istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Remove use of installed-state (#14214)

This commit is contained in:
Frank Budinsky 2023-11-30 21:27:22 -05:00 committed by GitHub
parent 1ce3f006b2
commit 8e4b10edb2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
content/en/docs/tasks/traffic-management/egress/egress-control/index.md
View File

@ -69,15 +69,14 @@ You can then decide to [configure access to external services](#controlled-acces
with the `meshConfig.outboundTrafficPolicy.mode` option set to `ALLOW_ANY`. Unless you explicitly
set it to `REGISTRY_ONLY` mode when you installed Istio, it is probably enabled by default.
Run the following command to verify that `meshConfig.outboundTrafficPolicy.mode` option is set to `ALLOW_ANY`
or is omitted:
If you are unsure, you can run the following command to display your mesh config:
{{< text bash >}}
$ kubectl get istiooperator installed-state -n istio-system -o jsonpath='{.spec.meshConfig.outboundTrafficPolicy.mode}'
ALLOW_ANY
$ kubectl get configmap istio -n istio-system -o yaml
{{< /text >}}
You should either see `ALLOW_ANY` or no output (default `ALLOW_ANY`).
Unless you see an explicit setting of `meshConfig.outboundTrafficPolicy.mode` with value `REGISTRY_ONLY`,
you can be sure the option is set to `ALLOW_ANY`, which is the only other possible value and the default.
{{< tip >}}
If you have explicitly configured `REGISTRY_ONLY` mode, you can change it

6
content/en/docs/tasks/traffic-management/egress/egress-control/snips.sh
View File

@ -33,13 +33,9 @@ export SOURCE_POD=$(kubectl get pod -l app=sleep -o jsonpath='{.items..metadata.
}
snip_envoy_passthrough_to_external_services_1() {
kubectl get istiooperator installed-state -n istio-system -o jsonpath='{.spec.meshConfig.outboundTrafficPolicy.mode}'
kubectl get configmap istio -n istio-system -o yaml
}
! read -r -d '' snip_envoy_passthrough_to_external_services_1_out <<\ENDSNIP
ALLOW_ANY
ENDSNIP
snip_envoy_passthrough_to_external_services_3() {
kubectl exec "$SOURCE_POD" -c sleep -- curl -sSI https://www.google.com | grep "HTTP/"; kubectl exec "$SOURCE_POD" -c sleep -- curl -sI https://edition.cnn.com | grep "HTTP/"
}