Use the policy defined by the parent scope.

Envoy to Envoy traffic is wrapped into mutual TLS connections.

Do not encrypt Envoy to Envoy traffic.

Istio ingress controller will act on ingress resources that do not contain any annotation or whose annotations match the value specified in the ingress_class parameter described earlier.

Do not upgrade connections to http2.

Disables Istio ingress controller.

outbound traffic to unknown destinations will be allowed, in case there are no services or ServiceEntries for the destination port.

outbound traffic will be restricted to services defined in the service registry as well as those defined through ServiceEntries.

Istio ingress controller will only act on ingress resources whose annotations match the value specified in the ingress_class parameter described earlier.

Upgrade the connections to http2.

The REDIRECT mode uses iptables REDIRECT to NAT and redirect to Envoy.

The TPROXY mode uses iptables TPROXY to redirect to Envoy.

ConfigSource describes information about a configuration store inside a mesh.

Locality-weighted load balancing allows administrators to control the distribution of traffic to endpoints based on the localities of where the traffic originates and where it will terminate.

Describes how traffic originating in the 'from' zone or sub-zone is distributed over a set of 'to' zones.

Specify the traffic failover policy across regions.

MeshConfig defines mesh-wide variables shared by all Envoy instances in the Istio service mesh.

MeshNetworks (config map) provides information about the set of networks inside a mesh and how to route to endpoints in each network.

Network provides information about the endpoints in a routable L3 network.

The gateway associated with this network.

NetworkEndpoints describes how the network associated with an endpoint should be inferred.

ProxyConfig defines variables for individual Envoy instances.

SDS defines secret discovery service(SDS) configuration to be used by the proxy.

Tracing defines configuration for the tracing performed by Envoy instances.

Datadog defines configuration for a Datadog tracer.

Defines configuration for a LightStep tracer.

Stackdriver defines configuration for a Stackdriver tracer.

Zipkin defines configuration for a Zipkin tracer.

AuthenticationPolicy defines authentication policy.

$hide_from_docs.

Default Policy for upgrading http1.1 connections to http2.

The mode used to redirect inbound traffic to Envoy.