Turn every dangerous change into a breaking change.

Treat the removal of a deprecated field as a dangerous change, instead of a breaking change.

Ignore description changes.

Ignore breaking changes on parts of the schema that are not reachable starting from the root types.

Found HTTP Status Code - 302.

Moved Permanently HTTP Status Code - 301.

Permanent Redirect HTTP Status Code - 308.

See Other HTTP Status Code - 303.

Temporary Redirect HTTP Status Code - 307.

In BLACKLIST mode (default), FDS will poll all services in cluster except those services labeled with `discovery.solo.io/function_discovery=disabled`.

In DISABLED mode, FDS will not run.

In WHITELIST mode, FDS will poll only services in cluster labeled with `discovery.solo.io/function_discovery=enabled`.

Cluster can only operate on one of the possible upstream protocols (HTTP1.1, HTTP2).

Use HTTP1.1 or HTTP2, depending on which one is used on the downstream connection.

This should be added to solo-kit (an issue has been opened).

Enum value maps for GraphqlOptions_SchemaChangeValidationOptions_ProcessingRule.

Enum value maps for GraphqlOptions_SchemaChangeValidationOptions_ProcessingRule.

Enum value maps for RedirectAction_RedirectResponseCode.

Enum value maps for RedirectAction_RedirectResponseCode.

Enum value maps for Settings_DiscoveryOptions_FdsMode.

Enum value maps for Settings_DiscoveryOptions_FdsMode.

Enum value maps for Upstream_ClusterProtocolSelection.

Enum value maps for Upstream_ClusterProtocolSelection.

Secret to represent any kind of a username/secretname and password/secret combination Used by LDAP auth to store service account credentials and by HMAC auth to keep shared secrets.

An AggregateListener defines a set of Gloo configuration which will map to a unique set of FilterChains on a Listener.

@solo-kit:resource.short_name=art @solo-kit:resource.plural_name=artifacts Gloo Artifacts are used by Gloo to store small bits of binary or file data.

There are two ways of providing AWS secrets: - Method 1: `glooctl create secret aws` ``` glooctl create secret aws --name aws-secret-from-glooctl \ --namespace default \ --access-key $ACC \ --secret-key $SEC ``` will produce a Kubernetes resource similar to this (note the `aws` field and `resource_kind` annotation): ``` apiVersion: v1 data: aws: base64EncodedStringForMachineConsumption kind: Secret metadata: annotations: resource_kind: '*v1.Secret' creationTimestamp: "2019-08-23T15:10:20Z" name: aws-secret-from-glooctl namespace: default resourceVersion: "592637" selfLink: /api/v1/namespaces/default/secrets/secret-e2e uid: 1f8c147f-c5b8-11e9-bbf3-42010a8001bc type: Opaque ``` - Method 2: `kubectl apply -f resource-file.yaml` - If using a git-ops flow, or otherwise creating secrets from yaml files, you may prefer to provide AWS credentials using the format below, with `aws_access_key_id` and `aws_secret_access_key` fields.

CircuitBreakerConfig contains the options for customizing circuit breaking behavior.

Configuration for listener connection balancing.

A connection balancer implementation that does exact balancing.

Fine tune the settings for connections to an upstream.

If set then set SO_KEEPALIVE on the socket to enable TCP Keepalives.

Settings used by the Enterprise Console (UI).

Identifies a [Consul](https://www.consul.io/) [service](https://www.consul.io/docs/agent/services.html) to route traffic to.

Destinations define routable destinations for proxied requests.

Configuration for Destinations that are tied to the UpstreamSpec or ServiceSpec on that destination.

DirectResponseAction is copied directly from https://github.com/envoyproxy/envoy/blob/main/api/envoy/api/v2/route/route.proto.

created by discovery services.

Secret used for key encryption.

Endpoints represent dynamically discovered address/ports where an upstream service is listening.

Failover configuration for an upstream.

Settings specific to the Gateway controller.

options for configuring admission control / validation.

Settings specific to the gloo (Envoy xDS server) controller.

Policy for how Gloo should handle invalid config [#next-free-field: 15].

GraphQL settings used by the control plane and UI.

Header name/value pair.

Use this listener to configure proxy behavior for any HTTP-level features including defining routes (via virtual services).

Optional, feature-specific configuration that lives on http listeners.

Identifies a port on a kubernetes service to route traffic to.

An Endpoint that Envoy can route traffic to.

The optional health check configuration.

Listeners define the address:port where the proxy will listen for incoming connections A Listener accepts connections (currently only HTTP is supported) and apply user-defined behavior for those connections, e.g.

Optional, feature-specific configuration that lives on gateways.

LoadBalancerConfig is the settings for the load balancer used to send requests to the Upstream endpoints.

Customizes the parameters used in the hashing algorithm to refine performance or resource usage.

Identifies location of where either Envoy runs or where upstream hosts run.

A group of endpoints belonging to a Locality.

MultiDestination is a container for a set of weighted destinations.

A Proxy is a container for the entire set of configuration that will to be applied to one or more Proxy instances.

Notice: RedirectAction is copied directly from https://github.com/envoyproxy/envoy/blob/main/api/envoy/api/v2/route/route.proto.

* Routes declare the entry points on virtual hosts and the action to take for matched requests.

RouteActions are used to route matched requests to upstreams.

Optional, feature-specific configuration that lives on routes.

This is a 1:1 translation to the [Envoy API described here](https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/route/v3/route_components.proto#envoy-v3-api-msg-config-route-v3-routeaction-maxstreamduration).

Certain features such as the AWS Lambda option require the use of secrets for authentication, configuration of SSL Certificates, and other data that should not be stored in plaintext configuration.

Represents global settings for all the Gloo components.

Provides overrides for the default configuration parameters used to connect to Consul.

service discovery options for Consul.

Use [HashiCorp Consul Key-Value](https://www.consul.io/api/kv.html/) as storage for config data.

Settings related to gloo's behavior when discovering consul services and creating upstreams to connect to those services and their instances.

As an alternative to Kubernetes CRDs, Gloo is able to store resources in a local file system.

Use Kubernetes ConfigMaps as storage.

Provides overrides for the default configuration parameters used to interact with Kubernetes.

Use Kubernetes CRDs as storage.

Use Kubernetes as storage for secret data.

Provides settings related to the observability pod's interactions with grafana.

Configure Vault client to authenticate to server via AWS auth (IAM only).

Use [HashiCorp Vault](https://www.vaultproject.io/) as storage for secret data.

Settings to configure TLS-enabled Vault as a secret store.

SourceMetadata is an internal message used to track ownership of nested proxy objects: - Listener - VirtualHost - Route.

Name of the destinations the gateway can route to.

Optional, feature-specific configuration that lives on tcp listeners.

Upstreams represent destination for routing HTTP requests.

Default configuration to use for upstreams, when not provided by a specific upstream When these properties are defined on a specific upstream, this configuration will be ignored.

Virtual Hosts group an ordered list of routes under one or more domains.

Optional, feature-specific configuration that lives on virtual hosts.

Default configuration to use for VirtualServices, when not provided by a specific virtual service When these properties are defined on a specific VirtualService, this configuration will be ignored.

WeightedDestination attaches a weight to a single destination.

Optional, feature-specific configuration that is applied when a specific weighted destination is selected for routing.

Deprecated: use DiscoverySyncDeciderWithContext.

Deprecated: use EdsSyncDeciderWithContext.

Deprecated: use SetupSyncDeciderWithContext.

Possible modes for running the function discovery service (FDS).

Option to copy anything from the original to the desired before writing.

Option to copy anything from the original to the desired before writing.

Option to copy anything from the original to the desired before writing.

Option to copy anything from the original to the desired before writing.

Option to copy anything from the original to the desired before writing.

Option to copy anything from the original to the desired before writing.

Option to copy anything from the original to the desired before writing.