* sidecar health

Signed-off-by: Kuat Yessenov <kuat@google.com>

* typos

Signed-off-by: Kuat Yessenov <kuat@google.com>

* remove tracing of health checks

Signed-off-by: Kuat Yessenov <kuat@google.com>

* change to 15093

Signed-off-by: Kuat Yessenov <kuat@google.com>

* use new websocket option and remove deprecated one

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* backward compatibility

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* consistency

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* cleanup

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* dont append upgrade configs

it does not work, requires debugging and possibly implementation, will not be in time before the release

* dirty poc

* working poc

* comments + cleanup

* lint

* add simple e2e test to egress

* minor refactoring

* cleanups, lots of comments

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* more duplication for clarity

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* simplifying gateway opaque tcp logic

* final cleanups

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* nil pointer check

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* add op.

* fix duplicated test.

* add tests for conditional and unknown quota

* add conditional and unknown quota

istio#7084)

* Remove whitespace between host: and port

* Typo

* enable upgrade config only for 1.0 proxy

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* lint

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* Fix log, add debounce

* If env is 0, disable debounce

* Add missing config file

* Safer code, failsafe

* Update comments and remove unused metrics

* Lower verbosity

* Increase quiet interval - k8s throttling seems to kick in, 100 ms too little

* Verbose message triggered for tcp services

* Format and adjust timer for debounce, a second was too long.

* Fix backward compat to 0.8

Kubernetes >=v1.11.0 will create two PriorityClass, including
system-cluster-critical and system-node-critical, it is better
to configure this in order to make sure your Istio pods will
not be killed because of low prioroty class.

Refer to https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/#priorityclass
for more detail.

…figuration (istio#7234)

* update galley to self-register and reconcile the validatingwebhookconfiguration

* bin/fmt.sh

* comment exported functions

* fix bug

* fix spelling in error message

* fix spelling error and rbac rules

* add explicit deletion of webhook configuration

* refactor code and improve cleanup handling

* update tmp change

* fix lint and format errors; clean-up dead code

* improve logging and fix config reload bug

* improve tests

* remove unused var

* remove explicit deletion of webhook configuration.

* add more comments and rename some functions

…stio#7210)

…istio#7260)

* Fix istio-remote sidecar-injector-configmap rendered yaml parse error

* Fix istio chart sidecar-injector-configmap rendered yaml parse error

…#7120)

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* Do not allow short names in gateway hosts

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* allow *

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* lint

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

Merge release-1.0 into master

* Current changes to the stress test environment

* Remove old files

* Add keepalive

* Update golden

istio#6454)

- this aligns with current docs & preferred remote cluster config
  reference.