2 top-level fields · last changed in Istio 1.25.0
Request authentication configuration for workloads. See more details at: https://istio.io/docs/reference/config/security/request_authentication.html
Define the list of JWTs that can be validated at the selected workloads' proxy.
The list of JWT [audiences](https://tools.ietf.org/html/rfc7519#section-4.1.3) that are allowed to access.
If set to true, the original token will be kept for the upstream request.
List of cookie names from which JWT is expected.
List of header locations from which JWT is expected.
The HTTP header name.
The prefix that should be stripped before decoding the token.
List of query parameters from which JWT is expected.
Identifies the issuer that issued the JWT.
JSON Web Key Set of public keys to validate signature of the JWT.
URL of the provider's public key set to validate signature of the JWT.
URL of the provider's public key set to validate signature of the JWT.
This field specifies a list of operations to copy the claim to HTTP headers on a successfully verified token.
The name of the claim to be copied from.
The name of the header to be created.
This field specifies the header name to output a successfully verified JWT payload to the backend.
The maximum amount of time that the resolver, determined by the PILOT_JWT_ENABLE_REMOTE_JWKS environment variable, will spend waiting for the JWKS to be fetched.
Optional.
One or more labels that indicate a specific set of pods/VMs on which a policy should be applied.
group is the group of the target resource.
kind is kind of the target resource.
name is the name of the target resource.
namespace is the namespace of the referent.
Optional.
group is the group of the target resource.
kind is kind of the target resource.
name is the name of the target resource.
namespace is the namespace of the referent.
Current service state of the resource.
Last time we probed the condition.
Last time the condition transitioned from one status to another.
Human-readable message indicating details about last transition.
Resource Generation to which the Condition refers.
Unique, one-word, CamelCase reason for the condition's last transition.
Status is the status of the condition.
Type is the type of the condition.
Includes any errors or warnings detected by Istio's analyzers.
A url pointing to the Istio documentation for this specific error type.
Represents how severe a message is. Valid Options: UNKNOWN, ERROR, WARNING, INFO
A 7 character code matching `^IST[0-9]{4}$` intended to uniquely identify the message type.
A human-readable name for the message type.
Source: crd-all.gen.yaml
Changes to RequestAuthentication (security.istio.io/v1) in each Istio version, compared to the version before it.
1 property has been added
1 property has changed the description
Released · View RequestAuthentication in 1.25.0
3 properties have been added
Released · View RequestAuthentication in 1.24.0
6 properties are now required
Released · View RequestAuthentication in 1.23.0
2 properties have been added
1 property has changed the description
Released · View RequestAuthentication in 1.22.0
1 property has been added
Released · View RequestAuthentication in 1.21.0
1 property has changed the description
Released · View RequestAuthentication in 1.20.2
4 properties have changed the description
Released · View RequestAuthentication in 1.20.1
1 property has been added
2 properties are now required
6 properties have changed the description
Released · View RequestAuthentication in 1.20.0
RequestAuthentication was first seen on this version of Istio
Released · View RequestAuthentication in 1.17.0
No examples of RequestAuthentication yet. Contribute one on GitHub.
kubespec.dev