* Add a note about init containers and OpenShift
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-authored-by: Faseela K <k.faseela@gmail.com>
---------
Co-authored-by: Faseela K <k.faseela@gmail.com>
* Add security announce & docs content
* Fix linter errors
* Fix additional linting issues
* More lint errors
* Fix trailing spaces
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/security/istio-security-2023-005/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/news/security/istio-security-2023-005/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-authored-by: John Howard <howardjohn@google.com>
* Added extra column, fixed British spellings
* Update content/en/news/security/istio-security-2023-005/index.md
Co-authored-by: Daniel Hawton <daniel@hawton.org>
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-authored-by: Daniel Hawton <daniel@hawton.org>
* Update content/en/news/security/istio-security-2023-005/index.md
Co-authored-by: Daniel Hawton <daniel@hawton.org>
---------
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: John Howard <howardjohn@google.com>
Co-authored-by: Daniel Hawton <daniel@hawton.org>
* remove injected annotation for istio-cni
* add injector webhook config back, add tip about it overwriting existing configs
* update docs with istio_cni.chained installation config
* update helm install instructions
* fix linting
* pass linter
* clarify tip for previous Openshift users to be aware that the injection webhook is not required
* update per PR suggestion
* generate new snips
* update cni docs by removing tip and adding openshift install command per PR
* lint fix
---------
Co-authored-by: Jacob Delgado <jacob.delgado@volunteers.acasi.info>
* Add a clause indicating that CNI works OOB
CNI should work nearly everywhere out of the box. If someone or
something provides a nonstandard configuration, the existing documentation
can help them get moving.
* Update content/en/docs/setup/additional-setup/cni/index.md
LGTM @frankb.
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Clarify wording for openshift installs
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Add documentation for adding sidecar injector webhook annotations in 1.4
* Add proper yaml to -f argument
* Don't mix and match set and file options
* Review comments
* Add note that docs are out of date for istio 1.4 and openshift
* Fix linting errors
* Fix linting errors
* Fix code for istioctl 1.4; update comments at end
* Review comments
* Code review comments
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/setup/additional-setup/cni/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
`istioctl manifest apply --set profile=demo --set cni.enabled=true --set values.cni.cniBinDir=/home/kubernetes/bin` by default put the `istio-cni-node` daemonset in istio-system namespace. The cni pod fails to create.
According to the helm command here 3fc0e65d94/README.md (usage) `istio manifest` should set cni.namespace to kube-system on gke
Signed-off-by: Yuchen Dai <silentdai@gmail.com>
These fix problems encountered when switching to the new Hugo which has
a completely different markdown engine. I went through diffs of the generated
HTML and made required adjustments.
* Added the Best Practices section with general principles.
This is the beginning of the new Best Practices section.
Our goal is to provide a section for all the best practices and recommendations
for Istio deployments. The best practices are based on the identified and
recommended deployment models.
Signed-off-by: rcaballeromx <grca@google.com>
* Change headings for clarity.
Adds clarity to some passages based on feedback.
Removes a list of recommendations that was causing some confusion.
Adds a glossary entry for failure domains and how they relate to a
platform's availability zones.
Signed-off-by: rcaballeromx <grca@google.com>
* Move Best Practices to Ops Guide
Signed-off-by: rcaballeromx <grca@google.com>
* Moved Deployment Best Practices to a new "Prepare Your Deployment" section.
Moved all deployment preparation content into a new section under "Setup".
For now the content includes the following sections:
- Deployment models
- Deployment best practices
- Pod requirements
Merged the two existing pages containing pod requirements into one single page.
Signed-off-by: rcaballeromx <grca@google.com>
* Replace example with better guidance around namespace tenancy.
Signed-off-by: Rigs Caballero <grca@google.com>
* Add links and language pointing to the Prepare section
Signed-off-by: Rigs Caballero <grca@google.com>
* Fix minor typos and broken links.
Signed-off-by: Rigs Caballero <grca@google.com>
* Move from Setup to Operations
Signed-off-by: Rigs Caballero <grca@google.com>
* Fix broken links
Signed-off-by: Rigs Caballero <grca@google.com>
* Fix rebasing issues.
Signed-off-by: Rigs Caballero <grca@google.com>
* Fix multicluster install link.
Signed-off-by: Rigs Caballero <grca@google.com>
- Improved look of the call to action buttons
- Removed redundant attributions on all news items, those were
leftovers from when the relesse notes were in the blog section.
- Used consistent subtitles and descriptions for all news items.
Craig Box
John Howard
Faseela K
Wilson Wu
Ben Leggett
Jonh Wendell
Daniel Hawton
Frank Budinsky
Paul Merrison
rrobb-aspen
Arka Bhattacharya
Kalya Subramanian
Michael
Michael
Tong Li
Pengyuan Bian
Jonh Wendell
Steven Dake
Venil Noronha
Shamsher Ansari
jacob-delgado
Romain Lenglet
stewartbutler
Xinnan Wen
Yuchen Dai
Martin Taillefer
Rigs Caballero
Dirk Jablonski
John Mazzitelli
Martin Ostrowski
Johannes Scheuermann