Before the Deployment was kept as minimal as possible. This is mostly
good, because users can set any Deployment settings and things work.
However, running as non-root is a bit quirky, and very very strongly
recommended, so I think its worth calling out here.
This is one of the #1 sources of confusion we get.
* remove explicit istio-injection labeling on ns for ingress-gateway
The gateway deployment already has the annotation "sidecar.istio.io/inject=true"
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix lint
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix lint
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* build an archive of v1.16 in master
* update data/versions.yml and archive index page
* advance master to release-1.18
* Fix lint by moving back to older files - Note automated job will fail lint.
* Temporarily disable the istioctl-analyze test
* Clarify gateway canary upgrade
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update index.md
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Enhance docs for revision tags and add tests
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test failures
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix lint failure
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test failures
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix cleanup test failures
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix cleanup for canary upgrade tests
Signed-off-by: Faseela K <faseela.k@est.tech>
* add profile none
Signed-off-by: Faseela K <faseela.k@est.tech>
* review comments
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* make gen
Signed-off-by: Faseela K <faseela.k@est.tech>
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Doc for installing multiple control planes using revisions and discoverySelectors
Signed-off-by: Faseela K <faseela.k@est.tech>
* make gen
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test
Signed-off-by: Faseela K <faseela.k@est.tech>
* enable peer-auth
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test
Signed-off-by: Faseela K <faseela.k@est.tech>
* Review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* More review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Additional review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Remove duplicates that came from commit suggestion
* Rerun make gen
Signed-off-by: Faseela K <faseela.k@est.tech>
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Fix linting issues
./en/docs/setup/platform-setup/gardener/index.md:15: MD009 Trailing spaces
./en/docs/setup/platform-setup/gardener/index.md:72: MD009 Trailing spaces
Fix linter identified typos
19 | ternatively, [23 Technologies GmbH](https://23technologies.cloud
19 | managed Gardener service that conviniently works with all supported clou
19 | and comes with a free trial: [Okeanos](https://okeanos.dev/). Simil
19 | ACKIT](https://stackit.de/), [B'Nerd](https://bnerd.com/), [MetalS
19 | B'Nerd](https://bnerd.com/), [MetalStack](https://metalstack.cloud/),
21 | log/2018/05/17/gardener/) on [kubernetes.io](https://kubernetes.io/blog).
resolve with recommendations from istio team
incorporate feedback from @ericvn and cleanup
* to be clear with how to apply custom metrics
Signed-off-by: oops-oom <734819342@qq.com>
* fix test error
Signed-off-by: oops-oom <734819342@qq.com>
* fix for test
Signed-off-by: oops-oom <734819342@qq.com>
Signed-off-by: oops-oom <734819342@qq.com>
* gateway-api: more gateway doc
* tweak
* Update content/en/docs/setup/additional-setup/gateway/index.md
Co-authored-by: John Howard <howardjohn@google.com>
Co-authored-by: John Howard <howardjohn@google.com>
* gateway-api doc: ingress-sni-passthrough
* use kustomize for crds
* debug
* more debug
* use standard crd install
* try profile=none
* uninstall
* confirm install
* disable test for now
* regen
* use short_codes for gateway api version and tpye
* Update function name. Forcing name doesn't work for boilerplates?
* Fix lint
* Remove k8s_gateway_api_type
* Add update-gateway-version mkaefile target
* Fix version in test string
* Simplify id
* Fix ingress control doc related to other providers and numbering
* Run make gen
* Add back TCP_INGRESS_PORT
* Revert to dash seperator for consistency
* build an archive of v1.14 in master
* update data/versions.yml and archive index page
* advance master to release-1.16
* Rerun `make update_ref_docs
* Update to commit on main branch to fix tests
* Disable failing test (temporary)
* Promoted command x uninstall to install
Signed-off-by: Tong Li <litong01@us.ibm.com>
* Promoted command x uninstall to install
Signed-off-by: Tong Li <litong01@us.ibm.com>
* Promoted command x uninstall to install
Signed-off-by: Tong Li <litong01@us.ibm.com>
* Update content/en/docs/setup/install/operator/test.sh
Promoted command x uninstall to install
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Signed-off-by: Tong Li <litong01@us.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update test ref to 1.15.0-beta.1
* Change order for hem test output
* Go back to most likely sort over, but remove REV since it may change.
* Update test to just verify that both revisions exist
* But the revisions back in the doc
* Advanced Helm chart customization doc
As per the WG meeting, it was decided not to allow support for new values in istio helm charts
(unless there is substantial evidence it is needed by a large number of people); instead create an istio.io doc on last mile helm customization
Signed-off-by: Faseela K <faseela.k@est.tech>
* Update references section
Signed-off-by: Faseela K <faseela.k@est.tech>
* Add link to the new document in the main helm install page
Signed-off-by: Faseela K <faseela.k@est.tech>
* incorporate review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix lint error
Signed-off-by: Faseela K <faseela.k@est.tech>
* Incorporate additional review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Review comments, and fix deployment name in kustomize patch
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix helm template command
Signed-off-by: Faseela K <faseela.k@est.tech>
* specify namespace in the helm commands
Signed-off-by: Faseela K <faseela.k@est.tech>
* format helm template command output
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix intend
Signed-off-by: Faseela K <faseela.k@est.tech>
* add tests to gateway setup
* manually cleanup the minimal istio install
* Add canary upgrade test
* convert rewrite-repo to a helper function
* upgrade helm test
* lint fixes
* left over validatingwebhook from a prior test
* remove boilerplate check
* undo elided pod names
* gen snip
* Remove validatingwebhookconfigurations deletion
* remove webhook configs pending fix in istio
* remove webhook configs pending fix in istio
* revert some changes
* remove temp webhook removals
* remove revision labeled mutating webhooks
* revert revision-tags-middle change
* make gen
* Fix docs for installation: IstioOperator is not suggested for a production environment
* Update index.md
Fix issue "Multiple consecutive blank lines"
* Fixed#10963 for zn docs, about IstioOperator is not suggested on production environment
* Prepare for v1.13 as istio source is already branched
* Update VM test image from 1.11 to current to test
* Rename tests to temporaily disable Issue created to reanble before 1.13
* docs(platform-setup): add guide to install istio in tencent-cloud-mesh
Signed-off-by: Xunzhuo <mixdeers@gmail.com>
* fix: lint errors
* fix: update refer to review from eric
Signed-off-by: Xunzhuo <mixdeers@gmail.com>
* fix: change images into English and update related links to english
Signed-off-by: Xunzhuo <mixdeers@gmail.com>
* Update index.md
* Update platform setup for kops 1.22+
* Update index.md
* Update index.md
* Update content/en/docs/setup/platform-setup/kops/index.md
* Update content/en/docs/setup/platform-setup/kops/index.md
* Update content/en/docs/setup/platform-setup/kops/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Add usage warning for in-cluster operator
* iterate on comments
* move helm back to alpha
* in-cluster operator -> operator
* change istioctl and helm ordering
* change wording to is not needed
* iterate on comments
* Update test reference to latest istio
* Update helm output
* Update install/operator test to allow <pending> IP for running locally.
* fix lint
* Gateway changes
* Fix gateway
* Remove remaining webhook to make tests pass
* Change to use istioctl tag remove
* Helm can use revision tags
Update canary and helm docs to clarify use of stable revision labels.
Cleanup the docs appropriately and point to existing blogs and diagrams
that detail this functionality better.
* Code review comments
* Fix linter
* Fix usage
* Update comments
* fix apiVersion for gw install
getting an error for current doc:
```
error: unable to recognize "iop.yaml": no matches for kind "IstioOperator" in version "operator.istio.io/v1alpha1"
```
* update apiversion for istio operator
Co-authored-by: Lin Sun <lin.sun@solo.io>
* Flag experimental pages with dagger
* Use dagger symbol in title
* Dagger in navigation titles for experimental status
* Experimental asterisk note
* Asterisk with space
* Spacing between title and asterisk
* Flag experimental and alpha status
* Add doc test for IstioOperator install
* Fix
* gen
* Progress
* Another test
* progress
* fix removal logic
* fix again
* swap _verify_contains for _verify_like
* another approach
* remove istio operator ns
* Add coverage to IstioOperator update
* Change logging behavior back
* Remove test indicator from Operator upgrade and installation page
* Improvements to sidecar injection doc
Clarify a few things, add info about revisions and gateway template
(TODO - link to doc once it merges), and make auto injection documented
first since its (*highly*) recommended
* Apply suggestions from code review
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
John Howard
Faseela K
Frank Budinsky
Eric Van Norman
demotascha
Michael
Istio Automation
Michael
vasu1124
oops-oom
zirain
Tong Li
Oliver Liu
Zhonghu Xu
Daniel Hawton
Ram Vennam
John Zheng
Tim Ebert
Xunzhuo
Pengyuan Bian
Kenan O'Neal
jacob-delgado
Sam Naser
Sam Naser
Avi Miller
craigbox
Mariam John
Mitch Connors
Jonh Wendell
Shamsher Ansari
AndreaM12345
Brian Avery
Steven Landow
ChristinaMak
imgbot[bot]
Morven Cao