diff --git a/content/docs/reference/config/authorization/istio.rbac.v1alpha1/index.html b/content/docs/reference/config/authorization/istio.rbac.v1alpha1/index.html
index 496e1fea72..560374a7cd 100644
--- a/content/docs/reference/config/authorization/istio.rbac.v1alpha1/index.html
+++ b/content/docs/reference/config/authorization/istio.rbac.v1alpha1/index.html
@@ -6,7 +6,7 @@ description: Configuration for Role Based Access Control.
location: https://istio.io/docs/reference/config/authorization/istio.rbac.v1alpha1.html
layout: protoc-gen-docs
generator: protoc-gen-docs
-number_of_entries: 9
+number_of_entries: 8
---
Istio RBAC (Role Based Access Control) defines ServiceRole and ServiceRoleBinding
objects.
@@ -39,7 +39,7 @@ spec:
methods: ["GET", "HEAD"]
constraints:
- key: "destination.labels[version]"
- value: ["v1", "v2"]
+ values: ["v1", "v2"]
A ServiceRoleBinding specification includes two parts:
@@ -166,66 +166,6 @@ Exact match, prefix match, and suffix match are supported.
For example, the value “v1alpha2” matches “v1alpha2” (exact match),
or “v1” (prefix match), or “alpha2” (suffix match).
-
-
-
-
-
-RbacConfig
-
-RbacConfig defines the global config to control Istio RBAC behavior.
-This Custom Resource is a singleton where only one Custom Resource should be created globally in
-the mesh and the namespace should be the same to other Istio components, which usually is istio-system.
-Note: This is enforced in both istioctl and server side, new Custom Resource will be rejected if found any
-existing one, the user should either delete the existing one or change the existing one directly.
-
-Below is an example of an RbacConfig resource called istio-rbac-config which enables Istio RBAC for all
-services in the default namespace.
-
-apiVersion: "rbac.istio.io/v1alpha1"
-kind: RbacConfig
-metadata:
- name: default
- namespace: istio-system
-spec:
- mode: ON_WITH_INCLUSION
- inclusion:
- namespaces: [ "default" ]
-
-
-
-
-
-| Field |
-Type |
-Description |
-
-
-
-
-mode |
-RbacConfig.Mode |
-
- Istio RBAC mode.
-
- |
-
-
-inclusion |
-RbacConfig.Target |
-
- A list of services or namespaces that should be enforced by Istio RBAC policies. Note: This field have
-effect only when mode is ONWITHINCLUSION and will be ignored for any other modes.
-
- |
-
-
-exclusion |
-RbacConfig.Target |
-
- A list of services or namespaces that should not be enforced by Istio RBAC policies. Note: This field have
-effect only when mode is ONWITHEXCLUSION and will be ignored for any other modes.
-
|
diff --git a/content/docs/reference/config/istio.authentication.v1alpha1/index.html b/content/docs/reference/config/istio.authentication.v1alpha1/index.html
index ce4d8ca992..bb10e5a0f6 100644
--- a/content/docs/reference/config/istio.authentication.v1alpha1/index.html
+++ b/content/docs/reference/config/istio.authentication.v1alpha1/index.html
@@ -355,7 +355,7 @@ spec:
apiVersion: authentication.istio.io/v1alpha1
kind: Policy
metadata:
- name: productpage_mTLS_disable
+ name: productpage-mTLS-disable
namespace: frod
spec:
targets:
@@ -368,7 +368,7 @@ for productpage:9000 except the path ‘/health_check’ . Principal is
apiVersion: authentication.istio.io/v1alpha1
kind: Policy
metadata:
- name: productpage_mTLS_with_JWT
+ name: productpage-mTLS-with-JWT
namespace: frod
spec:
target:
diff --git a/content/docs/reference/config/networking/v1alpha3/gateway/index.html b/content/docs/reference/config/networking/v1alpha3/gateway/index.html
index 268936f4a0..5d580bba69 100644
--- a/content/docs/reference/config/networking/v1alpha3/gateway/index.html
+++ b/content/docs/reference/config/networking/v1alpha3/gateway/index.html
@@ -41,7 +41,7 @@ spec:
httpsRedirect: true # sends 301 redirect for http requests
- port:
number: 443
- name: https
+ name: https-443
protocol: HTTPS
hosts:
- uk.bookinfo.com
@@ -52,7 +52,7 @@ spec:
privateKey: /etc/certs/privatekey.pem
- port:
number: 9443
- name: https
+ name: https-9443
protocol: HTTPS
hosts:
- "bookinfo-namespace/*.bookinfo.com"
@@ -105,19 +105,19 @@ spec:
- match:
- headers:
cookie:
- user: dev-123
+ exact: "user=dev-123"
route:
- destination:
port:
number: 7777
host: reviews.qa.svc.cluster.local
- match:
- uri:
+ - uri:
prefix: /reviews/
route:
- destination:
port:
- number: 9080 # can be omitted if its the only port for reviews
+ number: 9080 # can be omitted if it's the only port for reviews
host: reviews.prod.svc.cluster.local
weight: 80
- destination:
diff --git a/content/docs/reference/config/networking/v1alpha3/virtual-service/index.html b/content/docs/reference/config/networking/v1alpha3/virtual-service/index.html
index 0350307e07..302067caff 100644
--- a/content/docs/reference/config/networking/v1alpha3/virtual-service/index.html
+++ b/content/docs/reference/config/networking/v1alpha3/virtual-service/index.html
@@ -125,7 +125,7 @@ spec:
allowCredentials: false
allowHeaders:
- X-Foo-Bar
- maxAge: "1d"
+ maxAge: "24h"