From 6fc32ad80a2570289a59ca1aa320710abd5ee86c Mon Sep 17 00:00:00 2001 From: Pengyuan Bian Date: Wed, 4 Aug 2021 14:01:25 -0700 Subject: [PATCH] Update several CNI related doc. (#10140) * Update several CNI doc. * Update index.md * Update content/en/docs/setup/platform-setup/gke/index.md Co-authored-by: craigbox Co-authored-by: craigbox --- content/en/docs/ops/best-practices/security/index.md | 4 ---- content/en/docs/setup/platform-setup/gke/index.md | 6 ++---- 2 files changed, 2 insertions(+), 8 deletions(-) diff --git a/content/en/docs/ops/best-practices/security/index.md b/content/en/docs/ops/best-practices/security/index.md index 9d25d2d067..2ee90a0a41 100644 --- a/content/en/docs/ops/best-practices/security/index.md +++ b/content/en/docs/ops/best-practices/security/index.md @@ -506,10 +506,6 @@ This adds a [requirement](/docs/ops/deployment/requirements/) for the `NET_ADMIN To reduce privileges granted to pods, Istio offers a [CNI plugin](/docs/setup/additional-setup/cni/) which removes this requirement. -{{< warning >}} -The Istio CNI plugin is currently an alpha feature. -{{< /warning >}} - ## Use hardened docker images Istio's default docker images, including those run by the control plane, gateway, and sidecar proxies, are based on `ubuntu`. diff --git a/content/en/docs/setup/platform-setup/gke/index.md b/content/en/docs/setup/platform-setup/gke/index.md index 594ba64d66..32c372a7e5 100644 --- a/content/en/docs/setup/platform-setup/gke/index.md +++ b/content/en/docs/setup/platform-setup/gke/index.md @@ -37,10 +37,8 @@ Follow these instructions to prepare a GKE cluster for Istio. {{< /tip >}} {{< warning >}} - To use the Istio CNI feature, the - [network-policy](https://cloud.google.com/kubernetes-engine/docs/how-to/network-policy) - GKE feature must be enabled in the cluster. Use the `--enable-network-policy` flag in - the `gcloud container clusters create` command. + To use the Istio CNI feature on GKE, please check the [CNI installation guide](/docs/setup/additional-setup/cni/#prerequisites) + for prerequisite cluster configuration steps. {{< /warning >}} {{< warning >}}