envoy.config_ads_disabled_endpoint_permissions.yaml Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of envoy-control-tests Show documentation
Show all versions of envoy-control-tests Show documentation
Production-ready Control Plane for Service Mesh based on Envoy Proxy.
admin:
access_log_path: /dev/null
address:
socket_address: { address: 0.0.0.0, port_value: 10000 }
dynamic_resources:
lds_config:
resource_api_version: V3
ads: {}
cds_config:
resource_api_version: V3
ads: {}
ads_config:
transport_api_version: V3
api_type: GRPC
grpc_services:
envoy_grpc:
cluster_name: envoy-control-xds
node:
cluster: test-cluster
id: test-id
metadata:
ads: true
ingress_host: "0.0.0.0"
ingress_port: 5001
egress_host: "0.0.0.0"
egress_port: 5000
use_remote_address: true
generate_request_id: true
preserve_external_request_id: true
access_log_enabled: false
resources_dir: "/etc/envoy/extra"
proxy_settings:
# no "incoming" permissions defined, so access to a service is open for all.
outgoing:
dependencies:
- service: "consul"
- service: "echo"
static_resources:
clusters:
- connect_timeout: 1s
load_assignment:
cluster_name: envoy-control-xds
endpoints:
- lb_endpoints:
- endpoint:
address:
socket_address:
address: HOST_IP
port_value: HOST_PORT
- endpoint:
address:
socket_address:
address: HOST_IP
port_value: HOST2_PORT
http2_protocol_options: {}
name: envoy-control-xds
- name: envoy-original-destination
type: ORIGINAL_DST
lb_policy: CLUSTER_PROVIDED
original_dst_lb_config:
use_http_header: true
connect_timeout:
seconds: 1
http_protocol_options:
allow_absolute_url: true
- name: local_service
type: STATIC
load_assignment:
cluster_name: local_service
endpoints:
- lb_endpoints:
- endpoint:
address:
socket_address:
address: LOCAL_SERVICE_IP
port_value: 5678
connect_timeout: 1s
- name: this_admin
type: STATIC
load_assignment:
cluster_name: this_admin
endpoints:
- lb_endpoints:
- endpoint:
address:
socket_address:
address: 127.0.0.1
port_value: 10000
connect_timeout:
seconds: 1