Advertisement
Guest User

Untitled

a guest
May 24th, 2018
190
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.09 KB | None | 0 0
  1. "listeners": [
  2. {
  3. "name": "http_10.28.14.30_50051",
  4. "address": {
  5. "socketAddress": {
  6. "address": "10.28.14.30",
  7. "portValue": 50051
  8. }
  9. },
  10. "filterChains": [
  11. {
  12. "filterChainMatch": {
  13. },
  14. "tlsContext": {
  15. "commonTlsContext": {
  16. "tlsCertificates": [
  17. {
  18. "certificateChain": {
  19. "filename": "/etc/certs/cert-chain.pem"
  20. },
  21. "privateKey": {
  22. "filename": "/etc/certs/key.pem"
  23. }
  24. }
  25. ],
  26. "validationContext": {
  27. "trustedCa": {
  28. "filename": "/etc/certs/root-cert.pem"
  29. }
  30. },
  31. "alpnProtocols": [
  32. "h2",
  33. "http/1.1"
  34. ]
  35. },
  36. "requireClientCertificate": true
  37. },
  38. "filters": [
  39. {
  40. "name": "envoy.http_connection_manager",
  41. "config": {
  42. "access_log": [
  43. {
  44. "config": {
  45. "path": "/dev/stdout"
  46. },
  47. "name": "envoy.file_access_log"
  48. }
  49. ],
  50. "generate_request_id": true,
  51. "http_filters": [
  52. {
  53. "config": {
  54. "allow_missing_or_failed": true,
  55. "rules": [
  56. {
  57. "audiences": [
  58. "https://mydomain.site/mystio"
  59. ],
  60. "forward": true,
  61. "forward_payload_header": "istio-sec-87540f83a474b314402e3cea9035e5195ad44c02",
  62. "issuer": "https://mydomain.auth0.com/",
  63. "local_jwks": {
  64. "inline_string": "{\"keys\":[{\"alg\":\"RS256\",\"kty\":\"RSA\",\"use\":\"sig\",\"x5c\":[\"MIIC7jCC89g==\"],\"n\":\"oepnh5Wq-ullBMw\",\"x5t\":\"REMyRMw\"}]}"
  65. }
  66. }
  67. ]
  68. },
  69. "name": "jwt-auth"
  70. },
  71. {
  72. "config": {
  73. "jwt_output_payload_locations": {
  74. "https://mydomain.auth0.com/": "istio-sec-87540f83a474b314402e3cea9035e5195ad44c02"
  75. },
  76. "policy": {
  77. "origins": [
  78. {
  79. "jwt": {
  80. "audiences": [
  81. "https://mydomain.site/mystio"
  82. ],
  83. "issuer": "https://mydomain.auth0.com/",
  84. "jwks_uri": "https://mydomain.auth0.com/.well-known/jwks.json"
  85. }
  86. }
  87. ],
  88. "peers": [
  89. {
  90. "mtls": {
  91. }
  92. }
  93. ],
  94. "principal_binding": "USE_ORIGIN"
  95. }
  96. },
  97. "name": "istio_authn"
  98. },
  99. {
  100. "config": {
  101. "default_destination_service": "welcome-app.mystio.svc.cluster.local",
  102. "mixer_attributes": {
  103. "attributes": {
  104. "destination.ip": {
  105. "bytes_value": "AAAAAAAAAAAAAP//ChwOHg=="
  106. },
  107. "destination.labels": {
  108. "string_map_value": {
  109. "entries": {
  110. "app": "welcome-app",
  111. "pod-template-hash": "1428334862",
  112. "tier": "userapp"
  113. }
  114. }
  115. },
  116. "destination.uid": {
  117. "string_value": "kubernetes://welcome-app-586d778db6-t2j9f.mystio"
  118. }
  119. }
  120. },
  121. "service_configs": {
  122. "welcome-app.mystio.svc.cluster.local": {
  123. "mixer_attributes": {
  124. "attributes": {
  125. "destination.labels": {
  126. "string_map_value": {
  127. "entries": {
  128. "app": "welcome-app",
  129. "pod-template-hash": "1428334862",
  130. "tier": "userapp"
  131. }
  132. }
  133. },
  134. "destination.service": {
  135. "string_value": "welcome-app.mystio.svc.cluster.local"
  136. }
  137. }
  138. }
  139. }
  140. },
  141. "transport": {
  142. "check_cluster": "outbound|15004||istio-policy.istio-system.svc.cluster.local",
  143. "report_cluster": "outbound|15004||istio-telemetry.istio-system.svc.cluster.local"
  144. }
  145. },
  146. "name": "mixer"
  147. },
  148. {
  149. "name": "envoy.cors"
  150. },
  151. {
  152. "name": "envoy.fault"
  153. },
  154. {
  155. "name": "envoy.router"
  156. }
  157. ],
  158. "route_config": {
  159. "name": "inbound|50051||welcome-app.mystio.svc.cluster.local",
  160. "validate_clusters": false,
  161. "virtual_hosts": [
  162. {
  163. "domains": [
  164. "*"
  165. ],
  166. "name": "inbound|http|50051",
  167. "routes": [
  168. {
  169. "decorator": {
  170. "operation": "default-route"
  171. },
  172. "match": {
  173. "prefix": "/"
  174. },
  175. "per_filter_config": {
  176. "mixer": {
  177. "mixer_attributes": {
  178. "attributes": {
  179. "destination.service": {
  180. "string_value": "welcome-app.mystio.svc.cluster.local"
  181. }
  182. }
  183. }
  184. }
  185. },
  186. "route": {
  187. "cluster": "inbound|50051||welcome-app.mystio.svc.cluster.local"
  188. }
  189. }
  190. ]
  191. }
  192. ]
  193. },
  194. "stat_prefix": "http",
  195. "tracing": {
  196. },
  197. "use_remote_address": false
  198. }
  199. }
  200. ]
  201. }
  202. ],
  203. "deprecatedV1": {
  204. "bindToPort": false
  205. }
  206. },
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement