istio v1.31.0

WasmPlugin.spec

Extend the functionality provided by the Istio proxy through WebAssembly filters. See more details at: https://istio.io/docs/reference/config/proxy_extensions/wasm-plugin.html

WasmPlugin.spec fields and descriptions
Field / Type	Description
failStrategy `string`	Specifies the failure behavior for the plugin due to fatal errors. Valid Options: FAIL_CLOSE, FAIL_OPEN, FAIL_RELOAD `enum: ["FAIL_CLOSE","FAIL_OPEN","FAIL_RELOAD"]`
imagePullPolicy `string`	The pull behaviour to be applied when fetching Wasm module by either OCI image or `http/https`. Valid Options: IfNotPresent, Always `enum: ["UNSPECIFIED_POLICY","IfNotPresent","Always"]`
imagePullSecret `string`	Credentials to use for OCI image pulling. `minLength: 1` `maxLength: 253`
match `object[]`	Specifies the criteria to determine which traffic is passed to WasmPlugin.
phase `string`	Determines where in the filter chain this `WasmPlugin` is to be injected. Valid Options: AUTHN, AUTHZ, STATS `enum: ["UNSPECIFIED_PHASE","AUTHN","AUTHZ","STATS"]`
pluginConfig `object`	The configuration that will be passed on to the plugin. `x-kubernetes-preserve-unknown-fields: true`
pluginName `string`	The plugin name to be used in the Envoy configuration (used to be called `rootID`). `minLength: 1` `maxLength: 256`
priority `integer`	Determines ordering of `WasmPlugins` in the same `phase`. `format: int32` `nullable`
selector `object`	Criteria used to select the specific set of pods/VMs on which this plugin configuration should be applied.
sha256 `string`	SHA256 checksum that will be used to verify Wasm module or OCI container. `pattern: (^$\|^[a-f0-9]{64}$)`
targetRef `object`	No description provided.
targetRefs `object[]`	Optional. `maxItems: 16`
type `string`	Specifies the type of Wasm Extension to be used. Valid Options: HTTP, NETWORK `enum: ["UNSPECIFIED_PLUGIN_TYPE","HTTP","NETWORK"]`
url `string` required	URL of a Wasm module or OCI container. `minLength: 1` `x-kubernetes-validations: [{"message":"url must have schema one of [http, https, file, oci]","rule":"isURL(self) ? (url(self).getScheme() in [\"\", \"http\", \"https\", \"oci\", \"file\"]) : (isURL(\"http://\" + self) \u0026\u0026\nurl(\"http://\" + self).getScheme() in [\"\", \"http\", \"https\", \"oci\", \"file\"])"}]`
verificationKey `string`	No description provided.
vmConfig `object`	Configuration for a Wasm VM.