Commit Graph

43 Commits

Author SHA1 Message Date
Eric Van Norman db796eab17
Branch cut changes for release-1.7 (#7767)
* Branch cut changes for release-1.7

* Missed make gen
2020-07-22 09:12:06 -07:00
Frank Budinsky e9a89c879f
Add owner attribute to docs (#7737)
* Add owner attribute to docs

* remove @
2020-07-15 15:19:40 -07:00
Eric Van Norman 78088360fe
Update istio/istio ref and reenable tests (#7669)
* Update istio/istio ref and reenable tests

* Update istio/istio reference

* Update istioctl build to have version for images

* Fix lint and pull a newer istio/istio

* Disable egress tests
2020-07-09 13:29:32 -07:00
Frank Budinsky 93458dd587
Temporarily disable broken tests (#7667)
* Temporarily disable broken tests

* use @setup

* use @setup

* another one
2020-07-06 16:56:19 -07:00
Frank Budinsky 412f03105c
Kubernetes Ingress Test + fixes (#7662)
* Kubernetes Ingress Test + fixes

* cleanup

* fix circuit-breaking test

* fix lint

* remove -it
2020-07-06 07:54:35 -07:00
Frank Budinsky 01c4cce951
Add proper wait for config calls to tests (#7620)
* Add wait for config calls to tests

* two more
2020-06-24 09:48:29 -07:00
Frank Budinsky 25c3be4772
Some random poor quality doc fixes (#7589)
* Some random poor quality doc fixes

* change profiles
2020-06-19 11:25:02 -07:00
Hongyi Zhang 5fbb14bedc
Convert all old tests to new tests (#7522)
* add an example task to test

* main test function: save progress

* a working example: routing request

* improve log info and error handling

* introduce makefile

* run each test as a subtest; remove common setup from test.sh

* add another test.sh: fault-injection

* improve error handling

* check test environment

* add two more test.sh files

* fix make command for istio setup

* update two test.sh files from upstream

* add comments and update README.md

* update test.sh files from upstream

* support multiple test names

* update README

* update README.md for new framework

* remove documentation of migration steps

* undo format changes

* change separation line to '# @cleanup'

* move go code and makefile from content/ to tests/

* change package name

* make for loop more readable

* change the set of auto-sourced scripts

* add docs for all functions

* approach to deal with folders with the same name

* minor fixes to ensure everything still runs

* fix make gen error

* add a TIMEOUT argument

* make sure util/debug.sh works with new framework

* make lint-go happy

* [BIG CHANGE] allow different istio setup configs

* make linters happy

* make linters happier

* changed wording and function orders

* make error return as the 2nd argument

* add TODOs

* Update content/en/docs/tasks/traffic-management/traffic-shifting/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* only test english docs

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* allow test.sh as suffix

* move adding setup configs to tests/setup

* recommend full paths

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* require full test paths

* converting old tests to new tests: traffic-management and misc

* converting old tests to new tests: security

* remove old tests

* Update content/en/docs/tasks/security/cert-management/dns-cert/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* simplify setup configs

* Update content/en/docs/tasks/security/authentication/authn-policy/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/authentication/mtls-migration/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/authorization/authz-http/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* do not let istioctl prompt y/n

* Update content/en/docs/tasks/traffic-management/ingress/ingress-sni-passthrough/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/cert-management/plugin-ca-cert/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* simplify stuff

* rename dns-cert test.sh to test_broken.sh

* fix dns-cert doc and test

* remove egress=disabled

* fix test

* Update content/en/docs/tasks/observability/logs/access-log/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-06-11 11:15:48 -07:00
Navraj Singh Chhina e7616b2ac0
Disable ShellChecking for SC2164 (#7507)
* add missing cleanup for vs nginx

* disable SC2164 which checks safe cd

* make gen
2020-06-08 13:56:32 -07:00
Shamsher Ansari 9fe272272b
update doc to use istioctl install (#7396) 2020-06-01 11:02:27 -07:00
Justin Pettit 877b438829
Authn policy (#7433)
* authn-policy: Point users to Istio installation guide.

Have users install Istio through the installation guide instead of
explicitly instructing them to run "istioctl manifest apply" in the
task.  This will make it easier to automate the task later.

* authn-policy: Make steps and expected response clear for testing.

* Add authn-policy user guide test.
2020-05-29 12:11:47 -07:00
Frank Budinsky e11cf24f0d
Add test: attribute to all md files (#7413) 2020-05-27 09:11:26 -07:00
Frank Budinsky f45bc9e1a8
Remove obsolete '# ' uses from all tests (#7233) 2020-05-06 19:17:11 -04:00
Eric Van Norman 392a2bee14
Update test framework to use 1.6.0-beta.0 (#7214)
* Update test framework to use 1.6.0-beta.0

* Go back to copies from env var

* Add more test targets, fix mtls test (new PA added)

* Update to use Istio SHA from go.mod (convert to long SHA)

* Try and remove TAG from prow

* Debug TAG not being set

* Fix paralization issue

* Remove some extra output

* Review comments
2020-05-06 10:49:27 -07:00
Oliver Liu 1e73594260
Restructure the cert management tasks. (#7209)
* Restructure the cert management tasks.

* Small fix.

* Fix references.

* Fix links

* Small fix.

* Update content/en/docs/tasks/security/cert-management/plugin-ca-cert/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Small fix.

* Change the weights.

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-05-04 14:57:29 -04:00
jacob-delgado 7cf02b617d
Update Authentication page (#7198)
Fixes https://github.com/istio/istio.io/issues/7194
2020-04-30 10:58:57 -07:00
Frank Budinsky 1fe7056ffa
Partial convert mirror test to new model (#7153)
Reverted the actual mirror test script, because mirror test seems to have some subtle failure when running with what seems to be the exact same commands via snips. Will investigate further in followup PR. Merging this one to get the generator changes.
2020-04-25 12:34:24 -04:00
Mitch Connors e1b4de48f0
Fix cleanup to delete authorization policy (#7142)
Fixes https://github.com/istio/istio/issues/23190
2020-04-23 11:18:12 -07:00
Frank Budinsky a7107678f5
Convert TCP traffic shifting test (#7131)
* Convert TCP traffic shifting test

* lint errors

* regen

* test disable spellcheck

* temporary disable gen-check

* disable inappropriate bash lint errors

* disable gen check

* one more regen

* reenable gen check

* remove -it options

* revert commands

* fix app health check outdated
2020-04-22 18:26:27 -07:00
Frank Budinsky f2cf780bfb
Update doc test README (#7080)
* Update doc test README

* add sh

* tweaks

* formatting

* format

* fix comment

* wording

* convert mtls migration task

* Update tests/README.md

Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>

* Update tests/README.md

Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2020-04-15 08:44:18 -07:00
Frank Budinsky 3b59501872
Generate test snippets from md files POC (#7044)
* Generate test snippets from md POC

* fixes

* fix python lint

* fix snip source

* improvements

* update snip calls

* add copyright header

* lint errors

* lint error in md instructions

* better default snip_id

* run test without snippet gen

* gofmt

* fixes

* fix path

* fixes

* fix verify
2020-04-14 07:13:44 -07:00
Eric Van Norman 1290482b63
Fix privildeged (#6997) 2020-04-02 08:12:33 -07:00
Jianfei Hu 8dc367d9fd
Add a tcpdump verification FAQ entry for mutual TLS effect proof. (#6922)
* add a tcpdump verification for mtls

* add period

* move to the migration doc.

* lint fixing

* address cmt.

* Apply suggestions from code review

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-03-24 13:30:11 -04:00
Diem Vu 055f5e480c
[Release-1.5] Delete auto-mTLS task (#6591)
* Delete auto-mTLS task

* Fix links

* Fix links

* Fix links on 1.5

* Fix links
2020-03-05 18:01:06 -08:00
Istio Automation 2edbaeaf4b
Remove deep dive mtls taks. (#6706)
* remove deep dive

* update links

* lint fixing egs gw

* more removal

* link 1.0.3 lint
2020-03-04 13:15:26 -08:00
Istio Automation b5a4efb064
Another clean up for global.mtls.enable (#6611)
* Another clean up for global.mtl.enable

* Update text

* Lint

* Use --set values.grafana.enabled=true as overriding operator value example

* Revert change in content/en/docs/reference/commands/istioctl/index.html

* Change example istioctl command to override grafana settings

* Lint

* Change to --set addonComponents.grafana.enabled=true

* Remove global.mtls.enable in authn task

* Update content/en/docs/setup/install/istioctl/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/citadel-config/plugin-ca-cert/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/citadel-config/plugin-ca-cert/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

Co-authored-by: Rigs Caballero <grca@google.com>
2020-03-04 13:15:19 -08:00
Diem Vu dde9ed9258
Fix per-port peer authentication command (#6682)
* Fix command

* Correct commands for mtls migration tasks

* Lint

* Lint
2020-03-02 14:43:03 -08:00
Jianfei Hu 6fb12b9c8e
Rewrite mtls migration instructions. (#6589)
* rewrite mtls migration doc.

* migrate out the comment out ones

* more service/wl swap, one level title up

* Update content/en/docs/tasks/security/authentication/mtls-migration/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* lint fix, lockdown

* refer ns in lckdown

* reworded beginnig  sec

* remove the global.mtls.enabled.

* lint fix

* Apply suggestions from code review

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* suggestion batch2.

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* address turn3

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* ns create separtae.

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-02-27 07:20:59 -08:00
Diem Vu bfb8eb0fb3
Remove https overlay task (#6596)
* Remove https overlay

* Remove ref
2020-02-26 13:22:59 -08:00
Diem Vu e59a1998bf
Modernize authn tasks for 1.5 API and auto-mTLS by default (#6546)
* Modernize authn tasks for 1.5 API and auto-mTLS by default

* Also remove auto-mtls task as merge with the main task, as this mode is by default and having separate task is uneccessary

* Lint

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Address first round comments

* Lint

* Lint

* Address more review comments

* Lint

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Address comments and revert delete files to fix lint. Will remove in another PR

* Fix links

* More review

* Update content/en/faq/security/accessing-non-istio-services.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

Co-authored-by: Rigs Caballero <grca@google.com>
2020-02-25 10:13:25 -08:00
Oliver Liu 7e225624b8 Improve the MTLS migration task. (#6255)
* Improve the MTLS migration task.

* Small fix.

* More improvements.

* Small fix.

* Small fix.

* Small fix.

* Small fix.

* Small fix.

* Lint fix.

* Copy edits

* Apply suggestions from code review

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Adam Miller <1402860+adammil2000@users.noreply.github.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-01-06 08:58:25 -08:00
Lin Sun c285372359 update with correct output (#6186)
* update with correct output

shows source and destination service

* Update index.md
2019-12-31 08:14:22 -08:00
Lin Sun 4601017961 remove bin reference to istioctl (#6154)
* remove bin reference to istioctl

as all of our other tasks assume istioctl is on the path already.  Having it cause me an alert on my mac:

“istioctl” can’t be opened because Apple cannot check it for malicious software.

* fix istioctl path
2019-12-19 13:55:05 -08:00
Lin Sun 9bf0d55b26 update the cmd to retrieve token correctly (#6128)
* update the cmd to retrieve token correctly

* update to remove empty char only

* remove tab also

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>
2019-12-18 06:24:23 -08:00
Jianfei Hu f2e87724f3 remove optional wording in title (#6089) 2019-12-16 09:20:05 -05:00
Shamsher Ansari 5c269c0340 Improve Mutual TLS migration example (#6035)
As with version v1.4.0, Experimental multi-cluster setup has been added to istioctl

The following command also provides istio-multicluster-destinationrule and host information

kubectl get destinationrule --all-namespaces
2019-12-10 13:06:43 -08:00
Shamsher Ansari ae81fe9cec Fix setting up Automatic mutual TLS example (#6010) 2019-12-06 07:12:48 -08:00
John Zheng 3d7011c31b Improve index.md (#5646)
Suggest to add this commit, to improve user experience.

Already be merged into release-1.3, FYI
https://github.com/istio/istio.io/pull/5489/commits
2019-11-14 05:49:31 -08:00
Frank Budinsky f5ce9feb70
Consolidate getting started instructions (#5642)
* Consolidate getting started instructions

* review comments

* fix broken links

* add istioctl link

* Fix spelling

* more broken links

* one more
2019-11-12 23:04:33 -05:00
Diem Vu 822701661d Fix tls-check output example (#5608)
* Fix tls-check output example

* Fix spacing
2019-11-11 15:54:54 -08:00
Frank Budinsky 823e85b69a
Reorganize reference docs (#5595)
* Reorganize reference docs

* aliases

* corrections

* fix broken links

* fix broken link

* another broken link

* another broken link
2019-11-11 17:46:27 -05:00
Jianfei Hu 16d07b0483 Update the egrep and service accounts. (#5523)
* Update the egrep and service accounts.

* fix the lint.
2019-11-09 06:20:52 -08:00
Frank Budinsky a6a5769f12
Organize security tasks (#5474)
* Organize security tasks

* lint errors

* fixes

* more fixes
2019-11-07 15:54:27 -05:00