…tio#6818)

* proxy-status diff of what Pilot has not what it has sent to Envoy

* fix copyright year

* fix bug so that destination.service.** attributes are collected (istio#6801)

* remove unnecessary generated attributes finding. (istio#6785)

* modify docker template files for proxyv2 (istio#6790)

* Long-running testing improvements (istio#6800)

* Add values for config map settings, including access log.
More docs.

* Updates and improvements for the stress-testing configs.

* Add values for config map settings, including access log. (istio#6797)

* Add values for config map settings, including access log.
More docs.

* Updates and improvements for the stress-testing configs.

* Address review comments

* Merged wrong files

* Add the setup helm file - this change now depend on the previous PR.

* Sync with remote, remove accidentally added files.

* Another accidental file

* SNI routing from sidecar to gateway with virtual services (istio#6402)

* quick sni matching 1st pass with no refactoring of existing code

* use shriram's api sha

* quick pass at using tls block

* add some validation

* copyright

* fix lint + remove deadcode

* rename protocol tcp_tls -> tls

* update back to istio/api master

* remove accidentally added test file

* add tls block to gateway logic

* add todos

* basic sni wildcard implementation

* add tcp, fix problems with rbac, matching

* better tcp + tls validation

* address code review comments

* remove out of date comment

* update comments

* fix compile error

* use tcp proxy in tcp routing

* add tcp routing e2e test

* add forgotten vs config file + update description of test

* Comments, bug fixes

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* cleanup gateway tcp test

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* moving networking test yamls

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* tcp/tls tests

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* yaml fixes

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* fix file switcheroo

* port matches

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* fix authN plugin overwriting TLS context

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* more tests - route via egress gateway

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* yaml fixes

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* initialize prom variables

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* split tests

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* final test fix hopefully

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* revert gateway tweaks

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

Remove noisy log, makes pilot hard to debug.

* 503s: create DestinationRules before VirtualServices

* Remove redundant route-rule-all-v1-mtls.yaml

* Update the tests

* Fix the bookinfo with auth test

* Updates to accommodate move of api/config/mcp to api/mcp.

* Update dependencies.

* Updated dep and reran due to linter problem. Reverted license file
updates.

Signed-off-by: Kuat Yessenov <kuat@google.com>

With mixer disabled, continuous 503s occur.

* Add proxy version info to envoy metadata

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* use proxy tag as version

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* fix tests

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* update goldens

* detect proxy version in pilot

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* added istioProxyVersion to helm values.yaml.  updated tests

* remove unused env var logic from istioctl

* undo env var removal

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* encode version in Docker image

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* tweaks

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* add config validation metrics

* s/gauge/counter

* add consistenthash support for httpheader

* wires up source ip for hash policy

* add support for port level traffic policies

* only support port number for traffic policies

port name is deprecated. traffic policies at the port level should only
be inspected for port number when updating a route to use a hash policy.

* bump istio/api

Co-authored-by: Zachary Gershman <zgershman@pivotal.io>

* stop ignoring port level settings on the subset

* subset port level settings override top level

* do not return hash policy when not requested

Co-authored-by: Zachary Gershman <zgershman@pivotal.io>

* Mark gateway ports as H2 in k8s

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* set alpn protocol match

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* lint

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* undo code changes

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* remove conversion tool

* somewhat questionable pruning of tests without replacing them

* Added support for istioctl kube-inject into pod

* Pod doesn't have an app name label therefore istio-proxy is injected

* And a hashed version value got updated too

* Renamed test and adapt to current branch

…stio#6911)

* add tests for headless services and stateful sets

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* fix fqdn

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* fix pod names

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* separate headless pod

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* typo

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* fix 0 port

* gateway headless test

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* Revert "gateway headless test"

This reverts commit 98f1e49.

`dep ensure -update istio.io/api`

* Add mesh expansion gateway

* Match the old, unused value used by tests

* Fix pilot port number and add ilb gateway

* Move the ports to values.yaml as suggested, add ILB

* The gateway files were missing, fix typo

* Typos, based on review

* Fix upgrade, use Shriram's env

* Add proxy sha and istio version to docker meta

* Fix the build args, and add a tproxy variant

* tproxy failing in route, may be due to restart

* More small fixes to capture. Tproxy seems to work even if m socket is missing

* Bad cut&paste

* Add missing env based on review

istio#6940)

* Move mixer rules under policy

* Fix lint

* Fix lint

* Rename route-rule to virtual-service

* Use separate rules directories

* Fix upgrade, use Shriram's env

* Format

* Follow up on upgrade fix

…io#6938)

* Include dump_kubernetes.sh in release archive bin dir

* Move dump_kubernetes.sh to tools/

* Update `make dumpsys` (in use by CircleCI)