Automator: update istio.io@ reference docs (#16570)

istio-testing · web-flow · commit f5a9d0727133 · 2025-06-09T22:16:23.000-04:00
diff --git a/content/en/docs/reference/commands/install-cni/index.html b/content/en/docs/reference/commands/install-cni/index.html
@@ -1062,6 +1062,12 @@ <h2 id="envvars">Environment variables</h2>
 <td>If enabled, pilot will run istio analyzers and write analysis errors to the Status field of any Istio Resources</td>
 </tr>
 <tr>
+<td><code>PILOT_ENABLE_CA_CRL</code></td>
+<td>Boolean</td>
+<td><code>false</code></td>
+<td>If set to true, Istio will watch for ca-crl.pem file in /etc/cacerts directory and will distribute crl data in each namespace in the cluster for proxies to consume. </td>
+</tr>
+<tr>
 <td><code>PILOT_ENABLE_CDS_CACHE</code></td>
 <td>Boolean</td>
 <td><code>true</code></td>
diff --git a/content/en/docs/reference/commands/istioctl/index.html b/content/en/docs/reference/commands/istioctl/index.html
@@ -8969,6 +8969,12 @@ <h2 id="envvars">Environment variables</h2>
 <td>If enabled, pilot will run istio analyzers and write analysis errors to the Status field of any Istio Resources</td>
 </tr>
 <tr>
+<td><code>PILOT_ENABLE_CA_CRL</code></td>
+<td>Boolean</td>
+<td><code>false</code></td>
+<td>If set to true, Istio will watch for ca-crl.pem file in /etc/cacerts directory and will distribute crl data in each namespace in the cluster for proxies to consume. </td>
+</tr>
+<tr>
 <td><code>PILOT_ENABLE_CDS_CACHE</code></td>
 <td>Boolean</td>
 <td><code>true</code></td>
diff --git a/content/en/docs/reference/commands/pilot-agent/index.html b/content/en/docs/reference/commands/pilot-agent/index.html
@@ -1460,6 +1460,12 @@ <h2 id="envvars">Environment variables</h2>
 <td>If enabled, pilot will run istio analyzers and write analysis errors to the Status field of any Istio Resources</td>
 </tr>
 <tr>
+<td><code>PILOT_ENABLE_CA_CRL</code></td>
+<td>Boolean</td>
+<td><code>false</code></td>
+<td>If set to true, Istio will watch for ca-crl.pem file in /etc/cacerts directory and will distribute crl data in each namespace in the cluster for proxies to consume. </td>
+</tr>
+<tr>
 <td><code>PILOT_ENABLE_CDS_CACHE</code></td>
 <td>Boolean</td>
 <td><code>true</code></td>
diff --git a/content/en/docs/reference/commands/pilot-discovery/index.html b/content/en/docs/reference/commands/pilot-discovery/index.html
@@ -1038,6 +1038,12 @@ <h2 id="envvars">Environment variables</h2>
 <td>If enabled, pilot will run istio analyzers and write analysis errors to the Status field of any Istio Resources</td>
 </tr>
 <tr>
+<td><code>PILOT_ENABLE_CA_CRL</code></td>
+<td>Boolean</td>
+<td><code>false</code></td>
+<td>If set to true, Istio will watch for ca-crl.pem file in /etc/cacerts directory and will distribute crl data in each namespace in the cluster for proxies to consume. </td>
+</tr>
+<tr>
 <td><code>PILOT_ENABLE_CDS_CACHE</code></td>
 <td>Boolean</td>
 <td><code>true</code></td>
diff --git a/content/en/docs/reference/config/networking/virtual-service/index.html b/content/en/docs/reference/config/networking/virtual-service/index.html
@@ -1088,6 +1088,8 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 with the given labels. If the VirtualService has a list of gateways specified
 in the top-level <code>gateways</code> field, it must include the reserved gateway
 <code>mesh</code> for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
@@ -1160,6 +1162,8 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 <p>Source namespace constraining the applicability of a rule to workloads in that namespace.
 If the VirtualService has a list of gateways specified in the top-level <code>gateways</code> field,
 it must include the reserved gateway <code>mesh</code> for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
@@ -1363,6 +1367,8 @@ <h2 id="L4MatchAttributes">L4MatchAttributes</h2>
 workloads with the given labels. If the VirtualService has a list of
 gateways specified in the top-level <code>gateways</code> field, it should include the reserved gateway
 <code>mesh</code> in order for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
@@ -1385,6 +1391,8 @@ <h2 id="L4MatchAttributes">L4MatchAttributes</h2>
 <p>Source namespace constraining the applicability of a rule to workloads in that namespace.
 If the VirtualService has a list of gateways specified in the top-level <code>gateways</code> field,
 it must include the reserved gateway <code>mesh</code> for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
@@ -1447,6 +1455,8 @@ <h2 id="TLSMatchAttributes">TLSMatchAttributes</h2>
 workloads with the given labels. If the VirtualService has a list of
 gateways specified in the top-level <code>gateways</code> field, it should include the reserved gateway
 <code>mesh</code> in order for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
@@ -1469,6 +1479,8 @@ <h2 id="TLSMatchAttributes">TLSMatchAttributes</h2>
 <p>Source namespace constraining the applicability of a rule to workloads in that namespace.
 If the VirtualService has a list of gateways specified in the top-level <code>gateways</code> field,
 it must include the reserved gateway <code>mesh</code> for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
diff --git a/content/zh/docs/reference/commands/install-cni/index.html b/content/zh/docs/reference/commands/install-cni/index.html
@@ -1062,6 +1062,12 @@ <h2 id="envvars">Environment variables</h2>
 <td>If enabled, pilot will run istio analyzers and write analysis errors to the Status field of any Istio Resources</td>
 </tr>
 <tr>
+<td><code>PILOT_ENABLE_CA_CRL</code></td>
+<td>Boolean</td>
+<td><code>false</code></td>
+<td>If set to true, Istio will watch for ca-crl.pem file in /etc/cacerts directory and will distribute crl data in each namespace in the cluster for proxies to consume. </td>
+</tr>
+<tr>
 <td><code>PILOT_ENABLE_CDS_CACHE</code></td>
 <td>Boolean</td>
 <td><code>true</code></td>
diff --git a/content/zh/docs/reference/commands/istioctl/index.html b/content/zh/docs/reference/commands/istioctl/index.html
@@ -8969,6 +8969,12 @@ <h2 id="envvars">Environment variables</h2>
 <td>If enabled, pilot will run istio analyzers and write analysis errors to the Status field of any Istio Resources</td>
 </tr>
 <tr>
+<td><code>PILOT_ENABLE_CA_CRL</code></td>
+<td>Boolean</td>
+<td><code>false</code></td>
+<td>If set to true, Istio will watch for ca-crl.pem file in /etc/cacerts directory and will distribute crl data in each namespace in the cluster for proxies to consume. </td>
+</tr>
+<tr>
 <td><code>PILOT_ENABLE_CDS_CACHE</code></td>
 <td>Boolean</td>
 <td><code>true</code></td>
diff --git a/content/zh/docs/reference/commands/pilot-agent/index.html b/content/zh/docs/reference/commands/pilot-agent/index.html
@@ -1460,6 +1460,12 @@ <h2 id="envvars">Environment variables</h2>
 <td>If enabled, pilot will run istio analyzers and write analysis errors to the Status field of any Istio Resources</td>
 </tr>
 <tr>
+<td><code>PILOT_ENABLE_CA_CRL</code></td>
+<td>Boolean</td>
+<td><code>false</code></td>
+<td>If set to true, Istio will watch for ca-crl.pem file in /etc/cacerts directory and will distribute crl data in each namespace in the cluster for proxies to consume. </td>
+</tr>
+<tr>
 <td><code>PILOT_ENABLE_CDS_CACHE</code></td>
 <td>Boolean</td>
 <td><code>true</code></td>
diff --git a/content/zh/docs/reference/commands/pilot-discovery/index.html b/content/zh/docs/reference/commands/pilot-discovery/index.html
@@ -1038,6 +1038,12 @@ <h2 id="envvars">Environment variables</h2>
 <td>If enabled, pilot will run istio analyzers and write analysis errors to the Status field of any Istio Resources</td>
 </tr>
 <tr>
+<td><code>PILOT_ENABLE_CA_CRL</code></td>
+<td>Boolean</td>
+<td><code>false</code></td>
+<td>If set to true, Istio will watch for ca-crl.pem file in /etc/cacerts directory and will distribute crl data in each namespace in the cluster for proxies to consume. </td>
+</tr>
+<tr>
 <td><code>PILOT_ENABLE_CDS_CACHE</code></td>
 <td>Boolean</td>
 <td><code>true</code></td>
diff --git a/content/zh/docs/reference/config/networking/virtual-service/index.html b/content/zh/docs/reference/config/networking/virtual-service/index.html
@@ -1088,6 +1088,8 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 with the given labels. If the VirtualService has a list of gateways specified
 in the top-level <code>gateways</code> field, it must include the reserved gateway
 <code>mesh</code> for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
@@ -1160,6 +1162,8 @@ <h2 id="HTTPMatchRequest">HTTPMatchRequest</h2>
 <p>Source namespace constraining the applicability of a rule to workloads in that namespace.
 If the VirtualService has a list of gateways specified in the top-level <code>gateways</code> field,
 it must include the reserved gateway <code>mesh</code> for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
@@ -1363,6 +1367,8 @@ <h2 id="L4MatchAttributes">L4MatchAttributes</h2>
 workloads with the given labels. If the VirtualService has a list of
 gateways specified in the top-level <code>gateways</code> field, it should include the reserved gateway
 <code>mesh</code> in order for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
@@ -1385,6 +1391,8 @@ <h2 id="L4MatchAttributes">L4MatchAttributes</h2>
 <p>Source namespace constraining the applicability of a rule to workloads in that namespace.
 If the VirtualService has a list of gateways specified in the top-level <code>gateways</code> field,
 it must include the reserved gateway <code>mesh</code> for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
@@ -1447,6 +1455,8 @@ <h2 id="TLSMatchAttributes">TLSMatchAttributes</h2>
 workloads with the given labels. If the VirtualService has a list of
 gateways specified in the top-level <code>gateways</code> field, it should include the reserved gateway
 <code>mesh</code> in order for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
@@ -1469,6 +1479,8 @@ <h2 id="TLSMatchAttributes">TLSMatchAttributes</h2>
 <p>Source namespace constraining the applicability of a rule to workloads in that namespace.
 If the VirtualService has a list of gateways specified in the top-level <code>gateways</code> field,
 it must include the reserved gateway <code>mesh</code> for this field to be applicable.</p>
+<p><strong>Note:</strong> This is not a runtime match, but is a selector; it filters which workloads the
+VirtualService applies to.</p>
 
 </td>
 </tr>
