diff --git a/content/docs/reference/config/authorization/istio.rbac.v1alpha1/index.html b/content/docs/reference/config/authorization/istio.rbac.v1alpha1/index.html index 496e1fea72..560374a7cd 100644 --- a/content/docs/reference/config/authorization/istio.rbac.v1alpha1/index.html +++ b/content/docs/reference/config/authorization/istio.rbac.v1alpha1/index.html @@ -6,7 +6,7 @@ description: Configuration for Role Based Access Control. location: https://istio.io/docs/reference/config/authorization/istio.rbac.v1alpha1.html layout: protoc-gen-docs generator: protoc-gen-docs -number_of_entries: 9 +number_of_entries: 8 ---

Istio RBAC (Role Based Access Control) defines ServiceRole and ServiceRoleBinding objects.

@@ -39,7 +39,7 @@ spec: methods: ["GET", "HEAD"] constraints: - key: "destination.labels[version]" - value: ["v1", "v2"] + values: ["v1", "v2"]

A ServiceRoleBinding specification includes two parts:

@@ -166,66 +166,6 @@ Exact match, prefix match, and suffix match are supported. For example, the value “v1alpha2” matches “v1alpha2” (exact match), or “v1” (prefix match), or “alpha2” (suffix match).

- - - - - -

RbacConfig

-
-

RbacConfig defines the global config to control Istio RBAC behavior. -This Custom Resource is a singleton where only one Custom Resource should be created globally in -the mesh and the namespace should be the same to other Istio components, which usually is istio-system. -Note: This is enforced in both istioctl and server side, new Custom Resource will be rejected if found any -existing one, the user should either delete the existing one or change the existing one directly.

- -

Below is an example of an RbacConfig resource called istio-rbac-config which enables Istio RBAC for all -services in the default namespace.

- -
apiVersion: "rbac.istio.io/v1alpha1"
-kind: RbacConfig
-metadata:
-  name: default
-  namespace: istio-system
-spec:
-  mode: ON_WITH_INCLUSION
-  inclusion:
-    namespaces: [ "default" ]
-
- - - - - - - - - - - - - - - - - - - - - - - - diff --git a/content/docs/reference/config/istio.authentication.v1alpha1/index.html b/content/docs/reference/config/istio.authentication.v1alpha1/index.html index ce4d8ca992..bb10e5a0f6 100644 --- a/content/docs/reference/config/istio.authentication.v1alpha1/index.html +++ b/content/docs/reference/config/istio.authentication.v1alpha1/index.html @@ -355,7 +355,7 @@ spec:
apiVersion: authentication.istio.io/v1alpha1
 kind: Policy
 metadata:
-  name: productpage_mTLS_disable
+  name: productpage-mTLS-disable
   namespace: frod
 spec:
   targets:
@@ -368,7 +368,7 @@ for productpage:9000 except the path ‘/health_check’ . Principal is
 
apiVersion: authentication.istio.io/v1alpha1
 kind: Policy
 metadata:
-  name: productpage_mTLS_with_JWT
+  name: productpage-mTLS-with-JWT
   namespace: frod
 spec:
   target:
diff --git a/content/docs/reference/config/networking/v1alpha3/gateway/index.html b/content/docs/reference/config/networking/v1alpha3/gateway/index.html
index 268936f4a0..5d580bba69 100644
--- a/content/docs/reference/config/networking/v1alpha3/gateway/index.html
+++ b/content/docs/reference/config/networking/v1alpha3/gateway/index.html
@@ -41,7 +41,7 @@ spec:
       httpsRedirect: true # sends 301 redirect for http requests
   - port:
       number: 443
-      name: https
+      name: https-443
       protocol: HTTPS
     hosts:
     - uk.bookinfo.com
@@ -52,7 +52,7 @@ spec:
       privateKey: /etc/certs/privatekey.pem
   - port:
       number: 9443
-      name: https
+      name: https-9443
       protocol: HTTPS
     hosts:
     - "bookinfo-namespace/*.bookinfo.com"
@@ -105,19 +105,19 @@ spec:
   - match:
     - headers:
         cookie:
-          user: dev-123
+          exact: "user=dev-123"
     route:
     - destination:
         port:
           number: 7777
         host: reviews.qa.svc.cluster.local
   - match:
-      uri:
+    - uri:
         prefix: /reviews/
     route:
     - destination:
         port:
-          number: 9080 # can be omitted if its the only port for reviews
+          number: 9080 # can be omitted if it's the only port for reviews
         host: reviews.prod.svc.cluster.local
       weight: 80
     - destination:
diff --git a/content/docs/reference/config/networking/v1alpha3/virtual-service/index.html b/content/docs/reference/config/networking/v1alpha3/virtual-service/index.html
index 0350307e07..302067caff 100644
--- a/content/docs/reference/config/networking/v1alpha3/virtual-service/index.html
+++ b/content/docs/reference/config/networking/v1alpha3/virtual-service/index.html
@@ -125,7 +125,7 @@ spec:
       allowCredentials: false
       allowHeaders:
       - X-Foo-Bar
-      maxAge: "1d"
+      maxAge: "24h"
 
FieldTypeDescription
modeRbacConfig.Mode -

Istio RBAC mode.

- -
inclusionRbacConfig.Target -

A list of services or namespaces that should be enforced by Istio RBAC policies. Note: This field have -effect only when mode is ONWITHINCLUSION and will be ignored for any other modes.

- -
exclusionRbacConfig.Target -

A list of services or namespaces that should not be enforced by Istio RBAC policies. Note: This field have -effect only when mode is ONWITHEXCLUSION and will be ignored for any other modes.

-