* Refactor Secure Ingress tasks
Ingress SDS is now the default and recommended. This removes the file
mount task, which is no longer recommended and will avoid confusion, and
cleans up the task a bit. I also documented the new supported secret
formats.
* use archive
* Initial documentation on Multiple Control Planes
I suspect this will be improved as we get more user feedback and
istioctl integrations, but this is a reasonable start
* Typo
* Minor edits
* Apply suggestions from code review
Co-Authored-By: Adam Miller <1402860+adammil2000@users.noreply.github.com>
* Frank's suggestions
* lint
* Apply suggestions from code review
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Adam Miller <1402860+adammil2000@users.noreply.github.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Add documentation on Ingress support
Istio has supported Ingress for quite a while, but its not documented.
This explains how to use it and configure it.
Note to docs reviewers: Gateway is Istio's alternative to Kubernetes'
Inrgess object, and we prefer users to use Gateway. However, for reasons
like legacy users, we also support Ingress.
* fix lint
* fix lint
* fix lint
* improvements
.
* Apply suggestions from code review
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Rename PKI to Identity Issuance
Calling Identity issuance as PKI has resulted in confusion among customers expecting to see content about CRLs, OCSP, and other frills associated with standard PKIs. The content of that section is about securely issuing identities to the workloads by embedding the identity in the X509 certificate.
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Justin Pettit <jpettit@ovn.org>
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Oliver Liu <yonggangl@google.com>
Co-authored-by: Justin Pettit <jpettit@ovn.org>
* Make site linter more configurable
* change brittle github links error to warning
* turn off external link checking by default
* update makefile
* fix target lint
* remove cross language link
* better variable name
* Fix links for removal of helm installation directory
* Point to archive version of istioctl upgrade instructions
* Add Aporeto to lint ignores for now.
* Provision a certificate to an application through a sidecar
* Revisions based on the review comments
* Move the document location
* Revise install command based on the review comments
* Make the blog more concise
* Explain the use case
* Revised based on comments
* Revise based on review comments
* Revised based on the review comments
* Revise based on review comments
* Revise based on review comments
* Revise based on review comments
* Revise based on review comments
* Revise based on review comments
* add a tcpdump verification for mtls
* add period
* move to the migration doc.
* lint fixing
* address cmt.
* Apply suggestions from code review
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
John Howard