程序包 istio.networking.v1alpha3

接口 ServiceEntryOuterClass.ServiceEntryOrBuilder

所有超级接口:
com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder
所有已知实现类:
ServiceEntryOuterClass.ServiceEntry, ServiceEntryOuterClass.ServiceEntry.Builder
封闭类:
ServiceEntryOuterClass
public static interface ServiceEntryOuterClass.ServiceEntryOrBuilder extends com.google.protobuf.MessageOrBuilder

  • 方法详细资料

    • getHostsList

      List<String> getHostsList()
       The hosts associated with the ServiceEntry. Could be a DNS
 name with wildcard prefix.

 1. The hosts field is used to select matching hosts in VirtualServices and DestinationRules.
 2. For HTTP traffic the HTTP Host/Authority header will be matched against the hosts field.
 3. For HTTPs or TLS traffic containing Server Name Indication (SNI), the SNI value
 will be matched against the hosts field.

 **NOTE 1:** When resolution is set to type DNS and no endpoints
 are specified, the host field will be used as the DNS name of the
 endpoint to route traffic to.

 **NOTE 2:** If the hostname matches with the name of a service
 from another service registry such as Kubernetes that also
 supplies its own set of endpoints, the ServiceEntry will be
 treated as a decorator of the existing Kubernetes
 service. Properties in the service entry will be added to the
 Kubernetes service if applicable. Currently, the only the
 following additional properties will be considered by `istiod`:

 1. subjectAltNames: In addition to verifying the SANs of the
    service accounts associated with the pods of the service, the
    SANs specified here will also be verified.
      repeated string hosts = 1 [(.google.api.field_behavior) = REQUIRED];
      返回:
      A list containing the hosts.

    • getHostsCount

      int getHostsCount()
       The hosts associated with the ServiceEntry. Could be a DNS
 name with wildcard prefix.

 1. The hosts field is used to select matching hosts in VirtualServices and DestinationRules.
 2. For HTTP traffic the HTTP Host/Authority header will be matched against the hosts field.
 3. For HTTPs or TLS traffic containing Server Name Indication (SNI), the SNI value
 will be matched against the hosts field.

 **NOTE 1:** When resolution is set to type DNS and no endpoints
 are specified, the host field will be used as the DNS name of the
 endpoint to route traffic to.

 **NOTE 2:** If the hostname matches with the name of a service
 from another service registry such as Kubernetes that also
 supplies its own set of endpoints, the ServiceEntry will be
 treated as a decorator of the existing Kubernetes
 service. Properties in the service entry will be added to the
 Kubernetes service if applicable. Currently, the only the
 following additional properties will be considered by `istiod`:

 1. subjectAltNames: In addition to verifying the SANs of the
    service accounts associated with the pods of the service, the
    SANs specified here will also be verified.
      repeated string hosts = 1 [(.google.api.field_behavior) = REQUIRED];
      返回:
      The count of hosts.

    • getHosts

      String getHosts(int index)
       The hosts associated with the ServiceEntry. Could be a DNS
 name with wildcard prefix.

 1. The hosts field is used to select matching hosts in VirtualServices and DestinationRules.
 2. For HTTP traffic the HTTP Host/Authority header will be matched against the hosts field.
 3. For HTTPs or TLS traffic containing Server Name Indication (SNI), the SNI value
 will be matched against the hosts field.

 **NOTE 1:** When resolution is set to type DNS and no endpoints
 are specified, the host field will be used as the DNS name of the
 endpoint to route traffic to.

 **NOTE 2:** If the hostname matches with the name of a service
 from another service registry such as Kubernetes that also
 supplies its own set of endpoints, the ServiceEntry will be
 treated as a decorator of the existing Kubernetes
 service. Properties in the service entry will be added to the
 Kubernetes service if applicable. Currently, the only the
 following additional properties will be considered by `istiod`:

 1. subjectAltNames: In addition to verifying the SANs of the
    service accounts associated with the pods of the service, the
    SANs specified here will also be verified.
      repeated string hosts = 1 [(.google.api.field_behavior) = REQUIRED];
      参数:
      index - The index of the element to return.
      返回:
      The hosts at the given index.

    • getHostsBytes

      com.google.protobuf.ByteString getHostsBytes(int index)
       The hosts associated with the ServiceEntry. Could be a DNS
 name with wildcard prefix.

 1. The hosts field is used to select matching hosts in VirtualServices and DestinationRules.
 2. For HTTP traffic the HTTP Host/Authority header will be matched against the hosts field.
 3. For HTTPs or TLS traffic containing Server Name Indication (SNI), the SNI value
 will be matched against the hosts field.

 **NOTE 1:** When resolution is set to type DNS and no endpoints
 are specified, the host field will be used as the DNS name of the
 endpoint to route traffic to.

 **NOTE 2:** If the hostname matches with the name of a service
 from another service registry such as Kubernetes that also
 supplies its own set of endpoints, the ServiceEntry will be
 treated as a decorator of the existing Kubernetes
 service. Properties in the service entry will be added to the
 Kubernetes service if applicable. Currently, the only the
 following additional properties will be considered by `istiod`:

 1. subjectAltNames: In addition to verifying the SANs of the
    service accounts associated with the pods of the service, the
    SANs specified here will also be verified.
      repeated string hosts = 1 [(.google.api.field_behavior) = REQUIRED];
      参数:
      index - The index of the value to return.
      返回:
      The bytes of the hosts at the given index.

    • getAddressesList

      List<String> getAddressesList()
       The virtual IP addresses associated with the service. Could be CIDR
 prefix. For HTTP traffic, generated route configurations will include http route
 domains for both the `addresses` and `hosts` field values and the destination will
 be identified based on the HTTP Host/Authority header.
 If one or more IP addresses are specified,
 the incoming traffic will be identified as belonging to this service
 if the destination IP matches the IP/CIDRs specified in the addresses
 field. If the Addresses field is empty, traffic will be identified
 solely based on the destination port. In such scenarios, the port on
 which the service is being accessed must not be shared by any other
 service in the mesh. In other words, the sidecar will behave as a
 simple TCP proxy, forwarding incoming traffic on a specified port to
 the specified destination endpoint IP/host. Unix domain socket
 addresses are not supported in this field.
      repeated string addresses = 2;
      返回:
      A list containing the addresses.

    • getAddressesCount

      int getAddressesCount()
       The virtual IP addresses associated with the service. Could be CIDR
 prefix. For HTTP traffic, generated route configurations will include http route
 domains for both the `addresses` and `hosts` field values and the destination will
 be identified based on the HTTP Host/Authority header.
 If one or more IP addresses are specified,
 the incoming traffic will be identified as belonging to this service
 if the destination IP matches the IP/CIDRs specified in the addresses
 field. If the Addresses field is empty, traffic will be identified
 solely based on the destination port. In such scenarios, the port on
 which the service is being accessed must not be shared by any other
 service in the mesh. In other words, the sidecar will behave as a
 simple TCP proxy, forwarding incoming traffic on a specified port to
 the specified destination endpoint IP/host. Unix domain socket
 addresses are not supported in this field.
      repeated string addresses = 2;
      返回:
      The count of addresses.

    • getAddresses

      String getAddresses(int index)
       The virtual IP addresses associated with the service. Could be CIDR
 prefix. For HTTP traffic, generated route configurations will include http route
 domains for both the `addresses` and `hosts` field values and the destination will
 be identified based on the HTTP Host/Authority header.
 If one or more IP addresses are specified,
 the incoming traffic will be identified as belonging to this service
 if the destination IP matches the IP/CIDRs specified in the addresses
 field. If the Addresses field is empty, traffic will be identified
 solely based on the destination port. In such scenarios, the port on
 which the service is being accessed must not be shared by any other
 service in the mesh. In other words, the sidecar will behave as a
 simple TCP proxy, forwarding incoming traffic on a specified port to
 the specified destination endpoint IP/host. Unix domain socket
 addresses are not supported in this field.
      repeated string addresses = 2;
      参数:
      index - The index of the element to return.
      返回:
      The addresses at the given index.

    • getAddressesBytes

      com.google.protobuf.ByteString getAddressesBytes(int index)
       The virtual IP addresses associated with the service. Could be CIDR
 prefix. For HTTP traffic, generated route configurations will include http route
 domains for both the `addresses` and `hosts` field values and the destination will
 be identified based on the HTTP Host/Authority header.
 If one or more IP addresses are specified,
 the incoming traffic will be identified as belonging to this service
 if the destination IP matches the IP/CIDRs specified in the addresses
 field. If the Addresses field is empty, traffic will be identified
 solely based on the destination port. In such scenarios, the port on
 which the service is being accessed must not be shared by any other
 service in the mesh. In other words, the sidecar will behave as a
 simple TCP proxy, forwarding incoming traffic on a specified port to
 the specified destination endpoint IP/host. Unix domain socket
 addresses are not supported in this field.
      repeated string addresses = 2;
      参数:
      index - The index of the value to return.
      返回:
      The bytes of the addresses at the given index.

    • getPortsList

      List<GatewayOuterClass.Port> getPortsList()
       The ports associated with the external service. If the
 Endpoints are Unix domain socket addresses, there must be exactly one
 port.
      repeated .istio.networking.v1alpha3.Port ports = 3 [(.google.api.field_behavior) = REQUIRED];

    • getPorts

      GatewayOuterClass.Port getPorts(int index)
       The ports associated with the external service. If the
 Endpoints are Unix domain socket addresses, there must be exactly one
 port.
      repeated .istio.networking.v1alpha3.Port ports = 3 [(.google.api.field_behavior) = REQUIRED];

    • getPortsCount

      int getPortsCount()
       The ports associated with the external service. If the
 Endpoints are Unix domain socket addresses, there must be exactly one
 port.
      repeated .istio.networking.v1alpha3.Port ports = 3 [(.google.api.field_behavior) = REQUIRED];

    • getPortsOrBuilderList

      List<? extends GatewayOuterClass.PortOrBuilder> getPortsOrBuilderList()
       The ports associated with the external service. If the
 Endpoints are Unix domain socket addresses, there must be exactly one
 port.
      repeated .istio.networking.v1alpha3.Port ports = 3 [(.google.api.field_behavior) = REQUIRED];

    • getPortsOrBuilder

      GatewayOuterClass.PortOrBuilder getPortsOrBuilder(int index)
       The ports associated with the external service. If the
 Endpoints are Unix domain socket addresses, there must be exactly one
 port.
      repeated .istio.networking.v1alpha3.Port ports = 3 [(.google.api.field_behavior) = REQUIRED];

    • getLocationValue

      int getLocationValue()
       Specify whether the service should be considered external to the mesh
 or part of the mesh.
      .istio.networking.v1alpha3.ServiceEntry.Location location = 4;
      返回:
      The enum numeric value on the wire for location.

    • getLocation

      ServiceEntryOuterClass.ServiceEntry.Location getLocation()
       Specify whether the service should be considered external to the mesh
 or part of the mesh.
      .istio.networking.v1alpha3.ServiceEntry.Location location = 4;
      返回:
      The location.

    • getResolutionValue

      int getResolutionValue()
       Service discovery mode for the hosts. Care must be taken
 when setting the resolution mode to NONE for a TCP port without
 accompanying IP addresses. In such cases, traffic to any IP on
 said port will be allowed (i.e. `0.0.0.0:<port>`).
      .istio.networking.v1alpha3.ServiceEntry.Resolution resolution = 5 [(.google.api.field_behavior) = REQUIRED];
      返回:
      The enum numeric value on the wire for resolution.

    • getResolution

      ServiceEntryOuterClass.ServiceEntry.Resolution getResolution()
       Service discovery mode for the hosts. Care must be taken
 when setting the resolution mode to NONE for a TCP port without
 accompanying IP addresses. In such cases, traffic to any IP on
 said port will be allowed (i.e. `0.0.0.0:<port>`).
      .istio.networking.v1alpha3.ServiceEntry.Resolution resolution = 5 [(.google.api.field_behavior) = REQUIRED];
      返回:
      The resolution.

    • getEndpointsList

      List<WorkloadEntryOuterClass.WorkloadEntry> getEndpointsList()
       One or more endpoints associated with the service. Only one of
 `endpoints` or `workloadSelector` can be specified.
      repeated .istio.networking.v1alpha3.WorkloadEntry endpoints = 6;

    • getEndpoints

      WorkloadEntryOuterClass.WorkloadEntry getEndpoints(int index)
       One or more endpoints associated with the service. Only one of
 `endpoints` or `workloadSelector` can be specified.
      repeated .istio.networking.v1alpha3.WorkloadEntry endpoints = 6;

    • getEndpointsCount

      int getEndpointsCount()
       One or more endpoints associated with the service. Only one of
 `endpoints` or `workloadSelector` can be specified.
      repeated .istio.networking.v1alpha3.WorkloadEntry endpoints = 6;

    • getEndpointsOrBuilderList

      List<? extends WorkloadEntryOuterClass.WorkloadEntryOrBuilder> getEndpointsOrBuilderList()
       One or more endpoints associated with the service. Only one of
 `endpoints` or `workloadSelector` can be specified.
      repeated .istio.networking.v1alpha3.WorkloadEntry endpoints = 6;

    • getEndpointsOrBuilder

      WorkloadEntryOuterClass.WorkloadEntryOrBuilder getEndpointsOrBuilder(int index)
       One or more endpoints associated with the service. Only one of
 `endpoints` or `workloadSelector` can be specified.
      repeated .istio.networking.v1alpha3.WorkloadEntry endpoints = 6;

    • hasWorkloadSelector

      boolean hasWorkloadSelector()
       Applicable only for MESH_INTERNAL services. Only one of
 `endpoints` or `workloadSelector` can be specified. Selects one
 or more Kubernetes pods or VM workloads (specified using
 `WorkloadEntry`) based on their labels. The `WorkloadEntry` object
 representing the VMs should be defined in the same namespace as
 the ServiceEntry.
      .istio.networking.v1alpha3.WorkloadSelector workload_selector = 9;
      返回:
      Whether the workloadSelector field is set.

    • getWorkloadSelector

      SidecarOuterClass.WorkloadSelector getWorkloadSelector()
       Applicable only for MESH_INTERNAL services. Only one of
 `endpoints` or `workloadSelector` can be specified. Selects one
 or more Kubernetes pods or VM workloads (specified using
 `WorkloadEntry`) based on their labels. The `WorkloadEntry` object
 representing the VMs should be defined in the same namespace as
 the ServiceEntry.
      .istio.networking.v1alpha3.WorkloadSelector workload_selector = 9;
      返回:
      The workloadSelector.

    • getWorkloadSelectorOrBuilder

      SidecarOuterClass.WorkloadSelectorOrBuilder getWorkloadSelectorOrBuilder()
       Applicable only for MESH_INTERNAL services. Only one of
 `endpoints` or `workloadSelector` can be specified. Selects one
 or more Kubernetes pods or VM workloads (specified using
 `WorkloadEntry`) based on their labels. The `WorkloadEntry` object
 representing the VMs should be defined in the same namespace as
 the ServiceEntry.
      .istio.networking.v1alpha3.WorkloadSelector workload_selector = 9;

    • getExportToList

      List<String> getExportToList()
       A list of namespaces to which this service is exported. Exporting a service
 allows it to be used by sidecars, gateways and virtual services defined in
 other namespaces. This feature provides a mechanism for service owners
 and mesh administrators to control the visibility of services across
 namespace boundaries.

 If no namespaces are specified then the service is exported to all
 namespaces by default.

 The value "." is reserved and defines an export to the same namespace that
 the service is declared in. Similarly the value "*" is reserved and
 defines an export to all namespaces.

 For a Kubernetes Service, the equivalent effect can be achieved by setting
 the annotation "networking.istio.io/exportTo" to a comma-separated list
 of namespace names.

 NOTE: in the current release, the `exportTo` value is restricted to
 "." or "*" (i.e., the current namespace or all namespaces).
      repeated string export_to = 7;
      返回:
      A list containing the exportTo.

    • getExportToCount

      int getExportToCount()
       A list of namespaces to which this service is exported. Exporting a service
 allows it to be used by sidecars, gateways and virtual services defined in
 other namespaces. This feature provides a mechanism for service owners
 and mesh administrators to control the visibility of services across
 namespace boundaries.

 If no namespaces are specified then the service is exported to all
 namespaces by default.

 The value "." is reserved and defines an export to the same namespace that
 the service is declared in. Similarly the value "*" is reserved and
 defines an export to all namespaces.

 For a Kubernetes Service, the equivalent effect can be achieved by setting
 the annotation "networking.istio.io/exportTo" to a comma-separated list
 of namespace names.

 NOTE: in the current release, the `exportTo` value is restricted to
 "." or "*" (i.e., the current namespace or all namespaces).
      repeated string export_to = 7;
      返回:
      The count of exportTo.

    • getExportTo

      String getExportTo(int index)
       A list of namespaces to which this service is exported. Exporting a service
 allows it to be used by sidecars, gateways and virtual services defined in
 other namespaces. This feature provides a mechanism for service owners
 and mesh administrators to control the visibility of services across
 namespace boundaries.

 If no namespaces are specified then the service is exported to all
 namespaces by default.

 The value "." is reserved and defines an export to the same namespace that
 the service is declared in. Similarly the value "*" is reserved and
 defines an export to all namespaces.

 For a Kubernetes Service, the equivalent effect can be achieved by setting
 the annotation "networking.istio.io/exportTo" to a comma-separated list
 of namespace names.

 NOTE: in the current release, the `exportTo` value is restricted to
 "." or "*" (i.e., the current namespace or all namespaces).
      repeated string export_to = 7;
      参数:
      index - The index of the element to return.
      返回:
      The exportTo at the given index.

    • getExportToBytes

      com.google.protobuf.ByteString getExportToBytes(int index)
       A list of namespaces to which this service is exported. Exporting a service
 allows it to be used by sidecars, gateways and virtual services defined in
 other namespaces. This feature provides a mechanism for service owners
 and mesh administrators to control the visibility of services across
 namespace boundaries.

 If no namespaces are specified then the service is exported to all
 namespaces by default.

 The value "." is reserved and defines an export to the same namespace that
 the service is declared in. Similarly the value "*" is reserved and
 defines an export to all namespaces.

 For a Kubernetes Service, the equivalent effect can be achieved by setting
 the annotation "networking.istio.io/exportTo" to a comma-separated list
 of namespace names.

 NOTE: in the current release, the `exportTo` value is restricted to
 "." or "*" (i.e., the current namespace or all namespaces).
      repeated string export_to = 7;
      参数:
      index - The index of the value to return.
      返回:
      The bytes of the exportTo at the given index.

    • getSubjectAltNamesList

      List<String> getSubjectAltNamesList()
       If specified, the proxy will verify that the server certificate's
 subject alternate name matches one of the specified values.

 NOTE: When using the workloadEntry with workloadSelectors, the
 service account specified in the workloadEntry will also be used
 to derive the additional subject alternate names that should be
 verified.
      repeated string subject_alt_names = 8;
      返回:
      A list containing the subjectAltNames.

    • getSubjectAltNamesCount

      int getSubjectAltNamesCount()
       If specified, the proxy will verify that the server certificate's
 subject alternate name matches one of the specified values.

 NOTE: When using the workloadEntry with workloadSelectors, the
 service account specified in the workloadEntry will also be used
 to derive the additional subject alternate names that should be
 verified.
      repeated string subject_alt_names = 8;
      返回:
      The count of subjectAltNames.

    • getSubjectAltNames

      String getSubjectAltNames(int index)
       If specified, the proxy will verify that the server certificate's
 subject alternate name matches one of the specified values.

 NOTE: When using the workloadEntry with workloadSelectors, the
 service account specified in the workloadEntry will also be used
 to derive the additional subject alternate names that should be
 verified.
      repeated string subject_alt_names = 8;
      参数:
      index - The index of the element to return.
      返回:
      The subjectAltNames at the given index.

    • getSubjectAltNamesBytes

      com.google.protobuf.ByteString getSubjectAltNamesBytes(int index)
       If specified, the proxy will verify that the server certificate's
 subject alternate name matches one of the specified values.

 NOTE: When using the workloadEntry with workloadSelectors, the
 service account specified in the workloadEntry will also be used
 to derive the additional subject alternate names that should be
 verified.
      repeated string subject_alt_names = 8;
      参数:
      index - The index of the value to return.
      返回:
      The bytes of the subjectAltNames at the given index.