Commit Graph

323 Commits

Author SHA1 Message Date
Ed Snible 5748253b7d Fortio binary changed directories (#3563) 2019-03-07 15:29:33 -08:00
Diem Vu 423085227e Add note to explain authentication mesh policy CRD kind. (#3540)
* Add note for the mesh policy to explain the different with regular (namespace and service) policies

* Address comment
2019-03-07 14:16:32 -08:00
Vadim Eisenberg c67a696e13 make "Disable Envoy's access logging a separate section" (#3553)
so it can be referenced from other documents
2019-03-07 06:47:36 -08:00
mtail 3c67a02564 Fix #3338 2019-03-06 11:37:41 -08:00
Vadim Eisenberg 82784bf61b add access log task (#3531)
* add access log task

* change config map to configuration map to prevent spelling errors

* add an empty line between two boilerplates

seems to be required, otherwise a redundant <p> tag is generated

* make the task's title Getting Envoy's Access Logs

* mind escaping -> be sure to escape

* check the log of sleep, httpbin -> check sleep's, httpbin's log

* change -> customize

* to do it, edit -> by editing
2019-03-06 09:09:25 -08:00
Vadim Eisenberg 2f1e1a6020 Use two separate ingress gateways for two hosts (#3529)
* use a separate gateway for bookinfo in the case of multiple hosts

* set the name parameter to be "istio" instead of "istio-ingressgateway"

Since the original istio-ingressgateway was deployed with the name parameter "istio".
Otherwise, the following error will be received:

The Deployment "istio-ingressgateway" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"chart":"gateways", "heritage":"Tiller", "istio":"ingressgateway", "release":"istio-ingressgateway", "app":"istio-ingressgateway"}: `selector` does not match template `labels`

The problem is that the "release" label contains the name parameter of helm template,
and if this label will not match in the new and the original deployments of istio-ingressgateway,
kubectl apply will fail.
2019-03-06 09:07:30 -08:00
Vadim Eisenberg e8a799f919 add ingress troubleshooting section (#3410)
* add ingress troubleshooting section

* it does not arrive to the Istio -> it does not arrive to the ingress gateway

* fix a link

* remove checking the log since access log will be removed in 1.1

* you have no other Kubernetes Ingress resources -> you have no Kubernetes Ingress resources
2019-03-06 08:59:38 -08:00
idouba f02b763382 fail with 503 instead of 000 for injected-app (#3157)
* fail with 503 instead of 000 for injected-app

As a bad destination rule is set to disable client side mTLS and receiving side is mTLS enabled. At this point, Running the curl command between sidecar injected Istio services  all requests will fail with a 503 error code as the client side is still using plain-text.
2019-03-06 08:48:20 -08:00
Douglas Reid da77bb2bb5 Add sampling info to Tracing tasks (#3397)
* Add sampling info to Tracing tasks

* Address review comments and add boilerplate

* Add link to OpenTracing

* Address review comments

* Wording changes
2019-03-06 07:42:59 -08:00
Eric Van Norman 9dde74f016 Remove .b from cert path httpbin.new.example.com curl (#3495) 2019-03-06 07:40:33 -08:00
Frank Budinsky 76fc94137e Update istio-demo install instructions (#3520)
* Update istio-demo install instructions

* improve verify step

* fix circleci errors

* typo

* Change title

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/tasks/security/authn-policy/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/tasks/security/plugin-ca-cert/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* spelling
2019-03-05 14:47:20 -08:00
Andra Cismaru a8aaef4afa Fix typo. (#3516)
Fixes istio.io#2981
2019-03-05 11:35:46 -08:00
Oliver Liu e866f13fb7 Update health check task. (#3435)
* Update health check task.

* Apply suggestions from code review

Co-Authored-By: myidpt <yonggangl@google.com>

* Apply suggestions from code review

Co-Authored-By: myidpt <yonggangl@google.com>

* Small fix.

* Small fix.
2019-03-05 10:50:33 -08:00
John Howard 0dabe29b28 Update references to value files (#3412) 2019-03-05 13:47:07 -05:00
Vadim Eisenberg 5c255e9618 add start-httpbin-service boilerplate (#3514) 2019-03-05 10:03:32 -08:00
Jimmy Chen 4ff728348d restore the order of docs (#3503) 2019-03-05 06:18:33 -08:00
Martin Taillefer 36a6514a07 Remove old comment. (#3499) 2019-03-04 16:05:31 -08:00
Martin Taillefer 7bf371365e
Optimize all our SVG files. (#3468) 2019-03-03 08:14:50 -08:00
Jimmy Chen 692125f6b4 Add guide for external cert management at ingress gateway using SDS (#3224)
* add ingress sds

* update

* update

* Revise

* update

* Revise

* Update

* update

* revise

* update

* Remove key cert path when SDS is enabled

* Split SDS task into separate file

* Revise

* add mount/ and sds/

* fix broken link

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/_index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Apply suggestions from code review

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Revise

* Revise

* update

* Apply suggestions from code review

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>
2019-03-01 15:28:31 -08:00
idouba c5937a1d70 should specify the resource type:destinationrule. (#3159)
should specify the resource type:destinationrule in the delete statement.
2019-03-01 12:19:29 -08:00
Martin Taillefer ad565871d6
Clean up keywords. (#3442) 2019-02-28 17:26:46 -08:00
Rigs Caballero 21c918fbe4 Organize the Kubernetes Installation content. (#3422)
* WIP Add Kubernetes Installation landing page.

This adds the landing page and organizes the content to make it easier to navigate.

Signed-off-by: rcaballeromx <grca@google.com>

* Apply initial feedback on landing page content.

Signed-off-by: rcaballeromx <grca@google.com>

* Rename and move files to enhance navigation.

Added aliases to redirect after filename changes.

Signed-off-by: rcaballeromx <grca@google.com>

* Harmonize all installation guide titles and intros.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix all links affected by the restructure.

Fixed all internal links and added aliases to ensure external redirects.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix paths of images on the ZH content.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix additional links and apply feedback.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix link error introduced by rebase.

Signed-off-by: rcaballeromx <grca@google.com>

* Remove redundant instances of "Istio" in titles.

Signed-off-by: rcaballeromx <grca@google.com>
2019-02-28 14:37:30 -08:00
Martin Taillefer dd0ecdf9ab
Site improvements (#3430)
- Add linter support to detect internal links to aliases. Those are now flagged as
bad links so the source needs to be updated to point to the real destination,
avoiding the user a redirect.

- Fixed occurences of links to aliases.

- Now only load popper.js on pages that use popups in order to improve
load times.
2019-02-28 13:58:54 -08:00
Diem Vu 10415287c8 Update document for `istioctl auth tls-check` command (#3343)
* Update mutual tls deepdive doc to reflect the new authn tls-check behavior

* Also update FAQ

* Correct grammar

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>

* Address comment

* Also include changes to fix #11825

* Change the example to show default DR to avoid confusion

* Correct change the example to show default DR to avoid confusion

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>

* Update namespace for global destination rule

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>
2019-02-28 13:51:32 -08:00
Yuchen Dai 0ac513511d Update egress document (#3419)
`X-istio-Attributes` should not be presents in the request to external HTTP service.
2019-02-28 06:03:33 -08:00
Hiroshi Nasu 1a0130162a Add a step to look inside mirroring traffic with tcpdump in istio-proxy (#3267)
* Add looking inside mirroring traffic with tcpdump

* Update mirroring traffic exam step description
2019-02-26 14:27:32 -08:00
Daniel Linsley 733870147c Kiali jaegerURL should use jaeger-query service. (#3260)
* Kiali jaegerURL should use jaeger-query service.

Prior to change, while using the tracing service on port 90 for the jaegerURL, kiali would never get metrics to compose the service graphs.

Switching jaegerURL to jaeger-query service on port 16686 fixes the issue.  After traffic is generated the service graphs are built and visible in kiali.

* Remove clusterIP Query for grafana and jaeger-query services
2019-02-26 13:56:31 -08:00
Frank Budinsky 2c72648099 Reminders to apply destination rules (#3390) 2019-02-26 12:06:19 -08:00
Tao Li c4b714ec99 Remove unnecessary section to turn on permissive (#3382)
* Remove unnecessary section to turn on permissive

* Delete obsoleted file

* Add alias

* Fix comment
2019-02-26 11:35:30 -08:00
Diem Vu edcedada30 Add instruction to download gen-jwt.py script (#3378)
* Add instruction to download gen-jwt.py script

* Correct code block sequence

* Correct bash syntax

* Fix comment

* Use  {{< github_file >}} markdown
2019-02-26 11:24:30 -08:00
Yangmin Zhu 6168d4f171 Add command for manual sidecar injection (#3362) 2019-02-26 06:57:36 -08:00
Shriram Rajagopalan 2baef16e51 new networking reference docs (#3358) 2019-02-25 17:13:27 -08:00
Tao Li 4030c2503a Fix authn policy doc (#3376) 2019-02-25 13:46:26 -08:00
lei-tang fdec084fea Fix inconsistent namespace in rbac groups document (#3364) 2019-02-23 12:17:36 -08:00
John Mazzitelli c7c737d4af [Kiali] issue #3348 update kiali task doc so it mentions the new default secret (#3356) 2019-02-22 10:37:04 -08:00
Douglas Reid 9622e6162d Remove In-Depth Telemetry Example (#3352)
* Remove In-Depth Telemetry Example

* Add alias for removed doc
2019-02-21 17:08:20 -08:00
lei-tang 39a370f90d Fix the failure of missing mounted cert secret (#3316) 2019-02-21 07:54:24 -08:00
Eric Van Norman e6f70b370f Update read command for Z Shell (#3320)
* Update read command for Z Shell

* Update to fix testcase
2019-02-21 07:53:45 -08:00
Frank Budinsky 324906940f Egress task corrections and clarifications (#3315)
* Corrections and clarifications

* spelling

* review comments

* more review suggestions
2019-02-20 14:37:27 -08:00
Vadim Eisenberg 6e04852114 remove VirtualService from HTTPS egress access configuration (#3309) 2019-02-20 10:48:26 -08:00
Vadim Eisenberg f082496963 Fix typos in the authorization task (#3310)
* remove redundant slash

* productpager -> productpage

* remove bind-productpager-viewer from .spelling
2019-02-20 10:00:33 -08:00
Brian Avery 47443dfb88 The wording in step 3 (individual workloads view) is odd. (#3273)
* The wording in step 3 (individual workloads view) is odd.

In step 3 (individual workloads view), workloads is plural, which it shouldn't be, and the sentences starting with "Also, gives", are worded oddly.

* Updated text as per review comments
2019-02-19 06:31:27 -08:00
Yossi Mesika 52b45b24d9 Fix two doc issues (#3278)
* Correct istio yaml file

* Mixer destination rules are expected to exist
2019-02-18 08:33:25 -08:00
Liam White 34a30c929d Fix too many redirects path in Kiali task (#3275)
Signed-off-by: Liam White <liam@tetrate.io>
2019-02-16 03:15:24 -08:00
Vadim Eisenberg 48b5cc27dd Finalize egress task (#3222)
* note HTTP-related attributes -> notice the HTTP-related attributes

* related to Istio sidecar -> related to the Istio sidecar

* rewrite the sentence about ports and the installation option

use port 8000 instead of 443, to generate less confusion

* no HTTP service or service entry -> no HTTP service and no service entry

* extend understanding what happened with the third approach

* change section titles

* split the cleanup section into cleanup subsections

* fix links

* must not -> do not need to

* rewrite the sentence about switching to the first approach

* per specific port, gaining -> for specific ports, enabling

* A caveat is that some ports, for example port 80, already have HTTP
services inside Istio by default

* In this approach, similarly to the previous one -> With this approach, like with the previous one

* approaches can be applied -> approaches can be used

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* split long lines

* split long lines

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Revert "Update content/docs/tasks/traffic-management/egress/index.md"

This reverts commit febb76edc9.

* rewrite the sentence about the installation option and add a link to installation options

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* remove duplicate text

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* remove a redundant empty line

* address the reader directly
2019-02-15 19:18:24 -08:00
Eric Van Norman 7a2f811674 Change default monitoring port (#3183) 2019-02-13 10:12:39 -08:00
Etai Lev Ran f1f79e6fbe document file names used in external certificate configuration (#3238)
* document file names used in external certificate configuration

* rephrased to clarify based on PR feedabck

* note using different names requires reconfiguration
2019-02-13 09:07:23 -08:00
He Cao c16ce69f23 Task/Enabling Rate Limits: fix quota handlers (#3236) 2019-02-12 09:55:58 -08:00
Martin Taillefer d6b3bfac56
Add support for {{< quote >}} (#3237) 2019-02-12 08:22:28 -08:00
Martin Taillefer b3db41da99
Added more lint rules and fix offenders (#3227)
- Ensure that references to GitHub content use the proper annotations so
we get links to the correct branches.

- Added a check to make sure content is not using blockquotes (instead of
{{< warning >}}, {{< tip >}}, and {{< idea >}}. This check is currently
disabled, pending the Chinese content being updated.

- Fix a few violations of these new checks.
2019-02-11 12:49:47 -08:00