pilot-discovery

    FlagsShorthandDescription
    —appNamespace <string>-aRestrict the applications namespace the controller manages; if not set, controller watches all namespaces (default )</td></tr><tr><td><code>--clusterRegistriesNamespace &lt;string&gt;</code></td><td></td><td>Namespace for ConfigMap which stores clusters configs (default)
    —configDir <string>Directory to watch for updates to config yaml files. If specified, the files will be used as the source of config, rather than a CRD client. (default )</td></tr><tr><td><code>--consulserverURL &lt;string&gt;</code></td><td></td><td>URL for the Consul server (default)
    —ctrlz_address <string>The IP Address to listen on for the ControlZ introspection facility. Use ‘*’ to indicate all addresses. (default localhost)
    —ctrlz_port <uint16>The IP port to use for the ControlZ introspection facility (default 9876)
    —disable-install-crdsDisable discovery service from verifying the existence of CRDs at startup and then installing if not detected. It is recommended to be disable for highly available setups.
    —domain <string>DNS domain suffix (default cluster.local)
    —grpcAddr <string>Discovery service grpc address (default :15010)
    —httpAddr <string>Discovery service HTTP address (default :8080)
    —keepaliveInterval <duration>The time interval if no activity on the connection it pings the peer to see if the transport is alive (default 30s)
    —keepaliveMaxServerConnectionAge <duration>Maximum duration a connection will be kept open on the server before a graceful close. (default 2562047h47m16.854775807s)
    —keepaliveTimeout <duration>After having pinged for keepalive check, the client/server waits for a duration of keepaliveTimeout and if no activity is seen even after that the connection is closed. (default 10s)
    —kubeconfig <string>Use a Kubernetes configuration file instead of in-cluster configuration (default )</td></tr><tr><td><code>--log_as_json</code></td><td></td><td>Whether to format output as JSON or in plain console-friendly format</td></tr><tr><td><code>--log_caller &lt;string&gt;</code></td><td></td><td>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, all, analysis, attributes, authn, caSecretController, configMapController, conversions, default, grpcAdapter, k8sController, kube, kube-converter, mcp, meshconfig, model, pkiCaLog, processing, rbac, resource, rootCertRotator, runtime, server, serverCaLog, source, validation] (default)
    —log_output_level <string>Comma-separated minimum per-scope logging level of messages to output, in the form of <scope>:<level>,<scope>:<level>,… where scope can be one of [ads, all, analysis, attributes, authn, caSecretController, configMapController, conversions, default, grpcAdapter, k8sController, kube, kube-converter, mcp, meshconfig, model, pkiCaLog, processing, rbac, resource, rootCertRotator, runtime, server, serverCaLog, source, validation] and level can be one of [debug, info, warn, error, fatal, none] (default default:info)
    —log_rotate <string>The path for the optional rotating log file (default )</td></tr><tr><td><code>--log_rotate_max_age &lt;int&gt;</code></td><td></td><td>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default `30`)</td></tr><tr><td><code>--log_rotate_max_backups &lt;int&gt;</code></td><td></td><td>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default `1000`)</td></tr><tr><td><code>--log_rotate_max_size &lt;int&gt;</code></td><td></td><td>The maximum size in megabytes of a log file beyond which the file is rotated (default `104857600`)</td></tr><tr><td><code>--log_stacktrace_level &lt;string&gt;</code></td><td></td><td>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of &lt;scope&gt;:&lt;level&gt;,&lt;scope:level&gt;,... where scope can be one of [ads, all, analysis, attributes, authn, caSecretController, configMapController, conversions, default, grpcAdapter, k8sController, kube, kube-converter, mcp, meshconfig, model, pkiCaLog, processing, rbac, resource, rootCertRotator, runtime, server, serverCaLog, source, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)</td></tr><tr><td><code>--log_target &lt;stringArray&gt;</code></td><td></td><td>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default `[stdout]`)</td></tr><tr><td><code>--mcpInitialConnWindowSize &lt;int&gt;</code></td><td></td><td>Initial connection window size for MCP's gRPC connection (default `1048576`)</td></tr><tr><td><code>--mcpInitialWindowSize &lt;int&gt;</code></td><td></td><td>Initial window size for MCP's gRPC connection (default `1048576`)</td></tr><tr><td><code>--mcpMaxMsgSize &lt;int&gt;</code></td><td></td><td>Max message size received by MCP's grpc client (default `4194304`)</td></tr><tr><td><code>--meshConfig &lt;string&gt;</code></td><td></td><td>File name for Istio mesh configuration. If not specified, a default mesh will be used. (default `/etc/istio/config/mesh`)</td></tr><tr><td><code>--monitoringAddr &lt;string&gt;</code></td><td></td><td>HTTP address to use for pilot's self-monitoring information (default `:15014`)</td></tr><tr><td><code>--namespace &lt;string&gt;</code></td><td><code>-n</code></td><td>Select a namespace where the controller resides. If not set, uses ${POD_NAMESPACE} environment variable (default)
    —networksConfig <string>File name for Istio mesh networks configuration. If not specified, a default mesh networks will be used. (default /etc/istio/config/meshNetworks)
    —plugins <stringSlice>comma separated list of networking plugins to enable (default [authn,authz,health,mixer])
    —profileEnable profiling via web interface host:port/debug/pprof
    —registries <stringSlice>Comma separated list of platform service registries to read from (choose one or more from {Kubernetes, Consul, MCP, Mock}) (default [Kubernetes])
    —resync <duration>Controller resync interval (default 1m0s)
    —secureGrpcAddr <string>Discovery service grpc address, with https (default :15012)
    —trust-domain <string>The domain serves to identify the system with spiffe (default ``)
    FlagsShorthandDescription
    —ctrlz_address <string>The IP Address to listen on for the ControlZ introspection facility. Use ‘*’ to indicate all addresses. (default localhost)
    —ctrlz_port <uint16>The IP port to use for the ControlZ introspection facility (default 9876)
    —keepaliveInterval <duration>The time interval if no activity on the connection it pings the peer to see if the transport is alive (default 30s)
    —keepaliveMaxServerConnectionAge <duration>Maximum duration a connection will be kept open on the server before a graceful close. (default 2562047h47m16.854775807s)
    —keepaliveTimeout <duration>After having pinged for keepalive check, the client/server waits for a duration of keepaliveTimeout and if no activity is seen even after that the connection is closed. (default 10s)
    —log_as_jsonWhether to format output as JSON or in plain console-friendly format
    —log_caller <string>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, all, analysis, attributes, authn, caSecretController, configMapController, conversions, default, grpcAdapter, k8sController, kube, kube-converter, mcp, meshconfig, model, pkiCaLog, processing, rbac, resource, rootCertRotator, runtime, server, serverCaLog, source, validation] (default )</td></tr><tr><td><code>--log_output_level &lt;string&gt;</code></td><td></td><td>Comma-separated minimum per-scope logging level of messages to output, in the form of &lt;scope&gt;:&lt;level&gt;,&lt;scope&gt;:&lt;level&gt;,... where scope can be one of [ads, all, analysis, attributes, authn, caSecretController, configMapController, conversions, default, grpcAdapter, k8sController, kube, kube-converter, mcp, meshconfig, model, pkiCaLog, processing, rbac, resource, rootCertRotator, runtime, server, serverCaLog, source, validation] and level can be one of [debug, info, warn, error, fatal, none] (default `default:info`)</td></tr><tr><td><code>--log_rotate &lt;string&gt;</code></td><td></td><td>The path for the optional rotating log file (default)
    —log_rotate_max_age <int>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default 30)
    —log_rotate_max_backups <int>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default 1000)
    —log_rotate_max_size <int>The maximum size in megabytes of a log file beyond which the file is rotated (default 104857600)
    —log_stacktrace_level <string>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of <scope>:<level>,<scope:level>,… where scope can be one of [ads, all, analysis, attributes, authn, caSecretController, configMapController, conversions, default, grpcAdapter, k8sController, kube, kube-converter, mcp, meshconfig, model, pkiCaLog, processing, rbac, resource, rootCertRotator, runtime, server, serverCaLog, source, validation] and level can be one of [debug, info, warn, error, fatal, none] (default default:none)
    —log_target <stringArray>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default [stdout])
    —output <string>-oOne of ‘yaml’ or ‘json’. (default ``)
    —short-sUse —short=false to generate full version information
    Metric NameTypeDescription
    citadel_secret_controller_csr_err_countSumThe number of errors occurred when creating the CSR.
    citadel_secret_controller_csr_sign_err_countSumThe number of errors occurred when signing the CSR.
    citadel_secret_controller_secret_deleted_cert_countSumThe number of certificates recreated due to secret deletion (service account still exists).
    citadel_secret_controller_svc_acc_created_cert_countSumThe number of certificates created due to service account creation.
    citadel_secret_controller_svc_acc_deleted_cert_countSumThe number of certificates deleted due to service account deletion.
    citadel_server_authentication_failure_countSumThe number of authentication failures.
    citadel_server_csr_countSumThe number of CSRs received by Citadel server.
    citadel_server_csr_parsing_err_countSumThe number of errors occurred when parsing the CSR.
    citadel_server_csr_sign_err_countSumThe number of errors occurred when signing the CSR.
    citadel_server_id_extraction_err_countSumThe number of errors occurred when extracting the ID from CSR.
    citadel_server_root_cert_expiry_timestampLastValueThe unix timestamp, in seconds, when Citadel root cert will expire. We set it to negative in case of internal error.
    citadel_server_success_cert_issuance_countSumThe number of certificates issuances that have succeeded.
    endpoint_no_podLastValueEndpoints without an associated pod.
    galley_runtime_processor_event_span_duration_millisecondsDistributionThe duration between each incoming event
    galley_runtime_processor_events_processed_totalCountThe number of events that have been processed
    galley_runtime_processor_snapshot_events_totalDistributionThe number of events per snapshot
    galley_runtime_processor_snapshot_lifetime_duration_millisecondsDistributionThe duration of each snapshot
    galley_runtime_processor_snapshots_published_totalCountThe number of snapshots that have been published
    galley_runtime_state_type_instances_totalLastValueThe number of type instances per type URL
    galley_runtime_strategy_on_change_totalCountThe number of times the strategy’s onChange has been called
    galley_runtime_strategy_timer_max_time_reached_totalCountThe number of times the max time has been reached
    galley_runtime_strategy_timer_quiesce_reached_totalCountThe number of times a quiesce has been reached
    galley_runtime_strategy_timer_resets_totalCountThe number of times the timer has been reset
    galley_source_kube_dynamic_converter_failure_totalCountThe number of times a dynamnic kubernetes source failed converting a resources
    galley_source_kube_dynamic_converter_success_totalCountThe number of times a dynamic kubernetes source successfully converted a resource
    galley_source_kube_event_error_totalCountThe number of times a kubernetes source encountered errored while handling an event
    galley_source_kube_event_success_totalCountThe number of times a kubernetes source successfully handled an event
    galley_validation_cert_key_update_errorsCountGalley validation webhook certificate updates errors
    galley_validation_cert_key_updatesCountGalley validation webhook certificate updates
    galley_validation_config_loadCountk8s webhook configuration (re)loads
    galley_validation_config_load_errorCountk8s webhook configuration (re)load error
    galley_validation_config_update_errorCountk8s webhook configuration update error
    galley_validation_config_updatesCountk8s webhook configuration updates
    galley_validation_failedCountResource validation failed
    galley_validation_http_errorCountResource validation http serve errors
    galley_validation_passedCountResource is valid
    istio_buildLastValueIstio component build info
    istio_mcp_clients_totalLastValueThe number of streams currently connected.
    DistributionSize of messages received from clients.
    istio_mcp_reconnectionsSumThe number of times the sink has reconnected.
    istio_mcp_recv_failures_totalSumThe number of recv failures in the source.
    istio_mcp_request_acks_totalSumThe number of request acks received by the source.
    istio_mcp_request_nacks_totalSumThe number of request nacks received by the source.
    istio_mcp_send_failures_totalSumThe number of send failures in the source.
    mixer_config_adapter_info_config_errors_totalLastValueThe number of errors encountered during processing of the adapter info configuration.
    mixer_config_adapter_info_configs_totalLastValueThe number of known adapters in the current config.
    mixer_config_attributes_totalLastValueThe number of known attributes in the current config.
    mixer_config_handler_configs_totalLastValueThe number of known handlers in the current config.
    mixer_config_handler_validation_error_totalLastValueThe number of errors encountered because handler validation returned error.
    mixer_config_instance_config_errors_totalLastValueThe number of errors encountered during processing of the instance configuration.
    mixer_config_instance_configs_totalLastValueThe number of known instances in the current config.
    mixer_config_rule_config_errors_totalLastValueThe number of errors encountered during processing of the rule configuration.
    mixer_config_rule_config_match_error_totalLastValueThe number of rule conditions that was not parseable.
    mixer_config_rule_configs_totalLastValueThe number of known rules in the current config.
    mixer_config_template_config_errors_totalLastValueThe number of errors encountered during processing of the template configuration.
    mixer_config_template_configs_totalLastValueThe number of known templates in the current config.
    mixer_config_unsatisfied_action_handler_totalLastValueThe number of actions that failed due to handlers being unavailable.
    mixer_dispatcher_destinations_per_requestDistributionNumber of handlers dispatched per request by Mixer
    mixer_dispatcher_destinations_per_variety_totalLastValueNumber of Mixer adapter destinations by template variety type
    mixer_dispatcher_instances_per_requestDistributionNumber of instances created per request by Mixer
    mixer_handler_closed_handlers_totalLastValueThe number of handlers that were closed during config transition.
    mixer_handler_daemons_totalLastValueThe current number of active daemon routines in a given adapter environment.
    mixer_handler_handler_build_failures_totalLastValueThe number of handlers that failed creation during config transition.
    mixer_handler_handler_close_failures_totalLastValueThe number of errors encountered while closing handlers during config transition.
    mixer_handler_new_handlers_totalLastValueThe number of handlers that were newly created during config transition.
    mixer_handler_reused_handlers_totalLastValueThe number of handlers that were re-used during config transition.
    mixer_handler_workers_totalLastValueThe current number of active worker routines in a given adapter environment.
    mixer_runtime_dispatch_duration_secondsDistributionDuration in seconds for adapter dispatches handled by Mixer.
    mixer_runtime_dispatches_totalCountTotal number of adapter dispatches handled by Mixer.
    pilot_conflict_inbound_listenerLastValueNumber of conflicting inbound listeners.
    pilot_conflict_outbound_listener_http_over_current_tcpLastValueNumber of conflicting wildcard http listeners with current wildcard tcp listener.
    pilot_conflict_outbound_listener_http_over_httpsLastValueNumber of conflicting HTTP listeners with well known HTTPS ports
    pilot_conflict_outbound_listener_tcp_over_current_httpLastValueNumber of conflicting wildcard tcp listeners with current wildcard http listener.
    pilot_conflict_outbound_listener_tcp_over_current_tcpLastValueNumber of conflicting tcp listeners with current tcp listener.
    pilot_destrule_subsetsLastValueDuplicate subsets across destination rules for same host
    pilot_duplicate_envoy_clustersLastValueDuplicate envoy clusters caused by service entries with same hostname
    pilot_eds_no_instancesLastValueNumber of clusters without instances.
    pilot_endpoint_not_readyLastValueEndpoint found in unready state.
    pilot_inbound_updatesSumTotal number of updates received by pilot.
    pilot_invalid_out_listenersLastValueNumber of invalid outbound listeners.
    pilot_jwks_resolver_network_fetch_fail_totalSumTotal number of failed network fetch by pilot jwks resolver
    pilot_jwks_resolver_network_fetch_success_totalSumTotal number of successfully network fetch by pilot jwks resolver
    pilot_k8s_cfg_eventsSumEvents from k8s config.
    pilot_k8s_endpoints_with_no_podsSumEndpoints that does not have any corresponding pods.
    pilot_k8s_object_errorsLastValueErrors converting k8s CRDs
    pilot_k8s_reg_eventsSumEvents from k8s registry.
    pilot_no_ipLastValuePods not found in the endpoint table, possibly invalid.
    pilot_proxy_convergence_timeDistributionDelay in seconds between config change and a proxy receiving all required configuration.
    pilot_proxy_queue_timeDistributionTime in seconds, a proxy is in the push queue before being dequeued.
    pilot_rds_expired_nonceSumTotal number of RDS messages with an expired nonce.
    pilot_servicesLastValueTotal services known to pilot.
    pilot_total_rejected_configsSumTotal number of configs that Pilot had to reject or ignore.
    pilot_total_xds_internal_errorsSumTotal number of internal XDS errors in pilot.
    pilot_total_xds_rejectsSumTotal number of XDS responses from pilot rejected by proxy.
    pilot_virt_servicesLastValueTotal virtual services known to pilot.
    pilot_vservice_dup_domainLastValueVirtual services with dup domains.
    pilot_xdsLastValueNumber of endpoints connected to this pilot using XDS.
    pilot_xds_cds_rejectLastValuePilot rejected CDS configs.
    pilot_xds_eds_all_locality_endpointsLastValueNetwork endpoints for each cluster(across all localities), as of last push. Zero endpoints is an error.
    pilot_xds_eds_instancesLastValueInstances for each cluster(grouped by locality), as of last push. Zero instances is an error.
    pilot_xds_eds_rejectLastValuePilot rejected EDS.
    pilot_xds_lds_rejectLastValuePilot rejected LDS.
    pilot_xds_push_context_errorsSumNumber of errors (timeouts) initiating push context.
    pilot_xds_push_timeDistributionTotal time in seconds Pilot takes to push lds, rds, cds and eds.
    pilot_xds_pushesSumPilot build and send errors for lds, rds, cds and eds.
    pilot_xds_rds_rejectLastValuePilot rejected RDS.
    pilot_xds_write_timeoutSumPilot XDS response write timeouts.
    sidecar_injection_failure_totalSumTotal number of failed Side car injection requests.
    sidecar_injection_requests_totalSumTotal number of Side car injection requests.
    sidecar_injection_skip_totalSumTotal number of skipped injection requests.
    sidecar_injection_success_totalSumTotal number of successful Side car injection requests.