{
  "cniVersion": "0.3.1",
  "name": "istio-cni",
  "type": "istio-cni",
  "ipam": {},
  "dns": {},
  "plugin_log_level": "debug",
  "cni_agent_run_dir": "/path/to/kubeconfig",
  "ambient_enabled": false,
  "exclude_namespaces": [
    ""
  ]

Istio Automation <******@****.***> 1730909965 -0500

# Istio Agent

This document describes the internal architecture of Istio agent.

## High Level overview

![High Level overview](docs/overview.svg)

At a high level, the Istio agent acts as an intermediate proxy between Istiod and Envoy. This is done
at two levels. For distributing workload certificates, Envoy will send [SDS](https://www.envoyproxy.io/docs/envoy/latest/configuration/security/secret)

        w: 24,
        y: 16+10,
      },
    },
  ]
  +
  grid.makeGrid([
    row.new('Istio Component Versions')
    + row.withPanels([
      panels.timeSeries.simple('Istio Component Versions', queries.allIstioBuild, 'Version number of each running instance'),
    ]),
  ], startY=16+10+16)
)

          },
          "expr": "sum(container_memory_working_set_bytes{namespace!=\"istio-system\",container=\"istio-proxy\"}) / count(container_memory_working_set_bytes{namespace!=\"istio-system\",container=\"istio-proxy\"})",
          "format": "time_series",
          "intervalFactor": 1,
          "legendFormat": "per istio proxy",
          "refId": "B"
        }
      ],
      "title": "Memory Usage",

      "targets": [
        {
          "datasource": {
            "type": "prometheus",
            "uid": "${datasource}"
          },
          "expr": "sum(container_memory_working_set_bytes{container=\"istio-proxy\"})",
          "format": "time_series",
          "hide": false,
          "intervalFactor": 2,
          "legendFormat": "Total (k8s)",
          "refId": "A",
          "step": 2
        }
      ],

{
  "cniVersion": "0.3.1",
  "name": "istio-cni",
  "type": "istio-cni",
  "plugin_log_level": "__LOG_LEVEL__",
  "kubernetes": {
      "kubeconfig": "__KUBECONFIG_FILENAME__",
      "cni_bin_dir": "/path/cni/bin"
  }

{
  "cniVersion": "0.3.1",
  "name": "istio-cni",
  "type": "istio-cni",
  "ipam": {},
  "dns": {},
  "plugin_log_level": "debug",
  "cni_agent_run_dir": "/tmp",
  "ambient_enabled": false,
  "exclude_namespaces": [
    "istio-system"
  ]

{
  "cniVersion": "0.3.1",
  "name": "istio-cni",
  "type": "prefix-istio-cni",
  "plugin_log_level": "debug",
  "kubernetes": {
      "kubeconfig": "/path/to/kubeconfig",
      "cni_bin_dir": "/path/cni/bin"
  }

      },
      "type": "tuning"
    },
    {
      "kubernetes": {
        "cni_bin_dir": "/path/cni/bin",
        "kubeconfig": "/path/to/kubeconfig"
      },
      "name": "istio-cni",
      "plugin_log_level": "debug",
      "type": "istio-cni"
    }
  ]