Path or name for the profile e.g.

• minimal (looks in profiles dir for a file called minimal.yaml)
• /tmp/istio/install/values/custom/custom-install.yaml (local file path)

default profile is used if this field is unset.

Path for the install package. e.g.

• /tmp/istio-installer/nightly (local file path)

Root for docker image paths e.g. docker.io/istio

Version tag for docker images e.g. 1.7.2

Namespace to install control plane resources into. If unset, Istio will be installed into the same namespace as the IstioOperator CR. You must also set values.global.istioNamespace if you wish to install Istio in a custom namespace. If you have enabled CNI, you must exclude this namespace by adding it to the list values.cni.excludeNamespaces.

Identify the revision this installation is associated with. This option is currently experimental.

Compatibility version allows configuring Istio to behave like an older version by tuning various settings to align with a previous versions defaults. This accepts a major.minor format, such as 1.23. This option is currently experimental.

Config used by control plane components internally.

Kubernetes resource settings, enablement and component-specific settings that are not internal to the component.

Overrides for default values.yaml. This is a validated pass-through to Helm templates. See the Helm installation options for schema details. Anything that is available in IstioOperatorSpec should be set above rather than using the passthrough. This includes Kubernetes resource settings for components in KubernetesResourcesSpec.

Unvalidated overrides for default values.yaml. Used for custom templates where new parameters are added.

Deprecated. Users should manage the installation of addon components on their own. Refer to samples/addons for demo installation of addon components.

Overall status of all components controlled by the operator.

• If all components have status NONE, overall status is NONE.
• If all components are HEALTHY, overall status is HEALTHY.
• If one or more components are RECONCILING and others are HEALTHY, overall status is RECONCILING.
• If one or more components are UPDATING and others are HEALTHY, overall status is UPDATING.
• If components are a mix of RECONCILING, UPDATING and HEALTHY, overall status is UPDATING.
• If any component is in ERROR state, overall status is ERROR.
• If further action is needed for reconciliation to proceed, overall status is ACTION_REQUIRED.

Optional message providing additional information about the existing overall status.

Individual status of each component controlled by the operator. The map key is the name of the component.

Remote cluster using an external control plane.

Selects whether this component is installed.

Kubernetes resource spec.

Selects whether this component is installed.

Namespace for the component.

Hub for the component (overrides top level hub setting).

Tag for the component (overrides top level tag setting).

Arbitrary install time configuration for the component.

Kubernetes resource spec.

Selects whether this component is installed.

Namespace for the component.

Arbitrary install time configuration for the component.

Chart path for addon components.

Optional schema to validate spec against.

Kubernetes resource spec.

Selects whether this gateway is installed.

Namespace for the gateway.

Name for the gateway.

Labels for the gateway.

Hub for the component (overrides top level hub setting).

Tag for the component (overrides top level tag setting).

Kubernetes resource spec.

Kubernetes affinity. https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity

Deployment environment variables. https://kubernetes.io/docs/tasks/inject-data-application/define-environment-variable-container/

Kubernetes HorizontalPodAutoscaler settings. https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/

Kubernetes imagePullPolicy. https://kubernetes.io/docs/concepts/containers/images/

Kubernetes nodeSelector. https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#nodeselector

Kubernetes PodDisruptionBudget settings. https://kubernetes.io/docs/concepts/workloads/pods/disruptions/#how-disruption-budgets-work

Kubernetes pod annotations. https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/

Kubernetes priorityClassName. Default for all resources unless overridden. https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/#priorityclass

Kubernetes readinessProbe settings. https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/ k8s.io.api.core.v1.Probe readiness_probe = 9;

Kubernetes Deployment replicas setting. https://kubernetes.io/docs/concepts/workloads/controllers/deployment/

Kubernetes resources settings. https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#resource-requests-and-limits-of-pod-and-container

Kubernetes Service settings. https://kubernetes.io/docs/concepts/services-networking/service/

Kubernetes deployment strategy. https://kubernetes.io/docs/concepts/workloads/controllers/deployment/

Kubernetes toleration https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/

Kubernetes service annotations. https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/

Kubernetes pod security context https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod

Kubernetes volumes https://kubernetes.io/docs/concepts/storage/volumes/ Volumes defines the collection of Volume to inject into the pod.

Kubernetes volumeMounts VolumeMounts defines the collection of VolumeMount to inject into containers.

Overlays for Kubernetes resources in rendered manifests.

Resource API version.

Resource kind.

Name of resource. Namespace is always the component namespace.

List of patches to apply to resource.

Type changes from CrossVersionObjectReference to ResourceMetricTarget in autoscaling v2beta2/v2 compared with v2beta1 Change it to dynamic type to keep backward compatible

v2beta2/v2 fields

Path of the form a.[key1:value1].b.[:value2] Where [key1:value1] is a selector for a key-value pair to identify a list element and [:value] is a value selector to identify a list element in a leaf list. All path intermediate nodes must exist.

Value to add, delete or replace. For add, the path should be a new leaf. For delete, value should be unset. For replace, path should reference an existing node. All values are strings but are converted into appropriate type based on schema.

Represents a null value.

Represents a double value.

Represents a string value.

Represents a boolean value.

Represents a structured value.

Represents a repeated Value.

name of the volume. Must be a DNS_LABEL and unique within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names

volumeSource represents the location and type of the mounted volume. If not specified, the Volume is implied to be an EmptyDir. This implied behavior is deprecated and will be removed in a future version.

This must match the Name of a Volume.

Mounted read-only if true, read-write otherwise (false or unspecified). Defaults to false.

Path within the container at which the volume should be mounted. Must not contain ‘:’.

Path within the volume from which the container’s volume should be mounted. Defaults to “” (volume’s root).

mountPropagation determines how mounts are propagated from the host to container and the other way around. When not set, MountPropagationNone is used. This field is beta in 1.10.

Expanded path within the volume from which the container’s volume should be mounted. Behaves similarly to SubPath but environment variable references $(VAR_NAME) are expanded using the container’s environment. Defaults to “” (volume’s root). SubPathExpr and SubPath are mutually exclusive.

matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels map is equivalent to an element of matchExpressions, whose key field is “key”, the operator is “In”, and the values array contains only “value”. The requirements are ANDed.

matchExpressions is a list of label selector requirements. The requirements are ANDed.

Component is not present.

Component is being updated to a different version.

Controller has started but not yet completed reconciliation loop for the component.

Component is healthy.

Component is in an error state.

Overall status only and would not be set as a component status. Action is needed from the user for reconciliation to proceed e.g. There are proxies still pointing to the control plane revision when try to remove an IstioOperator CR.