Commit Graph

265 Commits

Author SHA1 Message Date
Craig Box 9140d5208c
Update to v1 in all API examples (#15515)
* s/v1[ab].*/v1/g

* Fix tests with new snip versions

* always be kind
2024-08-06 22:59:22 -04:00
Ben Leggett 15d573ce05
Fixup some waypoint docs issues (#15474)
* Fixup some waypoint docs issues

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* the args, they are not named

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Fixup cleanup

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Fixup again

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Ambient does not require experimental CRDs for waypoints

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Add tip maybe

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Fix snip

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Update content/en/docs/ambient/usage/waypoint/index.md

Co-authored-by: Craig Box <craig.box@gmail.com>

* Update content/en/docs/ambient/usage/waypoint/index.md

Co-authored-by: Craig Box <craig.box@gmail.com>

* Update content/en/docs/ambient/usage/extend-waypoint-wasm/index.md

Co-authored-by: Michael <haifeng.yao@daocloud.io>

* Lint

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Use BP snip (didn't realize we had several)

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Use the bp snip in more spots

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Removal snip

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Review comments

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Clean up CRDs in one more spot where we install them

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* ....hm?

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

---------

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>
Co-authored-by: Craig Box <craig.box@gmail.com>
Co-authored-by: Michael <haifeng.yao@daocloud.io>
2024-07-30 13:41:42 -04:00
Daniel Hawton f103be6a42
prepare for v1.23 (#15443)
* prepare for v1.23

Signed-off-by: Daniel Hawton <daniel@hawton.org>

* bump to latest release-1.23 commit

Signed-off-by: Daniel Hawton <daniel@hawton.org>

* fix ambient docs use of removed istioctl x waypoint

Signed-off-by: Daniel Hawton <daniel@hawton.org>

* ambient test tweak

Signed-off-by: Daniel Hawton <daniel@hawton.org>

* fix test errors 2 and 4

* fix tests

* fix tests

* fix circuit-breaking test

* Update index.md

* make gen

Signed-off-by: Daniel Hawton <daniel@hawton.org>

* fix circuit breaker test

* disable dns auto allocation tests

Signed-off-by: Daniel Hawton <daniel@hawton.org>

* temporarily remove the verify lines since our istioctl output changed

---------

Signed-off-by: Daniel Hawton <daniel@hawton.org>
Co-authored-by: Craig Box <craig.box@gmail.com>
2024-07-23 00:11:30 -04:00
Peter Jausovec 8d68e08fd3
docs: update the bookinfo screenshots (#15197)
* docs: update the bookinfo screenshots

Signed-off-by: Peter Jausovec <peter.jausovec@solo.io>

* Update content/en/docs/tasks/security/authorization/authz-http/index.md

Co-authored-by: Craig Box <craig.box@gmail.com>

---------

Signed-off-by: Peter Jausovec <peter.jausovec@solo.io>
Co-authored-by: Craig Box <craig.box@gmail.com>
2024-06-05 19:53:23 -04:00
John Howard 2a5104921a advance master to release-1.23 2024-05-13 15:30:59 -07:00
Eric Van Norman 99d4fb050e
Update test to use profile=none since it now installs Istio (#14966)
* Update test to use none since it install Istio

* Need to uninstall Istio after moving
2024-04-25 21:23:17 -07:00
zirain 09a1f6132e
try enable (#14965) 2024-04-25 06:24:16 -07:00
Eric Van Norman b34773d3e0
prepare for v1.22 as istio source is already branched (#14930)
* prepare for v1.22 as istio source is already branched

* Update to latest istio 1.22 commit
2024-04-23 09:59:57 -07:00
Frank Budinsky bfb9ab95ef
gateway-api: use v1 resources in examples (#14898) 2024-04-17 10:09:41 -07:00
Frank Budinsky 051d6a5f73
Fix authz-ingress test flake (#14812) 2024-04-01 10:15:05 -07:00
Frank Budinsky e30ab6491d
Add namespace labels to test framework diff snapshots (#14773)
* Add namespace labels to test framework diff snapshots

* fix lint

* failing tests

* more failed tests

* more failures

* more fixes

* one more

* fix fault injection
2024-03-25 09:07:25 -07:00
Eric Van Norman 46e09c42ab
Disable some failing tests (blocking issues created), fix others (#14763)
* Disable some failing tests (blocking issues created), fix others

* Update apiVersion

* Update apiVersion

* Remove comment
2024-03-21 12:46:05 -07:00
Eric Van Norman 853abd6586
Release branching for 1.21.0 (#14736)
* build an archive of v1.20 in master

* update data/versions.yml and archive index page

* advance master to release-1.22

* Update istio/api

* Update istio/api
2024-03-13 17:01:27 -07:00
Frank Budinsky c727b0c083
Fix snip generator stripping leading space in expected output (#14693)
* Fix snip generator stripping leading space in expected output

* also fix _out

* strip trailing newline

* regen

* tweak for readability

* remove ambient label
2024-03-07 12:29:19 -08:00
Frank Budinsky a55a462cdc
gateway-api: istio.io/gateway-name -> gateway.networking.k8s.io/gateway-name (#14635) 2024-02-21 14:30:22 -08:00
Eric Van Norman 6d43317402
prepare for v1.21 as Istio source is already branched (#14527)
* prepare for v1.21 as Istio source is already branched

* Run make clean gen

* rebase and gen again
2024-01-25 14:09:23 -08:00
carolsi af2edc6964
Update example of refine the mutual TLS settings per port (#14385) 2023-12-29 09:24:31 -08:00
Eric Van Norman e76db9bed8
Enable jwt-route (#14282)
* Enable jwt-toute

* Update to latest commit
2023-12-08 12:52:06 -08:00
Xiaopeng Han f8e8cee957
revise ext doc (#14274) 2023-12-06 07:00:48 -08:00
Eric Van Norman 5ce52ebafd
Update istio test reference to latest commit and fix tests (#14200)
* Update istio test reference to latest commit and fix tests

* Move back two commits since some didn't have releases built

* Run go mod tidy after make clean

* Try removing metallb

* Don't remove the metallb validatingwebhookconfigurations

* Redo egress-control test to no use istio-state

* Update istio test reference to contain operator fix and revert test change

* Disable jwt-route test temporarily waiting on Envoy fix

* Upadte istio/api

* Replace uninstall

* revert chmod
2023-12-01 10:13:44 -08:00
Frank Budinsky 83bae38f99
gateway-api: use targetRef instead of selector for auth/authz gateway… (#14157)
* gateway-api: use targetRef instead of selector for auth/authz gateway refs

* regen

* fix yaml

* regen
2023-11-15 07:57:05 -08:00
Eric Van Norman 31dde271c5 advance master to release-1.21 2023-11-14 17:19:21 +00:00
Kuat 0de72af162
docs: update to use PROXY config (#13568)
* docs: update to use PROXY config

Signed-off-by: Kuat Yessenov <kuat@google.com>

* gen

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-11-13 18:08:28 -08:00
Eric Van Norman a8ccc83d83
Preare istio.io for 1.20 as other repos have branched. (#14025) 2023-10-19 08:29:10 -07:00
Eric Van Norman 867381b258 advance master to release-1.20 2023-09-05 16:32:26 +00:00
Eric Van Norman e0e010f089
prepare for v1.19 as istio source is already branched (#13691) 2023-08-05 14:21:02 -07:00
Frank Budinsky 49568809b2
Add gateway-api instructions to authn policy task (#13625)
* Add gateway-api instructions to authn policy task

* 10 -> 11

* fix test

* fix test again
2023-07-26 13:35:25 -07:00
Frank Budinsky 52658c57c3
JWT routing task fixes (#13570)
* JWT routing task fixes

* revert gtwapi

* fix test

* lint

* more lint
2023-07-14 12:58:43 -07:00
zirain b56f351f9c
security: correct command on jwt-route page (#13460)
* security: correct command on jwt-route page

* gen
2023-06-30 11:27:21 -07:00
Keith Mattix II 3c94567ce1
Change Istio Classic terminology to Istio APIs (#13385)
* Change Istio Classic terminology to Istio APIs

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Fix stutter

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Change back parallel structure formation

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

---------

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
2023-06-16 07:02:06 -07:00
Michael ba926d3006
fix a typo in authz-ingress (#13332) 2023-06-08 21:26:48 -07:00
wulianglongrd 15f812bdb6
add tips for using `[]` as a separator (#13188) 2023-06-08 08:15:05 -07:00
Eric Van Norman af9705dd17 advance master to release-1.19 2023-06-07 14:31:17 +00:00
Kuat a985ac38a6
cleanup more usages of EnvoyFilter (#13301)
* cleanup more usages of EnvoyFilter

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix test

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-06-06 14:06:49 -07:00
Michael a4d4f8bb18
Fix indentations and remove unecessary step numbers (#13230)
* Fix indentations and remove unecessary step numbers in /security/authorization/

* revert tabset indentations and wrap some long clauses
2023-05-23 18:29:05 -07:00
Eric Van Norman 57ba4f6751
prepare for v1.18 as istio source is already branched (#13134) 2023-04-27 12:07:29 -07:00
David Xia a8e24d7eeb
fix docs: wrong subject-verb agreement in authn-policy/index.md (#13015) 2023-04-05 18:02:49 -07:00
Frank Budinsky 18e2058d81
Fix snippet generator to not include html id in snip id (#12988)
* Fix snippet generator to not include html id in snip id

* verify failure
2023-04-03 13:20:34 -07:00
Frank Budinsky b64832ac53
gateway-api: future proof gateway address (#12961)
* gateway-api: future proof gateway address

* regen
2023-03-28 14:28:39 -07:00
Frank Budinsky 0d65b3888d
gateway-api: change wait ready to wait programmed (#12937) 2023-03-24 12:12:01 -07:00
Faseela K ff6b3ee3d1
Specify EXTERNAL_CA env under .Values.pilot.env (#12908)
* Specify EXTERNAL_CA env under .Values.pilot.env

Signed-off-by: Faseela K <faseela.k@est.tech>

* make snips

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-03-20 13:56:43 -07:00
Faseela K 2de8b7cf3f
Add docs test for custom CA k8s (#12910)
* Add docs test for custom CA k8s

Signed-off-by: Faseela K <faseela.k@est.tech>

* wait for secrets to be created

Signed-off-by: Faseela K <faseela.k@est.tech>

* Fix tests

Signed-off-by: Faseela K <faseela.k@est.tech>

* address review comments

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-03-20 13:30:45 -07:00
Frank Budinsky f577e3cdbc
gateway-api: add instructions to gateway topology doc (#12889)
* gateway-api: add instructions to gateway topology doc

* fix test

* fix numbering
2023-03-14 10:53:24 -07:00
Aayush Sharma e348075be1
Added headersToDownstreamOnAllow example in ext authz task page (#12791)
* Added headersToDownstreamOnAllow example in ext authz task page

Added headersToDownstreamOnAllow to https://istio.io/latest/docs/tasks/security/authorization/authz-custom/#define-the-external-authorizer.

* Update index.md

* updated snips.sh

* made suggested changes

* make scripts fix
2023-03-13 12:59:23 -07:00
Frank Budinsky fe7c0f1145
gateway-api: add gateway api instructions to ingress access control doc (#12869)
* gateway-api: authz-ingress

* gateway-api: add gateway api instructions to ingress access control doc

* lint

* fixes

* simplify aws samples
2023-03-10 11:45:55 -08:00
Frank Budinsky 486c559488
Small fixes to custom CA doc (#12856) 2023-03-08 08:09:47 -08:00
Arka Bhattacharya 052f5fbc7e
TCP Traffic page edit (#12819)
* Edits formatting of the long commands to improve readability

* Adds snips by make gen

* Adds back the connection rejected output

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* re-ran make gen to edit the snip

---------

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-03-06 08:58:45 -08:00
majeshps e9ecc67a71
Fix minor nits on the security tasks page Plugin CA Certificate (#12709)
* Fix minor nits on the security tasks page Plugin CA Certificate

Partially fixes: #12695

* Fix minor  nits on the security tasks page for certificate management
2023-03-03 10:09:06 -08:00
Paddy Doyle e24e58affa
Update feature status for Experimental/Alpha (#12821)
* Update feature status for Experimental/Alpha

Based off of the feature status in features.yaml, update the
corresponding doc page.

Update navigation_level.html to only flag Experimental and Alpha
features with an asterisk '*', rather than all docs with _any_ status
set.

Add new 'alpha.md' boilerplate, similar to 'experimental.md', with a
link to https://github.com/istio/community/blob/master/FEATURE-LIFECYCLE.md

Add either 'boilerplate alpha' or 'boilerplate experimental' to all
pages which have Alpha or Experimental status set.

Tidy up pages which already had
'boilerplate experimental-feature-warning' and be consistent with
'boilerplate experimental'

Update tasks/observability/distributed-tracing/mesh-and-proxy-config
status from 'Beta/Experimental' to 'Beta', to match what's in
features.yaml (all others only have a single value here)

* Add content/zh/boilerplates/alpha.md

* Update content/en/boilerplates/alpha.md

Suggested change

Co-authored-by: Faseela K <k.faseela@gmail.com>

* Update the zh 'alpha' boilerplate to match

---------

Co-authored-by: Faseela K <k.faseela@gmail.com>
2023-03-03 07:45:06 -08:00
Ben Leggett 825f422087
Add more context to `externalTrafficPolicy=local` caveats. (#12779)
* Reword this to better explain why a gateway on each node is recommended.

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Update content/en/docs/tasks/security/authorization/authz-ingress/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-02-28 11:03:16 -08:00