* Updated with instructions for LightStep Tracing vs. LightStep [x]pm (#4203)
* Remove [x]PM unless necessary (#4405)
These instructions are now for both LightStep [x]PM and LightStep Tracing.
* Updated with instructions for LightStep Tracing vs. LightStep [x]pm (#4203)
* remove bad dir
* fix graphic name
* Changed spelling of Lightstep
Changed spelling of "LightStep" to "Lightstep" due to brand changes.
* Update Lightstep
Update for branding
* Change LightStep to Lightstep and removed bad link
* Change LightStep to Lightstep
* Change LightStep to Lightstep
* Change LightStep to Lightstep
* change LightStep to Lightstep
* remove changes from other langs
* merge changes from istio
* put branding changes back in
* resolve merge conflict
* fix lint issues and add LighStep back into .spelling
* Update content/en/docs/tasks/observability/distributed-tracing/lightstep/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Reverted the actual mirror test script, because mirror test seems to have some subtle failure when running with what seems to be the exact same commands via snips. Will investigate further in followup PR. Merging this one to get the generator changes.
* Uninstall: add note about removal of istio-system ns
Fixes: #23189.
* Clarify the reason of not removing it
* Apply suggestions from code review
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Clarify wording for openshift installs
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Add documentation for adding sidecar injector webhook annotations in 1.4
* Add proper yaml to -f argument
* Don't mix and match set and file options
* Review comments
* Add note that docs are out of date for istio 1.4 and openshift
* Fix linting errors
* Fix linting errors
* Fix code for istioctl 1.4; update comments at end
* Review comments
* Code review comments
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Add test for Request Timeouts
* Update test to extract snippets
* Apply suggestions from code review
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Fix lint error
* Use code snippets from bookinfo snips
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Remove sleep pods
* remove deprecated $snippet and use use verify func
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Skip test failure
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
The external service `ServiceEntry` adds in this chapter is `ext-svc.example.com`, so fix it from `ext-resource` to `ext-svc.example.com`.
Co-authored-by: Koki Tomoshige <36136133+tomocy@users.noreply.github.com>
The code in step 3 of Perform TLS origination with an egress gateway explains how to create egress Gateway for edition.cnn.com. port 80, so the title of this step should follow it.
Co-authored-by: Koki Tomoshige <36136133+tomocy@users.noreply.github.com>
The pod of tcp-echo which is asked its podIP is in `foo` namespace, so the `kubectl get` should specify the namespace as `foo`.
Co-authored-by: Koki Tomoshige <36136133+tomocy@users.noreply.github.com>
Pilot is now a part of istiod, so rename it to istiod as the title of the page the link refers to.
Co-authored-by: Koki Tomoshige <36136133+tomocy@users.noreply.github.com>
* Retire helm documentation as we use a protobuf
The new rendered source of truth is:
https://preliminary.istio.io/docs/reference/config/istio.operator.v1alpha1/
This is rendered from the API repo protobuf which (may) need description fields
set. That protobuf is here:
https://github.com/istio/api/blob/master/operator/v1alpha1/operator.proto
* Follow the flowchart
The flowchart is not quite right and could use some improvement.
* Update content/en/blog/2019/performance-best-practices/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* User guide tests for DNS certificate management
- Add user guide tests for DNS certificate management
- Remove user guide's dependency on jq
* Use _verify_contains function
* User guide tests and remove manual steps for plugging in CA cert
- Add user guide tests for plugging in CA cert
- Remove the manual steps in the user guide of plugging in CA cert
to make it easier for an user to try the guide.
* Fix SC2046 lint error and the trafficmanagement test errors
* Use standard ports for telemetry exposure
Blocker for https://github.com/istio/istio/issues/22911
* Full update and include HTTPS
* Fix link
* Remove from ports table
* Apply suggestions from code review
Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>
Co-authored-by: Rachael Graham <rachael.graham@ibm.com>
* Update doc test README
* add sh
* tweaks
* formatting
* format
* fix comment
* wording
* convert mtls migration task
* Update tests/README.md
Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>
* Update tests/README.md
Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Refactor Secure Ingress tasks
Ingress SDS is now the default and recommended. This removes the file
mount task, which is no longer recommended and will avoid confusion, and
cleans up the task a bit. I also documented the new supported secret
formats.
* use archive
* Initial documentation on Multiple Control Planes
I suspect this will be improved as we get more user feedback and
istioctl integrations, but this is a reasonable start
* Typo
* Minor edits
* Apply suggestions from code review
Co-Authored-By: Adam Miller <1402860+adammil2000@users.noreply.github.com>
* Frank's suggestions
* lint
* Apply suggestions from code review
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Adam Miller <1402860+adammil2000@users.noreply.github.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Add documentation on Ingress support
Istio has supported Ingress for quite a while, but its not documented.
This explains how to use it and configure it.
Note to docs reviewers: Gateway is Istio's alternative to Kubernetes'
Inrgess object, and we prefer users to use Gateway. However, for reasons
like legacy users, we also support Ingress.
* fix lint
* fix lint
* fix lint
* improvements
.
* Apply suggestions from code review
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Rename PKI to Identity Issuance
Calling Identity issuance as PKI has resulted in confusion among customers expecting to see content about CRLs, OCSP, and other frills associated with standard PKIs. The content of that section is about securely issuing identities to the workloads by embedding the identity in the X509 certificate.
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Justin Pettit <jpettit@ovn.org>
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Oliver Liu <yonggangl@google.com>
Co-authored-by: Justin Pettit <jpettit@ovn.org>
* Fix links for removal of helm installation directory
* Point to archive version of istioctl upgrade instructions
* Add Aporeto to lint ignores for now.
* Provision a certificate to an application through a sidecar
* Revisions based on the review comments
* Move the document location
* Revise install command based on the review comments
* Make the blog more concise
* Explain the use case
* Revised based on comments
* Revise based on review comments
* Revised based on the review comments
* Revise based on review comments
* Revise based on review comments
* Revise based on review comments
* Revise based on review comments
* Revise based on review comments
* add a tcpdump verification for mtls
* add period
* move to the migration doc.
* lint fixing
* address cmt.
* Apply suggestions from code review
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Add istiod blog post
* Update content/en/blog/2020/istiod/index.md
remove errant period
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2020/istiod/index.md
add missing space
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* add correct description
* put the 'istiod's in backticks
* adjust caps again
`istiod` only when used to refer to the service.
Bold when introducing it.
Regular weight when using in body.
* md lint changes that make vscode sad
* policies => policy
* Update spell-chequer for istiod blog
* backticks around PodSecurityPolicy
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Add a blog on declarative wasm extensions for envoy and istio
* Pushed changes for review
* fixed lint errors
* fixed bash syntax
* update note to http for module delivery
* clean rest of lint issues
* update multicluster shared control plane docs
* Merged single and multiple network instructions. They are nearly
identically except for specifying the mesh network configuration.
* Removed use of pod IPs for cross-cluster control plane. Added three
options that are more appropriate for production use.
* use `istioctl x create-remote-secret` instead of copy/paste bash
* Updated the master and remote cluster configuration examples to be
declartive instead of imperative. Users can copy/paste the examples,
edit, commit to scm, and apply to the clusters.
* Update content/en/docs/setup/install/multicluster/shared/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/shared/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/shared/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* updates
* Update content/en/docs/setup/install/multicluster/shared/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/shared/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* lint errors
* lint
* Update content/en/docs/setup/install/multicluster/shared/index.md
Co-Authored-By: Lin Sun <linsun@us.ibm.com>
* update networks and add selfSigned
* Apply suggestions from code review
Co-Authored-By: Lin Sun <linsun@us.ibm.com>
* Update content/en/docs/setup/install/multicluster/shared/index.md
Co-Authored-By: Lin Sun <linsun@us.ibm.com>
* fix config and remove option 3
* fix formatting and grammer
* move additional considerations after the sample services
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Lin Sun <linsun@us.ibm.com>
* Add cert-manager integration doc
This starts the new "Integrations" page, which will include many other
integrations in the future. For now, I have added cert-manager
integration. We have an existing doc for this at
https://istio.io/docs/tasks/traffic-management/ingress/ingress-certmgr/
which I think we can remove, but I did not do that in this PR.
Note to the reviewer: this is explicitly not a task, as we do not
control cert-manager. Having an explicit set of steps and verifications
requires an exact working directions, which is maintained as
cert-manager evolves, etc. The goal here was to link out to cert-manager
docs wherever possible, and just document the very minimal amount needed
to actually get things integrated with Istio. As you can see from the
doc this is fairly minimal - for the most part, its just referencing a
secret crated by cert-manager.
* Update content/en/docs/ops/integrations/_index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update home page links
* Point to the higher level config page.
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* disclaimer about auto mtls and remove authn check.
* Update content/en/docs/ops/common-problems/network-issues/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* More base release 1.6 stuff
* Add 1.6.x to spelling
* Fix some broken links with sidecar/tls-check being removed
* Fix links pointing to install/kubernetes/helm/...
* Incorporate #6783 - Fix bug requiring placeholder release notes
* Restore some links to archive
* Fix one remainging link to archive
* Someone still pointing to current release upgrade notes. Remove.
* Initial attempt at upgrade notice
* Lint and mixer deprecation
* Update .spelling
* Spelling
* Fixed header problems
* Update Mixer notes and add feature gaps
* minor tweaks
* Minor edits in the Mixer Deprecation section
* Add multicluster warnings
* Apply suggestions from code review
Co-Authored-By: Adam Miller <1402860+adammil2000@users.noreply.github.com>
* Update content/en/news/releases/1.5.x/announcing-1.5/upgrade-notes/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/news/releases/1.5.x/announcing-1.5/upgrade-notes/index.md
Co-Authored-By: Lin Sun <linsun@us.ibm.com>
* Fix linting errors
* Update content/en/news/releases/1.5.x/announcing-1.5/upgrade-notes/index.md
Co-authored-by: Adam Miller <1402860+adammil2000@users.noreply.github.com>
Co-authored-by: mandarjog <mandarjog@gmail.com>
Co-authored-by: Lin Sun <linsun@us.ibm.com>
Co-authored-by: Oliver Liu <yonggangl@google.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Francois Pesce <fpesce@google.com>
* remove mixer references from egress tasks and deprecate where needed
* lint fixes
* Update content/en/docs/tasks/traffic-management/egress/egress_sni_monitoring_and_policies/index.md
Co-Authored-By: mandarjog <mandarjog@gmail.com>
* Update content/en/docs/tasks/traffic-management/egress/egress_sni_monitoring_and_policies/index.md
Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Francois Pesce <fpesce@google.com>
Co-authored-by: mandarjog <mandarjog@gmail.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Early draft for VM updates
* Update the second doc - instead of duplication we should just link
* Remove some details, we should document ACME certs in 1.6
* update vm doc for 1.5
* Fix lint error
* remove duplication
* fix lint error
* fix lint error
* fix lint error
* fix lint error
* fix broken link
* fix broken link
Co-authored-by: Adam Miller <1402860+adammil2000@users.noreply.github.com>
John Howard
Jonh Wendell
mandarjog
Adam Miller
erdun
Eric Van Norman
Robin Whitmore
Lin Sun
Frank Budinsky
jacob-delgado
Mariam John
Mitch Connors
Shamsher Ansari
Xinnan Wen
James Brook
Istio Automation
Steven Dake
lei-tang
Christian Posta
chen zhengwei
Steven Dake
Mark Ferree
Hyungrok Kim
Shriram Rajagopalan
potterhe
Nupur Garg
shinji3887
Yangmin Zhu
Francois Pesce
Kebe
Jianfei Hu
Jason Young
craigbox
John Pape
Shawn O'Dell
shibataka000
Adarsh J
Douglas Reid
Brian Avery
Kuat
tigran-a
Gregory Hanson
Jonathan Meyers
Dan Ciruli
Pengyuan Bian
John Plevyak
imgbot[bot]
craigbox
Louis Ryan
Diem Vu
Nico Aragon
Martin Taillefer