• node_agent
    • node_agent version
    • Exported metrics

    node_agent

    Istio security per-node agent.

    1. node_agent [flags]
    FlagsDescription
    —ca-address <string>Istio CA address (default istio-citadel:8060)
    —cert-chain <string>Node Agent identity cert file (default /etc/certs/cert-chain.pem)
    —env <string>Node Environment : unspecified | onprem | gcp | aws (default unspecified)
    —experimental-dual-useEnable dual-use mode. Generates certificates with a CommonName identical to the SAN.
    —key <string>Node Agent private key file (default /etc/certs/key.pem)
    —key-size <int>Size of generated private key (default 2048)
    —log_as_jsonWhether to format output as JSON or in plain console-friendly format
    —log_caller <string>Comma-separated list of scopes for which to include called information, scopes can be any of [default] (default )</td></tr><tr><td><code>--log_output_level &lt;string&gt;</code></td><td>The minimum logging level of messages to output, can be one of [debug, info, warn, error, fatal, none] (default `default:info`)</td></tr><tr><td><code>--log_rotate &lt;string&gt;</code></td><td>The path for the optional rotating log file (default)
    —log_rotate_max_age <int>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default 30)
    —log_rotate_max_backups <int>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default 1000)
    —log_rotate_max_size <int>The maximum size in megabytes of a log file beyond which the file is rotated (default 104857600)
    —log_stacktrace_level <string>The minimum logging level at which stack traces are captured, can be one of [debug, info, warn, error, fatal, none] (default default:none)
    —log_target <stringArray>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default [stdout])
    —org <string>Organization for the cert (default `)</td></tr><tr><td><code>--platform &lt;string&gt;</code></td><td>The platform istio runs on: vm | k8s (defaultvm)</td></tr><tr><td><code>--root-cert &lt;string&gt;</code></td><td>Root Certificate file (default/etc/certs/root-cert.pem)</td></tr><tr><td><code>--workload-cert-ttl &lt;duration&gt;</code></td><td>The requested TTL for the workload (default2160h0m0s`)

    node_agent version

    Prints out build version information

    1. node_agent version [flags]
    FlagsShorthandDescription
    —log_as_jsonWhether to format output as JSON or in plain console-friendly format
    —log_caller <string>Comma-separated list of scopes for which to include called information, scopes can be any of [default] (default )</td></tr><tr><td><code>--log_output_level &lt;string&gt;</code></td><td></td><td>The minimum logging level of messages to output, can be one of [debug, info, warn, error, fatal, none] (default `default:info`)</td></tr><tr><td><code>--log_rotate &lt;string&gt;</code></td><td></td><td>The path for the optional rotating log file (default)
    —log_rotate_max_age <int>The maximum age in days of a log file beyond which the file is rotated (0 indicates no limit) (default 30)
    —log_rotate_max_backups <int>The maximum number of log file backups to keep before older files are deleted (0 indicates no limit) (default 1000)
    —log_rotate_max_size <int>The maximum size in megabytes of a log file beyond which the file is rotated (default 104857600)
    —log_stacktrace_level <string>The minimum logging level at which stack traces are captured, can be one of [debug, info, warn, error, fatal, none] (default default:none)
    —log_target <stringArray>The set of paths where to output the log. This can be any path as well as the special values stdout and stderr (default [stdout])
    —output <string>-oOne of 'yaml' or 'json'. (default ``)
    —short-sUse —short=false to generate full version information

    Exported metrics

    Metric NameTypeDescription
    istio_buildLastValueIstio component build info