Skip to content

Add istioctl analyze warning about fragile EnvoyFilter patch order #37415

@frankbu

Description

@frankbu

(This is used to request new product features, please visit https://discuss.istio.io for questions on using Istio)

Describe the feature request

An EnvoyFilter with an insert position relative to another filter (e.g., INSERT_BEFORE) can be
fragile because the default order of filter evaluation is based on the creation time of the filters.
If the insertion point for a filter is not found, the filter will not be added to the chain and nothing will
appear in the error log to indicate that it was skipped.

Documentation describing this subtlety has been added in istio/istio.io#10935.
It would be good to also make istioctl analyze produce a warning message for this kind of
fragile configuration.

Describe alternatives you've considered

Affected product area (please put an X in all that apply)

[ ] Docs
[ ] Installation
[ ] Networking
[ ] Performance and Scalability
[ ] Extensions and Telemetry
[ ] Security
[ ] Test and Release
[x] User Experience
[ ] Developer Infrastructure

Affected features (please put an X in all that apply)

[ ] Multi Cluster
[ ] Virtual Machine
[ ] Multi Control Plane

Additional context

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions