istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Updates to ExternalName doc (#6664) 

* Updates to ExternalName doc

* Update content/en/docs/tasks/traffic-management/egress/egress-kubernetes-services/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
This commit is contained in:
John Howard 2020-03-03 17:41:46 -08:00 committed by GitHub
parent ca72d2997d
commit f7363dea08
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
content/en/docs/tasks/traffic-management/egress/egress-kubernetes-services/index.md
View File

@ -22,6 +22,10 @@ external service and according to the way your workload accesses the external se
HTTP requests and the external service requires TLS, you may want to perform TLS origination by Istio. If your workload HTTP requests and the external service requires TLS, you may want to perform TLS origination by Istio. If your workload
already uses TLS, the traffic is already encrypted and you can just disable Istio's mutual TLS. already uses TLS, the traffic is already encrypted and you can just disable Istio's mutual TLS.
{{< warning >}}
This page describes how Istio can integrate with existing Kubernetes configurations. For new deployments, we recommend following [Accessing Egress Services](/docs/tasks/traffic-management/egress/egress-control/).
{{< /warning >}}
While the examples in this task use HTTP protocols, While the examples in this task use HTTP protocols,
Kubernetes Services for egress traffic work with other protocols as well. Kubernetes Services for egress traffic work with other protocols as well.
@ -117,7 +121,7 @@ Kubernetes Services for egress traffic work with other protocols as well.
{{< /text >}} {{< /text >}}
1. Access `httpbin.org` via the Kubernetes service's hostname from the source pod with Istio sidecar. Notice the 1. Access `httpbin.org` via the Kubernetes service's hostname from the source pod with Istio sidecar. Notice the
headers added by Istio sidecar, for example, `X-Istio-Attributes` and `X-Envoy-Decorator-Operation`. Also note that headers added by Istio sidecar, for example `X-Envoy-Decorator-Operation`. Also note that
the `Host` header equals to your service's hostname. the `Host` header equals to your service's hostname.
{{< text bash >}} {{< text bash >}}
@ -125,13 +129,15 @@ Kubernetes Services for egress traffic work with other protocols as well.
{ {
"headers": { "headers": {
"Accept": "*/*", "Accept": "*/*",
"Content-Length": "0",
"Host": "my-httpbin.default.svc.cluster.local", "Host": "my-httpbin.default.svc.cluster.local",
"User-Agent": "curl/7.55.0", "User-Agent": "curl/7.64.0",
"X-B3-Sampled": "0", "X-B3-Sampled": "0",
"X-B3-Spanid": "5b68b3f953945a08", "X-B3-Spanid": "5795fab599dca0b8",
"X-B3-Traceid": "0847ba2513aa0ffc5b68b3f953945a08", "X-B3-Traceid": "5079ad3a4af418915795fab599dca0b8",
"X-Envoy-Decorator-Operation": "my-httpbin.default.svc.cluster.local:80/*", "X-Envoy-Decorator-Operation": "my-httpbin.default.svc.cluster.local:80/*",
"X-Istio-Attributes": "CigKGGRlc3RpbmF0aW9uLnNlcnZpY2UubmFtZRIMEgpteS1odHRwYmluCioKHWRlc3RpbmF0aW9uLnNlcnZpY2UubmFtZXNwYWNlEgkSB2RlZmF1bHQKOwoKc291cmNlLnVpZBItEitrdWJlcm5ldGVzOi8vc2xlZXAtNjZjOGQ3OWZmNS04aG1neC5kZWZhdWx0CkAKF2Rlc3RpbmF0aW9uLnNlcnZpY2UudWlkEiUSI2lzdGlvOi8vZGVmYXVsdC9zZXJ2aWNlcy9teS1odHRwYmluCkIKGGRlc3RpbmF0aW9uLnNlcnZpY2UuaG9zdBImEiRteS1odHRwYmluLmRlZmF1bHQuc3ZjLmNsdXN0ZXIubG9jYWw=" "X-Envoy-Peer-Metadata": "...",
"X-Envoy-Peer-Metadata-Id": "sidecar~10.28.1.74~sleep-6bdb595bcb-drr45.default~default.svc.cluster.local"
} }
} }
{{< /text >}} {{< /text >}}