From eb41b885cd851284f9f66a65a7d96967dab36ee4 Mon Sep 17 00:00:00 2001 From: Rama Chavali Date: Fri, 26 Dec 2025 10:22:47 +0530 Subject: [PATCH] add priority to workload entry Signed-off-by: Rama Chavali --- kubernetes/customresourcedefinitions.gen.yaml | 45 +++++++++++++++++++ networking/v1alpha3/workload_entry.pb.go | 21 +++++++-- networking/v1alpha3/workload_entry.pb.html | 12 +++++ networking/v1alpha3/workload_entry.proto | 6 +++ 4 files changed, 80 insertions(+), 4 deletions(-) diff --git a/kubernetes/customresourcedefinitions.gen.yaml b/kubernetes/customresourcedefinitions.gen.yaml index 9349214daa..be62aab2ef 100644 --- a/kubernetes/customresourcedefinitions.gen.yaml +++ b/kubernetes/customresourcedefinitions.gen.yaml @@ -7951,6 +7951,11 @@ spec: x-kubernetes-validations: - message: port name must be valid rule: self.all(key, size(key) < 63 && key.matches("^[a-zA-Z0-9](?:[-a-zA-Z0-9]*[a-zA-Z0-9])?$")) + priority: + description: The priority for this Endpoint. + maximum: 4294967295 + minimum: 0 + type: integer serviceAccount: description: The service account associated with the workload if a sidecar is present in the workload. @@ -8250,6 +8255,11 @@ spec: x-kubernetes-validations: - message: port name must be valid rule: self.all(key, size(key) < 63 && key.matches("^[a-zA-Z0-9](?:[-a-zA-Z0-9]*[a-zA-Z0-9])?$")) + priority: + description: The priority for this Endpoint. + maximum: 4294967295 + minimum: 0 + type: integer serviceAccount: description: The service account associated with the workload if a sidecar is present in the workload. @@ -8549,6 +8559,11 @@ spec: x-kubernetes-validations: - message: port name must be valid rule: self.all(key, size(key) < 63 && key.matches("^[a-zA-Z0-9](?:[-a-zA-Z0-9]*[a-zA-Z0-9])?$")) + priority: + description: The priority for this Endpoint. + maximum: 4294967295 + minimum: 0 + type: integer serviceAccount: description: The service account associated with the workload if a sidecar is present in the workload. @@ -13793,6 +13808,11 @@ spec: x-kubernetes-validations: - message: port name must be valid rule: self.all(key, size(key) < 63 && key.matches("^[a-zA-Z0-9](?:[-a-zA-Z0-9]*[a-zA-Z0-9])?$")) + priority: + description: The priority for this Endpoint. + maximum: 4294967295 + minimum: 0 + type: integer serviceAccount: description: The service account associated with the workload if a sidecar is present in the workload. @@ -13953,6 +13973,11 @@ spec: x-kubernetes-validations: - message: port name must be valid rule: self.all(key, size(key) < 63 && key.matches("^[a-zA-Z0-9](?:[-a-zA-Z0-9]*[a-zA-Z0-9])?$")) + priority: + description: The priority for this Endpoint. + maximum: 4294967295 + minimum: 0 + type: integer serviceAccount: description: The service account associated with the workload if a sidecar is present in the workload. @@ -14113,6 +14138,11 @@ spec: x-kubernetes-validations: - message: port name must be valid rule: self.all(key, size(key) < 63 && key.matches("^[a-zA-Z0-9](?:[-a-zA-Z0-9]*[a-zA-Z0-9])?$")) + priority: + description: The priority for this Endpoint. + maximum: 4294967295 + minimum: 0 + type: integer serviceAccount: description: The service account associated with the workload if a sidecar is present in the workload. @@ -14446,6 +14476,11 @@ spec: x-kubernetes-validations: - message: port name must be valid rule: self.all(key, size(key) < 63 && key.matches("^[a-zA-Z0-9](?:[-a-zA-Z0-9]*[a-zA-Z0-9])?$")) + priority: + description: The priority for this Endpoint. + maximum: 4294967295 + minimum: 0 + type: integer serviceAccount: description: The service account associated with the workload if a sidecar is present in the workload. @@ -14754,6 +14789,11 @@ spec: x-kubernetes-validations: - message: port name must be valid rule: self.all(key, size(key) < 63 && key.matches("^[a-zA-Z0-9](?:[-a-zA-Z0-9]*[a-zA-Z0-9])?$")) + priority: + description: The priority for this Endpoint. + maximum: 4294967295 + minimum: 0 + type: integer serviceAccount: description: The service account associated with the workload if a sidecar is present in the workload. @@ -15062,6 +15102,11 @@ spec: x-kubernetes-validations: - message: port name must be valid rule: self.all(key, size(key) < 63 && key.matches("^[a-zA-Z0-9](?:[-a-zA-Z0-9]*[a-zA-Z0-9])?$")) + priority: + description: The priority for this Endpoint. + maximum: 4294967295 + minimum: 0 + type: integer serviceAccount: description: The service account associated with the workload if a sidecar is present in the workload. diff --git a/networking/v1alpha3/workload_entry.pb.go b/networking/v1alpha3/workload_entry.pb.go index 9ecdb3e731..d536227f0b 100644 --- a/networking/v1alpha3/workload_entry.pb.go +++ b/networking/v1alpha3/workload_entry.pb.go @@ -265,8 +265,13 @@ type WorkloadEntry struct { // ServiceEntry) // +kubebuilder:validation:MaxLength=253 ServiceAccount string `protobuf:"bytes,7,opt,name=service_account,json=serviceAccount,proto3" json:"service_account,omitempty"` - unknownFields protoimpl.UnknownFields - sizeCache protoimpl.SizeCache + // The priority for this Endpoint. If unspecified this will default to the highest priority (0). + // Under usual circumstances, Istio will only select endpoints for the highest priority (0). + // In the event that enough endpoints for a particular priority are unavailable/unhealthy, + // Istio will fail over to selecting endpoints for the next highest priority group. + Priority uint32 `protobuf:"varint,8,opt,name=priority,proto3" json:"priority,omitempty"` + unknownFields protoimpl.UnknownFields + sizeCache protoimpl.SizeCache } func (x *WorkloadEntry) Reset() { @@ -348,11 +353,18 @@ func (x *WorkloadEntry) GetServiceAccount() string { return "" } +func (x *WorkloadEntry) GetPriority() uint32 { + if x != nil { + return x.Priority + } + return 0 +} + var File_networking_v1alpha3_workload_entry_proto protoreflect.FileDescriptor const file_networking_v1alpha3_workload_entry_proto_rawDesc = "" + "\n" + - "(networking/v1alpha3/workload_entry.proto\x12\x19istio.networking.v1alpha3\"\xae\x03\n" + + "(networking/v1alpha3/workload_entry.proto\x12\x19istio.networking.v1alpha3\"\xca\x03\n" + "\rWorkloadEntry\x12\x18\n" + "\aaddress\x18\x01 \x01(\tR\aaddress\x12I\n" + "\x05ports\x18\x02 \x03(\v23.istio.networking.v1alpha3.WorkloadEntry.PortsEntryR\x05ports\x12L\n" + @@ -360,7 +372,8 @@ const file_networking_v1alpha3_workload_entry_proto_rawDesc = "" + "\anetwork\x18\x04 \x01(\tR\anetwork\x12\x1a\n" + "\blocality\x18\x05 \x01(\tR\blocality\x12\x16\n" + "\x06weight\x18\x06 \x01(\rR\x06weight\x12'\n" + - "\x0fservice_account\x18\a \x01(\tR\x0eserviceAccount\x1a8\n" + + "\x0fservice_account\x18\a \x01(\tR\x0eserviceAccount\x12\x1a\n" + + "\bpriority\x18\b \x01(\rR\bpriority\x1a8\n" + "\n" + "PortsEntry\x12\x10\n" + "\x03key\x18\x01 \x01(\tR\x03key\x12\x14\n" + diff --git a/networking/v1alpha3/workload_entry.pb.html b/networking/v1alpha3/workload_entry.pb.html index da55192ee8..d51728308f 100644 --- a/networking/v1alpha3/workload_entry.pb.html +++ b/networking/v1alpha3/workload_entry.pb.html @@ -233,6 +233,18 @@

WorkloadEntry

in the same namespace as the configuration ( WorkloadEntry or a ServiceEntry)

+ + + +
priority
+
uint32
+
+ +

The priority for this Endpoint. If unspecified this will default to the highest priority (0). +Under usual circumstances, Istio will only select endpoints for the highest priority (0). +In the event that enough endpoints for a particular priority are unavailable/unhealthy, +Istio will fail over to selecting endpoints for the next highest priority group.

+ diff --git a/networking/v1alpha3/workload_entry.proto b/networking/v1alpha3/workload_entry.proto index e5ce2d3a90..b7d88b52e5 100644 --- a/networking/v1alpha3/workload_entry.proto +++ b/networking/v1alpha3/workload_entry.proto @@ -252,4 +252,10 @@ message WorkloadEntry { // ServiceEntry) // +kubebuilder:validation:MaxLength=253 string service_account = 7; + + // The priority for this Endpoint. If unspecified this will default to the highest priority (0). + // Under usual circumstances, Istio will only select endpoints for the highest priority (0). + // In the event that enough endpoints for a particular priority are unavailable/unhealthy, + // Istio will fail over to selecting endpoints for the next highest priority group. + uint32 priority = 8; }