Commit Graph

1044 Commits

Author SHA1 Message Date
Martin Taillefer fcff7b5505
Add support for a dark color theme. (#966)
* Add support for a dark color themes.

- The version dropdown is now replaced with a gear dropdown. This dropdown lets you
pick the version of the site to look at, and lets you pick the light or dark color
themes for the site.

- Fixed a rendering glitch on the community page where a stray right and bottom border
was rendered.
2018-02-11 18:10:12 -08:00
Yusuo 6a5e5013e3 Add some notes about helm. (#967) 2018-02-11 15:18:55 -08:00
Laurent Demailly 5a2dc56dfc
fixes #874
fixes #874
2018-02-10 20:52:14 -08:00
mtail 0e54814ef7 Avoid horizontal scrollbar on the home page. 2018-02-09 19:42:11 -08:00
Martin Taillefer 5a71e65325 Add a link for downloading Istio to the landing page. (#965) 2018-02-09 18:21:10 -08:00
mtail b7bbafa70a Latest reference docs. 2018-02-09 14:48:02 -08:00
craigbox e1da4d25bf Update docs to refer to GKE using v1.9.2 (#961)
Fixes to the wording about s/initalizer/mutating webhook/ and fixes to the script for installing a GKE cluster, now that 1.9.x is GA.
2018-02-09 10:49:22 -08:00
Chris Laprun ad75fa6da0 Synch examples with attribute vocabulary. (#957) 2018-02-08 17:25:55 -08:00
Tao Li 10795e1b23
Fix plugin-ca doc (#956) 2018-02-08 13:47:44 -08:00
Jeff Mendoza 14b95baaea Consistent capitalization of Servicegraph (#953) 2018-02-08 13:41:43 -08:00
Tao Li 18cc0662cf Update security FAQ (#954) 2018-02-08 13:39:55 -08:00
Martin Taillefer 99b8ddcb54
Fix a bunch of content errors. (#951)
* Fix a bunch of content errors.

- Replace links using https://istio.io and / with {{home}} so they work
on staging and archive versions of the site.

- Fix a bunch of preformatted blocks that has extra spaces or incorrect indent

- Replaced usage of "Further reading" with "What's next" to match our convention.

- Fix capitalization style of various headers to match our convention.

- Broke up some preformatted blocks to separate the command-line from the output
in order to make cut & paste easier, per our convention.

* Fix more links.
2018-02-08 13:17:21 -08:00
Christian Posta ca2fdb0b24 added traffic mirroring task (#945)
* added traffic mirroring task

* clarification of envoy cluster

* clarified the shadowing policy

* drop .DS_Store that snuck in
2018-02-08 11:24:04 -05:00
Laurent Demailly 9a90ea3eec
additional link to archive (#871) 2018-02-07 21:19:06 -08:00
imgbot[bot] f1fedd02f3 [ImgBot] optimizes images (#948)
*Total -- 217.26kb -> 122.69kb (43.53%)

/_blog/2018/img/errorFetchingBookRating.png -- 113.74kb -> 63.72kb (43.98%)
/_blog/2018/img/externalMySQLRatings.png -- 103.51kb -> 58.97kb (43.03%)
2018-02-07 21:15:13 -08:00
Vadim Eisenberg caedcc7f0e Fix format egress https blog (#949)
* replaced istio.io with {{home}}

* fixed capitalization - lower case letters in section headings
2018-02-07 21:14:49 -08:00
Vadim Eisenberg e4f9384bac added .DS_Store file to .gitignore (#950)
* added .DS_Store file to .gitignore

https://en.wikipedia.org/wiki/.DS_Store

* added missing new line to .gitignore
2018-02-07 21:11:29 -08:00
Vadim Eisenberg 09e8f06bce
Tcp egress blog (#944)
* initial version of a blog post about Egress TCP traffic

* removed a redundant whitespace

* added introduction and mysql instructions

* changed the page order to be 92

* completed mysql part

* fixed indentation and wording

* added "use the database section", including a diagram

* fixed figure caption

* added Future Work, Further Reading and Empty Conclusion

* updated bookinfo-ratings-v2-mysql-external.svg

* added a remark about the arrows on the updated diagram

* added deleting the egress rule

* added figure of error of Ratings service unavailable

* added Section Egress Rule for external MySQL instance

* fixed heading of "Future Work"

* the initial full version of the blog

* resized the diagram of Bookinfo with MySQL

* added a paragraph about service degradation

* separated the commands and their output

* wording improvements

* fixed the figures according to the new syntax

* fixed the border around details microservice in the image

* final fixes

* fixed mysqlsh strings

* broke additional long mysql lines

* fixed the ration of the images

* remove .DS_Store

* replace istio.io with {{home}}

* make lower case headings and Bookinfo sample application

* fixed the identation in "use the database..." section

* allow the in-mesh applications access -> allow the in-mesh applications to access

* Let me remind you -> As a reminder, here is

* allowed -> sent, sent by -> sent according

* rephrased the sentence about MONGO protocol

* Added a section "relation to mesh expansion".

* added mutual TLS as a benefit of mesh expansion

* sent according to the route rules -> configured according to the route rules
2018-02-08 03:40:25 +02:00
Martin Taillefer 92614752ad
Fix figure references to use the correct approach for istio.io (#943) 2018-02-07 05:25:52 -08:00
Jason Young ea20135b8d fix docs/setup/kubernetes/sidecar-injection.html links (#940) 2018-02-06 22:21:34 -08:00
Martin Taillefer 08f924f85b
Add support for archiving istio.io contents. (#833) 2018-02-06 21:02:08 -08:00
Vincent 42827df958 fixed circuit breaker links (#930) 2018-02-06 20:51:39 -08:00
Martin Taillefer 8ec8e250da
Update reference docs. (#942)
* Update reference docs.

- We now replace instances of https://istio.io with {{site.baseurl}} in imported
reference docs such that the generated site will work properly for staging and for
archive.istio.io

* Fix a bad link.
2018-02-06 20:48:33 -08:00
Limin Wang bc4c823c5c
Fix formatting issues on Istio RBAC task page. (#941) 2018-02-06 17:15:53 -08:00
Limin Wang dfa8e8f3cb
Add a task doc for Istio RBAC. (#934)
* Add a task doc for Istio RBAC.

* Minor edits.

* Fix release notes.

* Addressed Spike's comments.
2018-02-06 16:17:09 -08:00
cmluciano 1fffddd850 Minikube sidecar injection setup for 0.5.0 (#921) 2018-02-06 13:20:41 -08:00
Yinjie Chen ea11fcf6e1 Document RBAC set up for ingress key cert protection. (#755)
* Document RBAC set up for ingress key/cert

* Document revision.

* Addressed some review comments.

* Add some revision.

* Add some revision.

* Revise per comment.

* Update ingress.md
2018-02-06 10:53:24 -08:00
Martin Taillefer 428af2c847
Update reference docs. (#937) 2018-02-06 09:48:31 -08:00
Vadim Eisenberg ff84954b62 remove offending asterisk from curl output (#935)
the asterisk does not have any meaning
it confuses jekyll, it takes it as a bullet
2018-02-05 20:23:57 -08:00
Steven Dake f9e5df3c73 Add documentation for Helm deployment (#875)
* Add documentation for Helm deployment

This adds documentation along with related configuration options for
deploying Istio with the Helm charts.

* Few corrections as suggested during review.

* Fix error in path to install Helm package

* Slight refinement of helm documentation

Fix a typo in the install command and warning clause about automatic
sidecar injection not being implemented.
2018-02-05 13:51:58 -05:00
Laurent Demailly 5b4b284f32
clarification on mTLS verification with curl (#925)
* clarification on mTLS verification with curl

from some confusion by user on slack

* update ptal
2018-02-02 16:21:25 -08:00
Vadim Eisenberg 80aeade850
add Control Egress TCP Traffic task (#928)
* add Control Egress TCP Traffic task

* removed redundant whitespace

* replaced outside the mesh with outside the cluster
2018-02-03 00:08:13 +02:00
Martin Taillefer e795a779c4
Regenerate docs with latest tooling. (#926) 2018-02-01 21:04:37 -08:00
Martin Taillefer e3573dd142
Improve styling for <code> blocks. (#924)
- Made <code> a bit smaller, a bit darker red, and substantially improve word break appearance in
tables.
2018-02-01 19:41:41 -08:00
Limin Wang f80fdda9aa
Add a concept doc for Istio RBAC. (#922)
* Add a concept doc for Istio RBAC.

* Fix reference error.

* Addressed Spike's comments.
2018-02-01 16:05:09 -08:00
Martin Taillefer 622fcbda07
Refresh CLI docs given updated generator. (#923) 2018-02-01 15:48:18 -08:00
Shriram Rajagopalan 9a0cdae6a9
fix v1alpha2 docs (#919)
* doc fix

* nit
2018-02-01 16:23:48 -05:00
Jason Young 987e82a7e4 Clarify deprecation of initializer for automatic proxy injection (#920)
* Clarify deprecate of initializer for automatic proxy injection

* Update sidecar-injection.md

* Update sidecar-injection.md
2018-02-01 12:36:31 -08:00
Jason Young d705f26b19
Update quick start guide for sidecar injector webhook (#909) 2018-02-01 11:30:40 -08:00
Vadim Eisenberg 7f60c8a44e
added "Relation to Security" section for egress rules task (#904)
* added "Relation to Security" section for egress rules task

explain that Egress Rules cannot be a security measure for the traffic to
the external services

* rephrased the paragraph about Egress Rules and security

* make the sentence about the access control shorter

* added "the" to "external services"
2018-02-01 20:36:08 +02:00
mtail 6e826e25c5 Quicky fix to istioctl gen-deploy.
The real fix involves the tool that's producing the .md file...
2018-02-01 10:14:53 -08:00
Martin Taillefer 5291eb1682
Update CLI docs and create reproducible process to update these docs. (#916) 2018-02-01 09:33:56 -08:00
Jasmine Jaksic aeedf86838 Update feature-stages.md (#915)
Minor edit
2018-01-31 20:21:32 -08:00
Jasmine Jaksic 9ac7995053
Update feature-stages.md
Updated features list to reflect 0.5 release.
2018-01-31 19:46:40 -08:00
Laurent Demailly 447cf93632
Added release status / latest vs stable information (#912)
* Added release status / latest vs stable information

Fixes #910

* Code review comment

* Restore original newlines
2018-01-31 16:04:55 -08:00
Martin Taillefer 15920f1f53
0.5 release notes. (#902) 2018-01-31 15:48:04 -08:00
Jeff Mendoza 0080429510 Add Task for setting up and using the Fluend Mixer adapter. (#905) 2018-01-31 15:44:57 -08:00
imgbot[bot] 0efc17e525 [ImgBot] optimizes images (#903)
*Total -- 319.16kb -> 163.74kb (48.7%)

/_blog/2018/img/externalBookDetails.png -- 225.50kb -> 109.33kb (51.51%)
/_blog/2018/img/errorFetchingBookDetails.png -- 93.67kb -> 54.41kb (41.91%)
2018-01-31 13:49:27 -08:00
Vadim Eisenberg 191263a4c2
Update egress https blog after a review of a technical writer (#906)
* fixed capitalization - make Service Mesh, Egress/Route Rules lowercase

* added missing definite articles

* rephrase the second paragraph

* rephrase the third paragraph

* will work -> work

* I will copy here -> here is a copy of

* whose boundaries -> the boundaries of which, dashed -> dotted

* rephrase the route rule to details v2

* added commas in the "good news" paragraph

* removed hmm

* rewrote the paragraph about the wildcard feature

* will produce -> produces

* rephrases TLS origination

* 443, the port the service listens to -> 443, which is the port...

* kubernetes deployment, container spec -> Kubernetes Deployment spec, container section

* strong identity -> a strong identity

* in order to -> to

* The trick -> the attack

* rephrase "right now we are working"

* the future releases -> future releases

* we are working -> we're working

* change dot to colon in "let's define an egress rule"

* for the sake of example -> for the sake of the example

* Ruby module -> the Ruby module

* additional case of Service Mesh -> service mesh

* added a comma after and

* additional case of the future releases -> future releases
2018-01-31 20:19:59 +02:00
Vadim Eisenberg 535f68b81d Blog Post about HTTPS Egress Traffic in Istio (#881)
* added initial version of Egress HTTPS blog, including adding blog section for 2018

* replace dash with comma

* that has Istio installed -> with Istio installed

* route rule -> Route Rule

* app -> application

* restructured error propagation

* could have gone wrong -> might have gone wrong

* which -> that

* the same -> the previous

* moved "now" after "accessing"

* rephrased "the previous error..."

* rewrote the passage about dynamically defined egress rules, marked some terms in bold

* rephrased "written or configured differently"

* IP -> destination IP

* removed "to secure Egress Rules"

* "to add applying" -> "to enable applying"

* rephrased the passage about no tracing, telemetry, mixer checks

* checkss -> checks, tracing/telemetry -> tracing, telemetry

* logging -> tracing

* rephrased the conclusion section

* e.g -> for example

* added "currently" to "Istio cannot perform filtering"

* allow Istio perform -> allow Istio to perform

* "true" string -> _"true"_

* "Egress Rule" is, it enables -> "Egress Rules" are, they enable, just -> only

* rewrote the sentence about the malicious attack

* ... Mixer checks -> ... Mixer checks for the egress traffic

* updated the date to be 26-th of January

* App -> Application

* cluster -> Kubernetes cluster

* added graceful service degradation

* BookInfo -> Bookinfo

* BookInfo -> Bookinfo in a second place

* Book Details displayed without error -> Book Details displayed correctly

* The issues -> Issues

* no Mixer Checks -> No Mixer Checks in section's title

* on the egress traffic -> for the egress traffic

* on the egress traffic -> for the egress traffic, in the second place

* we achieve -> we have

* added Envoy proxy in parenthesis when talking about Istio sidecar proxy

* completed the https from the app diagram, inside/outside of Istio

* added a figure with HTTPS traffic, from inside/outside of Istio

* added a paragraph about the HTTPS traffic figure

* added a paragraph about the port 443

* added "differently," after configured

* replaced places of "from inside" and "from outside"

since "from outside" appears first on the diagram

* container spec -> the `container` spec

* fixed two links

* moved "to external services" after "traffic"

* the Istio Service Mesh -> an Istio Service Mesh

* traffic between the proxy -> traffic between the pod

* the Istio Service Mesh -> an Istio Service Mesh

* has/have to -> must

* the microservice code -> the code of the microservices

* inside/outside of -> inside/outside

* outside of -> outside (removed of)

* Egress Requests -> egress requests

* added derived from the URL's schema

* URL -> URI, added (https://)

* remove .DS_Store, submitted accidentially

* to outside the cluster -> to destinations outside the cluster

* made "block all the traffic to destinations outside the cluster"

* extended the example about the wildcard match of Egress Rules

www.googleapis.com and fcm.googleapis.com

* replaced "now" with "after deleting the Egress Rule"

* fixed calculating the latest blog, thanks to Martin Teillefer

* removed using istio initializer, since starting from 0.5.0 it requires Kubernetes 1.9

* added mentioning of the Istio version for this blog post

* updated the date to be 31 January 2018

* added mentioning that the example work with or without mTLS

* added a sub-section on a relation to Istio Mutual TLS

* Added: The TLS origination for the external services will work, whether the Istio mutual TLS is enabled or not.

* fixed a link to Egress Rules reference

* added a migration use cases for external services
2018-01-31 09:58:18 -05:00