The regex was @.*@ which will match anything between two @'s, including a command like:
`k3d cluster create --api-port 6550 -p '9080:80@loadbalancer' -p '9443:443@loadbalancer' --agents 2 --k3s-arg '--disable=traefik@server:*'`
The regex should be something that matches valid URL syntaxes.
Signed-off-by: Daniel Hawton <daniel.hawton@solo.io>
* Update istio test reference
* Run make gen
* Fix ambient test ztunnel node selector
* try replacing niode selector with wildcard
* More test changes
* remove wildcarding on node
* Add new output line
* Re-enable processing of gateway-api version in `make gen`
* Update gateway-api to be the publicly released base version
* remove script and add awk in Makefile
* rebase and make gen
* Bump gateway api version used in examples
* Use gateway version var
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
---------
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* add blog post for 11am ET on Wed
* small fixes
* fix lint errors
* Update content/en/blog/2023/istio-graduates-within-cncf/index.md
Co-authored-by: Michael <haifeng.yao@daocloud.io>
* Add Tetrate blog post
* Update content/en/blog/2023/istio-graduates-within-cncf/index.md
---------
Co-authored-by: Craig Box <craigb@armosec.io>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Michael <haifeng.yao@daocloud.io>
Co-authored-by: Paul Merrison <paul@tetrate.io>
* remove injected annotation for istio-cni
* add injector webhook config back, add tip about it overwriting existing configs
* update docs with istio_cni.chained installation config
* update helm install instructions
* fix linting
* pass linter
* clarify tip for previous Openshift users to be aware that the injection webhook is not required
* update per PR suggestion
* generate new snips
* update cni docs by removing tip and adding openshift install command per PR
* lint fix
---------
Co-authored-by: Jacob Delgado <jacob.delgado@volunteers.acasi.info>
* Blog for Istio Day North America CFP
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Craig Box <craig.box@gmail.com>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Craig Box <craig.box@gmail.com>
* Change Istio Classic terminology to Istio APIs
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Fix stutter
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Change back parallel structure formation
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
---------
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Add docs for ocsp staple support
Signed-off-by: Faseela K <faseela.k@est.tech>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* clarify the internal IP ranges for IBM Cloud Kubernetes Service
* Trigger Build
* add example of the command output
* paraphrase the text
* update snips.sh
* Master has a non release gateway API. Changes to allow that.
* Grab a istio test ref from main branch
* <ove from istio.io/pkg to istio/istio/pkg
* revert one change
* update istio/api
* Run make gen
* disable failing test temporarily
* initial draft
* Fix typo
* remove 1.22 k8s warning
* Updating supportStatus table
* Update content/en/news/releases/1.18.x/announcing-1.18/_index.md
Co-authored-by: jacob-delgado <jacob.delgado@volunteers.acasi.info>
* Update content/en/news/releases/1.18.x/announcing-1.18/_index.md
Co-authored-by: Xiaopeng Han <hanxiaop8@outlook.com>
* Review fixes
* Fix trailing -
* Finished first draft
* Minor change
* Fixed linting issues save for link checking
* Update content/en/news/releases/1.18.x/announcing-1.18/_index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/upgrade-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/upgrade-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/_index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Minor wording change
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Fix line break
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Fixing .spelling
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Minor fixes
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Review fixes
* Changes to .spelling
* Update content/en/news/releases/1.18.x/announcing-1.18/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update release date
* Added more issue links
---------
Co-authored-by: jacob-delgado <jacob.delgado@volunteers.acasi.info>
Co-authored-by: Xiaopeng Han <hanxiaop8@outlook.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Enhance mTLS origination example
Signed-off-by: Faseela K <faseela.k@est.tech>
* rebase
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* cleanup more usages of EnvoyFilter
Signed-off-by: Kuat Yessenov <kuat@google.com>
* fix
Signed-off-by: Kuat Yessenov <kuat@google.com>
* fix test
Signed-off-by: Kuat Yessenov <kuat@google.com>
* review
Signed-off-by: Kuat Yessenov <kuat@google.com>
---------
Signed-off-by: Kuat Yessenov <kuat@google.com>
* updates to dual stack blog to make following easier
Signed-off-by: ilrudie <ian.rudie@solo.io>
* addressing linting issue from CI
Signed-off-by: ilrudie <ian.rudie@solo.io>
* Update content/en/blog/2023/experimental-dual-stack/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/experimental-dual-stack/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Signed-off-by: ilrudie <ian.rudie@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* add doc for third party ingress
* fix mermaid maybe
* Fix spell checker
* na
* Apply suggestions from code review
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* add IST0161 message description
* fix lint
* fix lint
* Update content/en/docs/reference/config/analysis/ist0161/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Remove dup change and fix format
* Combine dup changes in one
* Sync 1.17.2 release notes into Chinese
* Add security 2023-001
* Fix lint
* Apply suggestions from code review
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update PR to the original one
* Add fixed changelog
* Update content/zh/news/security/istio-security-2023-001/index.md
Co-authored-by: Michael <haifeng.yao@daocloud.io>
* Fix spaces
* Sync latest changelogs to zh
* Update header tanslate to 头信息
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Michael <haifeng.yao@daocloud.io>
* generic-args-md
* create generic boilerplates/args.md
* include gw_api_version, full_version, previous_version
* update install/operator/test.sh to source and use new vars
* update test/util/gateway-api.sh to source and use new gw var
* remove gateway-api-version.md
* relates to #13085
* fix linting fail for args.md
* remove sed command for revision string, use param expansion
* Enable tests for operator install
* install-operator-tests
* update snip_id
* set snip_id=none for non-tested snips
* add test scenarios for helm,watchns,install istio,update
* use functions for better readability
* add newline at the end
* install-operator-tests
* add tests for inplace and canary upgrade
* update version 1.8.1 and 1.9.0 to 1.17.1 and 1.17.2 in docs
* disable snip remove_operator failing lint/test
* install-operator-tests
* remove all hardcoded versions in operator install doc
* add istio_previous_version and full/previous revision to snip.py
* adjust test.sh accordingly
* install-operator-tests
* add shorcodes for revision versions
* install-operator-tests
* fix canary upgrade (upgrade from previous to full version)
* install-operator-tests
* fix reference to full_version in canary upgrade
* install-operator-tests
* fix slightly off format
* install-operator-tests
* disable test for upgrade with helm tip
* add instructions to doc for canary upgrade prep
* update test.sh and snips.sh accordingly
* install-operator-tests
* fix profile on upgrade, use default
* Manual cherry-pick of 12994
* fix keywords
* Update content/en/blog/2023/network-security-splunk/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* add a link to the new waypoint blog
* Update content/en/blog/2023/ambient-merged-istio-main/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Lin Sun <lin.sun@solo.io>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* add initial content
* shorten image captions to make lint happy
* some lint changes
* more lint
* fix lint
* tweak pic size
* correct percentage
* reword a bit
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/blog/2023/waypoint-proxy-made-simple/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* telemetry: tracing with telemetry api
* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* change weight
* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* remove paragraph
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Telemetry API: custom metrics
* fix lint
* update
* revert reporting interval
* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Specify EXTERNAL_CA env under .Values.pilot.env
Signed-off-by: Faseela K <faseela.k@est.tech>
* make snips
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* Add docs test for custom CA k8s
Signed-off-by: Faseela K <faseela.k@est.tech>
* wait for secrets to be created
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix tests
Signed-off-by: Faseela K <faseela.k@est.tech>
* address review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* breakout support status table to yaml file
* use k8s versions from new yaml file, based off previous ver
* same as previous commit but based off idx of yaml obj
* trim whitespace from supported k8s vers shortcode
* make verion lists arrays instead of strings
* update shortcode to read yaml data array
* rename support status shortcode to follow naming convention
* make versions in table use new arrays, update reference to support status table
* make each version in yaml file a string
* update header comment, change ext to *.yml to follow repo convention
* use prelim ternary to select k8s versions
* update supportStatus.yml heading comments
* update supported k8s shortcode to use branch name
* initial commit of python support status updater
* add null representer
* use lambda for quoted representer
* put back master population off idx 1, update comments
* working stdout version complete: use flow style for version list keys
* prepend yaml with header comments, cleanup script
* perform version check, default write errors are more helpful
* add copyright and license info
* linter has some weird tastes
* this is 100% worse but if it makes the linter happy
* call update_support_status.py from within create version
* update version matrix path since script ran from repo root
* use yq for updating the version support matrix instead of PyYAML
* Update test reference to latest istio commit
* make clean g&& go mod tidy
* Use tests/utils to delete sample
* Move some test script to use snippets
* Add _wait
* Remove extraneous source
Before the Deployment was kept as minimal as possible. This is mostly
good, because users can set any Deployment settings and things work.
However, running as non-root is a bit quirky, and very very strongly
recommended, so I think its worth calling out here.
This is one of the #1 sources of confusion we get.
* single network services/endpoints can not have duplicate address
* Update content/en/docs/ops/deployment/deployment-models/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Remove the text 'Experimental features are purposefully not listed on
this page' from the feature-stages page, as Experimental and Alpha
features _are_ listed on the page.
* [WIP] add doc tests for ambient getting started guide
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix cleanup
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix test
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* Edits formatting of the long commands to improve readability
* Adds snips by make gen
* Adds back the connection rejected output
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* re-ran make gen to edit the snip
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* wasm: use wasm API for attributegen
Signed-off-by: Kuat Yessenov <kuat@google.com>
* fix links
Signed-off-by: Kuat Yessenov <kuat@google.com>
* cleanup
Signed-off-by: Kuat Yessenov <kuat@google.com>
* typo
Signed-off-by: Kuat Yessenov <kuat@google.com>
---------
Signed-off-by: Kuat Yessenov <kuat@google.com>
`Configure traffic through egress gateway with SNI proxy` section was removed from the docs in the 1.14 release
but that is still mentioned in the setup instructions for the task `Egress using Wildcard Hosts`.
* Fix minor nits on the security tasks page Plugin CA Certificate
Partially fixes: #12695
* Fix minor nits on the security tasks page for certificate management
* Update feature status for Experimental/Alpha
Based off of the feature status in features.yaml, update the
corresponding doc page.
Update navigation_level.html to only flag Experimental and Alpha
features with an asterisk '*', rather than all docs with _any_ status
set.
Add new 'alpha.md' boilerplate, similar to 'experimental.md', with a
link to https://github.com/istio/community/blob/master/FEATURE-LIFECYCLE.md
Add either 'boilerplate alpha' or 'boilerplate experimental' to all
pages which have Alpha or Experimental status set.
Tidy up pages which already had
'boilerplate experimental-feature-warning' and be consistent with
'boilerplate experimental'
Update tasks/observability/distributed-tracing/mesh-and-proxy-config
status from 'Beta/Experimental' to 'Beta', to match what's in
features.yaml (all others only have a single value here)
* Add content/zh/boilerplates/alpha.md
* Update content/en/boilerplates/alpha.md
Suggested change
Co-authored-by: Faseela K <k.faseela@gmail.com>
* Update the zh 'alpha' boilerplate to match
---------
Co-authored-by: Faseela K <k.faseela@gmail.com>
* Update Istio/SPIRE integration demo to use SPIRE Controller
Manager instead of k8s workload registration.
Signed-off-by: jaellio <jaellio@microsoft.com>
* Adds test for automatic workload registration via the SPIRE
controller manager. During cleanup, removes generated istio.yaml
and chaim.pem files. Updates label to
spiffe.io/spire-managed-identity.
Signed-off-by: jaellio <jaellio@microsoft.com>
* Adds missing newline
Signed-off-by: jaellio <jaellio@microsoft.com>
* Fix spelling error
Signed-off-by: jaellio <jaellio@microsoft.com>
* Add missing ns flag on role and rolebinding resource commands
Signed-off-by: jaellio <jaellio@microsoft.com>
* Delete sleep resources and uninstall before SPIRE
Signed-off-by: jaellio <jaellio@microsoft.com>
* Reconfigures demo so istio install is not expected to fail.
Created ClusterSPIFFEID before install istio. Previously install
would fail because the ingress gateway wasn't registered/
Signed-off-by: jaellio <jaellio@microsoft.com>
* Remove references to v1.14 and update required version to 1.14+
Signed-off-by: jaellio <jaellio@microsoft.com>
* Fix lint errors
Signed-off-by: jaellio <jaellio@microsoft.com>
---------
Signed-off-by: jaellio <jaellio@microsoft.com>
* accesslog: work with Telemetry API cluster_name
Add telemetry api example with xds.cluster_name
* removed default namespace install and fixed some linting
* Fix "spelling" error
* Update envoy filter name
* Gloss refs and other small improvemetents in ambient docs
* Update content/en/docs/ops/ambient/architecture/index.md
Co-authored-by: John Howard <howardjohn@google.com>
---------
Co-authored-by: John Howard <howardjohn@google.com>
* Make ambient warning more extreme
* Update content/en/docs/ops/ambient/getting-started/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Lin Sun <lin.sun@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Reword this to better explain why a gateway on each node is recommended.
Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>
* Update content/en/docs/tasks/security/authorization/authz-ingress/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* ambient: add traffic routing docs
This fills in part of the architecture doc for ambient.
Note this is intentionally low-level. This attempts to mirror
https://istio.io/latest/docs/ops/configuration/traffic-management/traffic-routing/
but for ambient.
* Address Frank's comments
* Update content/en/docs/ops/ambient/architecture/index.md
Co-authored-by: Lin Sun <lin.sun@solo.io>
* Update content/en/docs/ops/ambient/architecture/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Lin Sun <lin.sun@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* remove explicit istio-injection labeling on ns for ingress-gateway
The gateway deployment already has the annotation "sidecar.istio.io/inject=true"
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix lint
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix lint
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* doc-global-downstream-max-conn-helm
* Add instructions to set global_downstream_max_connections with Helm
* Fix https://github.com/istio/istio/issues/37443
* Fix linting errors
* Address comments
* Remove global_downstream_max_connections from .spelling and add backticks where missing
* Simplify instructions on how to set global_downstream_max_connections
* Fix cleanup instructions for TLS version config task
* Address comments and run generating snips: content/en/boilerplates/snips/before-you-begin-egress.sh
generating snips: content/en/boilerplates/snips/cve-2020-007-configmap.sh
generating snips: content/en/boilerplates/snips/example.sh
generating snips: content/en/boilerplates/snips/experimental-feature-warning.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/experimental.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/external-loadbalancer-support.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-choose.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-experimental.sh
generating snips: content/en/boilerplates/snips/gateway-api-future.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-gamma-support.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/boilerplates/snips/gateway-api-install-crds.sh
generating snips: content/en/boilerplates/snips/gateway-api-support.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/boilerplates/snips/gateway-api-version.sh
generating snips: content/en/boilerplates/snips/helm-backup.sh
generating snips: content/en/boilerplates/snips/helm-jwt-warning.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/helm-preamble.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/helm-prereqs.sh
generating snips: content/en/boilerplates/snips/index.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/kubectl-multicluster-contexts.sh
generating snips: content/en/boilerplates/snips/multi-cluster-with-metallb.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-default-intro.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-default-outro.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-middle.sh
generating snips: content/en/boilerplates/snips/revision-tags-preamble.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-prologue.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-usage.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/security-vulnerability.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/start-httpbin-service.sh
generating snips: content/en/boilerplates/snips/start-otel-collector-service.sh
generating snips: content/en/boilerplates/snips/telemetry-tracing-tips.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-0.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-1.sh
generating snips: content/en/boilerplates/snips/test-2.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-3.sh
generating snips: content/en/boilerplates/snips/trace-generation.sh
generating snips: content/en/boilerplates/snips/untested-document.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/verify-crds.sh
generating snips: content/en/boilerplates/snips/work-in-progress.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/docs/examples/bookinfo/snips.sh
--> boilerplate external-loadbalancer-support does not have snippets
generating snips: content/en/docs/examples/virtual-machines/snips.sh
generating snips: content/en/docs/ops/configuration/mesh/app-health-check/snips.sh
generating snips: content/en/docs/ops/configuration/mesh/config-resource-ready/snips.sh
generating snips: content/en/docs/ops/configuration/security/security-policy-examples/snips.sh
generating snips: content/en/docs/ops/configuration/telemetry/envoy-stats/snips.sh
generating snips: content/en/docs/ops/configuration/traffic-management/network-topologies/snips.sh
generating snips: content/en/docs/ops/diagnostic-tools/istioctl-analyze/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/setup/additional-setup/cni/snips.sh
generating snips: content/en/docs/setup/additional-setup/gateway/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/setup/additional-setup/getting-started/snips.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate external-loadbalancer-support does not have snippets
generating snips: content/en/docs/setup/getting-started/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/setup/install/external-controlplane/snips.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/docs/setup/install/helm/snips.sh
--> boilerplate helm-preamble does not have snippets
generating snips: content/en/docs/setup/install/multicluster/multi-primary/snips.sh
generating snips: content/en/docs/setup/install/multicluster/multi-primary_multi-network/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/primary-remote/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/primary-remote_multi-network/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/verify/snips.sh
generating snips: content/en/docs/setup/install/multiple-controlplanes/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/setup/install/virtual-machine/snips.sh
--> boilerplate experimental does not have snippets
--> boilerplate experimental does not have snippets
--> boilerplate experimental does not have snippets
generating snips: content/en/docs/setup/upgrade/canary/snips.sh
--> boilerplate revision-tags-preamble does not have snippets
--> boilerplate revision-tags-usage does not have snippets
--> boilerplate revision-tags-default-intro does not have snippets
--> boilerplate revision-tags-default-outro does not have snippets
generating snips: content/en/docs/setup/upgrade/helm/snips.sh
--> boilerplate helm-preamble does not have snippets
--> boilerplate revision-tags-preamble does not have snippets
--> boilerplate revision-tags-usage does not have snippets
--> boilerplate revision-tags-default-intro does not have snippets
--> boilerplate revision-tags-default-outro does not have snippets
generating snips: content/en/docs/tasks/extensibility/wasm-module-distribution/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/jaeger/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/opencensusagent/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/skywalking/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/zipkin/snips.sh
generating snips: content/en/docs/tasks/observability/gateways/snips.sh
generating snips: content/en/docs/tasks/observability/logs/access-log/snips.sh
generating snips: content/en/docs/tasks/observability/logs/otel-provider/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/customize-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/querying-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/tcp-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/using-istio-dashboard/snips.sh
generating snips: content/en/docs/tasks/policy-enforcement/rate-limit/snips.sh
generating snips: content/en/docs/tasks/security/authentication/authn-policy/snips.sh
generating snips: content/en/docs/tasks/security/authentication/claim-to-header/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/security/authentication/jwt-route/snips.sh
generating snips: content/en/docs/tasks/security/authentication/mtls-migration/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-custom/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-deny/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-dry-run/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/security/authorization/authz-http/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-ingress/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-jwt/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-tcp/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-td-migration/snips.sh
generating snips: content/en/docs/tasks/security/cert-management/plugin-ca-cert/snips.sh
generating snips: content/en/docs/tasks/security/tls-configuration/workload-min-tls-version/snips.sh
generating snips: content/en/docs/tasks/traffic-management/circuit-breaking/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-control/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-gateway/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-gateway-tls-origination/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-kubernetes-services/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-tls-origination/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/http-proxy/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/snips.sh
generating snips: content/en/docs/tasks/traffic-management/fault-injection/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/gateway-api/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-control/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-sidecar-tls-termination/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-sni-passthrough/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/kubernetes-ingress/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/secure-ingress/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/before-you-begin/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/cleanup/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/distribute/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/failover/snips.sh
generating snips: content/en/docs/tasks/traffic-management/mirroring/snips.sh
generating snips: content/en/docs/tasks/traffic-management/request-routing/snips.sh
generating snips: content/en/docs/tasks/traffic-management/request-timeouts/snips.sh
generating snips: content/en/docs/tasks/traffic-management/tcp-traffic-shifting/snips.sh
generating snips: content/en/docs/tasks/traffic-management/traffic-shifting/snips.sh
* Update test.sh
* Add release note for istioctl 1.17 auth plugin removal
Signed-off-by: Keith Mattix II <keithmattix2@gmail.com>
* Respond to PR comments
Signed-off-by: Keith Mattix II <keithmattix2@gmail.com>
* Put version in backticks
Signed-off-by: Keith Mattix II <keithmattix2@gmail.com>
---------
Signed-off-by: Keith Mattix II <keithmattix2@gmail.com>
* build an archive of v1.16 in master
* update data/versions.yml and archive index page
* advance master to release-1.18
* Fix lint by moving back to older files - Note automated job will fail lint.
* Temporarily disable the istioctl-analyze test
* Termporarily remove the Performance page from the website
* Update preformance links to point to doc's relese version or latest existing page.
* Fixup another link
* Migrate ingress-sni-passthrough test to profile minimal
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix after snapshot test
Signed-off-by: Faseela K <faseela.k@est.tech>
* update minimal profile
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix cleanup test error
Signed-off-by: Faseela K <faseela.k@est.tech>
* review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* WIP - test
* Fix verbosity option
* Echo config
* REplace nc with echo
* Put nc back in but add a sleep
* Final update (for now) adding delay so `nc` doesn't reset the kubeconfig
* Remove extra cat'ing of kubeconfig
* Update content/en/docs/tasks/traffic-management/tcp-traffic-shifting/test.sh
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* 2023 Istio Steering Contributor Seats
Signed-off-by: Faseela K <faseela.k@est.tech>
* Add IBM member
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Craig Box <craig.box@gmail.com>
* additional review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* add second member from Huawei
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix order
Signed-off-by: Faseela K <faseela.k@est.tech>
* remove [] for missing link
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix order of members
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Craig Box <craig.box@gmail.com>
* Update content/en/blog/2023/steering-contribution-seat-results/index.md
Co-authored-by: Craig Box <craig.box@gmail.com>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Craig Box <craig.box@gmail.com>
* Clarify gateway canary upgrade
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update index.md
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update custom ca integration with k8s CSR demo to include foo and
bar namespace creation and remove an unnecessary tab from the
sleep pod command.
Signed-off-by: jaellio <jaellio@microsoft.com>
* Fix lint error
Signed-off-by: jaellio <jaellio@microsoft.com>
---------
Signed-off-by: jaellio <jaellio@microsoft.com>
* Announce IstioDay at KubeCon Europe 2023
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Mitch Connors <mitchconnors@gmail.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update index.md
* Remove social hour
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Craig Box <craig.box@gmail.com>
* fix lint
Signed-off-by: Faseela K <faseela.k@est.tech>
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Mitch Connors <mitchconnors@gmail.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Craig Box <craig.box@gmail.com>
* Enhance docs for revision tags and add tests
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test failures
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix lint failure
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test failures
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix cleanup test failures
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix cleanup for canary upgrade tests
Signed-off-by: Faseela K <faseela.k@est.tech>
* add profile none
Signed-off-by: Faseela K <faseela.k@est.tech>
* review comments
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* make gen
Signed-off-by: Faseela K <faseela.k@est.tech>
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Add more context
* Update content/en/docs/ops/configuration/traffic-management/network-topologies/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/ops/configuration/traffic-management/network-topologies/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/ops/configuration/traffic-management/network-topologies/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/ops/configuration/traffic-management/network-topologies/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* As per discuss in https://github.com/istio/istio/pull/42962#issuecomment-1402236303
* Lint fix
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Add PDB and HPA example for gateway-api
* Apply suggestions from code review
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* gen
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Doc for installing multiple control planes using revisions and discoverySelectors
Signed-off-by: Faseela K <faseela.k@est.tech>
* make gen
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test
Signed-off-by: Faseela K <faseela.k@est.tech>
* enable peer-auth
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test
Signed-off-by: Faseela K <faseela.k@est.tech>
* Review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* More review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Additional review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Remove duplicates that came from commit suggestion
* Rerun make gen
Signed-off-by: Faseela K <faseela.k@est.tech>
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* fix: envoy statistics config documentation
* chore: make gen
* feat: sync from istio/api
* Update content/zh/docs/ops/configuration/telemetry/envoy-stats/index.md
Co-authored-by: Michael <haifeng.yao@daocloud.io>
Co-authored-by: Michael <haifeng.yao@daocloud.io>
Fix linting issues
./en/docs/setup/platform-setup/gardener/index.md:15: MD009 Trailing spaces
./en/docs/setup/platform-setup/gardener/index.md:72: MD009 Trailing spaces
Fix linter identified typos
19 | ternatively, [23 Technologies GmbH](https://23technologies.cloud
19 | managed Gardener service that conviniently works with all supported clou
19 | and comes with a free trial: [Okeanos](https://okeanos.dev/). Simil
19 | ACKIT](https://stackit.de/), [B'Nerd](https://bnerd.com/), [MetalS
19 | B'Nerd](https://bnerd.com/), [MetalStack](https://metalstack.cloud/),
21 | log/2018/05/17/gardener/) on [kubernetes.io](https://kubernetes.io/blog).
resolve with recommendations from istio team
incorporate feedback from @ericvn and cleanup
* to be clear with how to apply custom metrics
Signed-off-by: oops-oom <734819342@qq.com>
* fix test error
Signed-off-by: oops-oom <734819342@qq.com>
* fix for test
Signed-off-by: oops-oom <734819342@qq.com>
Signed-off-by: oops-oom <734819342@qq.com>
* Add 1.16.0 release notes
* WIP: grammer fixes and start the announcement post
* remove revert
* add notes
* Update content/en/news/releases/1.16.x/announcing-1.16/_index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* add ext auth promotion to beta
* add jwt claim based routing and organize
* Update content/en/news/releases/1.16.x/announcing-1.16/_index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* add missing release note items
* Update content/en/news/releases/1.16.x/announcing-1.16/change-notes/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* multiple grammatical fixes
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
This is the last reference to extensions/v1beta1 API in our docs(this was removed in Kubernetes 1.22 release). Removing old
references from our docs. The remaining references are in the blogs referencing previous releases (won't update those).
Partially Fixes: #12216
* Add documentations for SkyWalking integration and task
* Add script to undeploy skywalking
* Clean up istio namespace
* Update index.md
* Address review comments
* Apply suggestions from code review
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* gateway-api: more gateway doc
* tweak
* Update content/en/docs/setup/additional-setup/gateway/index.md
Co-authored-by: John Howard <howardjohn@google.com>
Co-authored-by: John Howard <howardjohn@google.com>
* Document Sidecar Ingress TLS Termination Feature
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix lint failures
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test failure
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test failure
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix the negative test for TLS
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix test
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix the verification issue with multiline command output
Signed-off-by: Faseela K <faseela.k@est.tech>
* Replace _verify_contains with _verify_first_line
Signed-off-by: Faseela K <faseela.k@est.tech>
* Add exact result string for _verify_first_line
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix after-snapshot test error
Signed-off-by: Faseela K <faseela.k@est.tech>
* incorporate review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Incorporate review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Additional review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Small fix
Signed-off-by: Faseela K <faseela.k@est.tech>
* Additional review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
Signed-off-by: Faseela K <faseela.k@est.tech>
* gateway-api doc: ingress-sni-passthrough
* use kustomize for crds
* debug
* more debug
* use standard crd install
* try profile=none
* uninstall
* confirm install
* disable test for now
* regen
* Release notes for Istio 1.14.5
* Fix lint
* Fix lint
* Update the notes
* Revisisons
* Update notes
* Update content/en/news/releases/1.14.x/announcing-1.14.5/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update release date
* Update content/en/news/releases/1.14.x/announcing-1.14.5/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/releases/1.14.x/announcing-1.14.5/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Lei Tang <32078630+lei-tang@users.noreply.github.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* use short_codes for gateway api version and tpye
* Update function name. Forcing name doesn't work for boilerplates?
* Fix lint
* Remove k8s_gateway_api_type
* Add update-gateway-version mkaefile target
* Fix version in test string
* Simplify id
* Fix ingress control doc related to other providers and numbering
* Run make gen
* Add back TCP_INGRESS_PORT
* Revert to dash seperator for consistency
* Update index.md
Added a quick tip for Kind users to get LoadBalancers to work.
* Added more context on Kind-related tip.
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Release notes for Istio 1.13.8
* Add a new release notes entry
* Fix lint
* Update the release date
Co-authored-by: Lei Tang <32078630+lei-tang@users.noreply.github.com>
* Release noets for Istio 1.14.4
* Fix a lint error
* Add a new release note entry
* Update release date
Co-authored-by: Lei Tang <32078630+lei-tang@users.noreply.github.com>
The test waits for vs resource, that is not even created.
Wait on SE and DR is only needed.
Signed-off-by: Faseela K <faseela.k@est.tech>
Signed-off-by: Faseela K <faseela.k@est.tech>
* add contributors for ambient
* missed 1 name
* reword based on craig and eric's feedback
* more cleanup
* another name missed
* Update content/en/blog/2022/introducing-ambient-mesh/index.md
Co-authored-by: craigbox <craigbox@google.com>
* Update index.md
* fix trailing space
* re-italicize
* clean up spelling dups and sort
* add Kevin who contributed AWS support for ambient
Co-authored-by: craigbox <craigbox@google.com>
* add contributors for ambient
* missed 1 name
* reword based on craig and eric's feedback
* more cleanup
* another name missed
* Update content/en/blog/2022/introducing-ambient-mesh/index.md
Co-authored-by: craigbox <craigbox@google.com>
* Update index.md
* fix trailing space
* re-italicize
Co-authored-by: craigbox <craigbox@google.com>
* Blog fixes
* Add banner
* Apply suggestions from Frank's code review
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Fix lint
* spelling
* Fix lint
* Update content/en/events/banners/announcing-ambient-mesh.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Craig Box <craig.box@gmail.com>
Co-authored-by: craigbox <craigbox@google.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* build an archive of v1.14 in master
* update data/versions.yml and archive index page
* advance master to release-1.16
* Rerun `make update_ref_docs
* Update to commit on main branch to fix tests
* Disable failing test (temporary)
* Test moving up a Hugo version and replace BlackFriday with GoldMark.
* remove markdownify
* Update URL to not use relative for parent page
* Restore moarkdownify in centered block to fix (about/deployment)
* Add markdownify to tip, info, warning, quote
* Dmarkdownify tabsets
* Tweak indentation. Fixes companies. Does not fix the interactive panels.
* Update config.toml, rebase
* unindent ecosytem
* comapnaies looks OK,but not interactive_panels
* Revert panel change
* markdownify interactive panel?
* Put markdownify back - delete section_description
* Promoted command x uninstall to install
Signed-off-by: Tong Li <litong01@us.ibm.com>
* Promoted command x uninstall to install
Signed-off-by: Tong Li <litong01@us.ibm.com>
* Promoted command x uninstall to install
Signed-off-by: Tong Li <litong01@us.ibm.com>
* Update content/en/docs/setup/install/operator/test.sh
Promoted command x uninstall to install
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Signed-off-by: Tong Li <litong01@us.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update test ref to 1.15.0-beta.1
* Change order for hem test output
* Go back to most likely sort over, but remove REV since it may change.
* Update test to just verify that both revisions exist
* But the revisions back in the doc
* Inform users of bad builds
* move to news
* Move to security
* Fix 1.13.6 notice
* review comments
* review
* Update content/en/news/security/istio-security-2022-006/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* fix links
Co-authored-by: Jacob Delgado <jacob.delgado@volunteers.acasi.info>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Release notes of Istio 1.13.6
* Remove trailing space
* Remove a trailing space
* Edit the go version FYI
Co-authored-by: Lei Tang <32078630+lei-tang@users.noreply.github.com>
* Advanced Helm chart customization doc
As per the WG meeting, it was decided not to allow support for new values in istio helm charts
(unless there is substantial evidence it is needed by a large number of people); instead create an istio.io doc on last mile helm customization
Signed-off-by: Faseela K <faseela.k@est.tech>
* Update references section
Signed-off-by: Faseela K <faseela.k@est.tech>
* Add link to the new document in the main helm install page
Signed-off-by: Faseela K <faseela.k@est.tech>
* incorporate review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix lint error
Signed-off-by: Faseela K <faseela.k@est.tech>
* Incorporate additional review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* Review comments, and fix deployment name in kustomize patch
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix helm template command
Signed-off-by: Faseela K <faseela.k@est.tech>
* specify namespace in the helm commands
Signed-off-by: Faseela K <faseela.k@est.tech>
* format helm template command output
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix intend
Signed-off-by: Faseela K <faseela.k@est.tech>
* Add minikube in the instructions per Kubernetes environment
I was coming from https://istio.io/latest/docs/examples/bookinfo/ "Follow these instructions to set the INGRESS_HOST and INGRESS_PORT ..." and did not realize I would have to setup the minikube tunnel as explained in the [Getting Started Guide](https://istio.io/latest/docs/setup/getting-started/#determining-the-ingress-ip-and-ports)
For this reason I suggest to add it here as well.
* incorporated reviewers suggestions
* snips and tests for the new code snippet in docu
* ran make snips
* updated test.sh with the new functin names
* also the functions
snip_determining_the_ingress_ip_and_ports_{3,5,6,7,8,9} have changed
but they seem not to be used in test.sh
* followed reviewer suggestion to revert sip numbers
- used the annotation snip_id=none to skip the snippet, see https://github.com/istio/istio.io/blob/master/tests/README.md
- took back the snip renumbering
- checked that generating snips does not bring them back again: make
snips
* used custom name for generated snip
- now using minikube_tunnel as snip_id, resulting in a generated snip id snip_minikube_tunnel
- apparently still the remaining snips get renumbered
- updated test.sh with the 2 changed snip calls
Co-authored-by: Martin Knechtel <martin.knechtel@sap.com>
* Add Gateway API blog
* Spelling
* Relative links
* Link Gateway API docs
* Update content/en/blog/2022/gateway-api-beta/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Changes from review
* Add final blog URL
* Add SMI blog URL
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* SHA-1 signatures will not work with Golang 1.18
Support for SHA-1 signatures is disabled by default in Go 1.18 or newer. When generating the certificates please use OpenSSL on MacOS to make sure the certificates will work with istio.
* Lint fixes
* Lint fix
Co-authored-by: Saverio Proto <saverioproto@microsoft.com>
Co-authored-by: craigbox <craigbox@google.com>
* Update for Wasm contents
* Fix the wrong cleanup code
* Fix the description of `extensibility` folder's description
* Apply suggestions from code review
Co-authored-by: craigbox <craigbox@google.com>
* Update _index.md
* Regenerate snips
* Add old URL path as an alias
* Update content/en/docs/tasks/extensibility/_index.md
* Add description for the wasm pull policy
Signed-off-by: Ingwon Song <igsong@google.com>
* Apply suggestions from code review
Co-authored-by: Douglas Reid <douglas-reid@users.noreply.github.com>
* Apply suggestions from code review
Co-authored-by: craigbox <craigbox@google.com>
* Applying the comment from @dgn
Co-authored-by: craigbox <craigbox@google.com>
Co-authored-by: Douglas Reid <douglas-reid@users.noreply.github.com>
* Add missing change notes
New change notes were added after the original change notes PR.
This PR adds the missing change notes.
* Fix lint
* Add two more missing items
Xiaopeng Han
Istio Automation
Faseela K
Frank Budinsky
jacob-delgado
Daniel Hawton
Eric Van Norman
Iris
Keith Mattix II
zirain
Craig Box
Kebe
Steve Zhang
Michael
zirain
ognyvrac
Kuat
rrobb-aspen
Ric Hincapie
John Howard
Yang Gang
Michael
Wilson Wu
zhengbingxian
Jimmy Song
Paul Merrison
wulianglongrd
Wei Shan Sun
Paul Merrison
Mariam John
Ian Rudie
Calvin Huang
Patrik Jonsson
Arka Bhattacharya
NisheekaNynan1
my-git9
Jackie Elliott
Bilal
Phill Gibson
Jonh Wendell
Ravi Verma
SRodi
Kalya Subramanian
John Zheng
David Xia
Greg Hanson
Mitch Connors
Lin Sun
Daneyon Hansen
Chun Li
Kevin Park
Skyler Spaeth
Zhonghu Xu
Aayush Sharma
Paddy Doyle
majeshps
Carl Eastman
Ben Leggett
Daniel Hawton
Keith Mattix II
AndreaM12345
demotascha
Niranjan Shankar
Sam Naser
Craig Box
Peter Jausovec
Whitney Griffith
Aryan Gupta
Alan Wang
Whitney Griffith
vasu1124
Max Lambrecht
Chen Xintong
Franciszek Pogodziński
oops-oom
Bo-Cheng Chu
John Mazzitelli
Christine Kim
Ihor Sychevskyi
tedli
Caleb Olson
kezhenxu94
lei-tang
Darnele Pierre-Louis
Rachael Luo
Aryan Gupta
akitok
Rodrey
Ikumi Nakamura
Petr McAllister
craigbox
Tong Li
Chase Andries
stewartbutler
abasitt
verysonglaa
Jacek Ewertowski
Ingwon Song
Jason Wang