Commit Graph

734 Commits

Author SHA1 Message Date
Vadim Eisenberg bd83936bf5 Use the 443 port for cluster aware gateway, handle NodePort connectivity to the remote cluster (#3428)
* use the 443 port and host "*.local" for the gateway

* the Gateway -> a gateway, remote services -> services in cluster2

* rewrite instructions for setting the gateway's address

* add unsetting environment variables and removing files to cleanup

* put backticks around `istio` and `ConfigMap`

* add "i.e." before the Kubernetes DNS domain in parenthesis

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* the 443 port -> 443 port

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* add deleting n2-k8s-config in the cleanup

* set --set global.meshNetworks.network2.gateways[0].port to 443

* add unsetting CTX_CLUSTER1

* move unsetting CTX_CLUSTER1 before removing temporary files

for symmetry with CTX_CLUSTER2

* add unsetting CTX_CLUSTER2

* Change the gateway's address and port -> Update the gateway's address and port to reflect...

* wait for the pods to come up by checking their status -> wait for the pods to become ready:

* add output of get pods for cluster1

* do not check the status of the istio-ingressgateway on cluster2
before configuring watching of cluster2 by cluster1

* add waiting for istio-ingressgateway to become ready after setting watching cluster2

* combine printing ingress host and port into one line
2019-03-05 06:58:32 -08:00
Jimmy Chen 4ff728348d restore the order of docs (#3503) 2019-03-05 06:18:33 -08:00
Phil Rud 23bb7bad20 Update the number of CRDs to expect during installation (#3440)
With the upgrade of cert-manager to v0.6.2 two new CRDs are being
introduced. The total number of CRDs should now be `58`. Updating
the CRDs installation section of the documentation accordingly.
2019-03-04 22:55:32 -08:00
Martin Taillefer 2af7598779 Update Galley description for 1.1 (#3500) 2019-03-04 16:17:33 -08:00
Martin Taillefer 36a6514a07 Remove old comment. (#3499) 2019-03-04 16:05:31 -08:00
Martin Taillefer beaaf83ba4
Update reference docs. (#3497)
Also fixed a couple CI failures that snuck in.
2019-03-04 14:03:05 -08:00
Steven Dake bc9d6c62c0 A reference to the istio.io repository was missing (#3483)
Fix https://github.com/istio/istio/issues/12081
2019-03-03 23:29:05 -08:00
Martin Taillefer 7bf371365e
Optimize all our SVG files. (#3468) 2019-03-03 08:14:50 -08:00
Martin Taillefer 381365d798
Fix a bunch of broken aliases. (#3467) 2019-03-03 07:29:52 -08:00
Jimmy Chen 692125f6b4 Add guide for external cert management at ingress gateway using SDS (#3224)
* add ingress sds

* update

* update

* Revise

* update

* Revise

* Update

* update

* revise

* update

* Remove key cert path when SDS is enabled

* Split SDS task into separate file

* Revise

* add mount/ and sds/

* fix broken link

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/_index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Apply suggestions from code review

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Revise

* Revise

* update

* Apply suggestions from code review

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>
2019-03-01 15:28:31 -08:00
idouba c5937a1d70 should specify the resource type:destinationrule. (#3159)
should specify the resource type:destinationrule in the delete statement.
2019-03-01 12:19:29 -08:00
Martin Taillefer 604430f1ec
Update reference docs. (#3454) 2019-03-01 07:05:15 -08:00
flydragon 5b8161da0b zh: content/docs/setup/kubernetes/ (#3450)
fix link
2019-03-01 05:56:26 -08:00
Martin Taillefer ad565871d6
Clean up keywords. (#3442) 2019-02-28 17:26:46 -08:00
Yangmin Zhu de6ebce58d rbac: remove destination.name from the documentation. (#3441)
We actually don't support workload name in rbac.
2019-02-28 16:28:16 -08:00
Rigs Caballero 21c918fbe4 Organize the Kubernetes Installation content. (#3422)
* WIP Add Kubernetes Installation landing page.

This adds the landing page and organizes the content to make it easier to navigate.

Signed-off-by: rcaballeromx <grca@google.com>

* Apply initial feedback on landing page content.

Signed-off-by: rcaballeromx <grca@google.com>

* Rename and move files to enhance navigation.

Added aliases to redirect after filename changes.

Signed-off-by: rcaballeromx <grca@google.com>

* Harmonize all installation guide titles and intros.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix all links affected by the restructure.

Fixed all internal links and added aliases to ensure external redirects.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix paths of images on the ZH content.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix additional links and apply feedback.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix link error introduced by rebase.

Signed-off-by: rcaballeromx <grca@google.com>

* Remove redundant instances of "Istio" in titles.

Signed-off-by: rcaballeromx <grca@google.com>
2019-02-28 14:37:30 -08:00
Martin Taillefer dd0ecdf9ab
Site improvements (#3430)
- Add linter support to detect internal links to aliases. Those are now flagged as
bad links so the source needs to be updated to point to the real destination,
avoiding the user a redirect.

- Fixed occurences of links to aliases.

- Now only load popper.js on pages that use popups in order to improve
load times.
2019-02-28 13:58:54 -08:00
Diem Vu 10415287c8 Update document for `istioctl auth tls-check` command (#3343)
* Update mutual tls deepdive doc to reflect the new authn tls-check behavior

* Also update FAQ

* Correct grammar

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>

* Address comment

* Also include changes to fix #11825

* Change the example to show default DR to avoid confusion

* Correct change the example to show default DR to avoid confusion

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>

* Update namespace for global destination rule

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>
2019-02-28 13:51:32 -08:00
lei-tang 214fb9947b Fix the error of "https" displayed as "ps" (#3437) 2019-02-28 13:45:00 -08:00
Ozben Evren 225d449046 Add documentation about removing CRDs. (#3436) 2019-02-28 11:46:31 -08:00
Yossi Mesika c9c7bd6dea Updating the command for istio-remote generation (#3407) 2019-02-28 09:58:43 -08:00
lei-tang 7e64896b6b Fix the GKE cluster creation commands (#3415) 2019-02-28 09:53:13 -08:00
lei-tang 968146f269 Fix the role binding for all clusters in a multicluster (#3417) 2019-02-28 09:52:18 -08:00
John Howard b1ed4c9c84 Reference helm install docs rather than duplicating (#3418)
* Reference helm install docs rather than duplicating

Multicluster gateway installation docs were out of sync from install docs. This changes them to just directly reference the main install docs to make things more clear.

* Fix syntax
2019-02-28 12:02:44 -05:00
Lin Sun d99e48fc99 remove the portion for egress gateway exposed as nodeport (#3255)
* remove the portion for egress gateway

* Update index.md
2019-02-28 08:24:30 -08:00
Yuchen Dai 0ac513511d Update egress document (#3419)
`X-istio-Attributes` should not be presents in the request to external HTTP service.
2019-02-28 06:03:33 -08:00
Martin Taillefer 06bda09366
Update reference docs. (#3425) 2019-02-27 19:12:11 -08:00
Hiroshi Nasu 1a0130162a Add a step to look inside mirroring traffic with tcpdump in istio-proxy (#3267)
* Add looking inside mirroring traffic with tcpdump

* Update mirroring traffic exam step description
2019-02-26 14:27:32 -08:00
Daniel Linsley 733870147c Kiali jaegerURL should use jaeger-query service. (#3260)
* Kiali jaegerURL should use jaeger-query service.

Prior to change, while using the tracing service on port 90 for the jaegerURL, kiali would never get metrics to compose the service graphs.

Switching jaegerURL to jaeger-query service on port 16686 fixes the issue.  After traffic is generated the service graphs are built and visible in kiali.

* Remove clusterIP Query for grafana and jaeger-query services
2019-02-26 13:56:31 -08:00
Frank Budinsky 2c72648099 Reminders to apply destination rules (#3390) 2019-02-26 12:06:19 -08:00
Tao Li c4b714ec99 Remove unnecessary section to turn on permissive (#3382)
* Remove unnecessary section to turn on permissive

* Delete obsoleted file

* Add alias

* Fix comment
2019-02-26 11:35:30 -08:00
Diem Vu edcedada30 Add instruction to download gen-jwt.py script (#3378)
* Add instruction to download gen-jwt.py script

* Correct code block sequence

* Correct bash syntax

* Fix comment

* Use  {{< github_file >}} markdown
2019-02-26 11:24:30 -08:00
Eric Van Norman 54fa8681d5 Update CRD count from 58 to 56 (#3389) 2019-02-26 08:34:31 -08:00
Brian Avery 4cf48451f3 There are only 56 CRDs, not 58 (#3380)
1.1 is only creating 56 CRDs, not 58. It looks like the missing ones are servicecontrolreports.config.istio.io and servicecontrols.config.istio.io, both of which have been removed. 

adapters.config.istio.io
apikeys.config.istio.io
attributemanifests.config.istio.io
authorizations.config.istio.io
bypasses.config.istio.io
certificates.certmanager.k8s.io
checknothings.config.istio.io
circonuses.config.istio.io
cloudwatches.config.istio.io
clusterissuers.certmanager.k8s.io
clusterrbacconfigs.rbac.istio.io
deniers.config.istio.io
destinationrules.networking.istio.io
dogstatsds.config.istio.io
edges.config.istio.io
envoyfilters.networking.istio.io
fluentds.config.istio.io
gateways.networking.istio.io
handlers.config.istio.io
httpapispecbindings.config.istio.io
httpapispecs.config.istio.io
instances.config.istio.io
issuers.certmanager.k8s.io
kubernetesenvs.config.istio.io
kuberneteses.config.istio.io
listcheckers.config.istio.io
listentries.config.istio.io
logentries.config.istio.io
memquotas.config.istio.io
meshpolicies.authentication.istio.io
metrics.config.istio.io
noops.config.istio.io
opas.config.istio.io
policies.authentication.istio.io
prometheuses.config.istio.io
quotas.config.istio.io
quotaspecbindings.config.istio.io
quotaspecs.config.istio.io
rbacconfigs.rbac.istio.io
rbacs.config.istio.io
redisquotas.config.istio.io
reportnothings.config.istio.io
rules.config.istio.io
serviceentries.networking.istio.io
servicerolebindings.rbac.istio.io
serviceroles.rbac.istio.io
sidecars.networking.istio.io
signalfxs.config.istio.io
solarwindses.config.istio.io
stackdrivers.config.istio.io
statsds.config.istio.io
stdios.config.istio.io
templates.config.istio.io
tracespans.config.istio.io
virtualservices.networking.istio.io
zipkins.config.istio.io
2019-02-26 08:31:31 -08:00
Yangmin Zhu 6168d4f171 Add command for manual sidecar injection (#3362) 2019-02-26 06:57:36 -08:00
Martin Taillefer 3f3f3f5353
Add a new link check to prevent links to specific lines in GitHub files. (#3387) 2019-02-26 06:53:57 -08:00
Martin Taillefer 8a0b90baab
Update reference docs. (#3383) 2019-02-25 21:14:18 -08:00
Shriram Rajagopalan 2baef16e51 new networking reference docs (#3358) 2019-02-25 17:13:27 -08:00
Kuat 860fd27e91 add origin ip (#3381)
Signed-off-by: Kuat Yessenov <kuat@google.com>
2019-02-25 16:15:15 -08:00
Maria Skidanova 27c61686ec Better link to booklinfor for docker (#3375) 2019-02-25 13:47:19 -08:00
Tao Li 4030c2503a Fix authn policy doc (#3376) 2019-02-25 13:46:26 -08:00
Pengyuan Bian ccd58553f8 add new expressions (#3363) 2019-02-25 07:07:30 -08:00
Tao Li f160abd20b Update permissive mode description (#3328)
* Update permissive mode description 

To make it more accurate

* Update index.md
2019-02-24 22:05:30 -08:00
Martin Taillefer f345007ca3
Add do not edit warnings to auto-generated files. (#3366) 2019-02-23 12:21:43 -08:00
lei-tang fdec084fea Fix inconsistent namespace in rbac groups document (#3364) 2019-02-23 12:17:36 -08:00
John Mazzitelli c7c737d4af [Kiali] issue #3348 update kiali task doc so it mentions the new default secret (#3356) 2019-02-22 10:37:04 -08:00
Rachael Graham 95df476286 link format update (#3357) 2019-02-22 08:53:28 -08:00
Eric Van Norman 115d74ec3b Update the IBM Cloud Quick start (#3327)
* Update the IBM Cloud Quick start

- Use a demo profile for lower resources
- Update to mention tested Kubernetes releases
- use helm-service-account-yaml
- updated helm commands for CRDS, etc.

* Review comments

* Rebase to pick up a new commit

* Change tip from previous to following

* Update CRD verification text

* Update CRD verification text
2019-02-22 08:32:27 -08:00
Andra Cismaru ccd95b993c Add verification steps for CRDs. (#3335)
* Update index.md

* Update from 56 to 58

* Add output
2019-02-22 05:30:30 -08:00
Douglas Reid 9622e6162d Remove In-Depth Telemetry Example (#3352)
* Remove In-Depth Telemetry Example

* Add alias for removed doc
2019-02-21 17:08:20 -08:00