Commit Graph

31 Commits

Author SHA1 Message Date
Oliver Liu 1e73594260
Restructure the cert management tasks. (#7209)
* Restructure the cert management tasks.

* Small fix.

* Fix references.

* Fix links

* Small fix.

* Update content/en/docs/tasks/security/cert-management/plugin-ca-cert/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Small fix.

* Change the weights.

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-05-04 14:57:29 -04:00
Eric Van Norman acb51ca7f6
Update links (#7170) 2020-04-28 07:25:42 -07:00
Istio Automation a51d8af8db
Remove GKE v1.11.x instructions (#7036)
See https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control#iam-rolebinding-bootstrap. Assuming that these instructions were *only* required for GKE, they are no longer necessary.

Co-authored-by: Adrian Ludwin <adrian.ludwin@gmail.com>
2020-04-06 15:01:10 -07:00
Eric Van Norman d298a66352
Minor changes to replicated control plane doc (#6935)
* Minor changes to replicated control plane doc

* Replace Citadel with Istio CA

* Add $ to CLUSTER2_GW_ADDR per review
2020-03-23 07:03:09 -07:00
Istio Automation 5f6d0712b8
Add a guide of plugging in CA cert to istiod and update CA documents (#6644)
Co-authored-by: lei-tang <lei-tang@users.noreply.github.com>
2020-03-05 10:42:54 -08:00
Johannes Scheuermann ef4b6b43b0
Make CoreDNS docs for Multi Cluster more precise (#5819)
* Make CoreDNS docs for Multi Cluster more precise

* Add DNS port to forward command
2020-02-05 10:30:59 -08:00
Martin Taillefer 6165cb9821
Replace cookies with local storage. (#5949)
- We don't need cookies for istio.io, the few settings we do have should be
managed with browser-local storage instead. This is a better privacy posture,
and avoids sending needless data to the server for every request.
2019-12-02 13:02:51 -08:00
Frank Budinsky 60f73570f0 Another ops guide incremental improvement (#5830)
* Another ops guide incremental improvement

* fix broken links

* more lint errors

* one more lint

* fix aliases
2019-11-25 11:58:39 -08:00
Rigs Caballero 22d066be37 Added the Best Practices section with general principles. (#5137)
* Added the Best Practices section with general principles.

This is the beginning of the new Best Practices section.
Our goal is to provide a section for all the best practices and recommendations
for Istio deployments. The best practices are based on the identified and
recommended deployment models.

Signed-off-by: rcaballeromx <grca@google.com>

* Change headings for clarity.

Adds clarity to some passages based on feedback.
Removes a list of recommendations that was causing some confusion.
Adds a glossary entry for failure domains and how they relate to a
platform's availability zones.

Signed-off-by: rcaballeromx <grca@google.com>

* Move Best Practices to Ops Guide

Signed-off-by: rcaballeromx <grca@google.com>

* Moved Deployment Best Practices to a new "Prepare Your Deployment" section.

Moved all deployment preparation content into a new section under "Setup".
For now the content includes the following sections:

- Deployment models
- Deployment best practices
- Pod requirements

Merged the two existing pages containing pod requirements into one single page.

Signed-off-by: rcaballeromx <grca@google.com>

* Replace example with better guidance around namespace tenancy.

Signed-off-by: Rigs Caballero <grca@google.com>

* Add links and language pointing to the Prepare section

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix minor typos and broken links.

Signed-off-by: Rigs Caballero <grca@google.com>

* Move from Setup to Operations

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix broken links

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix rebasing issues.

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix multicluster install link.

Signed-off-by: Rigs Caballero <grca@google.com>
2019-11-14 11:58:29 -05:00
Eric Van Norman 50479f17c6 Remove coreDNS,egressgateway --sets (now in values-istio-multicluster-gateways) (#5660) 2019-11-13 11:49:45 -08:00
Eric Van Norman f9b731eb60 Remove --force option (#5606) 2019-11-11 14:38:54 -08:00
Eric Van Norman 40719adc10 Update Replicated Control Plane scenario (#5522) 2019-11-11 06:40:53 -08:00
leo 7e3ee2cace fix incorrect content (#5504) 2019-11-09 00:09:52 -08:00
Frank Budinsky a6a5769f12
Organize security tasks (#5474)
* Organize security tasks

* lint errors

* fixes

* more fixes
2019-11-07 15:54:27 -05:00
Neeraj Poddar db10e052ff Fix directory structure/heading for istioctl install (#5390) 2019-11-05 12:37:19 -08:00
Martin Taillefer 4d4e6ae28e
General cleanup items. (#5325)
- Fix a bunch of heading capitalization.

- Remove words that shouldn't be in the dictionary
and update the text accordingly.

- Added a few @@ sequences to reference content files from text blocks.

- Used a few {{< source_branch_name >}} sequences to refer to the proper
branch in GitHub rather than master.
2019-11-04 06:41:54 -08:00
Frank Budinsky cdd8d7f50f Clarify istioctl install support for helm options (#5302)
* Clarify istioctl helm option support

* add helm deprecation warning to install options page

* remove space

* add prepend to .spelling

* address review comments
2019-10-31 09:22:07 -07:00
Martin Ostrowski b9280ce88b Update multicluster instructions (#5293) 2019-10-29 20:59:21 -04:00
Frank Budinsky abab549d5d Fix broken links (#5288) 2019-10-29 16:18:21 -07:00
Martin Ostrowski c6bba52018 Change multicluster and CNI instructions to use istioctl (#5273)
* Change multicluster and CNI instructions to use istioctl

* Lint

* Lint

* Update content/en/docs/setup/additional-setup/cni/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/additional-setup/cni/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/additional-setup/cni/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared-gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-10-28 20:07:34 -07:00
Rigs Caballero 03ca9f6478 Move pages out from the Concepts section (#5256)
* Move Deployment Models from Concepts to Setup

Signed-off-by: rcaballeromx <grca@google.com>

* Move Architecture from Concepts to Ops.

Signed-off-by: rcaballeromx <grca@google.com>

* Move Performance page from Concepts to Ops

Signed-off-by: rcaballeromx <grca@google.com>
2019-10-24 15:40:25 -07:00
Johannes Scheuermann 523094bd70 Update docs for CoreDNS newer than 1.3.2 (#4811)
* Update docs for CoreDNS newer than 1.3.2

* Use tabs in website

* Fix lint issues
2019-10-22 10:16:28 -07:00
John Howard 7fd714b507 Simplify CRD check step (#5176)
Currently we are asking users to get a count of their CRDs. This is hard
because the docs fall out of sync very frequently, they may have CRDs
for the operator or something, etc. In generally its really hard to be
right here, and it involves the users manually running this command over
and over until it works.

Instead, we can just wait for the jobs to complete. This has the benefit
of working regardless of their environment, and won't fall out of date.
2019-10-17 13:21:55 -07:00
imgbot[bot] 6e1825036e [ImgBot] Optimize images (#5167)
*Total -- 2,116.10kb -> 2,113.71kb (0.11%)

/assets/inline_images/landing/routing-and-load-balancing.svg -- 2.02kb -> 1.49kb (26.05%)
/assets/inline_images/landing/telemetry-and-reporting.svg -- 2.26kb -> 1.74kb (22.86%)
/assets/inline_images/landing/policy-enforcement.svg -- 1.41kb -> 1.12kb (21.01%)
/static/img/istio-bluelogo-nobackground-unframed.svg -- 0.32kb -> 0.26kb (18.73%)
/static/img/istio-whitelogo-bluebackground-unframed.svg -- 0.39kb -> 0.32kb (17.75%)
/static/img/istio-bluelogo-whitebackground-unframed.svg -- 0.39kb -> 0.32kb (17.13%)
/static/img/istio-bluelogo-nobackground-framed.svg -- 0.35kb -> 0.29kb (17.13%)
/assets/inline_images/landing/resiliency.svg -- 2.33kb -> 1.94kb (16.83%)
/static/img/istio-bluelogo-whitebackground-framed.svg -- 0.42kb -> 0.35kb (16.47%)
/static/img/istio-whitelogo-bluebackground-framed.svg -- 0.42kb -> 0.35kb (15.89%)
/assets/inline_images/landing/istio-logo.svg -- 0.17kb -> 0.16kb (6.25%)
/assets/inline_images/istio-whitelogo-bluebackground-rounded.svg -- 0.21kb -> 0.21kb (3.21%)
/content/en/blog/2018/egress-https/https_from_the_app.svg -- 16.61kb -> 16.59kb (0.12%)
/content/en/about/contribute/diagrams/diagram-guidelines.svg -- 47.65kb -> 47.63kb (0.05%)
/content/en/blog/2018/egress-monitoring-access-control/https-to-gateway.svg -- 37.47kb -> 37.46kb (0.05%)
/content/en/blog/2018/egress-monitoring-access-control/http-to-gateway.svg -- 37.63kb -> 37.61kb (0.05%)
/content/en/docs/reference/config/policy-and-telemetry/mixer-overview/topology-with-cache.svg -- 81.78kb -> 81.75kb (0.03%)
/content/en/blog/2019/data-plane-setup/arch-2.svg -- 82.76kb -> 82.74kb (0.03%)
/content/en/docs/setup/install/multicluster/shared-gateways/diagram.svg -- 116.08kb -> 116.05kb (0.02%)
/content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/EgressGatewayWithSNIProxy.svg -- 71.72kb -> 71.71kb (0.02%)
/content/en/docs/examples/mesh-expansion/bookinfo-expanded/mesh-expansion.svg -- 217.56kb -> 217.53kb (0.01%)
/content/en/blog/2017/mixer-spof-myth/mixer-spof-myth-2.svg -- 91.28kb -> 91.28kb (0.01%)
/content/en/blog/2019/egress-traffic-control-in-istio-part-2/SecurityArchitectureWithL3Firewalls.svg -- 502.86kb -> 502.83kb (0%)
/content/zh/docs/concepts/multicluster-deployments/multicluster-with-gateways.svg -- 249.43kb -> 249.42kb (0%)
/content/en/docs/setup/install/multicluster/gateways/multicluster-with-gateways.svg -- 250.49kb -> 250.48kb (0%)
/content/zh/docs/concepts/multicluster-deployments/multicluster-with-vpn.svg -- 150.61kb -> 150.60kb (0%)
/content/en/docs/setup/install/multicluster/shared-vpn/multicluster-with-vpn.svg -- 151.47kb -> 151.47kb (0%)

Signed-off-by: ImgBotApp <ImgBotHelp@gmail.com>
2019-10-17 10:05:01 -07:00
Rigs Caballero 4492b89b4f Ensure consistent use of 'multicluster'. (#5108) 2019-10-08 20:55:42 -07:00
Martin Taillefer d42dfe94ba
Introduce top-level News section. (#5060) 2019-09-27 07:09:58 -07:00
Zhonghu Xu 37f3af18a2 Replace multicast address with class E (#5051)
Ignoring unrelated broken link.

* Replace multicast address with class E

* address comments

* Update content/en/docs/setup/install/multicluster/gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-09-27 09:34:05 -04:00
Zhonghu Xu 4a3d0c2d3d Should not use loopback addresses (#5036)
* fix multi cluster dns docs

* fix multi cluster dns docs

* ignore multicast spelling check
2019-09-23 11:02:16 -07:00
Frank Budinsky 4210222e60 Align multi-cluster examples with new terminology (#4925)
* Align multi-cluster examples with new terminology

* Update content/en/docs/setup/install/multicluster/_index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/setup/install/multicluster/_index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/setup/install/multicluster/gateways/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>
2019-09-06 07:10:03 -07:00
Rigs Caballero df9db64b27 Add Istio Deployment Models concept. (#4813)
* Add Istio Deployment Models concept.

This concept replaces the old multi-cluster concept.
Includes new diagrams that comply with the diagram creation guidelines.
Updates the Chinese content to use a local copy of the previous diagrams.
Fixes all internal links to the previous version of the doc.

Signed-off-by: rcaballeromx <grca@google.com>

* Add glossary entries for needed terms.

The terms involved are:

    - Cluster
    - Identity
    - Trust domain

Signed-off-by: rcaballeromx <grca@google.com>

* Define cluster in a platform agnostic way.

Also adds links between `identity` and `trust domain`.

Signed-off-by: rcaballeromx <grca@google.com>

* Add missing `(` in links.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix links to sections and reduce image sizes.

Signed-off-by: rcaballeromx <grca@google.com>

* Simplify the definition of `trust domain`

Signed-off-by: rcaballeromx <grca@google.com>

* Move old images to the ZH content.

Signed-off-by: rcaballeromx <grca@google.com>

* Add reworked control plane content.

Also addresses the comments left on the PR including those regarding the
diagrams.

Signed-off-by: rcaballeromx <grca@google.com>

* Add fail over example and glossary entries.

This update also reworks the control plane models section to fit the example.
Additional adjustments were made to the diagrams too.

Signed-off-by: rcaballeromx <grca@google.com>

* Move mesh models section.

Also minor fixes and edits.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix glossary entries and links.

Signed-off-by: rcaballeromx <grca@google.com>
2019-08-30 10:34:30 -07:00
Frank Budinsky ca7559cab2 Remove Nomad & Consul docs (#4805)
* Remove Nomad & Consul docs

* broken links

* more broken links

* more broken links

* fix spelling errors

* remove broken ref
2019-08-16 12:13:30 -07:00