ProxyConfig

NOTE: fields in ProxyConfig are not dynamically configured - changes will require restart of workloads to take effect.

For any namespace, including the root configuration namespace, it is only valid to have a single workload selector-less ProxyConfig resource.

For resources with a workload selector, it is only valid to have one resource selecting any given workload.

For mesh level configuration, put the resource in the root configuration namespace for your Istio installation without a workload selector:

For workload level configuration, set the selector field on the ProxyConfig resource:

If a ProxyConfig CR is defined that matches a workload it will merge with its proxy.istio.io/config annotation if present, with the CR taking precedence over the annotation for overlapping fields. Similarly, if a mesh wide ProxyConfig CR is defined and is set, the two resources will be merged with the CR taking precedence for overlapping fields.

ProxyConfig exposes proxy level configuration options.

ProxyImage

The following values are used to construct proxy image url. format: ${hub}/${image_name}/${tag}-${image_type}, example: docker.io/istio/proxyv2:1.11.1 or docker.io/istio/proxyv2:1.11.1-distroless. This information was previously part of the Values API.