istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Use route rules from samples/bookinfo/routing. (#1476)

This commit is contained in:
Guang Ya Liu 2018-06-08 01:01:48 +08:00 committed by Martin Taillefer
parent 352273d238
commit 4d4b297542
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
content/docs/tasks/security/secure-access-control.md
View File

@ -27,7 +27,10 @@ For the format of the service account in Istio, please refer to the
```command
$ kubectl apply -f <(istioctl kube-inject -f @samples/bookinfo/kube/bookinfo-add-serviceaccount.yaml@)
serviceaccount "bookinfo-productpage" created
deployment "productpage-v1" configured
deployment.extensions "productpage-v1" configured
serviceaccount "bookinfo-reviews" created
deployment.extensions "reviews-v2" configured
deployment.extensions "reviews-v3" configured
```
> If you are using a namespace other than `default`,
@ -48,7 +51,7 @@ the `productpage` service.
Run the following command to set up the deny rule along with a handler and an instance.
```command
$ istioctl create -f @samples/bookinfo/kube/mixer-rule-deny-serviceaccount.yaml@
$ istioctl create -f @samples/bookinfo/routing/mixer-rule-deny-serviceaccount.yaml@
Created config denier/default/denyproductpagehandler at revision 2877836
Created config checknothing/default/denyproductpagerequest at revision 2877837
Created config rule/default/denyproductpage at revision 2877838
@ -80,7 +83,7 @@ the `productpage` service.
* Remove the mixer configuration:
```command
$ istioctl delete -f @samples/bookinfo/kube/mixer-rule-deny-serviceaccount.yaml@
$ istioctl delete -f @samples/bookinfo/routing/mixer-rule-deny-serviceaccount.yaml@
```
* If you are not planning to explore any follow-on tasks, refer to the