istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update several CNI related doc. (#10140) 

* Update several CNI doc.

* Update index.md

* Update content/en/docs/setup/platform-setup/gke/index.md

Co-authored-by: craigbox <craigbox@google.com>

Co-authored-by: craigbox <craigbox@google.com>
This commit is contained in:
Pengyuan Bian 2021-08-04 14:01:25 -07:00 committed by GitHub
parent ba2838f67b
commit 6fc32ad80a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
content/en/docs/ops/best-practices/security/index.md
View File

@ -506,10 +506,6 @@ This adds a [requirement](/docs/ops/deployment/requirements/) for the `NET_ADMIN
To reduce privileges granted to pods, Istio offers a [CNI plugin](/docs/setup/additional-setup/cni/) which removes this requirement. To reduce privileges granted to pods, Istio offers a [CNI plugin](/docs/setup/additional-setup/cni/) which removes this requirement.
{{< warning >}}
The Istio CNI plugin is currently an alpha feature.
{{< /warning >}}
## Use hardened docker images ## Use hardened docker images
Istio's default docker images, including those run by the control plane, gateway, and sidecar proxies, are based on `ubuntu`. Istio's default docker images, including those run by the control plane, gateway, and sidecar proxies, are based on `ubuntu`.

6
content/en/docs/setup/platform-setup/gke/index.md
View File

@ -37,10 +37,8 @@ Follow these instructions to prepare a GKE cluster for Istio.
{{< /tip >}} {{< /tip >}}
{{< warning >}} {{< warning >}}
To use the Istio CNI feature, the To use the Istio CNI feature on GKE, please check the [CNI installation guide](/docs/setup/additional-setup/cni/#prerequisites)
[network-policy](https://cloud.google.com/kubernetes-engine/docs/how-to/network-policy) for prerequisite cluster configuration steps.
GKE feature must be enabled in the cluster. Use the `--enable-network-policy` flag in
the `gcloud container clusters create` command.
{{< /warning >}} {{< /warning >}}
{{< warning >}} {{< warning >}}