Commit Graph

625 Commits

Author SHA1 Message Date
zirain b56f351f9c
security: correct command on jwt-route page (#13460)
* security: correct command on jwt-route page

* gen
2023-06-30 11:27:21 -07:00
ognyvrac c71712c34d
Add warning for TLS verification in TLS origination guide (#13472)
* TLS verification

* add whitespace

* fix indentation

* use relative url

* apply comments
2023-06-29 06:02:03 -07:00
Eric Van Norman 6fd97aa04d
Re-enable telemetry-api test (#13439)
* Re-enable telemetry-api test

* Run make gen

* Change to use default profile
2023-06-23 13:06:35 -07:00
Keith Mattix II 3c94567ce1
Change Istio Classic terminology to Istio APIs (#13385)
* Change Istio Classic terminology to Istio APIs

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Fix stutter

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Change back parallel structure formation

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

---------

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
2023-06-16 07:02:06 -07:00
Michael ba926d3006
fix a typo in authz-ingress (#13332) 2023-06-08 21:26:48 -07:00
Faseela K 01da15421a
Add docs for ocsp staple support (#13307)
* Add docs for ocsp staple support

Signed-off-by: Faseela K <faseela.k@est.tech>

* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-06-08 11:58:05 -07:00
wulianglongrd 15f812bdb6
add tips for using `[]` as a separator (#13188) 2023-06-08 08:15:05 -07:00
Wei Shan Sun 3a1d24e297
Update doc for internal IP ranges for egress control (#13287)
* clarify the internal IP ranges for IBM Cloud Kubernetes Service

* Trigger Build

* add example of the command output

* paraphrase the text

* update snips.sh
2023-06-08 06:30:04 -07:00
Eric Van Norman 91afadd482
Main branch has a non release gateway API. Changes to allow that. (#13313)
* Master has a non release gateway API. Changes to allow that.

* Grab a istio test ref from main branch

* <ove from istio.io/pkg to istio/istio/pkg

* revert one change

* update istio/api

* Run make gen

* disable failing test temporarily
2023-06-07 15:42:03 -07:00
Eric Van Norman af9705dd17 advance master to release-1.19 2023-06-07 14:31:17 +00:00
Faseela K 31fbb11a68
Enhance mTLS origination example (#13297)
* Enhance mTLS origination example

Signed-off-by: Faseela K <faseela.k@est.tech>

* rebase

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-06-07 00:08:03 -07:00
Kuat a985ac38a6
cleanup more usages of EnvoyFilter (#13301)
* cleanup more usages of EnvoyFilter

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix test

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-06-06 14:06:49 -07:00
Faseela K 8ba8228b1a
Add proxy-config secret command for verification (#13294)
* Add proxy-config secret command for verification

Signed-off-by: Faseela K <faseela.k@est.tech>

* fix test failure

Signed-off-by: Faseela K <faseela.k@est.tech>

* remove secure-ingress changes

Signed-off-by: Faseela K <faseela.k@est.tech>

* incorporate review comments

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-06-06 10:19:49 -07:00
Kuat 340ac45f6e
docs: update classify metrics page (#13296)
Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-06-06 08:08:55 -07:00
Faseela K 504290f56d
remove unused SE cleanup step (#13295)
Signed-off-by: Faseela K <faseela.k@est.tech>
2023-06-06 07:55:48 -07:00
Faseela K 5dfb323027
Document CRL usage (#13275)
* Document CRL usage

Signed-off-by: Faseela K <faseela.k@est.tech>

* incorporate review comments

Signed-off-by: Faseela K <faseela.k@est.tech>

* fix lint

Signed-off-by: Faseela K <faseela.k@est.tech>

* Update content/en/boilerplates/crl-tip.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-06-05 06:21:18 -07:00
Eric Van Norman ba7e7b9bad
Fix broken link to subzone (#13242) 2023-05-25 09:16:42 -07:00
Michael a4d4f8bb18
Fix indentations and remove unecessary step numbers (#13230)
* Fix indentations and remove unecessary step numbers in /security/authorization/

* revert tabset indentations and wrap some long clauses
2023-05-23 18:29:05 -07:00
Jackie Elliott da58f42dec
fix(): add missing cleanup instructions (#13076)
* fix(): add missing cleanup instructions

Part of #11720

Signed-off-by: jaellio <jaellio@microsoft.com>

* Remove unecessary uninstalls

Signed-off-by: jaellio <jaellio@microsoft.com>

---------

Signed-off-by: jaellio <jaellio@microsoft.com>
2023-05-10 11:46:35 -07:00
Eric Van Norman 57ba4f6751
prepare for v1.18 as istio source is already branched (#13134) 2023-04-27 12:07:29 -07:00
zirain 58c4822de4
add tests for `tasks/observability/logs/telemetry-api` (#13045)
* add tests

* update test

* wait for telemetry

* fix cleanup

* enable istio injection

* wait longer

* rollout restart pod

* fix after_snapshot

* update link

* user none profile

* fix cleanup
2023-04-17 11:55:55 -07:00
John Zheng 788d8cf93f
Update index.md (#13033)
* Update index.md

* Update index.md

* Put it into troubleshooting.

* Update index.md

* Update snips.sh

* Update snips.sh

* apply changes for snips.sh

* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-04-12 11:34:45 -07:00
zirain d093b49542
update istio.io/istio (#13040)
* update istio.io/istio

Signed-off-by: hejianpeng <hejianpeng2@huawei.com>

* update to 56faa0e2a51e

Signed-off-by: hejianpeng <hejianpeng2@huawei.com>

* update to 8d17b8f2d970

---------

Signed-off-by: hejianpeng <hejianpeng2@huawei.com>
2023-04-11 11:17:01 -07:00
zirain 3ced86b817
improve display of metrics/telemetry-api (#13029)
* improve display of metrics/telemetry-api

* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md

Co-authored-by: Faseela K <k.faseela@gmail.com>

---------

Co-authored-by: Faseela K <k.faseela@gmail.com>
2023-04-11 04:00:01 -07:00
zirain d50bef68a4
add tracing Telemetry API tests (#12973)
* add tracing Telemetry API tests

* fix lint

* update

* update test

* remove ns

* update cleanup

* use --skip-confirmation
2023-04-06 12:52:25 -07:00
David Xia a8e24d7eeb
fix docs: wrong subject-verb agreement in authn-policy/index.md (#13015) 2023-04-05 18:02:49 -07:00
zirain 74b4901c2a
telemetry: add metric test (#12951)
* telemetry: add metric test

* fix lint and test

* update test

* update

* cleam telemetry

* fix test

* verify remove request_count

* update

* remove extraStatTags

* remove

* update TAG and HUB
2023-04-04 01:20:07 -07:00
Frank Budinsky 18e2058d81
Fix snippet generator to not include html id in snip id (#12988)
* Fix snippet generator to not include html id in snip id

* verify failure
2023-04-03 13:20:34 -07:00
Frank Budinsky b64832ac53
gateway-api: future proof gateway address (#12961)
* gateway-api: future proof gateway address

* regen
2023-03-28 14:28:39 -07:00
Frank Budinsky 0d65b3888d
gateway-api: change wait ready to wait programmed (#12937) 2023-03-24 12:12:01 -07:00
zirain be01753e1c
fix wrong folder name (#12934) 2023-03-24 00:35:59 -07:00
zirain 7468d2bc84
telemetry: tracing with telemetry api (#12921)
* telemetry: tracing with telemetry api

* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* change weight

* Update content/en/docs/tasks/observability/distributed-tracing/gateway-api/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* remove paragraph

---------

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2023-03-23 08:07:00 -07:00
zirain 23cd048b95
Telemetry API: custom metrics (#12916)
* Telemetry API: custom metrics

* fix lint

* update

* revert reporting interval

* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update content/en/docs/tasks/observability/metrics/telemetry-api/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

---------

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2023-03-22 07:54:23 -07:00
Faseela K ff6b3ee3d1
Specify EXTERNAL_CA env under .Values.pilot.env (#12908)
* Specify EXTERNAL_CA env under .Values.pilot.env

Signed-off-by: Faseela K <faseela.k@est.tech>

* make snips

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-03-20 13:56:43 -07:00
Faseela K 2de8b7cf3f
Add docs test for custom CA k8s (#12910)
* Add docs test for custom CA k8s

Signed-off-by: Faseela K <faseela.k@est.tech>

* wait for secrets to be created

Signed-off-by: Faseela K <faseela.k@est.tech>

* Fix tests

Signed-off-by: Faseela K <faseela.k@est.tech>

* address review comments

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-03-20 13:30:45 -07:00
zirain 11b8802edf
teleletry: fix format (#12915) 2023-03-20 06:09:44 -07:00
Eric Van Norman abf5268f8a
Update test reference to latest istio commit (#12895)
* Update test reference to latest istio commit

* make clean g&& go mod tidy

* Use tests/utils to delete sample

* Move some test script to use snippets

* Add _wait

* Remove extraneous source
2023-03-15 14:17:18 -07:00
Frank Budinsky f577e3cdbc
gateway-api: add instructions to gateway topology doc (#12889)
* gateway-api: add instructions to gateway topology doc

* fix test

* fix numbering
2023-03-14 10:53:24 -07:00
Aayush Sharma e348075be1
Added headersToDownstreamOnAllow example in ext authz task page (#12791)
* Added headersToDownstreamOnAllow example in ext authz task page

Added headersToDownstreamOnAllow to https://istio.io/latest/docs/tasks/security/authorization/authz-custom/#define-the-external-authorizer.

* Update index.md

* updated snips.sh

* made suggested changes

* make scripts fix
2023-03-13 12:59:23 -07:00
Frank Budinsky fe7c0f1145
gateway-api: add gateway api instructions to ingress access control doc (#12869)
* gateway-api: authz-ingress

* gateway-api: add gateway api instructions to ingress access control doc

* lint

* fixes

* simplify aws samples
2023-03-10 11:45:55 -08:00
Frank Budinsky 486c559488
Small fixes to custom CA doc (#12856) 2023-03-08 08:09:47 -08:00
Arka Bhattacharya 052f5fbc7e
TCP Traffic page edit (#12819)
* Edits formatting of the long commands to improve readability

* Adds snips by make gen

* Adds back the connection rejected output

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* re-ran make gen to edit the snip

---------

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-03-06 08:58:45 -08:00
Kuat 2e8eff90e6
wasm: use wasm API for attributegen (#12765)
* wasm: use wasm API for attributegen

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix links

Signed-off-by: Kuat Yessenov <kuat@google.com>

* cleanup

Signed-off-by: Kuat Yessenov <kuat@google.com>

* typo

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-03-06 08:17:46 -08:00
Mariam John 8b3aae7f9e
Cleanup some old documention left over in Egress task (#12832)
`Configure traffic through egress gateway with SNI proxy` section was removed from the docs in the 1.14 release
but that is still mentioned in the setup instructions for the task `Egress using Wildcard Hosts`.
2023-03-06 06:12:44 -08:00
majeshps e9ecc67a71
Fix minor nits on the security tasks page Plugin CA Certificate (#12709)
* Fix minor nits on the security tasks page Plugin CA Certificate

Partially fixes: #12695

* Fix minor  nits on the security tasks page for certificate management
2023-03-03 10:09:06 -08:00
Paddy Doyle e24e58affa
Update feature status for Experimental/Alpha (#12821)
* Update feature status for Experimental/Alpha

Based off of the feature status in features.yaml, update the
corresponding doc page.

Update navigation_level.html to only flag Experimental and Alpha
features with an asterisk '*', rather than all docs with _any_ status
set.

Add new 'alpha.md' boilerplate, similar to 'experimental.md', with a
link to https://github.com/istio/community/blob/master/FEATURE-LIFECYCLE.md

Add either 'boilerplate alpha' or 'boilerplate experimental' to all
pages which have Alpha or Experimental status set.

Tidy up pages which already had
'boilerplate experimental-feature-warning' and be consistent with
'boilerplate experimental'

Update tasks/observability/distributed-tracing/mesh-and-proxy-config
status from 'Beta/Experimental' to 'Beta', to match what's in
features.yaml (all others only have a single value here)

* Add content/zh/boilerplates/alpha.md

* Update content/en/boilerplates/alpha.md

Suggested change

Co-authored-by: Faseela K <k.faseela@gmail.com>

* Update the zh 'alpha' boilerplate to match

---------

Co-authored-by: Faseela K <k.faseela@gmail.com>
2023-03-03 07:45:06 -08:00
Carl Eastman 8e562ca875
accesslog: example of Telemetry API with cluster_name (#12804)
* accesslog: work with Telemetry API cluster_name

Add telemetry api example with xds.cluster_name

* removed default namespace install and fixed some linting

* Fix "spelling" error

* Update envoy filter name
2023-03-02 22:56:06 -08:00
Ben Leggett 825f422087
Add more context to `externalTrafficPolicy=local` caveats. (#12779)
* Reword this to better explain why a gateway on each node is recommended.

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Update content/en/docs/tasks/security/authorization/authz-ingress/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-02-28 11:03:16 -08:00
zirain 0f3421da61
telemetry: add tips for agent mode (#12784)
* telemetry: add tips for agent mode

* fix lint

* fix typo
2023-02-27 01:28:13 -08:00
zirain 5d3a05f78d
accesslog: work with Telemetry API (#12743)
* accesslog: work with Telemetry API

* address review comments
2023-02-27 01:06:13 -08:00