search

intel / istio

Apache License 2.0
12 stars 14 forks source link

Handle QAT PrivateKeyProvider configuration (#42203) #25

Closed ipuustin closed 1 year ago

ipuustin commented 1 year ago

When the PrivateKeyProvider configuration information is provided through Istio operator yaml file, parse and pass it to gateway or sidecars. Envoy will act based on the information provided by the configuration.

To set the mesh wide defaults, configure the defaultConfig section of meshConfig. For example:

meshConfig: defaultConfig: privateKeyProvider: qat: pollDelay: 0.01s

This can also be configured on a per-workload basis by configuring the proxy.istio.io/config annotation on the pod. For example:

annotations: proxy.istio.io/config: | privateKeyProvider: qat: pollDelay: 0.01s

Note: Users should request QAT resources through k8s:resources.

rveerama1 commented 1 year ago

@ipuustin I think you should update go.mod for istio/api https://github.com/intel/istio-api/commit/f4400773563611987cd416d4ac861d2334449590