
podtemplatestruePodTemplate
replicationcontrollersrctrueReplicationController
resourcequotasquotatrueResourceQuota
secretstrueSecret
serviceaccountssatrueServiceAccount
servicessvctrueService
mutatingwebhookconfigurationsadmissionregistration.k8s.iofalseMutatingWebhookConfiguration
validatingwebhookconfigurationsadmissionregistration.k8s.iofalseValidatingWebhookConfiguration
customresourcedefinitionscrd, crdsapiextensions.k8s.iofalseCustomResourceDefinition
apiservicesapiregistration.k8s.iofalseAPIService
controllerrevisionsappstrueControllerRevision
daemonsetsdsappstrueDaemonSet
deploymentsdeployappstrueDeployment
replicasetsrsappstrueReplicaSet
statefulsetsstsappstrueStatefulSet
meshpoliciesauthentication.istio.iofalseMeshPolicy
policiesauthentication.istio.iotruePolicy
tokenreviewsauthentication.k8s.iofalseTokenReview
localsubjectaccessreviewsauthorization.k8s.iotrueLocalSubjectAccessReview
selfsubjectaccessreviewsauthorization.k8s.iofalseSelfSubjectAccessReview
selfsubjectrulesreviewsauthorization.k8s.iofalseSelfSubjectRulesReview
subjectaccessreviewsauthorization.k8s.iofalseSubjectAccessReview
horizontalpodautoscalershpaautoscalingtrueHorizontalPodAutoscaler
cronjobscjbatchtrueCronJob
jobsbatchtrueJob
certificatesigningrequestscsrcertificates.k8s.iofalseCertificateSigningRequest
stackscompose.docker.comtrueStack
adaptersconfig.istio.iotrueadapter
attributemanifestsconfig.istio.iotrueattributemanifest
handlersconfig.istio.iotruehandler
httpapispecbindingsconfig.istio.iotrueHTTPAPISpecBinding
httpapispecsconfig.istio.iotrueHTTPAPISpec
instancesconfig.istio.iotrueinstance
quotaspecbindingsconfig.istio.iotrueQuotaSpecBinding
quotaspecsconfig.istio.iotrueQuotaSpec
rulesconfig.istio.iotruerule
templatesconfig.istio.iotruetemplate
leasescoordination.k8s.iotrueLease
eventsevevents.k8s.iotrueEvent
daemonsetsdsextensionstrueDaemonSet
deploymentsdeployextensionstrueDeployment
ingressesingextensionstrueIngress
networkpoliciesnetpolextensionstrueNetworkPolicy
podsecuritypoliciespspextensionsfalsePodSecurityPolicy
replicasetsrsextensionstrueReplicaSet
destinationrulesdrnetworking.istio.iotrueDestinationRule
envoyfiltersnetworking.istio.iotrueEnvoyFilter
gatewaysgwnetworking.istio.iotrueGateway
serviceentriessenetworking.istio.iotrueServiceEntry
sidecarsnetworking.istio.iotrueSidecar
virtualservicesvsnetworking.istio.iotrueVirtualService
ingressesingnetworking.k8s.iotrueIngress
networkpoliciesnetpolnetworking.k8s.iotrueNetworkPolicy
runtimeclassesnode.k8s.iofalseRuntimeClass
poddisruptionbudgetspdbpolicytruePodDisruptionBudget
podsecuritypoliciespsppolicyfalsePodSecurityPolicy
clusterrolebindingsrbac.authorization.k8s.iofalseClusterRoleBinding
clusterrolesrbac.authorization.k8s.iofalseClusterRole
rolebindingsrbac.authorization.k8s.iotrueRoleBinding
rolesrbac.authorization.k8s.iotrueRole
clusterrbacconfigsrbac.istio.iofalseClusterRbacConfig
rbacconfigsrbac.istio.iotrueRbacConfig
servicerolebindingsrbac.istio.iotrueServiceRoleBinding
servicerolesrbac.istio.iotrueServiceRole
priorityclassespcscheduling.k8s.iofalsePriorityClass
authorizationpoliciessecurity.istio.iotrueAuthorizationPolicy
peerauthenticationssecurity.istio.iotruePeerAuthentication
requestauthenticationssecurity.istio.iotrueRequestAuthentication
csidriversstorage.k8s.iofalseCSIDriver
csinodesstorage.k8s.iofalseCSINode
storageclassesscstorage.k8s.iofalseStorageClass
volumeattachmentsstorage.k8s.iofalseVolumeAttachment

VirtualService #

  • metadata
    • name
  • spec
    • hosts
    • http
      • match (Request Routing, 配置请求路由)
        • headers
          • end-user
            • exact
        • port
        • uri
          • prefix
      • fault (Fault Injection, 故障注入)
        • delay (延迟故障)
          • percentage
          • fixedDelay
        • abort (abort 故障)
          • percentage
          • httpStatus
      • route
        • destination
          • host
          • subset
          • port
            • number
        • weight (Traffic Shifting, 流量转移)
      • timeout (Request Timeouts, 设置请求超时)
      • retries
        • attempts
        • perTryTimeout
    • tcp
      • route
        • destination
        • weight (TCP Traffic Shifting, TCP 流量转移)

DestinationRule #

  • spec:
    • host
    • trafficPolicy
      • connectionPool
        • tcp
          • maxConnections
        • http
          • http1MaxPendingRequests (HTTP 请求的最大排队数量)
          • maxRequestsPerConnection (一个连接内最大请求数，如果为 1，表示禁用 keep alive)
      • outlierDetection
        • consecutiveErrors
        • interval
        • baseEjectionTime
        • maxEjectionPercent
      • loadBalancer
        • simple
    • subsets
      • name
      • labels
        • version
      • trafficPolicy (Circuit breakers, 熔断器)
        • loadBalancer
          • simple
        • connectionPool
          • tcp
            • maxConnections

Gateway #

  • spec
    • selector
      • app
    • servers
      • port
        • name
        • number
        • protocol
      • hosts
      • tls

ServiceEntry #

  • spec
    • hosts
    • ports
    • location
    • resolution

ServiceAccount #

  • metadata
    • name
  • spec

handler #

  • metadata
    • name
    • namespace
  • spec
    • compiledAdapter
    • params
      • quotas
        • name
        • maxAmount
        • validDuration
        • overrides
          • dimensions
            • destination
          • maxAmount
          • validDuration

instance #

2021-12-10

本文访问量 次

本站总访问量 次

本站总访客数 人