Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 12 additions & 0 deletions kubernetes/customresourcedefinitions.gen.yaml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

9 changes: 9 additions & 0 deletions releasenotes/notes/58871.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
apiVersion: release-notes/v2
kind: feature
area: telemetry
issue:
- https://github.com/istio/istio/issues/58871

releaseNotes:
- |
**Added** `enableContextPropagation` field to the Telemetry Tracing API, allowing users to disable trace context header propagation (e.g., X-B3-*, traceparent) independently from span reporting. This is useful for preventing trace context leakage at egress gateways while maintaining internal observability.
95 changes: 64 additions & 31 deletions telemetry/v1alpha1/telemetry.pb.go

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

30 changes: 30 additions & 0 deletions telemetry/v1alpha1/telemetry.pb.html

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

28 changes: 27 additions & 1 deletion telemetry/v1alpha1/telemetry.proto
Original file line number Diff line number Diff line change
Expand Up @@ -232,6 +232,22 @@ syntax = "proto3";
// - disabled: true
// ```
//
// Disable trace context propagation on egress gateway while still reporting spans
// (prevents leaking trace headers to external services):
// ```yaml
// apiVersion: telemetry.istio.io/v1
// kind: Telemetry
// metadata:
// name: egress-no-propagation
// namespace: istio-system
// spec:
// selector:
// matchLabels:
// istio: egressgateway
// tracing:
// - enableContextPropagation: false
// ```
//
package istio.telemetry.v1alpha1;

import "google/api/field_behavior.proto";
Expand Down Expand Up @@ -435,8 +451,18 @@ message Tracing {
// By default Istio specific tags are included in the trace spans.
google.protobuf.BoolValue enable_istio_tags = 8;

// Controls whether trace context headers (e.g., `traceparent`/`tracestate` for W3C,
// `X-B3-*` for Zipkin) are propagated in forwarded requests.
// When set to false, trace context headers will not be included in proxied requests,
// effectively stopping trace context propagation at the selected workloads.
// This is useful for egress gateways where you want to prevent leaking trace context
// to external services while still reporting spans for internal observability.
// Defaults to true (context propagation enabled).
// NOTE: This does NOT impact span reporting; use `disable_span_reporting` to control that.
google.protobuf.BoolValue enable_context_propagation = 9;

// $hide_from_docs
// Next available field number: 9
// Next available field number: 10
}

// Used to bind Telemetry configuration to specific providers for
Expand Down