Commit Graph

33 Commits

Author SHA1 Message Date
Craig Box 9140d5208c
Update to v1 in all API examples (#15515)
* s/v1[ab].*/v1/g

* Fix tests with new snip versions

* always be kind
2024-08-06 22:59:22 -04:00
Frank Budinsky bfb9ab95ef
gateway-api: use v1 resources in examples (#14898) 2024-04-17 10:09:41 -07:00
Frank Budinsky e30ab6491d
Add namespace labels to test framework diff snapshots (#14773)
* Add namespace labels to test framework diff snapshots

* fix lint

* failing tests

* more failed tests

* more failures

* more fixes

* one more

* fix fault injection
2024-03-25 09:07:25 -07:00
Frank Budinsky c727b0c083
Fix snip generator stripping leading space in expected output (#14693)
* Fix snip generator stripping leading space in expected output

* also fix _out

* strip trailing newline

* regen

* tweak for readability

* remove ambient label
2024-03-07 12:29:19 -08:00
Frank Budinsky 2c52b04283
gateway-api: fix broken links and use v1beta1 in examples for now (#14662) 2024-02-27 13:30:16 -08:00
Keith Mattix II 3c94567ce1
Change Istio Classic terminology to Istio APIs (#13385)
* Change Istio Classic terminology to Istio APIs

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Fix stutter

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Change back parallel structure formation

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

---------

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
2023-06-16 07:02:06 -07:00
Faseela K 01da15421a
Add docs for ocsp staple support (#13307)
* Add docs for ocsp staple support

Signed-off-by: Faseela K <faseela.k@est.tech>

* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-06-08 11:58:05 -07:00
Faseela K 5dfb323027
Document CRL usage (#13275)
* Document CRL usage

Signed-off-by: Faseela K <faseela.k@est.tech>

* incorporate review comments

Signed-off-by: Faseela K <faseela.k@est.tech>

* fix lint

Signed-off-by: Faseela K <faseela.k@est.tech>

* Update content/en/boilerplates/crl-tip.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-06-05 06:21:18 -07:00
John Zheng 788d8cf93f
Update index.md (#13033)
* Update index.md

* Update index.md

* Put it into troubleshooting.

* Update index.md

* Update snips.sh

* Update snips.sh

* apply changes for snips.sh

* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-04-12 11:34:45 -07:00
Frank Budinsky b64832ac53
gateway-api: future proof gateway address (#12961)
* gateway-api: future proof gateway address

* regen
2023-03-28 14:28:39 -07:00
Frank Budinsky 0d65b3888d
gateway-api: change wait ready to wait programmed (#12937) 2023-03-24 12:12:01 -07:00
Frank Budinsky d9970beaa3
gateway-api: enable mutual tls test (#12156)
* gateway-api: enable mutual tls test

* verify_failure should retry

* fix
2022-10-31 13:27:43 -07:00
Frank Budinsky 3a2d27a49b
A few doc layout and clarity improvements (#12115) 2022-10-18 09:45:23 -07:00
Frank Budinsky dd6b1c09cc
gateway-api doc: ingress-sni-passthrough (#12087)
* gateway-api doc: ingress-sni-passthrough

* use kustomize for crds

* debug

* more debug

* use standard crd install

* try profile=none

* uninstall

* confirm install

* disable test for now

* regen
2022-10-17 10:39:10 -07:00
Frank Budinsky d0fadfed00
Add gateway-api instructions: secure-ingress (#12051)
* Add gateway-api instructions: secure-ingress

* fix lint and test

* fixes

* mtls problem

* not work

* update option key

* regen

* mtls support

* wait

* improvements

* longer timeout

* lint
2022-10-07 12:37:15 -07:00
刘旭 87d20b5d3e
fix weak algorithm (#10545) 2021-11-29 20:41:42 -08:00
Istio Automation c01da14edd
[master] Add the information that you can concatenate CA certs (#10057)
* Add the information that you can concatenate CA certs

Add the information that you can concatenate CA certs if you want to accept MTLS from client providing certificate signed by different CAs

* english review comments

* adding back key and also adding "value"

Co-authored-by: Laurent Demailly <ldemailly@gmail.com>
2021-07-11 13:26:54 -07:00
John Howard 6df4ad7635
Remove warning about removed limitation (#10030)
* Remove warning about removed limitation

This hasn't been accurate since ~1.8

* fix other occurance
2021-07-09 14:11:47 -07:00
Eric Van Norman d9658dae3d
Restore istioctl experimental wait in _wait_for_istio() (#9426) 2021-04-05 13:02:04 -07:00
John Howard 984dbf0e01
Add info about SNI routing (#9276)
* Add info about SNI routing

* Apply suggestions from code review

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* add to common problems

* address comments

* fix lint

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2021-03-24 16:19:29 -07:00
carolynhu 40e39adde9
Fix wrong link for Control Ingress Traffic task (#8679) 2020-12-17 06:33:03 -08:00
Frank Budinsky 66b9b52f04
Reorder ingress tasks (#8617) 2020-12-03 09:03:26 -08:00
Frank Budinsky a70e78f25e
Test cleanup (#8564)
* Framework inject set +e at start of cleanup test script

* tabs

* fix typo

* add nl

* fix doc
2020-11-24 16:26:19 -05:00
Eric Van Norman 70d361b30d
Try different timeout for tasks/security/authorization/authz-ingress (#8163)
* Try longer timeout for tasks/security/authorization/authz-ingress/test.sh

* Go back to old 5m timeout and add failure on timeout back in

* Test with individual wait_for_istio call updates

* Revert to simply changing timeout (but keep duration in output)

* Fix call

* Comment out istioctl wait call

* Add TODO remark

* Fix lint error

* Add temporary sleep until _wait_for_istio is re-enabled

* Add wait for sleep deployment to complete
2020-09-22 19:25:13 -07:00
Ram Vennam 1ea2db035e
typo (#7744) 2020-07-17 14:07:27 -07:00
Frank Budinsky e9a89c879f
Add owner attribute to docs (#7737)
* Add owner attribute to docs

* remove @
2020-07-15 15:19:40 -07:00
Frank Budinsky 412f03105c
Kubernetes Ingress Test + fixes (#7662)
* Kubernetes Ingress Test + fixes

* cleanup

* fix circuit-breaking test

* fix lint

* remove -it
2020-07-06 07:54:35 -07:00
Frank Budinsky 01c4cce951
Add proper wait for config calls to tests (#7620)
* Add wait for config calls to tests

* two more
2020-06-24 09:48:29 -07:00
Hongyi Zhang 5fbb14bedc
Convert all old tests to new tests (#7522)
* add an example task to test

* main test function: save progress

* a working example: routing request

* improve log info and error handling

* introduce makefile

* run each test as a subtest; remove common setup from test.sh

* add another test.sh: fault-injection

* improve error handling

* check test environment

* add two more test.sh files

* fix make command for istio setup

* update two test.sh files from upstream

* add comments and update README.md

* update test.sh files from upstream

* support multiple test names

* update README

* update README.md for new framework

* remove documentation of migration steps

* undo format changes

* change separation line to '# @cleanup'

* move go code and makefile from content/ to tests/

* change package name

* make for loop more readable

* change the set of auto-sourced scripts

* add docs for all functions

* approach to deal with folders with the same name

* minor fixes to ensure everything still runs

* fix make gen error

* add a TIMEOUT argument

* make sure util/debug.sh works with new framework

* make lint-go happy

* [BIG CHANGE] allow different istio setup configs

* make linters happy

* make linters happier

* changed wording and function orders

* make error return as the 2nd argument

* add TODOs

* Update content/en/docs/tasks/traffic-management/traffic-shifting/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* only test english docs

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* allow test.sh as suffix

* move adding setup configs to tests/setup

* recommend full paths

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* require full test paths

* converting old tests to new tests: traffic-management and misc

* converting old tests to new tests: security

* remove old tests

* Update content/en/docs/tasks/security/cert-management/dns-cert/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* simplify setup configs

* Update content/en/docs/tasks/security/authentication/authn-policy/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/authentication/mtls-migration/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/authorization/authz-http/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* do not let istioctl prompt y/n

* Update content/en/docs/tasks/traffic-management/ingress/ingress-sni-passthrough/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/cert-management/plugin-ca-cert/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* simplify stuff

* rename dns-cert test.sh to test_broken.sh

* fix dns-cert doc and test

* remove egress=disabled

* fix test

* Update content/en/docs/tasks/observability/logs/access-log/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-06-11 11:15:48 -07:00
Navraj Singh Chhina e7616b2ac0
Disable ShellChecking for SC2164 (#7507)
* add missing cleanup for vs nginx

* disable SC2164 which checks safe cd

* make gen
2020-06-08 13:56:32 -07:00
Frank Budinsky e11cf24f0d
Add test: attribute to all md files (#7413) 2020-05-27 09:11:26 -07:00
Frank Budinsky f45bc9e1a8
Remove obsolete '# ' uses from all tests (#7233) 2020-05-06 19:17:11 -04:00
John Howard 4ca257992a
Refactor Secure Ingress tasks (#7025)
* Refactor Secure Ingress tasks

Ingress SDS is now the default and recommended. This removes the file
mount task, which is no longer recommended and will avoid confusion, and
cleans up the task a bit. I also documented the new supported secret
formats.

* use archive
2020-04-14 08:53:28 -07:00