Commit Graph

6 Commits

Author SHA1 Message Date
Vadim Eisenberg 74c98d51ab Egress Gateway mTLS origination advanced example (#2268)
* initial version

* add the steps to Generate client and server certificates and keys section

* extend the description of the example

explain about the NGINX service

* add creating namespace, secrets and nginx configuration

* add creating of nginx-configmap

* add deployment of NGINX

* finalize the NGINX config

* move creating client certificates into the section of redeploying Egress gateway

* add instructions for generating and deploying istio-egressgateway.yaml

* update the description

* nginx.example.com -> my-nginx.mesh-external.svc.cluster.local

* change the title and description to mutual TLS to extrnal services

* add mTLS origination and cleanup

* change the port of nginx to 443

* update the output and the log with actual content

* add test NGINX deployment section

* add missing dot in page description

* Nginx -> NGINX

* change dots to semicolons before command blocks

* add volumes to the sleep deployment

* add sending requests to the NGINX server

* renamed the directory: mtls-egress-gateway -> egress-gateway-mtls-origination

* remove redundant whitespaces

* fix dead link (missing leading slash)

* change the name of the port 443 to be https and protocol HTTPS

* add endpoints section to the service entry

* replace internal kubernetes address with nginx.example.com

* change we to you

* expand the introduction to explain using NGINX and nginx.example.com

* remove before you begin section

* use sleep container in the default namespace to test both NGINX and egress gateway

* add port 80 to the ServiceEntry

* remove the second definition of the ServiceEntry

* use resolve option in testing mTLS

* change container name from egressgateway to istio-proxy

* simplify the introduction

* make Egress Gateway lower case

* make the introduction present tense

* replace pushd/popd with cd, since they are not POSIX

* add missing article

* remove cross referencing with regard to generating certificates/keys

* add "namely" to mesh-external namespace

* the NGINX -> the NGINX server

* sleep container -> sleep pod

* rephrase the text about --resolve option of curl

* rephrase the sentence about prompts

When prompted, select `y` for all the questions. ->
Select `y` for all prompts that appear.

* move egress-gateway-mtls-origination into advaanced gateway examples

* fixed links to the advanced gateways examples
2018-09-07 09:14:12 -04:00
Vadim Eisenberg a0e6e2aac5 configure NAT devices to drop packets that do not originate at the egress gateways and add a section on Kubernetes network policies (#2275)
* add "configuring NAT devices to drop packets that do not originate at the egress gateways"

* add Network Policy section

* make sentences present tense

* remove the labels

* rewrite the additional security considerations section

* Network Policy -> network policy

* add cleanup step for the configuring HTTPS egress gateway section

* a malicious application attacks -> attackers bypass

* egressgateway -> egress gateway

* kube-system DNS service -> the kube-system DNS service

* test-egress namespace -> the test-egress namespace

* no Istio sidecar was attached -> with no Istio sidecar attached

* must succeed -> will succeed

* by first enabling, then redeploy
2018-09-04 08:03:07 -07:00
Vadim Eisenberg 6b97bf6b62 change the name of the Envoy's container in egress gateway to istio-proxy (#2304)
according to https://github.com/istio/istio/pull/7566
2018-08-29 19:51:10 -04:00
Frank Budinsky 95bd707886
A few wording tweaks (#2343) 2018-08-22 10:24:07 -04:00
Vadim Eisenberg f84eb545a2 Rewrite ingress without tls termination example (#2342)
* remove ingress without tls termination example

* add ingress without tls termination example
2018-08-22 09:28:31 -04:00
Vadim Eisenberg e57d5c86a1 [WIP] Rename advanced egress examples (#2331)
* examples/advanced-egress -> examples/advanced-gateways

* fix the links

* complete fixing links
2018-08-21 16:19:33 -04:00