* Update feature stages for 1.2 release.
* Adjust stability of security features in consultatin with diemtvu and liminw.
* SNI multi cert now stable.
* Update feature stages based on feedback.
* Respond to code review feedback.
* add missing cleanup step for authn policy task section 1
The "*.local" rule created in "Globally enabling Istio mutual TLS"
was not removed during the cleanup section, leading to unexpected
503s for users continuing on to the next section (enabling
per-namespace).
* Note that jwcrypto needs to be present to run gen_jwt.py
* Apply suggestions from code review
Co-Authored-By: Rigs Caballero <grca@google.com>
* Fix the flow and language of the Getting started doc.
Signed-off-by: rcaballeromx <grca@google.com>
* Add cross-reference on the k8s install guide.
Signed-off-by: rcaballeromx <grca@google.com>
* Rework concluding paragraph to clarify timeline.
Signed-off-by: rcaballeromx <grca@google.com>
* Move cross-reference to landing page.
Signed-off-by: rcaballeromx <grca@google.com>
* Add new Traffic management concept.
Wrote a new "Traffic management" concept to include the latest developments.
Organized the content into smaller pages to make it easier to consume. The new
structure improves visibility and each page includes keywords to improve the
"See Also" pieces of suggested content and SEO. The new concept includes
diagrams and examples. Each section starts with the larger picture and then
moves to explain the specifics.
* fix the egress gateway example
need to change static because one address was host the other was ip.
* update to make it cleaner
* minor typo
* minor tweaks
* fix lint
* format change
* fix lint
* fix lint
* clean up tips per frank and shriram's suggestion
* fix lint
* Remove links to outdated code
The code for this was removed in:
https://github.com/istio/istio/pull/14678/files
I don't read/speak ZH, so struggle to understand how to properly
reword the text. In the interim, just remove the links from the ZH
pages.
* Fix a envoy doc link failures
The fonts used in arch.svg were incorrect and didn't match the
rest of the website. In addition, there was some stray text.
I produced this file based upon the svg in 1.1 - after changing
"service A" to "service B" on the right side of the diagram. Somewhere
in 1.2, this error was fixed, but the font regression was introduced.
Fixes: #4375
GDB is no longer shipped in the containers. Whether it should be or not
is not relevant for 1.2 (its too late to add GDB to 1.2). Remove
GDB from the documentaiton. We don't really expect operators would
use GDB in production. If GDB were reintroduced to the containers,
it may make sense to document GDB in the developer wiki.
Fixes: #4361
* rbac: simplify and make authorization HTTP/TCP tasks consistent
* Simplify the Bookinfo deployment, the service accounts could just be
added with the default Bookinfo deployment.
* Make the `Before you begin` section more consistent for HTTP and TCP
tasks
* address comments
* fix link
* Refine the multicluster gateways installation documentation
Change all occurances of we to you.
Use the kubernetes version macro instead of hard-coding.
Refinements to the wording in various places.
Improvements to the workflow, so it works 100% of the time instead of most of the time.
Add the a warning flag related to the samples certs.
Add more information about stubbing a domain for cloud provides that have specific unique procedures.
* refinements
* Fix shortcode error
* Fix linting problems
* Apply review comments.
- Rename "Operations Guide" to "Operations" so it fits better in the sidebar.
- Rename the main kubernetes install page to "Installing on Kubernetes" rather than
just "Kubernetes" which was a bit odd when landing there. Links to the page in the
sidebar and elsewhere still say "Kubernetes" since these usually appear in context.
Joshua Blatt