Destinations are pointers to routable destinations for routes. Each destination should resolve to one and only one hostname. Destinations can refer to a variety of object types. The behavior of the route action will vary depending on the type of destination selected. Defaults to the kubernetes v1/Service. Currently supported destination types: - Service - VirtualDestination (route traffic to one of the VirtualDestination's backing services, based on the locality of the request) - ExternalService (route traffic to a static set of service endpoints external to the mesh)
select a subset of the destination's endpoints for routing based on their labels.
weight
uint32
Specify the proportion of traffic to be forwarded to this destination. Weights across all of the destinations must sum to 100. Weight is only relevant when used in the context of a route with multiple destinations.
DestinationReference.SubsetEntry
Field
Type
Label
Description
key
string
value
string
DestinationSelector
DestinationSelector is a selector for matching routable destinations for routes. DestinationSelectors can select a variety of object types. The behavior of the route action will vary depending on the type of destination selected. Defaults to the kubernetes v1/Service. Currently supported destination types: - v1 Service - networking.gloo.solo.io/v2 VirtualDestination (route traffic to a group of backing destinations) - networking.gloo.solo.io/v2 ExternalService (route traffic to a static set of service endpoints external to the mesh)
Select kubernetes service accounts as identities. When selecting a service account that will be created in the future for use in a AuthorizationPolicy, ONLY provide the name, namespace and cluster where the service account will exist in the selector. Providing labels and/or the workspace for a service account that does not exist in the selector will not result in that service account being added to the resulting AuthorizationPolicy.
Optional. A list of identities to match the request identity (“iss/sub” from the JWT). If omitted all request identity values will be accepted.
notRequestPrincipals
[]string
repeated
Optional. A list of identities to negative match the request identity.
MeshSelector
MeshSelector is a Selector built for selecting instances of Mesh control planes. A control plane is understood to have a single domain and provide a single root of trust for the data plane proxies it is managing. Each revision of Istiod maps
Only select objects with the matching name. If the field is omitted, Gloo Mesh will select matching objects with any name available in the parent object's workspace.
namespace
string
Only select objects in the matching namespace. If the field is omitted, Gloo Mesh will select matching objects across all namespaces available in the parent object's workspace.
cluster
string
Only select objects in the matching cluster. If the field is omitted, Gloo Mesh will select matching objects across all clusters available in the parent object's workspace.
workspace
string
Only select objects in the given workspace. If the field is omitted, Gloo Mesh will select matching objects across all workspaces available in the parent object's workspace.
ObjectSelector.LabelsEntry
Field
Type
Label
Description
key
string
value
string
RouteDestinationSelector
RouteDestinationSelector is a Selector specifically built for individual destinations on individual Routes inside of RouteTables.
select routes based on their labels. these labels can be used to match route tables or individual routes within route tables. if left empty, configuration will apply to all specified destinations on all routes in the workspace.
for the selected routes, select destinations on which to apply this policy
RouteSelector
RouteSelector is a Selector specifically built for individual Routes inside of RouteTables. This selector can be used to select individual routes or entire route tables using the same label selector.
select routes with forwardTo actions based on their destinations. this can be used to apply policy to routes regardless of their labels
WorkloadSelector
WorkloadSelector is a Selector specifically built for selecting individual workloads. Workloads must have injected (sidecars) or be standalone proxies (gateways) to be selected by Gloo Mesh policies. This selector can be used to select pods or injected external endpoints (vms).
