Commit Graph

37 Commits

Author SHA1 Message Date
Diem Vu 423085227e Add note to explain authentication mesh policy CRD kind. (#3540)
* Add note for the mesh policy to explain the different with regular (namespace and service) policies

* Address comment
2019-03-07 14:16:32 -08:00
Frank Budinsky 76fc94137e Update istio-demo install instructions (#3520)
* Update istio-demo install instructions

* improve verify step

* fix circleci errors

* typo

* Change title

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/tasks/security/authn-policy/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/tasks/security/plugin-ca-cert/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* spelling
2019-03-05 14:47:20 -08:00
Rigs Caballero 21c918fbe4 Organize the Kubernetes Installation content. (#3422)
* WIP Add Kubernetes Installation landing page.

This adds the landing page and organizes the content to make it easier to navigate.

Signed-off-by: rcaballeromx <grca@google.com>

* Apply initial feedback on landing page content.

Signed-off-by: rcaballeromx <grca@google.com>

* Rename and move files to enhance navigation.

Added aliases to redirect after filename changes.

Signed-off-by: rcaballeromx <grca@google.com>

* Harmonize all installation guide titles and intros.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix all links affected by the restructure.

Fixed all internal links and added aliases to ensure external redirects.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix paths of images on the ZH content.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix additional links and apply feedback.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix link error introduced by rebase.

Signed-off-by: rcaballeromx <grca@google.com>

* Remove redundant instances of "Istio" in titles.

Signed-off-by: rcaballeromx <grca@google.com>
2019-02-28 14:37:30 -08:00
Diem Vu 10415287c8 Update document for `istioctl auth tls-check` command (#3343)
* Update mutual tls deepdive doc to reflect the new authn tls-check behavior

* Also update FAQ

* Correct grammar

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>

* Address comment

* Also include changes to fix #11825

* Change the example to show default DR to avoid confusion

* Correct change the example to show default DR to avoid confusion

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>

* Update namespace for global destination rule

* Update content/docs/tasks/security/mutual-tls/index.md

Co-Authored-By: diemtvu <25132401+diemtvu@users.noreply.github.com>
2019-02-28 13:51:32 -08:00
Diem Vu edcedada30 Add instruction to download gen-jwt.py script (#3378)
* Add instruction to download gen-jwt.py script

* Correct code block sequence

* Correct bash syntax

* Fix comment

* Use  {{< github_file >}} markdown
2019-02-26 11:24:30 -08:00
Tao Li 4030c2503a Fix authn policy doc (#3376) 2019-02-25 13:46:26 -08:00
Yossi Mesika 52b45b24d9 Fix two doc issues (#3278)
* Correct istio yaml file

* Mixer destination rules are expected to exist
2019-02-18 08:33:25 -08:00
Martin Taillefer d6b3bfac56
Add support for {{< quote >}} (#3237) 2019-02-12 08:22:28 -08:00
Martin Taillefer b3db41da99
Added more lint rules and fix offenders (#3227)
- Ensure that references to GitHub content use the proper annotations so
we get links to the correct branches.

- Added a check to make sure content is not using blockquotes (instead of
{{< warning >}}, {{< tip >}}, and {{< idea >}}. This check is currently
disabled, pending the Chinese content being updated.

- Fix a few violations of these new checks.
2019-02-11 12:49:47 -08:00
Martin Taillefer dd782b3d12
Improve the looks of warnings, info blobs, and tips. (#3181) 2019-01-31 12:11:53 -08:00
Tiago Moreira Vieira f40d7114b8 remove irrelevant output line from auth policy task (#2926) 2018-11-28 15:35:29 -08:00
Tiago Moreira Vieira d801b54a94 fix issue with dollar sign and curly brackets (#2927) 2018-11-28 15:34:30 -08:00
Limin Wang 583c40ba27 documentation for end-user authencation on ingress-gateway (#2243) (#2904)
* documentation for end-user authencation on ingress-gateway (#2243)

* documentation for end-user authencation on ingress-gateway

* address comments

* address comments

* address comment

* Move end user authentication on Ingress section to securtity.

* Minor text change.

* Revert edit in traffic management doc.

* Remove Ingress example. Replace it with a single sentence.

* Addressed comment.
2018-11-26 10:57:04 -08:00
Brian Avery 2d2c951563 Fixed authentication example command (#2853) 2018-11-09 11:00:25 -05:00
Yangmin Zhu afea7b3c06 authn: add task for per-path jwt authentication (#2692)
*
2018-10-01 06:39:55 -07:00
Jonh Wendell 706cdf2335 Small fixes in auth policy task (#2698) 2018-09-28 10:46:45 -04:00
Dmitri Dolguikh e555adf7f6 Fixed output of a command attempting to connect to httpbin.foo from legacy ns (#2462) 2018-09-17 07:03:55 -07:00
Steven Dake 55c81ac8e7 authn-policy section is not cut and pasteable (#2619) 2018-09-17 06:58:19 -07:00
Vadim Eisenberg bb22b22308 Use kubectl with EOF instead of cat with pipe (#2620)
* handle kubectl create/apply -f - <<EOF

in the same way as "cat <<EOF | kubectl apply -f -"

* replace cat <<EOF | kubectl apply/create -f - with kubectl apply/create -f - <<EOF
2018-09-15 14:37:23 -07:00
Bryant Luk b3e0ebb409 Change `mTLS` in YAML config to `mtls` (#2378)
- The `mtls` key is case sensitive.
2018-08-27 14:41:57 -07:00
Martin Taillefer 54c0506698
Merge changes from the release-1.0 branch (#2161)
* Prep for 1.0 release

* Fix typo for 1.0 announcement. (#2081)

* Updated kubect link for IBM Cloud Private. (#2083)

* Fix generated tablegen.py (needs backport) (#2084)

Original table was dreadfully wrong.

(cherry picked from commit b3fa64fa41)

* add a VirtualService for external HTTPS ServiceEntry (#2080)

* add a VirtualService for external HTTPS ServiceEntry

* a VirtualService -> the VirtualService

(cherry picked from commit 9e57d4a5b7)

* egress gateway: use subsets for cnn in destination rules and virtual services (#1942)

* use subsets for cnn in destination rules and virtual services

* remove trailing spaces

* separate virtual services for traffic to and from egress gateway

to egress gateway: TLS match
from egress gateway: TCP match

* put back tls match for HTTPS egress for Istio without Auth

combine defining the Gateway and the VirtualServices

* use ISTIO_MUTUAL with sni in destination rules

* update the log message to print HTTP/2 as the protocol

* make two VirtualServices into one

* remove redundant explanation about SNI setting in a destination rule

* use different virtual service matches for Istio with and without SNI

* fix the case of HTTP traffic for Istio without Auth

(cherry picked from commit 81baa2e939)

* Disable Mesh Expansion page.

(cherry picked from commit dc4da48042)

* Blog fix.

* adding juspay (#2092)

* Update homepage and what is istio page (#2085)

- update the two pages
- make the links point to the Chinese document

(cherry picked from commit 993231abeb)

* Chinese: announcing istio 1.0 (#2088)

(cherry picked from commit 5301d4ea13)

* Move advanced egress tasks to examples, Advanced egress traffic control, release 1.0 (#2093)

* add advanced-egress subsection in Examples

* move egress gateway and egress tls origination tasks into advanced examples

* rename task to example and fix the links

* Tweak the HP blog post a tad.

* Another blog tweak.

* Update index.md (#2096)

Removing VM support until it's fixed

(cherry picked from commit c2e529212b)

* Make the site work when it's published to a subdirectory (for the archive) (#2095)

(cherry picked from commit 137e1d13f4)

* Change "Testing mutual TLS" tutorial to "Mutual TLS deep dive" (#1972)

(cherry picked from commit 0662e413f1)

* fix kubectl output (#2100)

fixes https://github.com/istio/istio.github.io/issues/2066

(cherry picked from commit 2a852d1408)

* Another blog tweak.

* Add section to tracing task to cover sampling. (#2097)

* Add section to tracing task to cover sampling.

* Lint fix

* Review comments.

* Review comments.

* Review comments.

* Add documentation for redisquota adapter in rate limiting doc (#2098)

* fix multicluster doc issues. (#2104)

* remove unnecessary gateway spec (#2091)

* Clarify and correct distributed tracing task (#2115)

* Cherry-pick latest changes from master (#2118)

* Translate fix zh links (#2105)

* zh: all linkes without '#' had been replaced

* translate: rewrite links to zh version if it exists.

(cherry picked from commit c4daa73dee)

* Translate Istio 1.0 canary into Chinese (#2110)

(cherry picked from commit 4d6eec754c)

* Fix typo in "Delayering Istio" blog post (#2102)

(cherry picked from commit 6bdb4605f4)

* Minikube settings (#2082)

(cherry picked from commit 9f6ebe9eeb)

* Fix single word in command (#2112)

It returned this:
```
kubectl get svc istio-ingress -n istio-system
Error from server (NotFound): services "istio-ingress" not found
```

Now it works correctly

(cherry picked from commit 2bbe9eef03)

* add initial galley intro to "what is istio" concept page (#2113)

(cherry picked from commit 2db7f5648d)

* make cmd/result match (#2117)

* make cmd/result match

* address comment

* Add Rigs to the English content owners file. (#2119)

(cherry picked from commit bd577696bf)

* Cherry-picks from master (#2122)

* Add Istio security vulnerabilities disclosure and handling page (#2114)

(cherry picked from commit dfee9b8ec0)

* Fix an error in faq page (#2120)

(cherry picked from commit d3c04a5ba7)

* More work to fix use of the site in a subdirectory. (#2123) (#2124)

(cherry picked from commit 5bd9c0f0bd)

* Cherry-pick latest changes from master (#2128)

* Add a couple entries to our prefered vocab list.

(cherry picked from commit 2cbe43aea7)

* Translate attribute-vocabulary (#2101)

* translate attribute-vocabulary

* fix Chinese link

* fix Chinese style & translate table header

(cherry picked from commit 056bf27879)

* fix the virtual-services fault injection error in the YAML (#2109)

fix the virtual-services fault injection error in the YAML

(cherry picked from commit 453012d3ab)

* Add an item to check whether mTLS is enabled for a service (#2062)

(cherry picked from commit 384f6cd8be)

* Chinese content was aliasing English content. (#2126)

Page aliases are intended to redirect users from a page old's location to a new location.
As it was, the Chinese content pages were redirect old English locations to Chinese, which
made Chinese show up on English systems that were using the old links.

(cherry picked from commit c86d357f2e)

* Fix formatting glitch in a few glossary entries.

(cherry picked from commit a6420a4475)

* Cherry pick latest changes from master (#2138)

* Translate into Chinese: docs/examples/multicluster/icp/index.md (#2129)

* Translate into Chinese: docs/examples/multicluster/icp/index.md

* fix link anchor

(cherry picked from commit eca46893fe)

* Add an icon for the security vulnerabilities page (#2132)

(cherry picked from commit 11ce2b3924)

* Fix security concept figure captions etc. (#2087)

(cherry picked from commit f83bb8ada0)

* Translate into Chinese: blog/2018/aws-nlb/index.md (#2130)

(cherry picked from commit 9e77fa4cd0)

* Translate: all keywords in front matters (#2135)

* Translate: all keywords

* fixed typo

* remvoed from terms: vm,  config->configuration

(cherry picked from commit 02392ff87e)

* Initial checkin of the setup ops guide. (#2078) (#2139)

(cherry picked from commit 3b529341a1)

* Document DestinationRule mTLS conflict (#2131)

* Document TLS conflict in DRs

* spelling errors

* lint errors

* tweak title

* tweak title

* address review comments

* Cherry-pick latest changes from master (#2143)

* Add twitch livestream blog post (#2140)

This is for the all-day istio livestream on August 17th.

(cherry picked from commit 41d3caa211)

* Make the big boxes on the home page clickable.

(cherry picked from commit 387e54c299)

* Cherry-pick latest changes from master. (#2159)

* Fix broken Mixer Adapter Dev Guide links (#2144)

Signed-off-by: Venil Noronha <veniln@vmware.com>

(cherry picked from commit 5342ab2a80)

* Fix some more stale wiki links. (#2145)

(cherry picked from commit b641486002)

* translate tasks/traffic-management/egress-gateway to Chinese (#2146)

* translate tasks/traffic-management/egress-gateway to Chinese

* 修改内部链接路径

* 去掉空格

* 删除空格

(cherry picked from commit 75baef98ec)

* Improve linting (#2148)

- We now detect text blocks that are incorrectly indented.

- We now detect image captions that end in a period.

- We now detect page descriptions that don't end in a period.

- CircleCi now runs linting without minifying HTML first, improving perf and
improving error output.

- In CircleCi, we now have a per-build cache for HTML proofer output. This
helps reduce the frequency of link timeout errors.

- Fix errors flagged by the above new lint checks.

(cherry picked from commit fd290dc73e)

* translate:setup-kubernetes-requirments (#2147)

(cherry picked from commit 0d98eee9c4)

* Translate into Chinese: blog/2017/0.2-announcement/index.md (#2150)

(cherry picked from commit a34cfc063d)

* Translate into Chinese:  content/blog/2018/aws-nlb/index.md Sync/Update (#2153)

* Translate into Chinese: blog/2017/0.2-announcement/index.md

* Update index.md

* Update _index.md

(cherry picked from commit 4ee8e44cb6)

* re translate /zh/blog/2018/egress-tcp/ page (#2151)

* re translate /zh/blog/2018/egress-tcp/, for changes of content/blog/2018/egress-tcp/index.md file between commit fd290dc73e and 82eb2c21a3

* fix unaviable link (#2151)

(cherry picked from commit 0b313e373b)

* Flip conditional polarity to remove useless work when linting.

(cherry picked from commit 4424563918)

* Enable extra lint stuff (#2158)

(cherry picked from commit 0b2ea1d38e)

* Fix indent, given new linting rules.
2018-08-06 12:11:57 -07:00
Martin Taillefer 1c300c99bd
Spelling improvements (#2037)
Remove a bunch of entries that shouldn't have been in the spelling dictionary
and correct content aoocrdingly.

I'm disabling the Chinese spell checking for now, since I'm not able to fix the
spelling errors that emerged there. Once this PR is in, I'll file an issue to get
those spelling errors addressed and checking reenabled.
2018-07-29 14:27:06 -07:00
Jason Young c27351268b use kubectl for managing Istio API resources (#2002)
* use kubectl consistently throughout for Istio API resource C.R.U.D operations

xref: https://github.com/istio/istio.github.io/issues/1843

* fix typo

* review comments

* remove unnecessary instructions to use `replace` instead of `create`

* fix linter in `zh` content
2018-07-27 10:57:41 -07:00
Diem Vu 35a1291a37 Add task for EUC + mTLS authentication (#1965) 2018-07-25 10:51:18 -07:00
Diem Vu 9b9088e7a6 Use mock JWT and JWKS from codebase for end-user auth tutorial (#1945) 2018-07-25 08:16:33 -07:00
mtail 613ffd6cc3 A few editorial fixes. 2018-07-24 13:13:15 -07:00
mtail 3dee29d873 Fix a linting error. 2018-07-23 17:27:29 -07:00
Diem Vu 792675ad07 Update authentication policy tasks (#1891) 2018-07-23 14:17:13 -07:00
Limin Wang 8973981880 Update authentication concept doc (#1886)
* Update authentication concept doc.

* Fix lint errors.

* Address comments and fixed some links.

* Remove feature stages change from this PR.

I will make a separate PR for it.
2018-07-19 19:10:37 -07:00
Martin Taillefer 181605b27e
Consolidate the security concept pages into a single page. (#1721)
* Consolidate the security concept pages into a single page.

- This updates the security concept material to be on a single page, which matches the
change done last week for the rest of the concept material. This ends up being a less clicky
more directed introduction for newcomers to the platform.

- While I was there, I moved the redundant What is Istio page from our about section and stuck
the content at the top of the What is Istio page in the Concepts section.
2018-07-10 10:26:19 -07:00
Axel Siebenborn 96ca8ac221 Change name of Policy and DestinationRule. (#1704)
The command uses istioctl replace to change Policy and DestinationRule.
However, there is no Policy or DestinationRule with the name example-2.
2018-07-09 08:43:49 -07:00
Steven Dake 4ebbb12505 Change all references to istio-demo-*.yaml (#1696)
Remove demo from all documentation references
2018-07-06 11:46:23 -07:00
Martin Taillefer 07ed229051
Simplify linking to GitHub content. (#1669)
- Add <github_file> <github_blob> and <github_tree> to make it simpler to link to the right
place on GitHub.

- Use these new sequences throughout the docs.

- Also, fix bad HTML generated for the TOC in certain cirsumstances.

- Fix extra blank line inserted at the bottom of indented code blocks.
2018-07-04 04:16:49 -07:00
mtail 0f8724351f Content fixes.
- Remove What's next sections since we now have auto-generated See also sections

- Fix a few incorrectly capitalized headers, "istio", "kubernetes", "sidecar"
2018-06-30 21:42:52 -07:00
Martin Taillefer 0541000be8
Switch from ``` to {{< text >}} to indicate text blocks. (#1644)
This fixes a number of cases of incorrect formatting of code blocks
throughout the site.
2018-06-30 07:11:21 -07:00
Limin Wang 4a114797f9 Update authn policy tasks with global policy. (#1639)
* Update authn policy tasks with global policy.

This is cloned from Diem's PR
https://github.com/istio/istio.github.io/pull/1600.

* Add section to use mesh-wide policy to enable mTLS globally.
* Update examples to follow naming restriction.

* Fix linter errors.

* Additional lint fix.
2018-06-29 16:12:29 -07:00
mtail 77da9cccea Next batch of file refactorings. 2018-06-27 00:19:09 -07:00