* Fix egress mtls origination test
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Refactor the egress snips for tests
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Fix go.mod
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Remove unneded change
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
---------
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Add OpenTelemetry tracing task
* Add tests
* Use consistent casing for "collector"
* Fix lint
* remove tests for now
* Re-add tests
* Fix indentation
* Better test file names
* Use demo profile and re-use collector deployment function
* Fix cleanup wrong code
* Use demo profile on both tests
* Update test reference to HTTP exporter commit in Istio
* make gen
* Remove HTTP example
* Revert Istio update
* Add boilerplate for collector on its own namespace
* Adapt collector namespace
* Fix function call
* Create the observability namespace
* Add missing import
* Add boiler plate for book info trace generation
* Remove zipkin and Jaeger things
* Fix clean up, properly uninstall Istio and collector
* Not remove istio-system namespace during cleanup
* Re-use collector deploy boilerplate
* Fix snippet meshconfig file name
* Remove indentation
* PR suggestions
* Add namespace labels to test framework diff snapshots
* fix lint
* failing tests
* more failed tests
* more failures
* more fixes
* one more
* fix fault injection
* build an archive of v1.20 in master
* update data/versions.yml and archive index page
* advance master to release-1.22
* Update istio/api
* Update istio/api
* remove troubleshooting section and add tip for cert verification
* remove indent and fix capitalisation
* add tip to verify cert for gateway api and update snips
* address frank's comments
* adjust egress-gateway/test.sh as per latest changes
* fix gateway api verify cert output
* verify contains snip out instead of hardcoded string
* fix indentation of command output for mtl verify cert
* remove apply PeerAuthentication and use _verify_same in test
* revert to verify_contains
* Add advanced ratelimit example incomplete
* Bookinfo example linted
* Add testing
* Solve bug
* Solve bug on vhost name
* Add testing to local ratelimit and set limit to 4
* Activate local ratelimit testing
* Solve bug with cleanup
* Simplify route naming
* Use apply
* Solve bug
* add san-validation documentation
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Daniel Hawton <daniel@hawton.org>
* make gen
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Daniel Hawton <daniel@hawton.org>
* Update istio test reference to latest commit and fix tests
* Move back two commits since some didn't have releases built
* Run go mod tidy after make clean
* Try removing metallb
* Don't remove the metallb validatingwebhookconfigurations
* Redo egress-control test to no use istio-state
* Update istio test reference to contain operator fix and revert test change
* Disable jwt-route test temporarily waiting on Envoy fix
* Upadte istio/api
* Replace uninstall
* revert chmod
* Add arbitrary host section to wildcard egress doc
* fix
* updated
* fix lint
* Update content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* docs: update to use PROXY config
Signed-off-by: Kuat Yessenov <kuat@google.com>
* gen
Signed-off-by: Kuat Yessenov <kuat@google.com>
* review
Signed-off-by: Kuat Yessenov <kuat@google.com>
---------
Signed-off-by: Kuat Yessenov <kuat@google.com>
* Update istio test ref to 1.20.0-rc.0
* Remove added toolchain line
* Run make gen
* Update to set ENABLE_EXTERNAL_NAME_ALIAS to false (default) for testing
* Move gateway tcp-traffic shifting to demo
* Change gateway tcp-traffic shifting to not remove istio in demo...
* Change gateway tcp-traffic shifting to remove istiooperator in demo...
* Update to latest 1.20 commit
* Change to be a minimal test
* [WIP] Task for testing experimental gateway-api timeouts
* tweak wording
* lint and regen
* update tabs
* fractional timeout values not supported in gateway-api
* add gateway api test
* remove blog
* Update istio test ref, do not strip sha from gateway version
* Rework sha, remove code to update gateway-api automatically
* Update Makefile to use full sha
* Some minor tweaks
* Some minor tweaks
* Move sha logic to a bash script
* Remove extraneous expected line in dns-proxy test
* fix tab/space
* Update index.md
corrects example httproute for mesh traffic in k8s gw api ingress task. the backendRefs should be part of the one rule that applies the filters.
* also updates snips.sh in gw api ingress task
* Update to main branch comit
* Update istio api and client-go commits
* Update tests to also work on arm64 machines
* Change multi-cluster cleanup to use --purge like the page
* Change multi-cluster cleanup to use --purge like the page
* Try changing uninstall order to see if it follows second uniunstall
* Try doing one uninstall instead of spinning both of them
* Move back to commit before suspected PR
* make gen
* Update to commit with fix for --context
* Update to latest branch disabling tcp-traffic-shifting tests
* create single cluster load balancing example& modify keywords
* modify keywords and remove see also section from locality load balancing
* remove single cluster lb page from examples
* create a standalone example for single cluster load balancing
* fix lint
* remove traffic-shifting from keywords
* fix typos
* organize locality-load-balancing page
* delete standalone single-cluster-lb page & add a tip for single-cluster lb
* remove use case description
* add original text back in
* update test file
* fix lint
* rephrase paragraph
* commit suggestion for the tip
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* update test file
* suppress generation of the snips
* move tip to the start of the before-you-begin section
* add step 3 to tell users to deploy istiod and the app to the nodes
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* fix format for the commands
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* move tip before Environment Variables section
* reformat the tip section
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
The terminology is bit confusing; before it was not experimental upstream at all -- it was undefined. Now its really experimental, so its not "pending agreement"
* Update to latest istio commit. Also use rc for gateway-api.
* Fix Makefile update-gateway-version
* Update istio to 1.19.0-rc1
* Remove wasm from envoy test
* Update gateway-api to rc-2.
* Revert gateway-api t0 0.7.1
* Update samples for core group
* Revert gateway-api to rc.1 to match istio repo
* Re-enable processing of gateway-api version in `make gen`
* Update gateway-api to be the publicly released base version
* remove script and add awk in Makefile
* rebase and make gen
* Change Istio Classic terminology to Istio APIs
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Fix stutter
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Change back parallel structure formation
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
---------
Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
* Add docs for ocsp staple support
Signed-off-by: Faseela K <faseela.k@est.tech>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* clarify the internal IP ranges for IBM Cloud Kubernetes Service
* Trigger Build
* add example of the command output
* paraphrase the text
* update snips.sh
* Master has a non release gateway API. Changes to allow that.
* Grab a istio test ref from main branch
* <ove from istio.io/pkg to istio/istio/pkg
* revert one change
* update istio/api
* Run make gen
* disable failing test temporarily
* Enhance mTLS origination example
Signed-off-by: Faseela K <faseela.k@est.tech>
* rebase
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* cleanup more usages of EnvoyFilter
Signed-off-by: Kuat Yessenov <kuat@google.com>
* fix
Signed-off-by: Kuat Yessenov <kuat@google.com>
* fix test
Signed-off-by: Kuat Yessenov <kuat@google.com>
* review
Signed-off-by: Kuat Yessenov <kuat@google.com>
---------
Signed-off-by: Kuat Yessenov <kuat@google.com>