Commit Graph

167 Commits

Author SHA1 Message Date
Martin Taillefer 2c62859726 Tweak the installation pages. (#3610)
- Move requirements up to be the first thing people see. This matches
the order presented in the landing page.

- Shuffle the order in the sidebar a bit to correspond to the order
the material is presented in the landing page.

- Clean up some of the wording on the k8s landing page.

- Shorten the platform names used in the sidebar nav so they fit better.
This matches the names used in the Platform Setup section.
2019-03-11 08:56:35 -07:00
Martin Taillefer fc058032b1
Fix broken callouts. (#3612) 2019-03-10 11:53:09 -07:00
Venil Noronha 2c822d55d4 Add a warning about using sudo for a TCP sample (#3583)
* Add a tip about prefixing with sudo for TCP sample

This adds a note about using sudo while running the TCP Traffic Shifting
sample on certain platforms.

Signed-off-by: Venil Noronha <veniln@vmware.com>

* Switch from a tip to a warning

This updates the help text to a warning.

Signed-off-by: Venil Noronha <veniln@vmware.com>
2019-03-08 19:30:31 -08:00
Frank Budinsky 9761fd3204 Update egress task (#3595) 2019-03-08 16:25:19 -08:00
Ed Snible 5748253b7d Fortio binary changed directories (#3563) 2019-03-07 15:29:33 -08:00
Vadim Eisenberg 2f1e1a6020 Use two separate ingress gateways for two hosts (#3529)
* use a separate gateway for bookinfo in the case of multiple hosts

* set the name parameter to be "istio" instead of "istio-ingressgateway"

Since the original istio-ingressgateway was deployed with the name parameter "istio".
Otherwise, the following error will be received:

The Deployment "istio-ingressgateway" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"chart":"gateways", "heritage":"Tiller", "istio":"ingressgateway", "release":"istio-ingressgateway", "app":"istio-ingressgateway"}: `selector` does not match template `labels`

The problem is that the "release" label contains the name parameter of helm template,
and if this label will not match in the new and the original deployments of istio-ingressgateway,
kubectl apply will fail.
2019-03-06 09:07:30 -08:00
Vadim Eisenberg e8a799f919 add ingress troubleshooting section (#3410)
* add ingress troubleshooting section

* it does not arrive to the Istio -> it does not arrive to the ingress gateway

* fix a link

* remove checking the log since access log will be removed in 1.1

* you have no other Kubernetes Ingress resources -> you have no Kubernetes Ingress resources
2019-03-06 08:59:38 -08:00
Eric Van Norman 9dde74f016 Remove .b from cert path httpbin.new.example.com curl (#3495) 2019-03-06 07:40:33 -08:00
Vadim Eisenberg 5c255e9618 add start-httpbin-service boilerplate (#3514) 2019-03-05 10:03:32 -08:00
Jimmy Chen 4ff728348d restore the order of docs (#3503) 2019-03-05 06:18:33 -08:00
Jimmy Chen 692125f6b4 Add guide for external cert management at ingress gateway using SDS (#3224)
* add ingress sds

* update

* update

* Revise

* update

* Revise

* Update

* update

* revise

* update

* Remove key cert path when SDS is enabled

* Split SDS task into separate file

* Revise

* add mount/ and sds/

* fix broken link

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/_index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Apply suggestions from code review

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Revise

* Revise

* update

* Apply suggestions from code review

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>
2019-03-01 15:28:31 -08:00
Martin Taillefer ad565871d6
Clean up keywords. (#3442) 2019-02-28 17:26:46 -08:00
Rigs Caballero 21c918fbe4 Organize the Kubernetes Installation content. (#3422)
* WIP Add Kubernetes Installation landing page.

This adds the landing page and organizes the content to make it easier to navigate.

Signed-off-by: rcaballeromx <grca@google.com>

* Apply initial feedback on landing page content.

Signed-off-by: rcaballeromx <grca@google.com>

* Rename and move files to enhance navigation.

Added aliases to redirect after filename changes.

Signed-off-by: rcaballeromx <grca@google.com>

* Harmonize all installation guide titles and intros.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix all links affected by the restructure.

Fixed all internal links and added aliases to ensure external redirects.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix paths of images on the ZH content.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix additional links and apply feedback.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix link error introduced by rebase.

Signed-off-by: rcaballeromx <grca@google.com>

* Remove redundant instances of "Istio" in titles.

Signed-off-by: rcaballeromx <grca@google.com>
2019-02-28 14:37:30 -08:00
Yuchen Dai 0ac513511d Update egress document (#3419)
`X-istio-Attributes` should not be presents in the request to external HTTP service.
2019-02-28 06:03:33 -08:00
Hiroshi Nasu 1a0130162a Add a step to look inside mirroring traffic with tcpdump in istio-proxy (#3267)
* Add looking inside mirroring traffic with tcpdump

* Update mirroring traffic exam step description
2019-02-26 14:27:32 -08:00
Frank Budinsky 2c72648099 Reminders to apply destination rules (#3390) 2019-02-26 12:06:19 -08:00
Shriram Rajagopalan 2baef16e51 new networking reference docs (#3358) 2019-02-25 17:13:27 -08:00
Frank Budinsky 324906940f Egress task corrections and clarifications (#3315)
* Corrections and clarifications

* spelling

* review comments

* more review suggestions
2019-02-20 14:37:27 -08:00
Vadim Eisenberg 6e04852114 remove VirtualService from HTTPS egress access configuration (#3309) 2019-02-20 10:48:26 -08:00
Vadim Eisenberg 48b5cc27dd Finalize egress task (#3222)
* note HTTP-related attributes -> notice the HTTP-related attributes

* related to Istio sidecar -> related to the Istio sidecar

* rewrite the sentence about ports and the installation option

use port 8000 instead of 443, to generate less confusion

* no HTTP service or service entry -> no HTTP service and no service entry

* extend understanding what happened with the third approach

* change section titles

* split the cleanup section into cleanup subsections

* fix links

* must not -> do not need to

* rewrite the sentence about switching to the first approach

* per specific port, gaining -> for specific ports, enabling

* A caveat is that some ports, for example port 80, already have HTTP
services inside Istio by default

* In this approach, similarly to the previous one -> With this approach, like with the previous one

* approaches can be applied -> approaches can be used

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* split long lines

* split long lines

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Revert "Update content/docs/tasks/traffic-management/egress/index.md"

This reverts commit febb76edc9.

* rewrite the sentence about the installation option and add a link to installation options

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* remove duplicate text

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* Update content/docs/tasks/traffic-management/egress/index.md

Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>

* remove a redundant empty line

* address the reader directly
2019-02-15 19:18:24 -08:00
Martin Taillefer d6b3bfac56
Add support for {{< quote >}} (#3237) 2019-02-12 08:22:28 -08:00
Martin Taillefer b3db41da99
Added more lint rules and fix offenders (#3227)
- Ensure that references to GitHub content use the proper annotations so
we get links to the correct branches.

- Added a check to make sure content is not using blockquotes (instead of
{{< warning >}}, {{< tip >}}, and {{< idea >}}. This check is currently
disabled, pending the Chinese content being updated.

- Fix a few violations of these new checks.
2019-02-11 12:49:47 -08:00
Frank Budinsky 4107adf6f5 Fix CIDR range instructions (#3215) 2019-02-08 09:35:23 -08:00
Vadim Eisenberg 4f7da3942d extend the egress task (#3133)
* extend the access to HTTP and HTTPS services

add checking logs, make calls more pretty, add explanations

* remove redundant empty line
2019-02-08 07:15:25 -08:00
Vadim Eisenberg 5c38b3039f add Install Istio with access to all the external services by default section (#3140)
* add Install Istio with access to all the external services by default

* fix a typo: copule -> couple

* add a call to cnn

* instal -> install

* replace ; with ,

* add a couple of requests to HTTPS services before changing the config map
to show that they are blocked

* do not delete pilot, it listens to the changes of the config map

* no need to reinstall/update -> no need to update

* add 'Change back to the blocking-by-default policy' section

* perfromed -> performed

* all the services -> all services

* instruct Istio proxy -> instruct the Istio proxy

* no HTTP service exist -> no HTTP service exists

* all the access ... will be blocked -> all accesses ... is blocked

* Unindent the block content

* blocked now -> now blocked

* Revert "add a couple of requests to HTTPS services before changing the config map"

This reverts commit 848171c041.
2019-02-07 10:29:23 -08:00
Martin Taillefer dd782b3d12
Improve the looks of warnings, info blobs, and tips. (#3181) 2019-01-31 12:11:53 -08:00
Jianfei Hu 65cf1b3da2 Document the liveness health check rewrite. (#2961) 2019-01-30 14:03:12 -08:00
banix 7f3ea2cc34 Correcting the IP ranges used in IKS (#3126) 2019-01-23 21:35:46 -05:00
Vadim Eisenberg d6eb09bb9e clarify secure ingress gateway troubleshooting regarding killing the pod to reload certificates (#3112)
* put the instructions to kill the pod after checking that the key/certificate are loaded

* add "if you created the secret, but..." before killing the pod

* the secret <secret name> -> the <secret name> secret

* kill -> delete
2019-01-22 09:47:56 -08:00
Vadim Eisenberg 13dda4ce1c add Security note to egress traffic control task (#3115)
* add Security note to egress traffic control task

Similar to https://archive.istio.io/v0.7/docs/tasks/traffic-management/egress.html#egress-rules-and-access-control

* remove a redundant empty line
2019-01-22 09:03:56 -08:00
Martin Taillefer 1c1242ffc4
Fix spelling and grammar stuff throughtout the site. (#3114) 2019-01-21 09:35:38 -08:00
buptliuwei 1cfab42441 Update index.md (#3013)
* Update index.md

In order to better distinguish between the two ways to call external services from an Istio mesh, we should remove the rules about `ServiceEntry`.

* Update index.md

Add a warning icon

* Update index.md
2019-01-03 08:04:42 -08:00
Vadim Eisenberg ddd3ad1788 Replace before you begin egress with boilerplate (#3022)
* add before-you-begin-egress boilerplate and use it in one case

* move the boilerplate into content

* replace before-you-begin section for egress task/examples

* remove egress related details from the boilerplate
2019-01-03 07:52:42 -08:00
Serge Bishyr d0c7df1b96 Fix the typo on the secure ingress page (#3012)
Fixed in the documentation command
- Typo, the `jsonpath` contain extra dot char: `.items[0]..metadata.name` instead of `.items[0].metadata.name`
- The jsonpath without a weapping in quote chars won't work on all the systems and could lead to some errors of type: `no matches found: jsonpath={.items[0].metadata.name}`
2019-01-02 09:57:28 -08:00
Frank Budinsky 830629db39
Wildcard egress example clarifications and improvements (#2899)
* cleanup and reorg wildcard egress example

* nits

* few more tweaks

* fix linter errors

* address review comments
2018-11-19 12:16:47 -05:00
Vadim Eisenberg ced6ee13d1 rewrite the note about ingress gateway secret access (#2892)
* rewrite the note about ingress gateway secret access

* rewrite the sentence about deploying the ingress gateway in a separate namespace
2018-11-19 09:03:03 -08:00
l10xbin eb8cb27b12 Remove confusing cleaning up step for circuit-breaking and mirroring (#2830) 2018-11-16 11:39:41 -08:00
Venil Noronha 4e9e127c63 docs: add a task for weighted TCP routing (#2865)
This adds a new Task under the Traffic Management module for showcasing
Istio's Weighted TCP Routing feature.

Signed-off-by: Venil Noronha <veniln@vmware.com>
2018-11-13 15:44:49 -05:00
x15zhang 534cedde9e correct percent expression (#2837)
correct percent expression
2018-11-05 07:02:14 -08:00
Jonh Wendell 2b861520eb Use port 8000 for httpbin service everywhere (#2461) 2018-11-01 11:56:45 -07:00
Frank Budinsky 770bc421b5
A few more improvements to TLS origination example (#2826)
* Improve example subsection titles

* simplify tls origination example

* A few more tweaks
2018-10-31 11:59:17 -04:00
l10xbin 73772acf1a Fix request number wrong in(/docs/tasks/traffic-management/circuit-breaking/) (#2820) 2018-10-31 07:32:05 -07:00
Jinming Yue 18c7f695ef Fix service format (#2818)
* Fix service format

* keep syntax consistent
2018-10-30 11:52:03 -04:00
Frank Budinsky b7f25c0abf Add reminder to apply destination rules (#2801) 2018-10-25 11:20:18 -04:00
Frank Budinsky 7466d1e59e
Fix cleanup step (#2764) 2018-10-16 14:46:22 -04:00
Martin Taillefer a2026aab5e
Clean up a bunch of loose ends (#2745) 2018-10-05 22:21:56 -07:00
Frank Budinsky f6f3b79a75 Clarify task wording (#2736) 2018-10-05 09:52:57 -07:00
Frank Budinsky 28fba53f88
Reorganize traffic managment ops guide (#2669)
* Reorganize traffic managment ops guide

* fix header

* fix circleci issues
2018-09-25 09:22:52 -04:00
Frank Budinsky ee2f55a5ad Add host header and some clarifications (#2643)
* Add host header and some clarifications

* small fixes

* tweaks

* another tweak

* egress -> ingress

* clarify
2018-09-18 10:11:25 -07:00
sshucker 6365c40a8e Add docker-for-desktop installation note (#2585)
* Add docker-for-desktop installation note

A default istio helm install under kubernetes running in docker-for-desktop wasn't working because pilot was reserving too much memory.  Added documentation to work around this

* Update index.md

* Create index.md

* Update index.md

* Update index.md

* Update index.md

* Rename content/docs/setup/kubernetes/platform-setup/index.md to content/docs/setup/kubernetes/platform-setup/docker-for-desktop/index.md

* Update index.md

* Update index.md

quoted memory allocation, capitalized Kubernetes
2018-09-15 20:04:23 -07:00