* docs: update to use PROXY config
Signed-off-by: Kuat Yessenov <kuat@google.com>
* gen
Signed-off-by: Kuat Yessenov <kuat@google.com>
* review
Signed-off-by: Kuat Yessenov <kuat@google.com>
---------
Signed-off-by: Kuat Yessenov <kuat@google.com>
* Added a warning in the ambient getting started guide
This commit adds a warning for users using the gateway
API with kind and ambient.
Signed-off-by: leon <leon.nunes@solo.io>
* Added a section to install MetalLB in kind
Signed-off-by: leon <leon.nunes@solo.io>
* Updated docs as per suggestions.
* Fixed Lint errors
Signed-off-by: leon <leon.nunes@solo.io>
* Fixed spelling mistakes and reverted case of kind
Signed-off-by: leon <leon.nunes@solo.io>
* Added a - as per suggestion
Signed-off-by: leon <leon.nunes@solo.io>
* Reverted the tab spacing
Signed-off-by: leon <leon.nunes@solo.io>
* Changed warning to tip
Signed-off-by: leon <leon.nunes@solo.io>
---------
Signed-off-by: leon <leon.nunes@solo.io>
* Update istio test ref to 1.20.0-rc.0
* Remove added toolchain line
* Run make gen
* Update to set ENABLE_EXTERNAL_NAME_ALIAS to false (default) for testing
* Move gateway tcp-traffic shifting to demo
* Change gateway tcp-traffic shifting to not remove istio in demo...
* Change gateway tcp-traffic shifting to remove istiooperator in demo...
* Update to latest 1.20 commit
* Change to be a minimal test
* Update application labeling guidance
Fixes https://github.com/istio/istio/issues/10724
* Update content/en/docs/ops/deployment/requirements/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* documentation for new External Control Plane analyzer
* resolve linting whitespace errors
* fix false positive spelling error
* fix typos found during review
Users deploying in Openshift cluster have reported that upgrade from Istio 1.17 to Istio 1.18.3 has failed due to the lack of kernel module xt_multiport from the cluster.
This is most probably related to modifications in IPtables creation, see 7e7d52a2d1/tools/istio-iptables/pkg/capture/run.go (L369)
Signed-off-by: Faseela K <faseela.k@est.tech>
* Update Istio VM installation guide in multi-network setup
Add missing instruction on Istio VM installation guide in multi-network setup
* Update Istio VM installation guide in multi-network setup
* Update ambient install command to fix error from zsh
Error I hit when install ambient:
```
istioctl manifest generate --set profile=ambient --set components.ingressGateways[0].enabled=true --set components.ingressGateways[0].name=istio-ingressgateway
zsh: no matches found: components.ingressGateways[0].enabled=true
```
Thx to @howardjohn for pointing out missing quotes around special chars.
* update snips
* updating primary-remote on multi-net docs
* adding missing snips of make gen
* updating primary-remote_multi-network test.sh
* Update content/en/docs/setup/install/multicluster/primary-remote_multi-network/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/install/multicluster/primary-remote_multi-network/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* adjusting the sequence of test func calls
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* [WIP] Task for testing experimental gateway-api timeouts
* tweak wording
* lint and regen
* update tabs
* fractional timeout values not supported in gateway-api
* add gateway api test
* remove blog
* Update istio test ref, do not strip sha from gateway version
* Rework sha, remove code to update gateway-api automatically
* Update Makefile to use full sha
* Some minor tweaks
* Some minor tweaks
* Move sha logic to a bash script
* Remove extraneous expected line in dns-proxy test
* fix tab/space
* Update index.md
corrects example httproute for mesh traffic in k8s gw api ingress task. the backendRefs should be part of the one rule that applies the filters.
* also updates snips.sh in gw api ingress task
* adding Amazon EKS with Istio setup to platform-setup page
* adding Amazon EKS with Istio setup to platform-setup page
* updating the test section of the doc
* adding period at the end of description for the error in test
* adding newline at end of file
* changing the weight to make it ordered alphabetically.
* updating the link as it was broken due to this change made to folder structure in upstream https://github.com/aws-ia/terraform-aws-eks-blueprints/pull/1754
* Update to main branch comit
* Update istio api and client-go commits
* Update tests to also work on arm64 machines
* Change multi-cluster cleanup to use --purge like the page
* Change multi-cluster cleanup to use --purge like the page
* Try changing uninstall order to see if it follows second uniunstall
* Try doing one uninstall instead of spinning both of them
* Move back to commit before suspected PR
* make gen
* Update to commit with fix for --context
* Update to latest branch disabling tcp-traffic-shifting tests
* adding Amazon EKS with Istio setup to platform-setup page
* adding Amazon EKS with Istio setup to platform-setup page
* updating the test section of the doc
* adding period at the end of description for the error in test
* adding newline at end of file
* changing the weight to make it ordered alphabetically.
* Remove anyuid instructions for OpenShift
These instructions are no longer needed after these changes https://github.com/istio/istio/pull/45394
* Removed blank line that caused failure
* create single cluster load balancing example& modify keywords
* modify keywords and remove see also section from locality load balancing
* remove single cluster lb page from examples
* create a standalone example for single cluster load balancing
* fix lint
* remove traffic-shifting from keywords
* fix typos
* organize locality-load-balancing page
* delete standalone single-cluster-lb page & add a tip for single-cluster lb
* remove use case description
* add original text back in
* update test file
* fix lint
* rephrase paragraph
* commit suggestion for the tip
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* update test file
* suppress generation of the snips
* move tip to the start of the before-you-begin section
* add step 3 to tell users to deploy istiod and the app to the nodes
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* fix format for the commands
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* move tip before Environment Variables section
* reformat the tip section
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
The terminology is bit confusing; before it was not experimental upstream at all -- it was undefined. Now its really experimental, so its not "pending agreement"
* Update to latest istio commit. Also use rc for gateway-api.
* Fix Makefile update-gateway-version
* Update istio to 1.19.0-rc1
* Remove wasm from envoy test
* Update gateway-api to rc-2.
* Revert gateway-api t0 0.7.1
* Update samples for core group
* Revert gateway-api to rc.1 to match istio repo
* Add reference to a page with more details.
* Update content/en/docs/ops/deployment/requirements/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
The regex was @.*@ which will match anything between two @'s, including a command like:
`k3d cluster create --api-port 6550 -p '9080:80@loadbalancer' -p '9443:443@loadbalancer' --agents 2 --k3s-arg '--disable=traefik@server:*'`
The regex should be something that matches valid URL syntaxes.
Signed-off-by: Daniel Hawton <daniel.hawton@solo.io>
* Update istio test reference
* Run make gen
* Fix ambient test ztunnel node selector
* try replacing niode selector with wildcard
* More test changes
* remove wildcarding on node
* Add new output line
* Re-enable processing of gateway-api version in `make gen`
* Update gateway-api to be the publicly released base version
* remove script and add awk in Makefile
* rebase and make gen
* Bump gateway api version used in examples
* Use gateway version var
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
---------
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* remove injected annotation for istio-cni
* add injector webhook config back, add tip about it overwriting existing configs
* update docs with istio_cni.chained installation config
* update helm install instructions
* fix linting
* pass linter
* clarify tip for previous Openshift users to be aware that the injection webhook is not required
* update per PR suggestion
* generate new snips
* update cni docs by removing tip and adding openshift install command per PR
* lint fix
---------
Co-authored-by: Jacob Delgado <jacob.delgado@volunteers.acasi.info>
* Change Istio Classic terminology to Istio APIs
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Fix stutter
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Change back parallel structure formation
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
---------
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Add docs for ocsp staple support
Signed-off-by: Faseela K <faseela.k@est.tech>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* clarify the internal IP ranges for IBM Cloud Kubernetes Service
* Trigger Build
* add example of the command output
* paraphrase the text
* update snips.sh
* Master has a non release gateway API. Changes to allow that.
* Grab a istio test ref from main branch
* <ove from istio.io/pkg to istio/istio/pkg
* revert one change
* update istio/api
* Run make gen
* disable failing test temporarily
* initial draft
* Fix typo
* remove 1.22 k8s warning
* Updating supportStatus table
* Update content/en/news/releases/1.18.x/announcing-1.18/_index.md
Co-authored-by: jacob-delgado <jacob.delgado@volunteers.acasi.info>
* Update content/en/news/releases/1.18.x/announcing-1.18/_index.md
Co-authored-by: Xiaopeng Han <hanxiaop8@outlook.com>
* Review fixes
* Fix trailing -
* Finished first draft
* Minor change
* Fixed linting issues save for link checking
* Update content/en/news/releases/1.18.x/announcing-1.18/_index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/upgrade-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/upgrade-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/_index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Minor wording change
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Fix line break
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Fixing .spelling
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Minor fixes
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Review fixes
* Changes to .spelling
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update release date
* Added more issue links
---------
Co-authored-by: jacob-delgado <jacob.delgado@volunteers.acasi.info>
Co-authored-by: Xiaopeng Han <hanxiaop8@outlook.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Enhance mTLS origination example
Signed-off-by: Faseela K <faseela.k@est.tech>
* rebase
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* cleanup more usages of EnvoyFilter
Signed-off-by: Kuat Yessenov <kuat@google.com>
* fix
Signed-off-by: Kuat Yessenov <kuat@google.com>
* fix test
Signed-off-by: Kuat Yessenov <kuat@google.com>
* review
Signed-off-by: Kuat Yessenov <kuat@google.com>
---------
Signed-off-by: Kuat Yessenov <kuat@google.com>
* add doc for third party ingress
* fix mermaid maybe
* Fix spell checker
* na
* Apply suggestions from code review
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* add IST0161 message description
* fix lint
* fix lint
* Update content/en/docs/reference/config/analysis/ist0161/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* generic-args-md
* create generic boilerplates/args.md
* include gw_api_version, full_version, previous_version
* update install/operator/test.sh to source and use new vars
* update test/util/gateway-api.sh to source and use new gw var
* remove gateway-api-version.md
* relates to #13085
* fix linting fail for args.md
* remove sed command for revision string, use param expansion
* Enable tests for operator install
* install-operator-tests
* update snip_id
* set snip_id=none for non-tested snips
* add test scenarios for helm,watchns,install istio,update
* use functions for better readability
* add newline at the end
* install-operator-tests
* add tests for inplace and canary upgrade
* update version 1.8.1 and 1.9.0 to 1.17.1 and 1.17.2 in docs
* disable snip remove_operator failing lint/test
* install-operator-tests
* remove all hardcoded versions in operator install doc
* add istio_previous_version and full/previous revision to snip.py
* adjust test.sh accordingly
* install-operator-tests
* add shorcodes for revision versions
* install-operator-tests
* fix canary upgrade (upgrade from previous to full version)
* install-operator-tests
* fix reference to full_version in canary upgrade
* install-operator-tests
* fix slightly off format
* install-operator-tests
* disable test for upgrade with helm tip
* add instructions to doc for canary upgrade prep
* update test.sh and snips.sh accordingly
* install-operator-tests
* fix profile on upgrade, use default
* telemetry: tracing with telemetry api
* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* change weight
* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* remove paragraph
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Telemetry API: custom metrics
* fix lint
* update
* revert reporting interval
* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Specify EXTERNAL_CA env under .Values.pilot.env
Signed-off-by: Faseela K <faseela.k@est.tech>
* make snips
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* Add docs test for custom CA k8s
Signed-off-by: Faseela K <faseela.k@est.tech>
* wait for secrets to be created
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix tests
Signed-off-by: Faseela K <faseela.k@est.tech>
* address review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* breakout support status table to yaml file
* use k8s versions from new yaml file, based off previous ver
* same as previous commit but based off idx of yaml obj
* trim whitespace from supported k8s vers shortcode
* make verion lists arrays instead of strings
* update shortcode to read yaml data array
* rename support status shortcode to follow naming convention
* make versions in table use new arrays, update reference to support status table
* make each version in yaml file a string
* update header comment, change ext to *.yml to follow repo convention
* use prelim ternary to select k8s versions
* update supportStatus.yml heading comments
* update supported k8s shortcode to use branch name
* initial commit of python support status updater
* add null representer
* use lambda for quoted representer
* put back master population off idx 1, update comments
* working stdout version complete: use flow style for version list keys
* prepend yaml with header comments, cleanup script
* perform version check, default write errors are more helpful
* add copyright and license info
* linter has some weird tastes
* this is 100% worse but if it makes the linter happy
* call update_support_status.py from within create version
* update version matrix path since script ran from repo root
* use yq for updating the version support matrix instead of PyYAML
* Update test reference to latest istio commit
* make clean g&& go mod tidy
* Use tests/utils to delete sample
* Move some test script to use snippets
* Add _wait
* Remove extraneous source
Before the Deployment was kept as minimal as possible. This is mostly
good, because users can set any Deployment settings and things work.
However, running as non-root is a bit quirky, and very very strongly
recommended, so I think its worth calling out here.
This is one of the #1 sources of confusion we get.
* single network services/endpoints can not have duplicate address
* Update content/en/docs/ops/deployment/deployment-models/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Remove the text 'Experimental features are purposefully not listed on
this page' from the feature-stages page, as Experimental and Alpha
features _are_ listed on the page.
* [WIP] add doc tests for ambient getting started guide
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix cleanup
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix test
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* Edits formatting of the long commands to improve readability
* Adds snips by make gen
* Adds back the connection rejected output
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* re-ran make gen to edit the snip
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* wasm: use wasm API for attributegen
Signed-off-by: Kuat Yessenov <kuat@google.com>
* fix links
Signed-off-by: Kuat Yessenov <kuat@google.com>
* cleanup
Signed-off-by: Kuat Yessenov <kuat@google.com>
* typo
Signed-off-by: Kuat Yessenov <kuat@google.com>
---------
Signed-off-by: Kuat Yessenov <kuat@google.com>
`Configure traffic through egress gateway with SNI proxy` section was removed from the docs in the 1.14 release
but that is still mentioned in the setup instructions for the task `Egress using Wildcard Hosts`.
* Fix minor nits on the security tasks page Plugin CA Certificate
Partially fixes: #12695
* Fix minor nits on the security tasks page for certificate management
* Update feature status for Experimental/Alpha
Based off of the feature status in features.yaml, update the
corresponding doc page.
Update navigation_level.html to only flag Experimental and Alpha
features with an asterisk '*', rather than all docs with _any_ status
set.
Add new 'alpha.md' boilerplate, similar to 'experimental.md', with a
link to https://github.com/istio/community/blob/master/FEATURE-LIFECYCLE.md
Add either 'boilerplate alpha' or 'boilerplate experimental' to all
pages which have Alpha or Experimental status set.
Tidy up pages which already had
'boilerplate experimental-feature-warning' and be consistent with
'boilerplate experimental'
Update tasks/observability/distributed-tracing/mesh-and-proxy-config
status from 'Beta/Experimental' to 'Beta', to match what's in
features.yaml (all others only have a single value here)
* Add content/zh/boilerplates/alpha.md
* Update content/en/boilerplates/alpha.md
Suggested change
Co-authored-by: Faseela K <k.faseela@gmail.com>
* Update the zh 'alpha' boilerplate to match
---------
Co-authored-by: Faseela K <k.faseela@gmail.com>
* Update Istio/SPIRE integration demo to use SPIRE Controller
Manager instead of k8s workload registration.
Signed-off-by: jaellio <jaellio@microsoft.com>
* Adds test for automatic workload registration via the SPIRE
controller manager. During cleanup, removes generated istio.yaml
and chaim.pem files. Updates label to
spiffe.io/spire-managed-identity.
Signed-off-by: jaellio <jaellio@microsoft.com>
* Adds missing newline
Signed-off-by: jaellio <jaellio@microsoft.com>
* Fix spelling error
Signed-off-by: jaellio <jaellio@microsoft.com>
* Add missing ns flag on role and rolebinding resource commands
Signed-off-by: jaellio <jaellio@microsoft.com>
* Delete sleep resources and uninstall before SPIRE
Signed-off-by: jaellio <jaellio@microsoft.com>
* Reconfigures demo so istio install is not expected to fail.
Created ClusterSPIFFEID before install istio. Previously install
would fail because the ingress gateway wasn't registered/
Signed-off-by: jaellio <jaellio@microsoft.com>
* Remove references to v1.14 and update required version to 1.14+
Signed-off-by: jaellio <jaellio@microsoft.com>
* Fix lint errors
Signed-off-by: jaellio <jaellio@microsoft.com>
---------
Signed-off-by: jaellio <jaellio@microsoft.com>
* accesslog: work with Telemetry API cluster_name
Add telemetry api example with xds.cluster_name
* removed default namespace install and fixed some linting
* Fix "spelling" error
* Update envoy filter name
* Gloss refs and other small improvemetents in ambient docs
* Update content/en/docs/ops/ambient/architecture/index.md
Co-authored-by: John Howard <howardjohn@google.com>
---------
Co-authored-by: John Howard <howardjohn@google.com>
* Make ambient warning more extreme
* Update content/en/docs/ops/ambient/getting-started/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Lin Sun <lin.sun@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Reword this to better explain why a gateway on each node is recommended.
Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>
* Update content/en/docs/tasks/security/authorization/authz-ingress/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* ambient: add traffic routing docs
This fills in part of the architecture doc for ambient.
Note this is intentionally low-level. This attempts to mirror
https://istio.io/latest/docs/ops/configuration/traffic-management/traffic-routing/
but for ambient.
* Address Frank's comments
* Update content/en/docs/ops/ambient/architecture/index.md
Co-authored-by: Lin Sun <lin.sun@solo.io>
* Update content/en/docs/ops/ambient/architecture/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Lin Sun <lin.sun@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* remove explicit istio-injection labeling on ns for ingress-gateway
The gateway deployment already has the annotation "sidecar.istio.io/inject=true"
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix lint
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix lint
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* doc-global-downstream-max-conn-helm
* Add instructions to set global_downstream_max_connections with Helm
* Fix https://github.com/istio/istio/issues/37443
* Fix linting errors
* Address comments
* Remove global_downstream_max_connections from .spelling and add backticks where missing
* Simplify instructions on how to set global_downstream_max_connections
* Fix cleanup instructions for TLS version config task
* Address comments and run generating snips: content/en/boilerplates/snips/before-you-begin-egress.sh
generating snips: content/en/boilerplates/snips/cve-2020-007-configmap.sh
generating snips: content/en/boilerplates/snips/example.sh
generating snips: content/en/boilerplates/snips/experimental-feature-warning.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/experimental.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/external-loadbalancer-support.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-choose.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-experimental.sh
generating snips: content/en/boilerplates/snips/gateway-api-future.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-gamma-support.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/boilerplates/snips/gateway-api-install-crds.sh
generating snips: content/en/boilerplates/snips/gateway-api-support.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/boilerplates/snips/gateway-api-version.sh
generating snips: content/en/boilerplates/snips/helm-backup.sh
generating snips: content/en/boilerplates/snips/helm-jwt-warning.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/helm-preamble.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/helm-prereqs.sh
generating snips: content/en/boilerplates/snips/index.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/kubectl-multicluster-contexts.sh
generating snips: content/en/boilerplates/snips/multi-cluster-with-metallb.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-default-intro.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-default-outro.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-middle.sh
generating snips: content/en/boilerplates/snips/revision-tags-preamble.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-prologue.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-usage.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/security-vulnerability.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/start-httpbin-service.sh
generating snips: content/en/boilerplates/snips/start-otel-collector-service.sh
generating snips: content/en/boilerplates/snips/telemetry-tracing-tips.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-0.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-1.sh
generating snips: content/en/boilerplates/snips/test-2.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-3.sh
generating snips: content/en/boilerplates/snips/trace-generation.sh
generating snips: content/en/boilerplates/snips/untested-document.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/verify-crds.sh
generating snips: content/en/boilerplates/snips/work-in-progress.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/docs/examples/bookinfo/snips.sh
--> boilerplate external-loadbalancer-support does not have snippets
generating snips: content/en/docs/examples/virtual-machines/snips.sh
generating snips: content/en/docs/ops/configuration/mesh/app-health-check/snips.sh
generating snips: content/en/docs/ops/configuration/mesh/config-resource-ready/snips.sh
generating snips: content/en/docs/ops/configuration/security/security-policy-examples/snips.sh
generating snips: content/en/docs/ops/configuration/telemetry/envoy-stats/snips.sh
generating snips: content/en/docs/ops/configuration/traffic-management/network-topologies/snips.sh
generating snips: content/en/docs/ops/diagnostic-tools/istioctl-analyze/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/setup/additional-setup/cni/snips.sh
generating snips: content/en/docs/setup/additional-setup/gateway/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/setup/additional-setup/getting-started/snips.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate external-loadbalancer-support does not have snippets
generating snips: content/en/docs/setup/getting-started/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/setup/install/external-controlplane/snips.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/docs/setup/install/helm/snips.sh
--> boilerplate helm-preamble does not have snippets
generating snips: content/en/docs/setup/install/multicluster/multi-primary/snips.sh
generating snips: content/en/docs/setup/install/multicluster/multi-primary_multi-network/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/primary-remote/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/primary-remote_multi-network/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/verify/snips.sh
generating snips: content/en/docs/setup/install/multiple-controlplanes/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/setup/install/virtual-machine/snips.sh
--> boilerplate experimental does not have snippets
--> boilerplate experimental does not have snippets
--> boilerplate experimental does not have snippets
generating snips: content/en/docs/setup/upgrade/canary/snips.sh
--> boilerplate revision-tags-preamble does not have snippets
--> boilerplate revision-tags-usage does not have snippets
--> boilerplate revision-tags-default-intro does not have snippets
--> boilerplate revision-tags-default-outro does not have snippets
generating snips: content/en/docs/setup/upgrade/helm/snips.sh
--> boilerplate helm-preamble does not have snippets
--> boilerplate revision-tags-preamble does not have snippets
--> boilerplate revision-tags-usage does not have snippets
--> boilerplate revision-tags-default-intro does not have snippets
--> boilerplate revision-tags-default-outro does not have snippets
generating snips: content/en/docs/tasks/extensibility/wasm-module-distribution/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/jaeger/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/opencensusagent/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/skywalking/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/zipkin/snips.sh
generating snips: content/en/docs/tasks/observability/gateways/snips.sh
generating snips: content/en/docs/tasks/observability/logs/access-log/snips.sh
generating snips: content/en/docs/tasks/observability/logs/otel-provider/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/customize-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/querying-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/tcp-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/using-istio-dashboard/snips.sh
generating snips: content/en/docs/tasks/policy-enforcement/rate-limit/snips.sh
generating snips: content/en/docs/tasks/security/authentication/authn-policy/snips.sh
generating snips: content/en/docs/tasks/security/authentication/claim-to-header/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/security/authentication/jwt-route/snips.sh
generating snips: content/en/docs/tasks/security/authentication/mtls-migration/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-custom/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-deny/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-dry-run/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/security/authorization/authz-http/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-ingress/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-jwt/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-tcp/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-td-migration/snips.sh
generating snips: content/en/docs/tasks/security/cert-management/plugin-ca-cert/snips.sh
generating snips: content/en/docs/tasks/security/tls-configuration/workload-min-tls-version/snips.sh
generating snips: content/en/docs/tasks/traffic-management/circuit-breaking/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-control/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-gateway/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-gateway-tls-origination/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-kubernetes-services/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-tls-origination/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/http-proxy/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/snips.sh
generating snips: content/en/docs/tasks/traffic-management/fault-injection/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/gateway-api/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-control/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-sidecar-tls-termination/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-sni-passthrough/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/kubernetes-ingress/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/secure-ingress/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/before-you-begin/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/cleanup/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/distribute/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/failover/snips.sh
generating snips: content/en/docs/tasks/traffic-management/mirroring/snips.sh
generating snips: content/en/docs/tasks/traffic-management/request-routing/snips.sh
generating snips: content/en/docs/tasks/traffic-management/request-timeouts/snips.sh
generating snips: content/en/docs/tasks/traffic-management/tcp-traffic-shifting/snips.sh
generating snips: content/en/docs/tasks/traffic-management/traffic-shifting/snips.sh
* Update test.sh
* build an archive of v1.16 in master
* update data/versions.yml and archive index page
* advance master to release-1.18
* Fix lint by moving back to older files - Note automated job will fail lint.
* Temporarily disable the istioctl-analyze test
* Termporarily remove the Performance page from the website
* Update preformance links to point to doc's relese version or latest existing page.
* Fixup another link
* Migrate ingress-sni-passthrough test to profile minimal
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix after snapshot test
Signed-off-by: Faseela K <faseela.k@est.tech>
* update minimal profile
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix cleanup test error
Signed-off-by: Faseela K <faseela.k@est.tech>
* review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* WIP - test
* Fix verbosity option
* Echo config
* REplace nc with echo
* Put nc back in but add a sleep
* Final update (for now) adding delay so `nc` doesn't reset the kubeconfig
* Remove extra cat'ing of kubeconfig
* Update content/en/docs/tasks/traffic-management/tcp-traffic-shifting/test.sh
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Clarify gateway canary upgrade
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update index.md
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update custom ca integration with k8s CSR demo to include foo and
bar namespace creation and remove an unnecessary tab from the
sleep pod command.
Signed-off-by: jaellio <jaellio@microsoft.com>
* Fix lint error
Signed-off-by: jaellio <jaellio@microsoft.com>
---------
Signed-off-by: jaellio <jaellio@microsoft.com>
Istio Automation
Faseela K
Michael
Whitney Griffith
Frank Budinsky
Eric Van Norman
Xiaopeng Han
Wilson Wu
Kuat
Leon
Petr McAllister
John Howard
KipsasJaujoj
Sanjeev Rampal
Rashmi Lengade
JinVei
visheshtha
Ben Leggett
Michael Weiner
Husni Alhamdani
Praseeda Sathaye
Lin Sun
Kalya Subramanian
Nicole LiHui
Khary Mendez
Lyon Till
Radek Chrzanowski
crossoverJie
Abdul Basit
Eitan Suez
Jonh Wendell
Archana Sawant
Tim O'Keefe
Wei Shan Sun
AndreaM12345
zirain
Daniel Hawton
Keith Mattix II
Michael
zirain
ognyvrac
rrobb-aspen
Ric Hincapie
Yang Gang
zhengbingxian
wulianglongrd
Paul Merrison
Calvin Huang
Patrik Jonsson
Arka Bhattacharya
NisheekaNynan1
my-git9
Jackie Elliott
Bilal
Phill Gibson
Ravi Verma
SRodi
John Zheng
David Xia
Greg Hanson
Daneyon Hansen
Kevin Park
Skyler Spaeth
Zhonghu Xu
Aayush Sharma
Paddy Doyle
Mariam John
majeshps
Carl Eastman
demotascha
Niranjan Shankar