Configuration Validation Webhook
Galley’s configuration validation ensures user authored Istio
configuration is syntactically and semantically valid. It uses a
ValidatingWebhookConfiguration has two webhooks.
pilot.validation.istio.io- Served on path
/admitpilotand is responsible for validating configuration consumed by Pilot (e.g.
mixer.validation.istio.io- Served on path
/admitmixerand is responsible for validating configuration consumed by Mixer.
Both webhooks are implemented by the
istio-galley service on
port 443. Each webhook has its own
rules section. Both webhooks are scoped to all namespaces. The
namespaceSelector should be empty. Both rules apply to Istio Custom
Resource Definitions (CRDs).