|
4 | 4 | title: pilot-agent
|
5 | 5 | description: Istio Pilot agent.
|
6 | 6 | generator: pkg-collateral-docs
|
7 |
| -number_of_entries: 13 |
| 7 | +number_of_entries: 12 |
8 | 8 | max_toc_level: 2
|
9 | 9 | remove_toc_prefix: 'pilot-agent '
|
10 | 10 | ---
|
@@ -277,86 +277,6 @@ <h4>macOS:</h4>
|
277 | 277 | </tr>
|
278 | 278 | </tbody>
|
279 | 279 | </table>
|
280 |
| -<h3 id="pilot-agent-istio-clean-iptables">pilot-agent istio-clean-iptables</h3> |
281 |
| -<p>Script responsible for cleaning up iptables rules</p> |
282 |
| -<pre class="language-bash"><code>pilot-agent istio-clean-iptables [flags] |
283 |
| -</code></pre> |
284 |
| -<table class="command-flags"> |
285 |
| -<thead> |
286 |
| -<tr> |
287 |
| -<th>Flags</th> |
288 |
| -<th>Shorthand</th> |
289 |
| -<th>Description</th> |
290 |
| -</tr> |
291 |
| -</thead> |
292 |
| -<tbody> |
293 |
| -<tr> |
294 |
| -<td><code>--capture-all-dns</code></td> |
295 |
| -<td></td> |
296 |
| -<td>Instead of only capturing DNS traffic to DNS server IP, capture all DNS traffic at port 53. This setting is only effective when redirect dns is enabled. </td> |
297 |
| -</tr> |
298 |
| -<tr> |
299 |
| -<td><code>--dry-run</code></td> |
300 |
| -<td><code>-n</code></td> |
301 |
| -<td>Do not call any external dependencies like iptables. </td> |
302 |
| -</tr> |
303 |
| -<tr> |
304 |
| -<td><code>--istio-inbound-interception-mode <string></code></td> |
305 |
| -<td><code>-m</code></td> |
306 |
| -<td>The mode used to redirect inbound connections to Envoy, either "REDIRECT" or "TPROXY". (default ``)</td> |
307 |
| -</tr> |
308 |
| -<tr> |
309 |
| -<td><code>--istio-inbound-tproxy-mark <string></code></td> |
310 |
| -<td><code>-t</code></td> |
311 |
| -<td> (default ``)</td> |
312 |
| -</tr> |
313 |
| -<tr> |
314 |
| -<td><code>--log_as_json</code></td> |
315 |
| -<td></td> |
316 |
| -<td>Whether to format output as JSON or in plain console-friendly format </td> |
317 |
| -</tr> |
318 |
| -<tr> |
319 |
| -<td><code>--log_caller <string></code></td> |
320 |
| -<td></td> |
321 |
| -<td>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, all, ca, cache, citadelclient, default, dns, gcecred, grpc, healthcheck, iptables, klog, mockcred, monitoring, sds, security, spiffe, validation, wasm, xdsproxy] (default ``)</td> |
322 |
| -</tr> |
323 |
| -<tr> |
324 |
| -<td><code>--log_output_level <string></code></td> |
325 |
| -<td></td> |
326 |
| -<td>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,... where scope can be one of [ads, all, ca, cache, citadelclient, default, dns, gcecred, grpc, healthcheck, iptables, klog, mockcred, monitoring, sds, security, spiffe, validation, wasm, xdsproxy] and level can be one of [debug, info, warn, error, fatal, none] (default ``)</td> |
327 |
| -</tr> |
328 |
| -<tr> |
329 |
| -<td><code>--log_stacktrace_level <string></code></td> |
330 |
| -<td></td> |
331 |
| -<td>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,... where scope can be one of [ads, all, ca, cache, citadelclient, default, dns, gcecred, grpc, healthcheck, iptables, klog, mockcred, monitoring, sds, security, spiffe, validation, wasm, xdsproxy] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)</td> |
332 |
| -</tr> |
333 |
| -<tr> |
334 |
| -<td><code>--log_target <stringArray></code></td> |
335 |
| -<td></td> |
336 |
| -<td>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default `[stdout]`)</td> |
337 |
| -</tr> |
338 |
| -<tr> |
339 |
| -<td><code>--proxy-gid <string></code></td> |
340 |
| -<td><code>-g</code></td> |
341 |
| -<td>Specify the GID of the user for which the redirection is not applied (same default value as -u param). (default ``)</td> |
342 |
| -</tr> |
343 |
| -<tr> |
344 |
| -<td><code>--proxy-uid <string></code></td> |
345 |
| -<td><code>-u</code></td> |
346 |
| -<td>Specify the UID of the user for which the redirection is not applied. Typically, this is the UID of the proxy container. (default ``)</td> |
347 |
| -</tr> |
348 |
| -<tr> |
349 |
| -<td><code>--redirect-dns</code></td> |
350 |
| -<td></td> |
351 |
| -<td>Enable capture of dns traffic by istio-agent. </td> |
352 |
| -</tr> |
353 |
| -<tr> |
354 |
| -<td><code>--vklog <Level></code></td> |
355 |
| -<td></td> |
356 |
| -<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td> |
357 |
| -</tr> |
358 |
| -</tbody> |
359 |
| -</table> |
360 | 280 | <h3 id="pilot-agent-istio-iptables">pilot-agent istio-iptables</h3>
|
361 | 281 | <p>istio-iptables is responsible for setting up port forwarding for Istio Sidecar.</p>
|
362 | 282 | <pre class="language-bash"><code>pilot-agent istio-iptables [flags]
|
|
0 commit comments