* Prep for 1.0 release
* Fix typo for 1.0 announcement. (#2081)
* Updated kubect link for IBM Cloud Private. (#2083)
* Fix generated tablegen.py (needs backport) (#2084)
Original table was dreadfully wrong.
(cherry picked from commit b3fa64fa41)
* add a VirtualService for external HTTPS ServiceEntry (#2080)
* add a VirtualService for external HTTPS ServiceEntry
* a VirtualService -> the VirtualService
(cherry picked from commit 9e57d4a5b7)
* egress gateway: use subsets for cnn in destination rules and virtual services (#1942)
* use subsets for cnn in destination rules and virtual services
* remove trailing spaces
* separate virtual services for traffic to and from egress gateway
to egress gateway: TLS match
from egress gateway: TCP match
* put back tls match for HTTPS egress for Istio without Auth
combine defining the Gateway and the VirtualServices
* use ISTIO_MUTUAL with sni in destination rules
* update the log message to print HTTP/2 as the protocol
* make two VirtualServices into one
* remove redundant explanation about SNI setting in a destination rule
* use different virtual service matches for Istio with and without SNI
* fix the case of HTTP traffic for Istio without Auth
(cherry picked from commit 81baa2e939)
* Disable Mesh Expansion page.
(cherry picked from commit dc4da48042)
* Blog fix.
* adding juspay (#2092)
* Update homepage and what is istio page (#2085)
- update the two pages
- make the links point to the Chinese document
(cherry picked from commit 993231abeb)
* Chinese: announcing istio 1.0 (#2088)
(cherry picked from commit 5301d4ea13)
* Move advanced egress tasks to examples, Advanced egress traffic control, release 1.0 (#2093)
* add advanced-egress subsection in Examples
* move egress gateway and egress tls origination tasks into advanced examples
* rename task to example and fix the links
* Tweak the HP blog post a tad.
* Another blog tweak.
* Update index.md (#2096)
Removing VM support until it's fixed
(cherry picked from commit c2e529212b)
* Make the site work when it's published to a subdirectory (for the archive) (#2095)
(cherry picked from commit 137e1d13f4)
* Change "Testing mutual TLS" tutorial to "Mutual TLS deep dive" (#1972)
(cherry picked from commit 0662e413f1)
* fix kubectl output (#2100)
fixes https://github.com/istio/istio.github.io/issues/2066
(cherry picked from commit 2a852d1408)
* Another blog tweak.
* Add section to tracing task to cover sampling. (#2097)
* Add section to tracing task to cover sampling.
* Lint fix
* Review comments.
* Review comments.
* Review comments.
* Add documentation for redisquota adapter in rate limiting doc (#2098)
* fix multicluster doc issues. (#2104)
* remove unnecessary gateway spec (#2091)
* Clarify and correct distributed tracing task (#2115)
* Cherry-pick latest changes from master (#2118)
* Translate fix zh links (#2105)
* zh: all linkes without '#' had been replaced
* translate: rewrite links to zh version if it exists.
(cherry picked from commit c4daa73dee)
* Translate Istio 1.0 canary into Chinese (#2110)
(cherry picked from commit 4d6eec754c)
* Fix typo in "Delayering Istio" blog post (#2102)
(cherry picked from commit 6bdb4605f4)
* Minikube settings (#2082)
(cherry picked from commit 9f6ebe9eeb)
* Fix single word in command (#2112)
It returned this:
```
kubectl get svc istio-ingress -n istio-system
Error from server (NotFound): services "istio-ingress" not found
```
Now it works correctly
(cherry picked from commit 2bbe9eef03)
* add initial galley intro to "what is istio" concept page (#2113)
(cherry picked from commit 2db7f5648d)
* make cmd/result match (#2117)
* make cmd/result match
* address comment
* Add Rigs to the English content owners file. (#2119)
(cherry picked from commit bd577696bf)
* Cherry-picks from master (#2122)
* Add Istio security vulnerabilities disclosure and handling page (#2114)
(cherry picked from commit dfee9b8ec0)
* Fix an error in faq page (#2120)
(cherry picked from commit d3c04a5ba7)
* More work to fix use of the site in a subdirectory. (#2123) (#2124)
(cherry picked from commit 5bd9c0f0bd)
* Cherry-pick latest changes from master (#2128)
* Add a couple entries to our prefered vocab list.
(cherry picked from commit 2cbe43aea7)
* Translate attribute-vocabulary (#2101)
* translate attribute-vocabulary
* fix Chinese link
* fix Chinese style & translate table header
(cherry picked from commit 056bf27879)
* fix the virtual-services fault injection error in the YAML (#2109)
fix the virtual-services fault injection error in the YAML
(cherry picked from commit 453012d3ab)
* Add an item to check whether mTLS is enabled for a service (#2062)
(cherry picked from commit 384f6cd8be)
* Chinese content was aliasing English content. (#2126)
Page aliases are intended to redirect users from a page old's location to a new location.
As it was, the Chinese content pages were redirect old English locations to Chinese, which
made Chinese show up on English systems that were using the old links.
(cherry picked from commit c86d357f2e)
* Fix formatting glitch in a few glossary entries.
(cherry picked from commit a6420a4475)
* Cherry pick latest changes from master (#2138)
* Translate into Chinese: docs/examples/multicluster/icp/index.md (#2129)
* Translate into Chinese: docs/examples/multicluster/icp/index.md
* fix link anchor
(cherry picked from commit eca46893fe)
* Add an icon for the security vulnerabilities page (#2132)
(cherry picked from commit 11ce2b3924)
* Fix security concept figure captions etc. (#2087)
(cherry picked from commit f83bb8ada0)
* Translate into Chinese: blog/2018/aws-nlb/index.md (#2130)
(cherry picked from commit 9e77fa4cd0)
* Translate: all keywords in front matters (#2135)
* Translate: all keywords
* fixed typo
* remvoed from terms: vm, config->configuration
(cherry picked from commit 02392ff87e)
* Initial checkin of the setup ops guide. (#2078) (#2139)
(cherry picked from commit 3b529341a1)
* Document DestinationRule mTLS conflict (#2131)
* Document TLS conflict in DRs
* spelling errors
* lint errors
* tweak title
* tweak title
* address review comments
* Cherry-pick latest changes from master (#2143)
* Add twitch livestream blog post (#2140)
This is for the all-day istio livestream on August 17th.
(cherry picked from commit 41d3caa211)
* Make the big boxes on the home page clickable.
(cherry picked from commit 387e54c299)
* Cherry-pick latest changes from master. (#2159)
* Fix broken Mixer Adapter Dev Guide links (#2144)
Signed-off-by: Venil Noronha <veniln@vmware.com>
(cherry picked from commit 5342ab2a80)
* Fix some more stale wiki links. (#2145)
(cherry picked from commit b641486002)
* translate tasks/traffic-management/egress-gateway to Chinese (#2146)
* translate tasks/traffic-management/egress-gateway to Chinese
* 修改内部链接路径
* 去掉空格
* 删除空格
(cherry picked from commit 75baef98ec)
* Improve linting (#2148)
- We now detect text blocks that are incorrectly indented.
- We now detect image captions that end in a period.
- We now detect page descriptions that don't end in a period.
- CircleCi now runs linting without minifying HTML first, improving perf and
improving error output.
- In CircleCi, we now have a per-build cache for HTML proofer output. This
helps reduce the frequency of link timeout errors.
- Fix errors flagged by the above new lint checks.
(cherry picked from commit fd290dc73e)
* translate:setup-kubernetes-requirments (#2147)
(cherry picked from commit 0d98eee9c4)
* Translate into Chinese: blog/2017/0.2-announcement/index.md (#2150)
(cherry picked from commit a34cfc063d)
* Translate into Chinese: content/blog/2018/aws-nlb/index.md Sync/Update (#2153)
* Translate into Chinese: blog/2017/0.2-announcement/index.md
* Update index.md
* Update _index.md
(cherry picked from commit 4ee8e44cb6)
* re translate /zh/blog/2018/egress-tcp/ page (#2151)
* re translate /zh/blog/2018/egress-tcp/, for changes of content/blog/2018/egress-tcp/index.md file between commit fd290dc73e and 82eb2c21a3
* fix unaviable link (#2151)
(cherry picked from commit 0b313e373b)
* Flip conditional polarity to remove useless work when linting.
(cherry picked from commit 4424563918)
* Enable extra lint stuff (#2158)
(cherry picked from commit 0b2ea1d38e)
* Fix indent, given new linting rules.
- We now detect text blocks that are incorrectly indented.
- We now detect image captions that end in a period.
- We now detect page descriptions that don't end in a period.
- CircleCi now runs linting without minifying HTML first, improving perf and
improving error output.
- In CircleCi, we now have a per-build cache for HTML proofer output. This
helps reduce the frequency of link timeout errors.
- Fix errors flagged by the above new lint checks.
It returned this:
```
kubectl get svc istio-ingress -n istio-system
Error from server (NotFound): services "istio-ingress" not found
```
Now it works correctly
* add Advanced Egress Control section in Examples
* move egress gateway and egress tls origination tasks to advanced egress examples
* fix the links and replace task with example
* use subsets for cnn in destination rules and virtual services
* remove trailing spaces
* separate virtual services for traffic to and from egress gateway
to egress gateway: TLS match
from egress gateway: TCP match
* put back tls match for HTTPS egress for Istio without Auth
combine defining the Gateway and the VirtualServices
* use ISTIO_MUTUAL with sni in destination rules
* update the log message to print HTTP/2 as the protocol
* make two VirtualServices into one
* remove redundant explanation about SNI setting in a destination rule
* use different virtual service matches for Istio with and without SNI
* fix the case of HTTP traffic for Istio without Auth
As well as their default value. I will work more on the python
generation tool this evening after dinner and push an update, but
it makes alot of sense to just merge this as is assuming it renders
properly.
Remove a bunch of entries that shouldn't have been in the spelling dictionary
and correct content aoocrdingly.
I'm disabling the Chinese spell checking for now, since I'm not able to fix the
spelling errors that emerged there. Once this PR is in, I'll file an issue to get
those spelling errors addressed and checking reenabled.
* Add GKE Istio multicluster deployment example
* Fix first round of review comments
* Followup review comments and make downloadable yaml block
* Reorg dir to gke specific subdir
* use kubectl consistently throughout for Istio API resource C.R.U.D operations
xref: https://github.com/istio/istio.github.io/issues/1843
* fix typo
* review comments
* remove unnecessary instructions to use `replace` instead of `create`
* fix linter in `zh` content
- Increase the size of the Copy button in preformatted blocks to make it stand out since it is the
most common used button.
- Shift the copy/download/print buttons in PRE blocks towards the left so they don't overlap the
scroll bar in large text blocks.
- Switch to new fonts.
- Instead of underlining <H2> headers, we now draw a blue bar above them.
- Add an "up level" button at the top of pages.
- Streamline the appearance of the next/previous page links at the bottom of most pages.
- Remove the right pointing arrows from index pages and see also sections. They were just
confusing.
- Add icons to the main pages.
- Slightly change the layout of the glossary page, more to come here.
* Clean up of the platform section
This cleans up the platform section into its own subdirectory.
I am not all that happy about how "see-also" works, but maybe that
is how it is meant to work, or alternatively I'm doing it wrong :)
* Apply reviewer comments and add the index file
_index.md was missing from prior commit accidentally.
Removed all "Platform setup for" text in all platform docs.
* Apply reviewer comments
Some wordsmithing.
weight = 3 is intentional to fit alphabet. Assuming nobody
will require ASCIIbetical.
* Fix US English lint errors
* Revert the Chinese translation of the platforms PR
The Chinese language version needs to be ported. This PR
was merged manually which probably has broken the gate.
* Fixed:
Broken link to the old platform-setup document.
code block in openshift setup.
* fixed: md005
recovered: code block for openshift.
Unexpected end tag : p (line 12)
* Edit Security section for clarity.
The edit includes:
* Rewrite of every passive voice instance.
* Consistent use markup to reference code from the examples in the text.
* Added emphasis to make key concepts clearer.
* Added links to the Identity section of the docs.
* initial version of Egress Gateway for 1.0
* use HTTPS protocol for the egress gateway ports
* change troubleshouting section regarding mutual TLS
just direct users to read the mutual TLS page regarding troubleshooting
* add egressgateway to .spelling
* remove "let's" prevent the "we language"
* fix lint errors
* rename Cleanup section names to more detailed names, to prevent lint errors
* add a section about directing HTTPS traffic thru egress gateway
* remove istio-system namespace from the HTTPS-related artifacts
* add a section for mutual TLS over HTTPS
* disable mTLS on Istio with mTLS between a sidecar and the egress gateway
* use * as a host in the gateway's definition
* clarify the fact that in HTTPS the original traffic is already encrypted
* use mTLS between sidecar and egress gateway
* use explicit host in gateways instead of *
* add subjectAltNames to the upstream of the sidecar proxy
* unite creating a gateway for mTLS and a destination to set SNI
* add a missing dot
* add destination rule for setting SNI for mTLS to all cases
* add deleting the destination rule for mTLS
* split a long line
* Rewrite the steps to create a service entry in a separate step
* use port 80 in the destionation rule for direct HTTP traffic without TLS origination
* remove redundant ServiceEntry definition
* mention DestinationRule for TLS origination
* rename port tls to tls-cnn
for future definition of multiple servers on the same port
* describe getting Envoy's stastics of istio-egressgateway
Update "Collecting Metrics and Logs" task with new source and destination attributes
Updated based on reviews and added tcp metrics changes too
Update Prometheus Task
Update Using-Istio-Dashboard task
Updated fluentd and servicegraph tasks.
Also update distributed tracing and using-istio-dashboards tasks based
on feedback
Add new picture for servicegraph and indent using-istio-dashboard again
Fixed Linting Errors
Updating based on review
Updating based on review
Adding destination-rule-all-mtls for tcp metrics routing too
Add explanation for Inbound Workloads and Outbound Services for Workload Dashboards
* Update authentication concept doc.
* Fix lint errors.
* Address comments and fixed some links.
* Remove feature stages change from this PR.
I will make a separate PR for it.
* Chinese community translation and fix a markdown error
- Translate community page into Chinese
- Fix https overlay markdown style check error
* fix CI errors
- update Quick Start with Kubernetes
- update Prerequisites and Installation steps
- fix some broken links
* Multicluster: add details on enabling mTLS for control plane and app pods
- describes deployment steps and includes an example deployment with commands
* fix review comments on wording
* Extract platform prerequisites
* Reorg
* Remove the inner pages from the menu
* Conform to the site directory structure
* Fix the link wording to match the title of the link and the uppercase
* Fix lint errors
* more lint errors
Zack Butcher