istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

add a cleanup subsection to set desired outbound traffic policy mode (#5264) 

* add a cleanup subsection to set desired outbound traffic policy mode

the title: "Set the `global.outboundTrafficPolicy.mode` to your desired mode"

* remove a redundant empty line

* rename the subsection to be "Set the outbound traffic policy mode to your desired value"

* remove a semicolon at the end of the subsection's title

* add `uniq` so the output of the current outbound traffic policy mode will appear once
This commit is contained in:
Vadim Eisenberg 2019-10-29 16:10:35 +02:00 committed by Istio Automation
parent 9e676b9b7c
commit e5cb80badc
1 changed files with 36 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
content/en/docs/tasks/traffic-management/egress/egress-control/index.md
View File

@ -493,3 +493,39 @@ Shutdown the [sleep]({{< github_tree >}}/samples/sleep) service:
{{< text bash >}}
$ kubectl delete -f @samples/sleep/sleep.yaml@
{{< /text >}}
### Set the outbound traffic policy mode to your desired value
1. Check the current value:
{{< text bash >}}
$ kubectl get configmap istio -n istio-system -o yaml | grep -o "mode: ALLOW_ANY" | uniq
$ kubectl get configmap istio -n istio-system -o yaml | grep -o "mode: REGISTRY_ONLY" | uniq
mode: ALLOW_ANY
{{< /text >}}
The output will be either `mode: ALLOW_ANY` or `mode: REGISTRY_ONLY`.
1. If you want to change the mode, perform the following commands:
{{< tabset cookie-name="outbound_traffic_policy_mode" >}}
{{< tab name="change from ALLOW_ANY to REGISTRY_ONLY" cookie-value="REGISTRY_ONLY" >}}
{{< text bash >}}
$ kubectl get configmap istio -n istio-system -o yaml | sed 's/mode: ALLOW_ANY/mode: REGISTRY_ONLY/g' | kubectl replace -n istio-system -f -
configmap/istio replaced
{{< /text >}}
{{< /tab >}}
{{< tab name="change from REGISTRY_ONLY to ALLOW_ANY" cookie-value="ALLOW_ANY" >}}
{{< text bash >}}
$ kubectl get configmap istio -n istio-system -o yaml | sed 's/mode: REGISTRY_ONLY/mode: ALLOW_ANY/g' | kubectl replace -n istio-system -f -
configmap/istio replaced
{{< /text >}}
{{< /tab >}}
{{< /tabset >}}