* use kubectl consistently throughout for Istio API resource C.R.U.D operations
xref: https://github.com/istio/istio.github.io/issues/1843
* fix typo
* review comments
* remove unnecessary instructions to use `replace` instead of `create`
* fix linter in `zh` content
- Increase the size of the Copy button in preformatted blocks to make it stand out since it is the
most common used button.
- Shift the copy/download/print buttons in PRE blocks towards the left so they don't overlap the
scroll bar in large text blocks.
- Switch to new fonts.
- Instead of underlining <H2> headers, we now draw a blue bar above them.
- Add an "up level" button at the top of pages.
- Streamline the appearance of the next/previous page links at the bottom of most pages.
- Remove the right pointing arrows from index pages and see also sections. They were just
confusing.
- Add icons to the main pages.
- Slightly change the layout of the glossary page, more to come here.
* Clean up of the platform section
This cleans up the platform section into its own subdirectory.
I am not all that happy about how "see-also" works, but maybe that
is how it is meant to work, or alternatively I'm doing it wrong :)
* Apply reviewer comments and add the index file
_index.md was missing from prior commit accidentally.
Removed all "Platform setup for" text in all platform docs.
* Apply reviewer comments
Some wordsmithing.
weight = 3 is intentional to fit alphabet. Assuming nobody
will require ASCIIbetical.
* Fix US English lint errors
* Revert the Chinese translation of the platforms PR
The Chinese language version needs to be ported. This PR
was merged manually which probably has broken the gate.
* Fixed:
Broken link to the old platform-setup document.
code block in openshift setup.
* fixed: md005
recovered: code block for openshift.
Unexpected end tag : p (line 12)
* Edit Security section for clarity.
The edit includes:
* Rewrite of every passive voice instance.
* Consistent use markup to reference code from the examples in the text.
* Added emphasis to make key concepts clearer.
* Added links to the Identity section of the docs.
* initial version of Egress Gateway for 1.0
* use HTTPS protocol for the egress gateway ports
* change troubleshouting section regarding mutual TLS
just direct users to read the mutual TLS page regarding troubleshooting
* add egressgateway to .spelling
* remove "let's" prevent the "we language"
* fix lint errors
* rename Cleanup section names to more detailed names, to prevent lint errors
* add a section about directing HTTPS traffic thru egress gateway
* remove istio-system namespace from the HTTPS-related artifacts
* add a section for mutual TLS over HTTPS
* disable mTLS on Istio with mTLS between a sidecar and the egress gateway
* use * as a host in the gateway's definition
* clarify the fact that in HTTPS the original traffic is already encrypted
* use mTLS between sidecar and egress gateway
* use explicit host in gateways instead of *
* add subjectAltNames to the upstream of the sidecar proxy
* unite creating a gateway for mTLS and a destination to set SNI
* add a missing dot
* add destination rule for setting SNI for mTLS to all cases
* add deleting the destination rule for mTLS
* split a long line
* Rewrite the steps to create a service entry in a separate step
* use port 80 in the destionation rule for direct HTTP traffic without TLS origination
* remove redundant ServiceEntry definition
* mention DestinationRule for TLS origination
* rename port tls to tls-cnn
for future definition of multiple servers on the same port
* describe getting Envoy's stastics of istio-egressgateway
Update "Collecting Metrics and Logs" task with new source and destination attributes
Updated based on reviews and added tcp metrics changes too
Update Prometheus Task
Update Using-Istio-Dashboard task
Updated fluentd and servicegraph tasks.
Also update distributed tracing and using-istio-dashboards tasks based
on feedback
Add new picture for servicegraph and indent using-istio-dashboard again
Fixed Linting Errors
Updating based on review
Updating based on review
Adding destination-rule-all-mtls for tcp metrics routing too
Add explanation for Inbound Workloads and Outbound Services for Workload Dashboards
* Update authentication concept doc.
* Fix lint errors.
* Address comments and fixed some links.
* Remove feature stages change from this PR.
I will make a separate PR for it.
* Chinese community translation and fix a markdown error
- Translate community page into Chinese
- Fix https overlay markdown style check error
* fix CI errors
- update Quick Start with Kubernetes
- update Prerequisites and Installation steps
- fix some broken links
* Multicluster: add details on enabling mTLS for control plane and app pods
- describes deployment steps and includes an example deployment with commands
* fix review comments on wording
* Extract platform prerequisites
* Reorg
* Remove the inner pages from the menu
* Conform to the site directory structure
* Fix the link wording to match the title of the link and the uppercase
* Fix lint errors
* more lint errors
Remove warning that prior to Istio 0.8 Helm was unstable.
Since we are on 1.0, and can expect people to upgrade from 0.8,
this warning doesn't seem relevant.
Also, Helm upgrade from 0.8 to 1.0 has been validated. Also
remove that warning.
* Edit Kubernetes Quick Start for clarity.
This edit includes among other changes:
* Consistent use of markup, line length, and command formatting.
* Grammar, spelling, and other language fixes.
* Use of ordered lists for steps.
* New clear headings for installation options.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix linter issues on Kubernetes QS edit.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix indentation to fix ordered lists.
Trying to figure out the space in links issue. So far it looks like a false
positive.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix links and code blocs for lint.
Signed-off-by: rcaballeromx <grca@google.com>
* Remove in-line markup from links.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix code-block indentation and spelling lint.
Signed-off-by: rcaballeromx <grca@google.com>
* Rewrote link text to avoid spelling lint.
Signed-off-by: rcaballeromx <grca@google.com>
* Update index.md
* Delete "basic access control" and "secure access control" pages.
These pages were there before Istio RBAC was introduced. We should
remove them now to avoid confusion.
* Added aliases for deleted pages.
Istio intends to lead with automatic sidecar injection and
as such, there is no good rationale to document how to turn
sidecar injection off. Still, as a followon PR, it may make
sense to document 5-7 different customization scenarios.
ingress v1 is gone - no sense describing it here.
* add ./ to the script to generate certificates
* add a step to verify the subject of the ingress gateway certificate
* add a step to verify the subject of the CA certificate
put the mutual TLS troubleshooting into a separate subsection
* fix the level of the mutual TLS troubleshooting
* remove redundant empty lines
* verify the subject is correct -> verify that the subject is correct
* another case: verify the subject is correct -> verify that the subject is correct
According to https://cloud.google.com/kubernetes-engine/release-notes#june-28-2018, 1.10.4-gke.0 is no longer available but 1.10.5-gke.0 now is.
With the old version I get:
```
$ gcloud container clusters create quickstart --cluster-version=1.10.4-gke.0 --zone us-east1-b --project jblatt-test
ERROR: (gcloud.container.clusters.create) ResponseError: code=400, message=master version "1.10.4-gke.0" is unsupported.
```
* Update multicluster doc with latest helm chart changes
Update the procedure
- new helm var names
- remove service account creation
- reorder sections to correct procedural order
- auto v. manual sidecar inject info
* Edit the What is Istio file for clarity.
This edit includes:
* The rewrite of all instances of passive voice
* The simplification of complex sentence structures
* The splitting of run-on-sentences
* The disambiguation of relative pronouns
* The removal of conjunctives such as should, could, and would
* The replacement of long series with lists
* The improvement of punctuation
* The addition of emphatic markup including links
The purpose behind the edits is to improve content flow and allow easier
consumption for international audiences. The simpler structures will also have a
positive impact in the translation.
* Consolidate the security concept pages into a single page.
- This updates the security concept material to be on a single page, which matches the
change done last week for the rest of the concept material. This ends up being a less clicky
more directed introduction for newcomers to the platform.
- While I was there, I moved the redundant What is Istio page from our about section and stuck
the content at the top of the What is Istio page in the Concepts section.
As part of the effort to streamline our content, this consolidates the many small
perf-and-scalability pages into a single concept page. This change is similar to what
we've done to the other concept pages.
KeZhang