9a57887706
update authz concept page for the new v1beta1 policy ( #5165 )
...
* update authz doc
* address comments.
* use master
* address more comments
* implicit enablement
* comments
* link to ref page
* fix lint
* address more comments
* Update content/en/docs/ops/common-problems/security-issues/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/reference/config/authorization/conditions/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/reference/config/authorization/conditions/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/reference/config/authorization/conditions/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/reference/config/authorization/constraints-and-properties/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* more fix
2019-11-09 06:02:52 -08:00
7e3ee2cace
fix incorrect content ( #5504 )
2019-11-09 00:09:52 -08:00
026bb329d4
Change the config names to be consistent with istioctl installation ( #5529 )
2019-11-08 16:33:52 -08:00
7bd65f7bd9
Improve the root transition doc. ( #5499 )
...
* Improve root transition doc.
* Small fix.
* Small fix.
* Small fix.
* Small fix.
* Update index.md
* Update index.md
* Small fix.
* Small fix.
* Small fix.
2019-11-08 16:22:52 -08:00
f2e005466e
Standalone operator ( #5433 )
...
* Standalone operator guide
* verify install
* separate controller and CR
* tweaks
* add section
* address review comments
* remove update command
* fix lint
2019-11-08 19:10:21 -05:00
5effeb4c3c
Update reference docs. ( #5526 )
2019-11-08 15:53:54 -08:00
2b21256025
Update helm mtls enablement instructions ( #5527 )
2019-11-08 15:49:52 -08:00
ef1ffd4cfd
Fix auth installation and its references. ( #5482 )
...
* Fix auth installation and its references.
* Apply suggestions from code review
Fix according to the feedback.
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
2019-11-08 16:51:19 -05:00
1d2c74a629
Fix bug istioctl manifest command does not read from standard input ( #5521 )
2019-11-08 10:36:52 -08:00
09db22c2ea
More updates to istioctl install ( #5483 )
...
* More updates to istioctl install
* Lint
2019-11-08 13:11:46 -05:00
b0cdd6f222
User guide for istioctl managing webhooks ( #5162 )
...
* User guide for istioctl managing webhooks
* Generate the webhook configurations
* Skip long config
* Move the task to be under setup/install directory
* Add jq as a prerequisite
* Decouple installation from the user guide
* Add explanations to config
* Change the weight
* Revisions on cleanup
* Revise headings
* Revise the search instructions
* Revise the wordings
* Revise install instructions and location
* Skip --validation
* Use istioctl to generate webhook configurations
* Use istioctl to install
* Revise the commands
* Revise the wording
* Remove two comment lines
2019-11-08 07:59:51 -08:00
acd3269915
User guide for Istio DNS certificates ( #5152 )
...
* User guide for Istio DNS certificates
A guide of how to provision and manage DNS certificates in Istio.
* Explain why uses this feature
* Use the boilerplate command
* Unindent a text block
* Add jq as a prerequisite
* Decouple installation step from the user guide
* Wording revisions
* Wording revisions and change weight
* Follow the same installation approach of CNI
* Revise the writing
* Merge the javascript functions
* Fix the lint error
- ./public/docs/tasks/security/dns-cert/index.html
* linking to /docs/setup/install/helm/#dnscerts, but dnscerts does not exist (line 58176)
<a href="/docs/setup/install/helm/#dnscerts">Customizable Install with Helm</a>
htmlproofer 3.12.0 | Error: HTML-Proofer found 1 failure!
* Use istioctl to install Istio
* Revisions according to review comments
* Add an explanation
* Revise based on review comments
* Remove the referrence to a file
2019-11-08 07:47:51 -08:00
e9ea67a96d
istioctl analyze messages documentation ( #5291 )
...
* Added first draft of all analyzer messages
* Fixed linter errors
* Add glossary entry
* Implemented PR comments
* Addressed more PR comments
* More PR comments
* PR comments implemented
* More PR comment fixes
* Removed blank line, updated annotation gloss entry
2019-11-07 14:58:52 -08:00
9c4c827938
Add podAnnotations param for cni helm chart ( #5257 )
...
* Add podAnnotations param for cni helm chart
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-11-07 14:08:53 -08:00
5d996f6f2d
Mention OpenShift specific instructions on Bookinfo tutorial ( #5429 )
...
It's easy to skip that step, and when deployment fails it will
take some time to people realize what was the mistake.
2019-11-07 13:08:17 -08:00
a6a5769f12
Organize security tasks ( #5474 )
...
* Organize security tasks
* lint errors
* fixes
* more fixes
2019-11-07 15:54:27 -05:00
cbcea241ad
update authz group task for 1.4 ( #5435 )
...
* update authz group page for 1.4
* address comments
2019-11-07 06:24:51 -08:00
6fd90678a5
Update install text ( #5437 )
2019-11-06 18:55:14 -08:00
d0dae3fb18
Auto mTLS user guide doc on istio.io ( #5313 )
...
* first rewrite of the DR removal till global mTLS section.
* remove all destinationrule for authn policy doc.
* lint fix
* add separate page for automtls
* restore the original authn policy
* new page with auto mtls separately.
* fix the lint
* fix lint and using istioctl manifest.
* complete the instructions for auto mlts
* finish and verify with install
* more delta before and after in strict
* header with certificate identity.
* no more helm
* apply the suggestion.
2019-11-06 15:20:15 -08:00
ee7afacb26
Update istioctl setup docs ( #5428 )
2019-11-06 12:11:14 -08:00
7e3bd1a0a8
Fix references to samples/operator files ( #5391 )
...
Closes https://github.com/istio/istio/issues/18441
2019-11-05 20:50:13 -08:00
db10e052ff
Fix directory structure/heading for istioctl install ( #5390 )
2019-11-05 12:37:19 -08:00
08189f25ef
Update reference docs. ( #5392 )
2019-11-05 12:03:41 -08:00
905dc2fe90
Update instructions for CNI on OpenShift ( #5388 )
...
Also use `--set` to allow easy copy and paste of commands.
2019-11-05 10:38:44 -08:00
af3c1b09c6
issue 5314 - OpenShift 4.2+ requires customized CNI settings. Documenting them here. ( #5315 )
2019-11-04 06:59:03 -08:00
4d4e6ae28e
General cleanup items. ( #5325 )
...
- Fix a bunch of heading capitalization.
- Remove words that shouldn't be in the dictionary
and update the text accordingly.
- Added a few @@ sequences to reference content files from text blocks.
- Used a few {{< source_branch_name >}} sequences to refer to the proper
branch in GitHub rather than master.
2019-11-04 06:41:54 -08:00
a51eabbd47
[ImgBot] Optimize images ( #5323 )
...
*Total -- 1,169.34kb -> 1,168.70kb (0.05%)
/static/img/istio-logo.svg -- 0.24kb -> 0.19kb (20.08%)
/static/img/istio-whitelogo-nobackground-unframed.svg -- 0.32kb -> 0.26kb (19.64%)
/static/img/istio-whitelogo-nobackground-framed.svg -- 0.35kb -> 0.29kb (17.27%)
/content/zh/docs/ops/architecture/arch.svg -- 92.54kb -> 92.35kb (0.2%)
/content/en/docs/ops/architecture/arch.svg -- 92.54kb -> 92.35kb (0.2%)
/content/zh/blog/2018/egress-mongo/bookinfo-ratings-v2-mongodb-external.svg -- 66.77kb -> 66.76kb (0.01%)
/content/en/blog/2018/egress-mongo/bookinfo-ratings-v2-mongodb-external.svg -- 66.77kb -> 66.76kb (0.01%)
/content/zh/blog/2018/egress-tcp/bookinfo-ratings-v2-mysql-external.svg -- 66.77kb -> 66.76kb (0.01%)
/content/en/blog/2018/egress-tcp/bookinfo-ratings-v2-mysql-external.svg -- 66.77kb -> 66.76kb (0.01%)
/content/zh/blog/2018/egress-https/bookinfo-details-v2.svg -- 67.00kb -> 66.99kb (0.01%)
/content/en/blog/2018/egress-https/bookinfo-details-v2.svg -- 67.00kb -> 66.99kb (0.01%)
/content/zh/blog/2017/0.1-auth/istio_auth_overview.svg -- 137.41kb -> 137.41kb (0.01%)
/content/en/blog/2017/0.1-auth/istio_auth_overview.svg -- 137.41kb -> 137.41kb (0.01%)
/content/en/blog/2018/v1alpha3-routing/virtualservices-destrules.svg -- 68.97kb -> 68.97kb (0.01%)
/content/zh/blog/2018/v1alpha3-routing/virtualservices-destrules.svg -- 68.97kb -> 68.97kb (0.01%)
/content/zh/blog/2018/v1alpha3-routing/gateways.svg -- 84.75kb -> 84.74kb (0%)
/content/en/blog/2018/v1alpha3-routing/gateways.svg -- 84.75kb -> 84.74kb (0%)
Signed-off-by: ImgBotApp <ImgBotHelp@gmail.com>
2019-11-04 06:32:37 -08:00
d7544d4388
fix invalid operator example. ( #5334 )
2019-11-04 05:55:04 -08:00
9532bc0dda
update authorization for HTTP task for v1beta1 policy ( #5185 )
...
* update authorization for HTTP task for v1beta1 policy
* fix
* small update
* resolve comments
* address comments
* minor
* more fix
* address comments
* address comments
* remove namespace-level
* more fix
* remove duplicate
2019-11-01 15:54:22 -07:00
3f16a004aa
remove completed pods ( #5309 )
...
* remove completed pods
as they aren't shown any more, not seeing them in the generated manifest via `istioctl manifest generate --set profile=demo`
* remove sidecars
We also recently removed sidecars for policy telemetry and pilot for demo profile.
2019-10-31 13:48:04 -07:00
4bf2fb2e5e
Remove uses of istio-demo.yaml ( #5311 )
...
* Remove uses of istio-demo.yaml
* broken link
2019-10-31 13:38:03 -07:00
cdd8d7f50f
Clarify istioctl install support for helm options ( #5302 )
...
* Clarify istioctl helm option support
* add helm deprecation warning to install options page
* remove space
* add prepend to .spelling
* address review comments
2019-10-31 09:22:07 -07:00
facbed0482
update authorization for TCP task for v1beta1 policy ( #5196 )
...
* update authorization for TCP task for v1beta1 policy
* address comments
* address comment
* address comments
* more fix
* resolve comments
* fix
2019-10-31 09:37:35 -04:00
161afd25df
Remove bad aliases ( #5295 )
2019-10-30 12:09:20 -04:00
4923c025b4
Simplify a little bit OpenShift instructions ( #5286 )
...
* Simplify a little bit OpenShift instructions
* Apply suggestions from code review
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-10-30 11:59:27 -04:00
e3fd2b8969
update install doc on icp. ( #5294 )
2019-10-30 10:06:47 -04:00
b9280ce88b
Update multicluster instructions ( #5293 )
2019-10-29 20:59:21 -04:00
df5410b037
Update reference docs. ( #5292 )
2019-10-29 16:42:48 -07:00
abab549d5d
Fix broken links ( #5288 )
2019-10-29 16:18:21 -07:00
c9ec2cef42
Update reference docs. ( #5290 )
2019-10-29 16:17:41 -07:00
72ac49375e
istioctl upgrade feature docs ( #5245 )
...
* Draft of upgrade docs
* Fixed PR comments
* More PR review comments addressed
* Added note about -f and --set flag support
* Further PR comments
* shortcode added for istioctl
* rebase and typo fixes
* Typo fixes
2019-10-29 17:12:11 -04:00
2fa3abddaa
Improvements to install with istioctl guide ( #5284 )
...
* Improvements to install with istioctl guide
* move uninstall to the end
2019-10-29 11:05:42 -07:00
83908ddaa4
Fix certificates generation in secure gateways ( #5263 )
...
* fix the certificate and private key generation for the first section
* rewrite the second section
* fix the third section
* fix the troubleshooting section
* remove a reference to generating certificates and keys in the ingress passthru task
* a certificates -> a certificate, Generate a certificate -> Create a certificate
2019-10-29 08:07:35 -07:00
241143bfa9
add port name "tls" to both Service and Endpoints ( #5261 )
...
otherwise the service is treated as HTTP, causing an error
2019-10-29 08:00:36 -07:00
f86b9fc90f
Make quick-start quicker ( #5279 )
2019-10-29 07:25:35 -07:00
e5cb80badc
add a cleanup subsection to set desired outbound traffic policy mode ( #5264 )
...
* add a cleanup subsection to set desired outbound traffic policy mode
the title: "Set the `global.outboundTrafficPolicy.mode` to your desired mode"
* remove a redundant empty line
* rename the subsection to be "Set the outbound traffic policy mode to your desired value"
* remove a semicolon at the end of the subsection's title
* add `uniq` so the output of the current outbound traffic policy mode will appear once
2019-10-29 07:10:35 -07:00
9e676b9b7c
Move standalone-operator install to ops section ( #5277 )
2019-10-29 07:03:36 -07:00
f220f655a7
Deprecate helm install ( #5270 )
...
* Deprecate helm install
* fix lint
* address review comments
* correction
2019-10-29 06:37:34 -07:00
0045ba590b
fix operator doc. ( #5276 )
2019-10-29 06:25:35 -07:00
c6bba52018
Change multicluster and CNI instructions to use istioctl ( #5273 )
...
* Change multicluster and CNI instructions to use istioctl
* Lint
* Lint
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/shared-gateways/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/gateways/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/gateways/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-10-28 20:07:34 -07:00
c1aa9858ab
Remove kubectl from the spelling dictionary. ( #5268 )
2019-10-28 19:45:34 -07:00
c2d1a234c3
Experiment with improved istioctl TOC layout. ( #5274 )
2019-10-28 19:19:34 -07:00
2124af177c
Update reference docs. ( #5271 )
2019-10-28 16:45:12 -07:00
68c6ee0b84
Update reference docs. ( #5269 )
2019-10-28 14:42:16 -07:00
1b10a13ea2
Remove demo-auth profile from operator ( #5243 )
2019-10-25 11:35:47 -04:00
03ca9f6478
Move pages out from the Concepts section ( #5256 )
...
* Move Deployment Models from Concepts to Setup
Signed-off-by: rcaballeromx <grca@google.com>
* Move Architecture from Concepts to Ops.
Signed-off-by: rcaballeromx <grca@google.com>
* Move Performance page from Concepts to Ops
Signed-off-by: rcaballeromx <grca@google.com>
2019-10-24 15:40:25 -07:00
dcb8b7ecef
Add `and` to description ( #5253 )
...
* Add to description
* Update content/en/docs/concepts/what-is-istio/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
2019-10-24 12:32:42 -07:00
da331d6934
Fix formatting issues. ( #5252 )
2019-10-24 11:11:42 -07:00
3fec0dd43f
update user guide ( #5233 )
2019-10-24 10:07:43 -07:00
2190ff0010
Fix duplicate example, replace with example for simulating apply ( #5240 )
2019-10-24 07:01:47 -07:00
272a55b88b
Update istioctl auth tls-check example to reflect https://github.com/istio/istio/pull/17720 ( #5219 )
...
* content/en/docs/tasks/security/mutual-tls/index.md
* Correct destination rule name in tls-check example
* UPdate check-policy.md
2019-10-23 12:19:42 -07:00
a0833c9e8b
Add warning for kubectl rollout restart ( #5238 )
...
* Add warning for kubectl rollout restart
* spelling
2019-10-23 10:46:42 -07:00
962c9ac0aa
Remove one last mention of demo-auth ( #5236 )
2019-10-23 08:59:11 -07:00
8a4324d8d8
Add documentation for galley.enableAnalysis ( #5216 )
...
* Add documentation for galley.enableAnalysis
* add link to validation message reference docs
* fix linter error
* Apply suggestions from code review
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
* add caveats / differences from istioctl analyze
* Change wording slightly
* Fix spelling errors
* Apply suggestions from code review #2
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
2019-10-23 07:16:12 -07:00
c8723d052d
Add link to enabling policy enforcement ( #5232 )
2019-10-22 12:09:08 -07:00
4cefe4f495
update user guide ( #5230 )
2019-10-22 11:45:10 -07:00
745d1f30c4
Fix protocol sniffing docs ( #5226 )
...
* Fix protocol sniffing docs
These were outdated
* Lower case headers
2019-10-22 11:33:50 -07:00
c73c9df09b
Put text into a text box ( #5228 )
...
* Put text into a text box
* Fix lint error with extra line
2019-10-22 11:32:02 -07:00
5653996827
Fix ordering between setup and prereq pages ( #5229 )
2019-10-22 11:30:43 -07:00
1fb510e814
Clean up pod requirement around protocol naming ( #5225 )
...
* Clean up pod requirement around protocol naming
Just put a quick summary here and link to the detailed doc to clean things up
* Fix link
2019-10-22 11:15:19 -07:00
d20f491832
Clean up config profiles page ( #5227 )
...
* Clean up config profiles page
There is no longer an auth profile, and clean up a minor usage of helm -> Helm
* Fix lint
2019-10-22 11:08:20 -07:00
523094bd70
Update docs for CoreDNS newer than 1.3.2 ( #4811 )
...
* Update docs for CoreDNS newer than 1.3.2
* Use tabs in website
* Fix lint issues
2019-10-22 10:16:28 -07:00
04058ad57a
Fix broken Helm links ( #5217 )
...
Signed-off-by: rcaballeromx <grca@google.com>
2019-10-21 16:00:20 -07:00
5e7715aee2
Operator docs fixes ( #5204 )
...
* Fix operator docs
* Change default to demo
* Clarified default profile meaning
2019-10-21 10:26:37 -07:00
92eac8892c
Quote jsonpath to support zsh ( #5211 )
2019-10-21 10:02:37 -07:00
e1072c7494
Revert port back to 9411 ( #5156 )
2019-10-21 09:54:37 -07:00
e8f8b4feb8
Improve snippet logic. ( #5205 )
...
- Support snippets that specify the body syntax and output
syntax of the snippet.
- Snippets with bash syntax triggered an incorrect error message.
- No error message was produced for a misnamed snippet
- Convert a security task to use snippets to populate its
many preformatted blocks.
2019-10-20 16:27:51 -07:00
402e41d772
modify watch namespace to only Istio-operator ( #5183 )
...
* modify watch namespace to only Istio-operator
also start the eval with demo profile first.
* use demo as the first starting point
* update grab script
* add watch ns
* fix lint
2019-10-20 15:00:36 -07:00
0c464a3bdc
Updated formatting of Virtual Service in docs ( #5209 )
2019-10-20 07:12:05 -07:00
07d0b4c7d4
Added references to glossary ( #5208 )
...
* Added reference to pod
* Added missing workload instance references
2019-10-20 07:11:17 -07:00
9a90c888d4
Add missing backticks to display example DNS name ( #5207 )
...
Reads: '..global'
Should read: '<name>.<namespace>.global'
2019-10-20 07:10:18 -07:00
a42efeb7f8
Remove unnecessary backslashes from example SVID ( #5206 )
...
reads: `spiffe://\<domain\>/ns/\<namespace\>/sa/\<serviceaccount\>`
should read: `spiffe://<domain>/ns/<namespace>/sa/<serviceaccount>`
2019-10-20 07:06:35 -07:00
92c548ea1d
Update reference docs. ( #5203 )
2019-10-19 06:46:31 -07:00
0350dc178a
Fix kiali link ( #5002 )
2019-10-19 06:17:35 -07:00
0aefbf4a95
Added references to glossary ( #5201 )
...
* Added reference to mixer
* Added reference for Pilot
* Added reference for Pilot
2019-10-19 06:10:36 -07:00
241bab8ab9
Remove experimental from istioctl manifest and profile commands ( #5195 )
...
* Remove experimental from istioctl manifest and profile commands
* Fix link
2019-10-19 06:00:36 -07:00
adc0b9c44a
remove deprecated authz permissive task ( #5191 )
...
* remove deprecated authz permissive task
* update alias
2019-10-18 13:49:56 -07:00
7b3a0a8591
update logging-stack.yaml in Logging with Fluentd ( #5194 )
...
Use apps/v1 Deployment rather than extensions/v1beta1
2019-10-18 15:48:59 -04:00
21b8391695
[master] update doc for http prob annotation ( #5192 )
...
* update doc for http prob annotation
* address comments from frankbu and incfly
* typo
* option -> options
* Update content/en/docs/ops/app-health-check/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-10-18 13:47:39 -04:00
55fba592f8
Fixed pinned branch references. ( #5190 )
2019-10-18 10:10:55 -07:00
dbf110d977
global hub and tag defaults are only for dev ( #5172 )
...
In release this is changed to below:
```yaml
global:
# Default hub for Istio images.
# Releases are published to docker hub under 'istio' project.
# Daily builds from prow are on gcr.io
hub: docker.io/istio
# Default tag for Istio images.
tag: 1.3.2
```
Not sure how to fix, but having the dev defaults here may be misleading.
2019-10-18 08:04:55 -07:00
723f6eaa63
Document analyzer code IST0105 ( #5161 )
...
* Document analyzer code IST0105
* Update content/en/docs/reference/config/analysis/ist0105/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
2019-10-18 07:48:47 -07:00
1fa95b7953
Update stats filter instruction to versioned config ( #5189 )
...
* Update to use envoyfilter config in 1.3 branch
* use source_branch
2019-10-18 07:38:55 -07:00
38f252fb68
Get rid of demo-auth ( #5024 )
...
* Get rid of demo-auth
Signed-off-by: Chun Lin Yang <clyang@cn.ibm.com>
* remove strict mtls mode
* address comments
* fix linter error
* Add instruction for mtls
* add back demo-auth in configuration profile
* Update content/zh/docs/setup/kubernetes/install/kubernetes/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/health-check/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/https-overlay/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/https-overlay/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/plugin-ca-cert/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/plugin-ca-cert/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/health-check/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
2019-10-18 09:55:29 -04:00
8d9d2ace3c
Delete a stray file.
2019-10-17 13:46:29 -07:00
7fd714b507
Simplify CRD check step ( #5176 )
...
Currently we are asking users to get a count of their CRDs. This is hard
because the docs fall out of sync very frequently, they may have CRDs
for the operator or something, etc. In generally its really hard to be
right here, and it involves the users manually running this command over
and over until it works.
Instead, we can just wait for the jobs to complete. This has the benefit
of working regardless of their environment, and won't fall out of date.
2019-10-17 13:21:55 -07:00
63225a0ceb
Fix order of entries in docs/reference. ( #5177 )
2019-10-17 11:41:06 -07:00
d6445fc726
Update reference docs. ( #5173 )
...
preliminary.istio.io will now display reference material for the release-1.4 branches
of istio/istio, istio/api, and istio/operator.
2019-10-17 11:09:11 -07:00
32592c56b2
Correct secure ingress task cleanup ( #5175 )
2019-10-17 10:42:15 -07:00
6e1825036e
[ImgBot] Optimize images ( #5167 )
...
*Total -- 2,116.10kb -> 2,113.71kb (0.11%)
/assets/inline_images/landing/routing-and-load-balancing.svg -- 2.02kb -> 1.49kb (26.05%)
/assets/inline_images/landing/telemetry-and-reporting.svg -- 2.26kb -> 1.74kb (22.86%)
/assets/inline_images/landing/policy-enforcement.svg -- 1.41kb -> 1.12kb (21.01%)
/static/img/istio-bluelogo-nobackground-unframed.svg -- 0.32kb -> 0.26kb (18.73%)
/static/img/istio-whitelogo-bluebackground-unframed.svg -- 0.39kb -> 0.32kb (17.75%)
/static/img/istio-bluelogo-whitebackground-unframed.svg -- 0.39kb -> 0.32kb (17.13%)
/static/img/istio-bluelogo-nobackground-framed.svg -- 0.35kb -> 0.29kb (17.13%)
/assets/inline_images/landing/resiliency.svg -- 2.33kb -> 1.94kb (16.83%)
/static/img/istio-bluelogo-whitebackground-framed.svg -- 0.42kb -> 0.35kb (16.47%)
/static/img/istio-whitelogo-bluebackground-framed.svg -- 0.42kb -> 0.35kb (15.89%)
/assets/inline_images/landing/istio-logo.svg -- 0.17kb -> 0.16kb (6.25%)
/assets/inline_images/istio-whitelogo-bluebackground-rounded.svg -- 0.21kb -> 0.21kb (3.21%)
/content/en/blog/2018/egress-https/https_from_the_app.svg -- 16.61kb -> 16.59kb (0.12%)
/content/en/about/contribute/diagrams/diagram-guidelines.svg -- 47.65kb -> 47.63kb (0.05%)
/content/en/blog/2018/egress-monitoring-access-control/https-to-gateway.svg -- 37.47kb -> 37.46kb (0.05%)
/content/en/blog/2018/egress-monitoring-access-control/http-to-gateway.svg -- 37.63kb -> 37.61kb (0.05%)
/content/en/docs/reference/config/policy-and-telemetry/mixer-overview/topology-with-cache.svg -- 81.78kb -> 81.75kb (0.03%)
/content/en/blog/2019/data-plane-setup/arch-2.svg -- 82.76kb -> 82.74kb (0.03%)
/content/en/docs/setup/install/multicluster/shared-gateways/diagram.svg -- 116.08kb -> 116.05kb (0.02%)
/content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/EgressGatewayWithSNIProxy.svg -- 71.72kb -> 71.71kb (0.02%)
/content/en/docs/examples/mesh-expansion/bookinfo-expanded/mesh-expansion.svg -- 217.56kb -> 217.53kb (0.01%)
/content/en/blog/2017/mixer-spof-myth/mixer-spof-myth-2.svg -- 91.28kb -> 91.28kb (0.01%)
/content/en/blog/2019/egress-traffic-control-in-istio-part-2/SecurityArchitectureWithL3Firewalls.svg -- 502.86kb -> 502.83kb (0%)
/content/zh/docs/concepts/multicluster-deployments/multicluster-with-gateways.svg -- 249.43kb -> 249.42kb (0%)
/content/en/docs/setup/install/multicluster/gateways/multicluster-with-gateways.svg -- 250.49kb -> 250.48kb (0%)
/content/zh/docs/concepts/multicluster-deployments/multicluster-with-vpn.svg -- 150.61kb -> 150.60kb (0%)
/content/en/docs/setup/install/multicluster/shared-vpn/multicluster-with-vpn.svg -- 151.47kb -> 151.47kb (0%)
Signed-off-by: ImgBotApp <ImgBotHelp@gmail.com>
2019-10-17 10:05:01 -07:00
c8ac8eb91c
Better organize operations guide material ( #5163 )
...
\
2019-10-16 09:59:04 -07:00
8a29b55cf5
Add microservices tutorial - first modules ( #5111 )
...
* Add intro, fix broken links/titles, set 80 columns
* Clarified, expanded wording and made it consistent
* Fixed curl case
* Removed tutorial node and moved to examples node
* Fixed PR comments
2019-10-15 12:02:38 -07:00
31d21ffbb4
migrate Deployment apiVersion from extensions/v1beta1 to apps/v1 to support k8s 1.16 ( #5159 )
...
* migrate Deployment apiVersion from extensions/v1beta1 to apps/v1 to support k8s 1.16
* migrate Deployment, PodSecurityPolicy apiVersion to support k8s 1.16
2019-10-15 10:56:21 -07:00
d5482da0aa
A compromise PR of a long original work ( #5146 )
...
* A compromise PR of a long original work
See PR: https://github.com/istio/istio.io/pull/5142
Pretty much everything about this PR is compromised...
* Apply reviewer comments.
2019-10-15 09:55:20 -07:00
f7dd8c6613
Consolidate release-specific material into the news section. ( #5138 )
2019-10-15 09:27:11 -07:00
01c8fe2a1b
Update fault injection percentage syntax ( #5139 )
2019-10-15 07:31:22 -07:00
e392d7260a
add a task about Kubernetes Services for egress ( #4710 )
...
* add the first version of Egress with Kubernetes Services
* add explicit disabling of TLS in destination rules
* rewrite the motivation for Kubernetes service entries
motivation: location transparency
* remove pre-Istio from .spelling
* add "The external services are not part of an Istio service mesh..."
so they cannot perform the mutual TLS of Istio.
* split a long line
* expand the explanations about disabling Istio's mutual TLS
* add explanation about disabling TLS mode in the HTTP case
* add explanation about disabling Istio mutual TLS for HTTPS case
* unencoded -> unencrypted
* fix a link
* fix the location of the task to be in content/en
2019-10-15 01:30:21 -07:00
1f71199ebf
Add doc page for 'istioctl analyze' ( #5147 )
...
* Add doc page for 'istioctl analyze'
* Address lint comments
* Fix spelling errors
* Use github_blob in link
* Changes based on PR feedback
* Fix lint issues
* More changes based on PR feedback
* Fix couple typos
* Remove one word
* Shorten title and use bulletted list
2019-10-14 15:23:19 -07:00
beddb17a9a
update reference docs ( #5148 )
2019-10-14 13:01:58 -07:00
2028027493
Added references to glossary ( #5143 )
...
* Added reference link to Operator
* Added reference to Envoy
* Added reference to virtual service
2019-10-13 13:42:54 -07:00
9aaf5e4cba
Update reference docs. ( #5136 )
2019-10-11 13:18:13 -07:00
c82861d10e
Clarify relationship between pods and workloads ( #5130 )
...
* Clarify relationship between pods and workloads
* Update content/en/docs/reference/glossary/pod.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
2019-10-11 12:55:21 -07:00
25d8f5c983
SCC policies are not specific to BookInfo ( #5132 )
...
* SCC policies are not specific to BookInfo
* Update index.md
2019-10-11 12:36:22 -07:00
38c6a004e5
Add missing word(s) ( #5129 )
...
Fixes #5089
2019-10-11 09:06:20 -07:00
152a485e7d
Istioctl describe entry for op guide ( #5121 )
...
* Istioctl describe op guide
* Fix lint
* spelling
* small corrections
* wording tweak
2019-10-11 07:56:21 -07:00
1bd516b7fa
Remove incorrect warning ( #5124 )
...
cc @lambdai who pointed out this is not accurate
2019-10-10 15:46:20 -07:00
b68cb7540c
Update subcommand for dashboard controlz ( #5119 )
2019-10-10 08:17:50 -07:00
f556d09041
Fix lint in the announcement ( #5106 )
...
* fix lint
* add spelling
* temporary remove bad doc
2019-10-09 12:16:17 -04:00
dba3b6ffaa
Task describing new experimental 'describe pod' sub-command ( #4971 )
...
* Task describing new experimental 'describe pod' sub-command
* Move document to troubleshooting and address comments
* Restructured so that commands and command responses are in the same text block
* Rewrite the `istioctl describe` task.
This rewrite fixes the style, tone, and language of the content. Additionally,
it adds links to relevant pages and glossary entries. Lastly, it adds and
improves the markup used.
Signed-off-by: rcaballeromx <grca@google.com>
* Add @frankbu's syntax correction for bash block
2019-10-09 11:41:23 -04:00
4492b89b4f
Ensure consistent use of 'multicluster'. ( #5108 )
2019-10-08 20:55:42 -07:00
74559202aa
Update reference docs. ( #5110 )
2019-10-08 20:54:49 -07:00
03469d0ad9
Fix casing of microk8s.io URL. ( #5103 )
2019-10-08 13:05:28 -07:00
9944d952ff
Add support for config analysis messages. ( #5096 )
...
- This provides the place where we can pour config analysis message
descriptions.
2019-10-08 10:30:41 -07:00
78ec428817
Improve concepts organization ( #5095 )
...
* cleanup unused files
* tweak wording
* merge traffic management architecture material
* reorg top level concept sections
* lint errors
* fix list style
2019-10-04 11:43:31 -07:00
6535ab7103
Use same bookinfo version on both clusters of MC example ( #5094 )
...
* Use same bookinfo version on both clusters of MC example
* apply reviews serviceaccount
2019-10-03 07:53:29 -07:00
910991317e
Clarify protocol enablement ( #5090 )
...
* Clarify protocol enablement
* clarify name syntax
* fix bad link
2019-10-02 09:36:26 -07:00
cfef86521c
Remove mention of Istio managed certmanager ( #5092 )
...
* Remove mention of Istio managed certmanager
* Fix lint
* Number list
* Fix indent
* Update content/en/docs/tasks/traffic-management/ingress/ingress-certmgr/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-10-02 09:26:25 -07:00
60aa772335
Remove inappropriate .spelling entry ( #5087 )
2019-09-30 11:32:23 -07:00
7701cc2387
Add docs for psp istio-cni settings ( #5082 )
...
* Add docs for psp istio-cni settings
* Add PodSecurityPolicy to spelling file
2019-09-30 14:15:51 -04:00
00c997abb3
Fix broken links ( #5084 )
2019-09-30 11:06:23 -07:00
fbc726c6b7
Remove usages of curl inside istio-proxy ( #5073 )
...
* Remove usages of curl inside istio-proxy
Distroless builds of Istio do not contain curl, so we should not tell
users to use it. Pilot-agent handles this functionality for us
* Fix lint error
2019-09-27 16:46:22 -07:00
da9fb2726d
Fix probe rewrite configuration command ( #5076 )
...
Signed-off-by: Venil Noronha <veniln@vmware.com>
2019-09-27 16:40:22 -07:00
d42dfe94ba
Introduce top-level News section. ( #5060 )
2019-09-27 07:09:58 -07:00
37f3af18a2
Replace multicast address with class E ( #5051 )
...
Ignoring unrelated broken link.
* Replace multicast address with class E
* address comments
* Update content/en/docs/setup/install/multicluster/gateways/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/gateways/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/gateways/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-09-27 09:34:05 -04:00
7fe843b480
Small traffic-management corrections ( #5062 )
2019-09-26 15:04:43 -07:00
351710d058
Egress TLS origination port 443 must be HTTPS ( #5049 )
...
* Port 443 must be HTTPS
* Port 443 must be HTTPS
2019-09-26 12:05:15 -04:00
0baea02755
Update reference docs. ( #5054 )
2019-09-25 12:14:37 -07:00
e606e95503
Fix typo ( #5055 )
2019-09-25 12:00:42 -07:00
a5f38e1bbc
document deleting the istio-system namespace in till uninstall path ( #5043 )
2019-09-24 07:31:13 -07:00
4a3d0c2d3d
Should not use loopback addresses ( #5036 )
...
* fix multi cluster dns docs
* fix multi cluster dns docs
* ignore multicast spelling check
2019-09-23 11:02:16 -07:00
28db342298
Minor egress fixes ( #5025 )
...
* fix the protocol in an HTTPS URL
* add "Enable Envoy's Access Logging" step to egress tasks
2019-09-21 23:41:11 -07:00
1ecc6cf6bb
Updated traffic management concept guide ( #5014 )
...
* New traffic management rewrite
* Updated traffic management guide
* Fix typo
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: John Howard <howardjohn@google.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: John Howard <howardjohn@google.com>
* Implementing Frank and John's edits
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Data plane definition
* Added glossary links
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Implementing Frank's suggestions
* More edits
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* More edits from Frank and Srinath
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* More edits
* Update index.md
* yet more edits
* Lint fixes and CRD glossary entry
* more links
* sdake's edits
2019-09-20 12:51:10 -07:00
19a37e672b
Download button and flow ( #5029 )
...
* download flow
* footer
2019-09-19 14:59:54 -07:00
58313738e4
url lint errors ( #5028 )
2019-09-19 14:35:51 -07:00
84b5aaca9e
Mention mirror_percent field in mirroring task ( #4975 )
...
* Mention mirror_percent field in mirroring task
* Apply suggestions from code review
Co-Authored-By: Adam Miller <1402860+adammil2000@users.noreply.github.com>
2019-09-18 09:56:13 -07:00
9dae69638c
update psp ( #4977 )
2019-09-18 08:40:38 -07:00
c0284014fb
Rename Tasks/Telemetry to Tasks/Observability ( #4968 )
...
Matches a similar effort started in #4448 . Fixes #4730 .
2019-09-17 07:57:06 -07:00
23c0e985fa
Remove "etc" from service version glossary term ( #5001 )
...
The etc does not add to the statement being made. Fixes #4899 .
2019-09-17 07:33:06 -07:00
c8f4c9af40
typo: diconnected ( #5006 )
2019-09-16 13:32:16 -07:00
2ac88b5ecc
larger machine size that can fit default istio install ( #4927 )
2019-09-16 11:55:52 -07:00
05669c6244
Fix multi-cluster profile descriptions ( #4996 )
2019-09-13 14:52:54 -07:00
b038c281c6
Fix service version glossary entry ( #4994 )
2019-09-13 12:21:55 -07:00
06f37a9323
Add instructions for deleting Istio ( #4992 )
2019-09-13 10:37:55 -07:00
1c380509b1
update service name requirement page ( #4976 )
...
* update service name requirement page
* fix lint
* manually merge content from #4973
2019-09-12 17:29:11 -04:00
e4d9f90839
Update reference docs. ( #4979 )
2019-09-12 13:23:39 -07:00
82f6ed62db
Final prep before creating the 1.3 branch.
2019-09-12 10:12:57 -07:00
bc08e6eb9a
Add the upgrade notice for Istio 1.3 ( #4931 )
2019-09-12 10:07:41 -07:00
71145ac443
Error in Secure Gateways (SDS) extra <angle brackets> ( #4930 )
...
* Fix bash: syntax error near unexpected token
* Use <password> throughout
* Add angle brackets for single-backticked 'password'
2019-09-12 12:02:20 -04:00
91c93a39b3
Added a bunch of links around istioctl. ( #4970 )
2019-09-12 08:26:58 -07:00
c8e691d744
Point users to the version-specific release page entry. ( #4969 )
2019-09-12 07:47:50 -07:00
e3ed67fc9f
Make component introspection more user-centric ( #4966 )
...
* Removes instructions that are not exposed in the Helm Charts.
* Replaces kubectl port-forward with the new istioctl equivalent.
Fixes #4852 .
2019-09-12 06:51:11 -07:00
bb66f4e90c
Remove sudo call from minikube setup docs ( #4967 )
...
sudo use with minikube is not generally advisable or necessary.
Fixes #4845 .
2019-09-12 06:31:05 -07:00
ef3d658fea
Add ops doc on enabling in-proxy metrics generation for 1.3 ( #4957 )
2019-09-12 06:29:49 -07:00
6cee42471f
Add aside to the Node agent concept section mentioning the debug endpoint ( #4914 )
2019-09-12 06:21:37 -07:00
e1db23d5c7
Improve "destination" glossary definition ( #4964 )
...
Trim some content that is best left to other glossary entries.
Fixes #4886 .
2019-09-12 06:16:56 -07:00
78a3473b94
Fix Envoy stats examples in egress docs ( #4903 )
2019-09-12 06:03:56 -07:00
b8224eb147
Update text and links to refer to AKS-engine ( #4868 )
2019-09-12 05:56:45 -07:00
2fe5079929
Reword "service name" glossary definition ( #4965 )
...
Slight wording adjustments for better flow. Fixes #4895 .
2019-09-12 05:52:56 -07:00
7fbeb7358b
Update Performance and Scalability page for istio 1.3 ( #4956 )
2019-09-11 13:41:56 -07:00
50a192392b
Sidecar injection ( #4947 )
...
* Update for new istioctl value requirement
* Update Sidecar Injection docs
Part of this is fixing inaccurate information, and part is trying to
simplify it a bit. If I did a bad job simplifying I'll just revert most
of this and send just the essential fixes.
* Fix typos
* Update content/en/docs/setup/additional-setup/sidecar-injection/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-09-11 09:16:56 -07:00
d06177b3ee
Add operator repo to internal Istio repos ( #4955 )
2019-09-10 16:09:55 -07:00
d3d3f9eb1c
Add docs to the Istio operator CLI guide ( #4936 )
...
* Add docs to the Istio operator CLI guide
* Edits
* Edits
* Update index.md
Changed the structure a bit and performed a copy edit.
* Update index.md
* Update index.md
* Update namespaces
* Added node agent example
* Review comments
* Update link
* Lint
* Lint
* Lint
* Lint
* Review comments, lint
* Fix github link
* Review comments
* Review comments
* Lint
2019-09-10 14:51:56 -07:00
aa0f287161
Remove out-dated SDS stuff ( #4924 )
2019-09-10 17:06:35 -04:00
883ed8f797
Clarify multi-match and remove sourceLabels doc ( #4953 )
...
* Clarify multi-match and remove sourceLabels doc
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
2019-09-10 13:18:58 -07:00
454a091864
Revise ingress-sds user guide ( #4946 )
...
* add space after -
* revise
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-09-10 12:17:56 -07:00
c4dd5227f5
Replace uses of ``` with {{< text >}} ( #4950 )
...
- Add a lint check to prevent further use of ```
2019-09-10 10:55:41 -07:00
9ff424c3ec
Add docs for updated Citadel namespace targeting mechanism ( #4746 )
...
* Add docs for updated Citadel namespace targeting mechanism
* Make doc voicing and audience pronouns fit rest of docs
2019-09-10 07:51:56 -07:00
1222c37629
remove force flag for istio init chart upgrade. ( #4910 )
2019-09-10 05:43:55 -07:00
6970d5746c
Refresh docs to include IstioControlPlane proto ( #4948 )
2019-09-09 21:19:57 -07:00
0b4077a0e4
Remove port name requirement ( #4928 )
...
* Remove port name requirement
We now do protocol sniffing.
Note - this is definitely not safe to merge. We still need docs explaining protocol sniffing, and how to select a port type explicitly (required for things other than tcp/http, and more performant if you know its tcp/http). Not sure the path forward for this
* Add protocol selection doc
* Fix lint
* Add FAQ
2019-09-09 10:50:44 -07:00
a940cd3227
Update installation-options and installation-option-diff files ( #4866 )
...
Update installation-options and installation-option-diff files to reflect latest release
changes (v1.3).
Fixes Bug: #4864
2019-09-07 07:50:44 -07:00
d46044856c
Update reference docs. ( #4937 )
2019-09-07 07:13:42 -07:00
841d44c4c5
Small correction in IBM Cloud platform instructions ( #4932 )
2019-09-06 13:54:43 -07:00
2b9c7199c8
Remove platform-specific install instructions ( #4923 )
...
* Remove platform-specific install instructions
* fix broken zh images
* fix ibm zh images
* fix broken link
* fix spelling
* wording tweak
* tweaks
* Update content/en/docs/setup/platform-setup/gke/index.md
Co-Authored-By: navinger <navinger@google.com>
* Update content/en/docs/setup/platform-setup/gke/index.md
Co-Authored-By: navinger <navinger@google.com>
* Update content/en/docs/setup/platform-setup/gke/index.md
Co-Authored-By: navinger <navinger@google.com>
* Update content/en/docs/setup/platform-setup/gke/index.md
* fix broken link
2019-09-06 14:08:59 -04:00
8a119d66b2
Add Istio Operator install guide ( #4790 )
...
* Added operator install guide
Added draft of operator install doc
Added entries to dict and fixed typo
Fixed tip syntax error
Moved install docs to new en folder structure
Toned-down intro, bash command fixes, reordered subsections
* PR review feedback, link from feature status page
* Fixed install verification example
2019-09-06 09:17:02 -07:00
661155bd70
Enable OpenShift ( #4905 )
2019-09-06 07:58:03 -07:00
4210222e60
Align multi-cluster examples with new terminology ( #4925 )
...
* Align multi-cluster examples with new terminology
* Update content/en/docs/setup/install/multicluster/_index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/setup/install/multicluster/_index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/setup/install/multicluster/gateways/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
2019-09-06 07:10:03 -07:00
c05d6c082b
Remove warning about obscure edge case in install ( #4916 )
...
I don't think we need to document every obscure edge case, especially in the very first page a user will look at. If the user follows our docs, this will never happen. If they *don't* follow the docs, they still will probably never hit this.
2019-09-06 07:00:03 -07:00
dc7acb1b18
[Release 1.3] Temporarily disable the user guide of Istio Vault integration for release 1.3 ( #4904 )
...
* Temporarily disable the user guide of Istio Vault integration for release 1.3
Istio release 1.3 uses new k8s JWT (https://github.com/istio/istio/pull/16147 ),
which breaks the user guide of Istio Vault CA integration for release 1.3.
This PR temporarily disables the user guide of Istio Vault CA integration for release 1.3.
2019-09-05 20:32:27 -07:00
05c692b820
Update ingress-sds ( #4906 )
...
* update ingress-sds
* revise
* revise
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update index.md
2019-09-05 15:33:02 -07:00
b100d0edd9
Remove unneeded info in Setup page ( #4918 )
...
* Remove unneeded info in Setup page
* You really don't need an "detailed understanding of sidecar injection"... Istio should just work out of the box.
* We already link to pod requirements at the top of the page
* Re-add sidecar injection
2019-09-05 13:52:02 -07:00
436b65afb8
Sds trustworthy jwt doc ( #4701 )
...
* Update doc for sds
* Update SDS doc for trustworthy jwt feature
* Drop legacy jwt support
* Add SDS announcement
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/docs/setup/platform-setup/_index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update index.md
* Update .spelling
* Update content/en/docs/setup/install/helm/index.md
Co-Authored-By: Romain Lenglet <romain.lenglet@berabera.info>
* Update index.md
* Update _index.md
* Update index.md
* Address comments
* Refine doc again
* Bump the support version of k8s to 1.13
* Update vendors
* Update docs
* Apply suggestions from code review
Co-Authored-By: Rigs Caballero <grca@google.com>
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
2019-09-05 13:44:03 -07:00
e936c4d75a
[release-1.3] Fixed injection and validation operations guides ( #4902 )
...
* Fixed injection and validation ops guides
* Update content/en/docs/ops/setup/injection-concepts/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/ops/setup/injection-concepts/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/ops/setup/injection-concepts/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/ops/setup/injection-concepts/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-09-04 07:54:23 -07:00
9232bf812c
Update reference docs. ( #4911 )
2019-09-04 06:14:32 -07:00
54638f80de
Update auth-sds user guide ( #4901 )
...
* update auth-sds doc
* Update content/en/docs/tasks/security/auth-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/docs/tasks/security/auth-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
2019-09-03 14:53:20 -07:00
841f835f84
Update upgrade steps for Istio 1.3 ( #4890 )
...
* Update upgrade steps for Istio 1.3
Fixes https://github.com/istio/istio.io/issues/4889
* updates
2019-09-03 13:57:22 -07:00
dec69f0b69
Glossary improvements ( #4877 )
...
* Glossary improvements
* tweaks
* control plane tweak
* clarify control plane source
* trailing spaces
* Update content/en/docs/reference/glossary/service-mesh.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/reference/glossary/service-mesh.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/reference/glossary/managed-control-plane.md
Co-Authored-By: Rigs Caballero <grca@google.com>
2019-09-03 10:02:31 -07:00
8b2da55c75
update reference docs ( #4862 )
2019-08-30 15:14:43 -07:00
df9db64b27
Add Istio Deployment Models concept. ( #4813 )
...
* Add Istio Deployment Models concept.
This concept replaces the old multi-cluster concept.
Includes new diagrams that comply with the diagram creation guidelines.
Updates the Chinese content to use a local copy of the previous diagrams.
Fixes all internal links to the previous version of the doc.
Signed-off-by: rcaballeromx <grca@google.com>
* Add glossary entries for needed terms.
The terms involved are:
- Cluster
- Identity
- Trust domain
Signed-off-by: rcaballeromx <grca@google.com>
* Define cluster in a platform agnostic way.
Also adds links between `identity` and `trust domain`.
Signed-off-by: rcaballeromx <grca@google.com>
* Add missing `(` in links.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix links to sections and reduce image sizes.
Signed-off-by: rcaballeromx <grca@google.com>
* Simplify the definition of `trust domain`
Signed-off-by: rcaballeromx <grca@google.com>
* Move old images to the ZH content.
Signed-off-by: rcaballeromx <grca@google.com>
* Add reworked control plane content.
Also addresses the comments left on the PR including those regarding the
diagrams.
Signed-off-by: rcaballeromx <grca@google.com>
* Add fail over example and glossary entries.
This update also reworks the control plane models section to fit the example.
Additional adjustments were made to the diagrams too.
Signed-off-by: rcaballeromx <grca@google.com>
* Move mesh models section.
Also minor fixes and edits.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix glossary entries and links.
Signed-off-by: rcaballeromx <grca@google.com>
2019-08-30 10:34:30 -07:00
118eb9c1fe
Make sure user understands Outlier Detection is req'd for locality LB ( #4854 )
...
* Make sure user understands Outlier Detection is req'd for locality LB
* Code review comments
* Fix lint issue
* code review
2019-08-29 07:25:32 -07:00
12397efcb0
Add MicroK8s to the platform setup docs ( #4833 )
...
* Add MicroK8s to the platform setup docs
* Update index.md
Added command to check deployment progress.
* Update content/en/docs/setup/platform-setup/MicroK8s/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/platform-setup/MicroK8s/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* fixing spacing
* Update content/en/docs/setup/platform-setup/MicroK8s/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* spacing fix
2019-08-28 09:13:54 -07:00
9ee5e5d36f
improve setup _index section order ( #4861 )
2019-08-28 08:47:55 -07:00
1042c9bd0f
Update Docker Desktop version statement ( #4860 )
2019-08-28 08:22:54 -07:00
3f7ab89ee3
Make Platform Setup descriptions end similarly ( #4849 )
2019-08-28 07:11:53 -07:00
7e61aed343
remove containerPort requirements. ( #4859 )
2019-08-28 06:55:53 -07:00
c2db5dcbed
Fix auto-completion link ( #4846 )
2019-08-27 13:53:03 -07:00
075dc078ba
Fix wrong default policy being stated ( #4840 )
...
When policy is set to an unrecognized value, the sidecar injector
defaults to [not injecting the pod, regardless of any other factors](https://github.com/istio/istio/blob/master/pkg/kube/inject/inject.go#L478 )
This is different to the behvaior of `policy: disabled`, so the docs
should make that clear.
Signed-off-by: Maximilian Bischoff <maximilian.bischoff@inovex.de>
2019-08-27 13:52:52 -07:00
4a43a3d2cc
Fix CNI Helm installation instructions ( #4855 )
...
* Install istio-cni into kube-system to use system-node-critical priorityClass
Fixes: https://github.com/istio/istio/issues/16577
* Add instructions to delete CNI Helm chart
Fixes: https://github.com/istio/istio/issues/16578
2019-08-27 13:44:52 -07:00
dc05694f8a
Remove old note about Istio 1.1 ( #4857 )
...
In 1.3 documentation I don't think we need a warning about 1.1 anymore
2019-08-27 13:30:53 -07:00
fbb6d6a893
Added missing ports in Minikube get svc output as well as the installation port requirements section ( #4848 )
2019-08-27 13:22:52 -07:00
b6592c5248
Update ports used by istio-proxy ( #4856 )
2019-08-27 12:44:52 -07:00
b1869fc084
Add missing Helm chart parameter for CNI ( #4844 )
...
* Add missing Helm chart parameter for CNI
* Document the injection annotations used by CNI
2019-08-27 11:37:52 -07:00
14a593c563
Fix broken Envoy links. ( #4832 )
2019-08-26 14:55:57 -07:00
8c74d34ae2
Update reference docs. ( #4829 )
...
- This required fixing the script that grabs the reference docs, it had degenerated in the last
few weeks. While I was there, I made the script work using the build-tools container, and fixed
a bunch of shell script linting warnings.
2019-08-26 14:03:41 -07:00
917f34f843
Moved LLB content from tasks to ops / fixed links ( #4819 )
2019-08-22 13:32:26 -07:00
bdf0bc0f4a
Update docs for locality lb changes ( #4815 )
...
* Update docs for locality lb changes
* Fixes
2019-08-21 14:04:32 -07:00
e495d4f397
target page has moved ( #4814 )
2019-08-21 05:20:34 -07:00
79ff39088e
Rename example YAML manifests to match intent ( #4800 )
2019-08-20 07:29:42 -07:00
4ccfe3952f
Remove obsolete file ( #4810 )
2019-08-19 11:28:50 -07:00
07178c1348
Reorganized the Operations node ( #4765 )
2019-08-16 16:03:31 -07:00
fecc4ca84e
Change the service name in the description to match the example. ( #4787 )
...
Signed-off-by: Nancy Avinger <navinger@google.com>
2019-08-16 13:11:31 -07:00
ca7559cab2
Remove Nomad & Consul docs ( #4805 )
...
* Remove Nomad & Consul docs
* broken links
* more broken links
* more broken links
* fix spelling errors
* remove broken ref
2019-08-16 12:13:30 -07:00
d0cf1e171e
Move English content to content/en as agreed in WG meeting. ( #4789 )
...
Once this goes in, I'll move content_zh to content/zh.
2019-08-14 15:45:31 -07:00
Yangmin Zhu
leo
lei-tang
Oliver Liu
Frank Budinsky
Martin Taillefer
Martin Ostrowski
Adam Miller
Dirk Jablonski
Jonh Wendell
Jianfei Hu
Neeraj Poddar
John Mazzitelli
imgbot[bot]
Morven Cao
Lin Sun
Vadim Eisenberg
Eric Van Norman
Rigs Caballero
Brian Avery
Jimmy Chen
Chris Wilson
Diem Vu
John Howard
Johannes Scheuermann
Naoki Oketani
Gary Brown
Jesse Lumme
craigbox
Zhonghu Xu
Istio Automation
Joe Selman
Pengyuan Bian
Chunlin Yang
Martin Taillefer
Steven Dake
David Ebbo
Jason Wang
Ram Vennam
LisaFC
Ed Snible
Venil Noronha
Ryan Michela
Xinnan Wen
Jason Young
Greg Taylor
Darius Jazayeri
Douglas Reid
Sam Naser
Romain Lenglet
Martin Devlin
carolynhu
Phillip Quy Le
Mariam John
Eric Van Norman
ammarn911
Maximilian Bischoff
Romain Lenglet
navinger