* Add new setup instructions about istio-cni
* Fix review nits.
* Add Istio CNI to about/features as an alpha status feature
* Reword intro and installation steps
* Add sidecar injection compatibility info
* fix review comments
* Fix wording nits from sdake
* Fix nits and formatting comments from geeknoid.
* Added general CNI spec link and Istio k8s requirements link.
* Add a user guide for Istio Vault CA integration
* Fix lint errors
* Use helm template values to simplify the config
* Address review comments
* Fix the link in a command
* Small fixes
* Add the formal process to become a member of an Istio repo.
This process is detailed as agreed upon by the Istio Technical Oversight Committee.
Signed-off-by: rcaballeromx <grca@google.com>
* Point to existing content related to community roles.
Signed-off-by: rcaballeromx <grca@google.com>
* Add a review process to our contribution guide.
To avoid PR from being merged before the content has been reviewed, contributors
must add a comment with the appropriate command beforehand. I've added this
process. Additionally, I cleaned up the process on how to contribute new
documents.
Signed-off-by: rcaballeromx <grca@google.com>
* Changed button above the list to fix linter issues.
Signed-off-by: rcaballeromx <grca@google.com>
* Change the removal of `/hold` to after review publication.
Now the process asks reviewers to comment with `/hold cancel` after publishing
the review but before the comments are addressed by the contributor.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix small consistency issue.
Signed-off-by: rcaballeromx <grca@google.com>
- Fix formatting for the Subscribe link on blog pages. That got broken in some refactoring I did a while back.
- Remove a few *NOTE* and _NOTE_ instances and replace with the canonical icons
- Add a link to our community repo in the Getting Involved page.
* add a tab section about mTLS
* remove leftover ";done"
* remove SNI monitoring and policy enforcement section
* add explanation why mTLS between sidecars and egress gateways is needed
* add mTLS enabled/disabled tabs to the egress MongoDB blog post
* remove placeholder SNI in logs
* add forward_downstream_sni and sni_verifier filters for wildcard TLS hosts
* add a required empty line
* make the sentence about enabling mTLS a note
* add inline comment in the yamls regarding the SNI filters
* a couple of filters -> Envoy filters
* rewrite the sentence why the SNI filters are used
* fix "so that policies will be enforced based on the original SNI value"
* prevents a possibility for deceiving Mixer -> prevents Mixer from being deceived
* will not match -> does not match
* make note ('>') one line to make lint happy
* initial version
* split a long line
* rephrase the sentence "Now, you configured..."
* add a requirement that mTLS is enabled
* remove leftover ';done'
* add monitoring and policy enforcement of SNI and source identity
* the logentry -> logentry
* that will allow -> that allows
* replace URL with Wikipedia in English
* clarify the examples in SNI monitoring, blocked vs. allowed
* Extend the introduction to monitoring/policies by source identity
* replace backticks with italics for sleep-us and sleep-canada
* the logentry -> logentry
* the sidecar proxy -> the sidecar proxies
* fix the names of the service accounts in cleanup
* it should be -> it must be
* services -> applications
* add: Access to other Wikipedia sites will be blocked
* inline the command to kill mixer pods
* add clarification about the access to Wikipedia sites from sleep-canada
* fix format of cleanup of monitoring/policies by source
* replace italics with backticks for sleep-us and sleep-canada due to spellchecker
* add a missing empty line
* Revert "inline the command to kill mixer pods"
This reverts commit 780913253d.
* of the source of traffic -> of the traffic source
* allows access -> allows to access
* delete "namely"
* Wikipedia -> the Wikipedia
* Add blog entry blog post for custom ingress gateway with cert manager
* Update with remarks from lin in order to explain why create a custom gateway
* Fix lint issue
* Fix spelling error
* Update publish date
Lin Sun
Martin Taillefer
Morven Cao
Yossi Mesika
Tim Swanson
lei-tang
Rigs Caballero
fish
Quanjie Lin
Daneyon Hansen
Steven Dake
Vadim Eisenberg
John Mazzitelli
Jinming Yue
Frank Budinsky
Joe Searcy
Zefool
Jimmy Song
Dinesh Subhraveti
Julien Senon
mtail
SataQiu
LisaFC
Lv Jiawei
Jesse Butler
BenBen
Vincent
flydragon