Commit Graph

212 Commits

Author SHA1 Message Date
Istio Automation 061a53c6c7
[release-1.17] Fix cleanup instructions for TLS version config task (#12739)
* Fix cleanup instructions for TLS version config task

* Address comments and run generating snips: content/en/boilerplates/snips/before-you-begin-egress.sh generating snips: content/en/boilerplates/snips/cve-2020-007-configmap.sh generating snips: content/en/boilerplates/snips/example.sh generating snips: content/en/boilerplates/snips/experimental-feature-warning.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/experimental.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/external-loadbalancer-support.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/gateway-api-choose.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/gateway-api-experimental.sh generating snips: content/en/boilerplates/snips/gateway-api-future.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/gateway-api-gamma-support.sh --> boilerplate gateway-api-future does not have snippets --> boilerplate gateway-api-choose does not have snippets generating snips: content/en/boilerplates/snips/gateway-api-install-crds.sh generating snips: content/en/boilerplates/snips/gateway-api-support.sh --> boilerplate gateway-api-future does not have snippets --> boilerplate gateway-api-choose does not have snippets generating snips: content/en/boilerplates/snips/gateway-api-version.sh generating snips: content/en/boilerplates/snips/helm-backup.sh generating snips: content/en/boilerplates/snips/helm-jwt-warning.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/helm-preamble.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/helm-prereqs.sh generating snips: content/en/boilerplates/snips/index.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/kubectl-multicluster-contexts.sh generating snips: content/en/boilerplates/snips/multi-cluster-with-metallb.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/revision-tags-default-intro.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/revision-tags-default-outro.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/revision-tags-middle.sh generating snips: content/en/boilerplates/snips/revision-tags-preamble.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/revision-tags-prologue.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/revision-tags-usage.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/security-vulnerability.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/start-httpbin-service.sh generating snips: content/en/boilerplates/snips/start-otel-collector-service.sh generating snips: content/en/boilerplates/snips/telemetry-tracing-tips.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/test-0.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/test-1.sh generating snips: content/en/boilerplates/snips/test-2.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/test-3.sh generating snips: content/en/boilerplates/snips/trace-generation.sh generating snips: content/en/boilerplates/snips/untested-document.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/boilerplates/snips/verify-crds.sh generating snips: content/en/boilerplates/snips/work-in-progress.sh --> no snippet or boilerplate. skipping.. generating snips: content/en/docs/examples/bookinfo/snips.sh --> boilerplate external-loadbalancer-support does not have snippets generating snips: content/en/docs/examples/virtual-machines/snips.sh generating snips: content/en/docs/ops/configuration/mesh/app-health-check/snips.sh generating snips: content/en/docs/ops/configuration/mesh/config-resource-ready/snips.sh generating snips: content/en/docs/ops/configuration/security/security-policy-examples/snips.sh generating snips: content/en/docs/ops/configuration/telemetry/envoy-stats/snips.sh generating snips: content/en/docs/ops/configuration/traffic-management/network-topologies/snips.sh generating snips: content/en/docs/ops/diagnostic-tools/istioctl-analyze/snips.sh --> boilerplate experimental-feature-warning does not have snippets generating snips: content/en/docs/setup/additional-setup/cni/snips.sh generating snips: content/en/docs/setup/additional-setup/gateway/snips.sh --> boilerplate gateway-api-future does not have snippets generating snips: content/en/docs/setup/additional-setup/getting-started/snips.sh --> boilerplate gateway-api-future does not have snippets --> boilerplate external-loadbalancer-support does not have snippets generating snips: content/en/docs/setup/getting-started/snips.sh --> boilerplate gateway-api-future does not have snippets generating snips: content/en/docs/setup/install/external-controlplane/snips.sh --> boilerplate gateway-api-future does not have snippets --> boilerplate gateway-api-choose does not have snippets generating snips: content/en/docs/setup/install/helm/snips.sh --> boilerplate helm-preamble does not have snippets generating snips: content/en/docs/setup/install/multicluster/multi-primary/snips.sh generating snips: content/en/docs/setup/install/multicluster/multi-primary_multi-network/snips.sh --> boilerplate multi-cluster-with-metallb does not have snippets generating snips: content/en/docs/setup/install/multicluster/primary-remote/snips.sh --> boilerplate multi-cluster-with-metallb does not have snippets generating snips: content/en/docs/setup/install/multicluster/primary-remote_multi-network/snips.sh --> boilerplate multi-cluster-with-metallb does not have snippets generating snips: content/en/docs/setup/install/multicluster/verify/snips.sh generating snips: content/en/docs/setup/install/multiple-controlplanes/snips.sh --> boilerplate experimental-feature-warning does not have snippets generating snips: content/en/docs/setup/install/virtual-machine/snips.sh --> boilerplate experimental does not have snippets --> boilerplate experimental does not have snippets --> boilerplate experimental does not have snippets generating snips: content/en/docs/setup/upgrade/canary/snips.sh --> boilerplate revision-tags-preamble does not have snippets --> boilerplate revision-tags-usage does not have snippets --> boilerplate revision-tags-default-intro does not have snippets --> boilerplate revision-tags-default-outro does not have snippets generating snips: content/en/docs/setup/upgrade/helm/snips.sh --> boilerplate helm-preamble does not have snippets --> boilerplate revision-tags-preamble does not have snippets --> boilerplate revision-tags-usage does not have snippets --> boilerplate revision-tags-default-intro does not have snippets --> boilerplate revision-tags-default-outro does not have snippets generating snips: content/en/docs/tasks/extensibility/wasm-module-distribution/snips.sh generating snips: content/en/docs/tasks/observability/distributed-tracing/jaeger/snips.sh generating snips: content/en/docs/tasks/observability/distributed-tracing/opencensusagent/snips.sh generating snips: content/en/docs/tasks/observability/distributed-tracing/skywalking/snips.sh generating snips: content/en/docs/tasks/observability/distributed-tracing/zipkin/snips.sh generating snips: content/en/docs/tasks/observability/gateways/snips.sh generating snips: content/en/docs/tasks/observability/logs/access-log/snips.sh generating snips: content/en/docs/tasks/observability/logs/otel-provider/snips.sh generating snips: content/en/docs/tasks/observability/metrics/customize-metrics/snips.sh generating snips: content/en/docs/tasks/observability/metrics/querying-metrics/snips.sh generating snips: content/en/docs/tasks/observability/metrics/tcp-metrics/snips.sh generating snips: content/en/docs/tasks/observability/metrics/using-istio-dashboard/snips.sh generating snips: content/en/docs/tasks/policy-enforcement/rate-limit/snips.sh generating snips: content/en/docs/tasks/security/authentication/authn-policy/snips.sh generating snips: content/en/docs/tasks/security/authentication/claim-to-header/snips.sh --> boilerplate experimental-feature-warning does not have snippets generating snips: content/en/docs/tasks/security/authentication/jwt-route/snips.sh generating snips: content/en/docs/tasks/security/authentication/mtls-migration/snips.sh generating snips: content/en/docs/tasks/security/authorization/authz-custom/snips.sh generating snips: content/en/docs/tasks/security/authorization/authz-deny/snips.sh generating snips: content/en/docs/tasks/security/authorization/authz-dry-run/snips.sh --> boilerplate experimental-feature-warning does not have snippets generating snips: content/en/docs/tasks/security/authorization/authz-http/snips.sh generating snips: content/en/docs/tasks/security/authorization/authz-ingress/snips.sh generating snips: content/en/docs/tasks/security/authorization/authz-jwt/snips.sh generating snips: content/en/docs/tasks/security/authorization/authz-tcp/snips.sh generating snips: content/en/docs/tasks/security/authorization/authz-td-migration/snips.sh generating snips: content/en/docs/tasks/security/cert-management/plugin-ca-cert/snips.sh generating snips: content/en/docs/tasks/security/tls-configuration/workload-min-tls-version/snips.sh generating snips: content/en/docs/tasks/traffic-management/circuit-breaking/snips.sh generating snips: content/en/docs/tasks/traffic-management/egress/egress-control/snips.sh generating snips: content/en/docs/tasks/traffic-management/egress/egress-gateway/snips.sh generating snips: content/en/docs/tasks/traffic-management/egress/egress-gateway-tls-origination/snips.sh generating snips: content/en/docs/tasks/traffic-management/egress/egress-kubernetes-services/snips.sh generating snips: content/en/docs/tasks/traffic-management/egress/egress-tls-origination/snips.sh generating snips: content/en/docs/tasks/traffic-management/egress/http-proxy/snips.sh generating snips: content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/snips.sh generating snips: content/en/docs/tasks/traffic-management/fault-injection/snips.sh generating snips: content/en/docs/tasks/traffic-management/ingress/gateway-api/snips.sh --> boilerplate gateway-api-future does not have snippets generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-control/snips.sh generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-sidecar-tls-termination/snips.sh --> boilerplate experimental-feature-warning does not have snippets generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-sni-passthrough/snips.sh generating snips: content/en/docs/tasks/traffic-management/ingress/kubernetes-ingress/snips.sh generating snips: content/en/docs/tasks/traffic-management/ingress/secure-ingress/snips.sh generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/before-you-begin/snips.sh generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/cleanup/snips.sh generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/distribute/snips.sh generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/failover/snips.sh generating snips: content/en/docs/tasks/traffic-management/mirroring/snips.sh generating snips: content/en/docs/tasks/traffic-management/request-routing/snips.sh generating snips: content/en/docs/tasks/traffic-management/request-timeouts/snips.sh generating snips: content/en/docs/tasks/traffic-management/tcp-traffic-shifting/snips.sh generating snips: content/en/docs/tasks/traffic-management/traffic-shifting/snips.sh

* Update test.sh

---------

Co-authored-by: Simone Rodigari <simone.rodigari@ibm.com>
2023-02-20 11:45:31 -08:00
Istio Automation 1d4372a77f
Fix some consistency issues (#12704)
Co-authored-by: Michael <cloudyonspring@126.com>
2023-02-17 09:01:57 -08:00
Frank Budinsky f508e6aa90
Clarify mtls migration policy location (#12662) 2023-02-14 08:33:41 -08:00
Michael 9ab1a8f9df
Change for consistency with title (#12647) 2023-02-13 07:41:48 -08:00
Eric Van Norman 510f278525
Update lint checker configuration. (#12602)
* Update lint checker configuration.

* Uses mdl.rb in the root

* Fix trailing lines

* Reset mdl.rb

* Fix for adding an empty line
2023-02-07 13:18:34 -08:00
Jackie Elliott 28749ecfc2
Update custom ca integration with k8s CSR demo (#12527)
* Update custom ca integration with k8s CSR demo to include foo and
bar namespace creation and remove an unnecessary tab from the
sleep pod command.

Signed-off-by: jaellio <jaellio@microsoft.com>

* Fix lint error

Signed-off-by: jaellio <jaellio@microsoft.com>

---------

Signed-off-by: jaellio <jaellio@microsoft.com>
2023-01-27 10:02:50 -08:00
Eric Van Norman 93ea5bb3ae
Update values so istioctl x wait works (#12508)
* Update values so istioctl x wait works

* Remove extra values

* Update all snippet instances of `istio install` for wait_for_istio

* Fix value
2023-01-24 15:46:18 -08:00
Eric Van Norman cb3aebc837
Update istio.io to prepare for 1.17 (#12487) 2023-01-19 10:53:13 -08:00
Aryan Gupta 9434bc1ee6
task for copy claim to header (#12427)
* task for copy claim to header

* updateed outtput

* resolved pr comments
2023-01-10 06:26:50 -08:00
Michael 9de619e1fe
Replace setup with set up if it's a verb (#12419) 2022-12-29 17:02:30 -08:00
Aryan Gupta 60eb0e4474
udocs upddate for policies graduation (#12320) 2022-12-06 13:49:06 -08:00
Chen Xintong 1f7a0ea5a7
Fix custom CA integration doc typo (#12318)
* Fix custom CA integration doc typo

* restore 1.14 and 1.15 release change
2022-12-01 08:48:15 -08:00
Bo-Cheng Chu 27c2aa9d04
Update index.md (#12243) 2022-11-15 20:52:16 -08:00
Eric Van Norman 1f12d8f392
Release 1.16 istio.io branch cut (#12239)
* build an archive of v1.15 in master

* update data/versions.yml and archive index page

* advance master to release-1.17

* Fix lint error
2022-11-15 13:25:34 -08:00
Eric Van Norman 14f8c33a8a
Minor correction submitted in 12203 - no CLA (#12231) 2022-11-14 10:35:33 -08:00
Aryan Gupta f2baf1228b
updated authz docs (#12178)
* updated authz docs

* removed extra spaces

* updated authz-tcp task tests

* minor yaml fixes
2022-11-08 16:04:55 -08:00
Bo-Cheng Chu 813337f378
Add performance expectations in ext-authz page (#12176)
* add performance benchmarking

* fix typo
2022-11-08 16:04:47 -08:00
Eric Van Norman 8b95b8eb57
Prepare for release 1.16.0 (#12138)
* Prepare for release 1.16.0

* Update for 1.160.0-beta.1

* Update reference docs with new beta.1 build
2022-10-21 20:30:38 -07:00
Bo-Cheng Chu e859278609
Remove restart requirement for ext-authz (#12106)
* rm restart

* update snip
2022-10-18 17:29:51 -07:00
Aryan Gupta 5b09be5530
updated docs for jwt routing (#12107) 2022-10-17 12:02:11 -07:00
Michael df5c1fd174
fix layout of /authentication/mtls-migration/index.md (#11894) 2022-09-12 08:40:53 -07:00
Petr McAllister 0f38254197
missing cleanup command (#11836)
* missing cleanup command

the current instructions are missing clean up command for  `peerauthentication` in `foo` namespace

* after make gen run
2022-09-07 14:52:45 -07:00
Eric Van Norman 68fb4ec77a
advance master to release-1.16 (#11778)
* build an archive of v1.14 in master

* update data/versions.yml and archive index page

* advance master to release-1.16

* Rerun `make update_ref_docs

* Update to commit on main branch to fix tests

* Disable failing test (temporary)
2022-09-01 07:25:41 -07:00
Tong Li 46eb244468
Replace experimental uninstall command with uninstall command (#11736)
* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

* Update content/en/docs/setup/upgrade/canary/index.md

Replace experimental uninstall command with uninstall command

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Apply suggestions from code review

Replace experimental uninstall command with uninstall command

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

* Update content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

Signed-off-by: Tong Li <litong01@us.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2022-08-25 08:00:21 -07:00
Istio Automation 15a3975599
Remove 2 year old security warning (#11747)
Was fixed long ago

Co-authored-by: John Howard <howardjohn@google.com>
2022-08-24 14:15:06 -07:00
Eric Van Norman da73c24218
Prepare for the 1.15.0 release (#11684) 2022-08-07 13:23:45 -07:00
Iris e202a0995d
add multi-signer docs (#11419)
* addess review comments

* address review comments

* address review comments
2022-07-15 16:15:58 -07:00
Istio Automation 4add341878
[master] SHA-1 signatures will not work with Golang 1.18 (#11546)
* SHA-1 signatures will not work with Golang 1.18

Support for SHA-1 signatures is disabled by default in Go 1.18 or newer. When generating the certificates please use OpenSSL on MacOS to make sure the certificates will work with istio.

* Lint fixes

* Lint fix

Co-authored-by: Saverio Proto <saverioproto@microsoft.com>
Co-authored-by: craigbox <craigbox@google.com>
2022-07-06 09:58:29 -07:00
Eric Van Norman b5e32c648a
Additional updates to use the master branches in other repos (#11431) 2022-06-15 03:34:22 -07:00
John Howard e1bc209fa0
Remove doc on "Istio DNS Certificate Management" (#11369)
* Remove doc on "Istio DNS Certificate Management"

This document gives harmful advice. This feature was intended to be used
for signing control plane certificates, and actually doesn't work for
other cases (cross namespace or any modern Kubernetes version are
completely broken).

* use archive link

* name trick
2022-06-06 11:16:26 -07:00
bobbypower-asm 2b7afa36d7
Fix title ("mininum" > "minimum") (#11346) 2022-05-24 14:27:36 -07:00
Frank Budinsky a326daa3e0
Add webhooks to test framework snapshot (#11281)
* Add webhooks to test framework snapshot

* missing return

* fix lint

* some fixes

* more fixes

* final fixes

* one more
2022-05-13 10:12:49 -07:00
lei-tang bf82e1037c
User guide for Istio TLS configuration (#11166)
* User guide for Istio TLS configuration

* Address review comments

* Fix indention

* Fix lint

* Address reviewer comments

* Address review comment
2022-05-02 14:46:04 -07:00
Eric Van Norman 84c40da017
Prepare for version 1.14 as istio source is already branched (#11212)
* Prepare for version 1.14 as istio source is already branched

* Missed make gen
2022-04-25 10:24:04 -07:00
Eric Van Norman fc515c8166
Replay yq v3 which is deprecated with yq v4 (#11202)
* Replay yq v3 which is deprecated with yq v4

* Update yq key
2022-04-20 13:37:30 -07:00
Kevin 14b766309c
doc: change 'plain text' to 'plaintext' (#11085) 2022-03-22 02:21:24 -07:00
Eric Van Norman 08fe6be739
Updates to use fix main branch post release branching (#10894)
* Update to use main branch for reference docs

* Updates to fix this for next time (not moving to master)

* Run `make gen`

* Update master istio test reference

* Ingore one shellcheck, SC1091, for now. Not sure why it just showed up
2022-02-11 16:28:20 -08:00
Deepak Pakhale 29f0d809f3
Fixes #10813 (#10819)
Adding files generated after "make gen"
2022-01-23 14:40:13 -08:00
Eric Van Norman 68f0f07545
Prepare for v1.13 as istio source is already branched (#10808)
* Prepare for v1.13 as istio source is already branched

* Update VM test image from 1.11 to current to test

* Rename tests to temporaily disable Issue created to reanble before 1.13
2022-01-21 09:52:46 -08:00
Yangmin Zhu 84a63d0e33
add test for the dry-run task (#10526)
* add test for the dry-run task

* Update content/en/docs/tasks/security/authorization/authz-dry-run/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2021-12-08 07:50:27 -08:00
Yangmin Zhu 81e896486b
update release note for external authz (#10527)
* update release note for external authz

* address comment

* Update content/en/news/releases/1.12.x/announcing-1.12/change-notes/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2021-11-23 11:30:07 -08:00
Eric Van Norman 72de90d75b
Advance master to release-1.13 (#10516)
* build an archive of v1.11 in master

* update data/versions.yml and archive index page

* advance master to release-1.13

* ANother script update

* go get remaing istio repos to satisfy linter

* Temporarily fix link broken by istio/api #2148

* Temporarily disable istioctl analyze test.
2021-11-19 06:52:51 -08:00
Yangmin Zhu 90c77c5583
update jwt claim based routing and add tests (#10465)
* update jwt claim based routing and add tests

* fix test

* fix typo

* fix test
2021-11-09 09:11:52 -08:00
Eric Van Norman 4c16b9a65e
Prepare for v1.12 as Istio source is already branched (#10455)
* prepare for v1.12 as istio source is already branched

* Fixup script output

* Removing validatingwebhookconfiguration if it exists.
2021-11-01 12:27:58 -07:00
Yangmin Zhu 3053d41089
add task for JWT claim based routing (#10332)
* add task for JWT claim based routing

* move to security

* update

* update

* update
2021-10-12 19:08:05 -07:00
Istio Automation 07cf4f6b68
[master] Fix in attribute "name" on "metadata". (#10361)
* Fix in attribute "name" on "metadata".

Missing tab in attribute "name" at section "Define the external authorizer" in ServiceEntry example.

* command make gen

Co-authored-by: Igor Agueme <igoragueme@outlook.com>
2021-09-17 08:31:35 -07:00
Sungyun Hur 4b6489305b
docs: update broken OPA links (#10320)
* docs: update broken OPA links

* fix: typo
2021-09-09 21:40:51 -07:00
Jianfei Hu 00f76de374
Remove the destination rule in peer authn doc. (#10117)
* Remove the destination rule in peer authn doc.

* update with snip test.

* fix test.sh.

* update the test.sh

* test.sh again.

* test 3rd time.

* test.sh 5th

* test.sh 6th time.
2021-08-14 22:08:55 -07:00
Eric Van Norman 327bd45dbe
Advance master to 1.12 (#10176)
* build an archive of v1.10 in master

* update data/versions.yml and archive index page

* advance master to release-1.12

* Update istio test reference to pick up 1.12 in istioctl messages

* Fix lint and IMAGE_VERSION

* MOre changes for lint

* Use correct IMAGE_VERSION

* Skip virtual machines test - Release Blocker issue created
2021-08-13 08:58:35 -07:00
craigbox a27bd06486
Fix numbering due to errant spacing (#10135) 2021-08-01 18:12:51 -07:00