*Istio-proxy's* environment variables exposed to this VM.

Explicitly given key-value pairs to be injected to this VM.

A fatal error in the binary fetching or during the plugin execution causes all subsequent requests to fail with 5xx.

Enables the fail open behavior for the Wasm plugin fatal errors to bypass the plugin execution.

Insert plugin before Istio authentication filters.

Insert plugin before Istio authorization filters and after Istio authentication filters.

Insert plugin before Istio stats filters and after Istio authorization filters.

Control plane decides where to insert the plugin.

Use HTTP Wasm Extension.

Use Network Wasm Extension.

Defaults to HTTP.

We will always pull the latest version of an image when changing this plugin.

If an existing version of the image has been pulled before, that will be used.

Defaults to `IfNotPresent`, except for OCI images with tag `latest`, for which the default will be `Always`.

Enum value maps for EnvValueSource.

Enum value maps for EnvValueSource.

Enum value maps for FailStrategy.

Enum value maps for FailStrategy.

Enum value maps for PluginPhase.

Enum value maps for PluginPhase.

Enum value maps for PluginType.

Enum value maps for PluginType.

Enum value maps for PullPolicy.

Enum value maps for PullPolicy.

+kubebuilder:validation:XValidation:message="value may only be set when valueFrom is INLINE",rule="(has(self.valueFrom) ? self.valueFrom : ”) != 'HOST' || !has(self.value)".

Configuration for a Wasm VM.

WasmPlugins provides a mechanism to extend the functionality provided by the Istio proxy through WebAssembly filters.

TrafficSelector provides a mechanism to select a specific traffic flow for which this Wasm Plugin will be enabled.

The phase in the filter chain where the plugin will be injected.

PluginType indicates the type of Wasm extension to be used.

The pull behaviour to be applied when fetching a Wam module, mirroring K8s behaviour.