Commit Graph

289 Commits

Author SHA1 Message Date
Andra Cismaru 938eb8b40d Move each platform setup into its own file (#1948) 2018-07-25 06:30:26 -07:00
LillyWu 30b5e85b99 update doc as ansible installation policy changes (#1951) 2018-07-25 04:50:39 -07:00
Yangmin 973d25c451 Add a slash to the gRPC path format in ServiceRole. (#1950) 2018-07-24 16:16:11 -07:00
Tim Swanson bd15cd4a76 Multicluster--make pod-IP copy/paste work with and without zipkin (#1941)
* Multicluster--make pod-IP copy/paste work with and without zipkin

Fixes: 1895
2018-07-24 13:23:41 -07:00
Frank Budinsky e005164581 Fix bookinfo consul instructions (#1946)
* Fix bookinfo consul instructions

* fix lint errors

* fix spelling error
2018-07-24 13:18:39 -07:00
mtail 613ffd6cc3 A few editorial fixes. 2018-07-24 13:13:15 -07:00
Rigs Caballero cddace0f45 Remove ghost elements from security diagrams. (#1943)
By removing ghost elements from the SVG files, I could fix the scaling of the
diagrams.

Signed-off-by: rcaballeromx <grca@google.com>
2018-07-24 13:02:37 -07:00
Steven Dake 82c8146867 All known caveats for MC are in release notes (#1947) 2018-07-24 13:01:10 -07:00
Rigs Caballero c3ab22f604 Edit Security section for clarity. (#1921)
* Edit Security section for clarity.

The edit includes:

* Rewrite of every passive voice instance.
* Consistent use markup to reference code from the examples in the text.
* Added emphasis to make key concepts clearer.
* Added links to the Identity section of the docs.
2018-07-24 10:50:50 -07:00
mtail e3ff3313e6 A few minor editorial changes. 2018-07-24 10:11:02 -07:00
lei-tang 8a43b3d1d8 Revert the PR 1744 as the yaml files have been added back (#1924)
* Revert the PR 1744 as the yaml files are added back

The PR 1744 fixes the non-existent yaml files in the description of Citadel health checking in
https://preliminary.istio.io/docs/tasks/security/health-check.html
reported by the issue https://github.com/istio/istio/issues/6922. Since
the PR https://github.com/istio/istio/pull/7178 adds back the removed
yaml files, the PR 1744 is reverted.
2018-07-24 09:46:20 -07:00
Dan Ciruli bfc17bb1fe New citadel (auth) diagram (#1929) 2018-07-24 07:50:40 -07:00
duderino f6aae3db69 Fixed stale filenames in the Kubernetes Quick Start. Replaced 'istio.yaml' with 'istio-demo.yaml' and 'istio-auth.yaml' with 'istio-demo-auth.yaml'. (#1720) 2018-07-24 06:29:05 -07:00
Guang Ya Liu 4773ac054a Removed redundant `--set`. (#1934) 2018-07-24 04:01:39 -07:00
Kent Rancourt 217c78af01 bookinfo doc fixes (#1817) 2018-07-23 20:36:23 -07:00
mtail 3dee29d873 Fix a linting error. 2018-07-23 17:27:29 -07:00
Dan Ciruli b1df371b92 New Authentication diagram (#1925) 2018-07-23 17:24:22 -07:00
Diem Vu 792675ad07 Update authentication policy tasks (#1891) 2018-07-23 14:17:13 -07:00
Vadim Eisenberg 2bf4b91b73 Fix lint errors for egress gateway (#1922) 2018-07-23 13:14:49 -07:00
Vadim Eisenberg 55a4a3361b Add egress gateway task to master, extended for mTLS and HTTPS (#1687)
* initial version of Egress Gateway for 1.0

* use HTTPS protocol for the egress gateway ports

* change troubleshouting section regarding mutual TLS

just direct users to read the mutual TLS page regarding troubleshooting

* add egressgateway to .spelling

* remove "let's" prevent the "we language"

* fix lint errors

* rename Cleanup section names to more detailed names, to prevent lint errors

* add a section about directing HTTPS traffic thru egress gateway

* remove istio-system namespace from the HTTPS-related artifacts

* add a section for mutual TLS over HTTPS

* disable mTLS on Istio with mTLS between a sidecar and the egress gateway

* use * as a host in the gateway's definition

* clarify the fact that in HTTPS the original traffic is already encrypted

* use mTLS between sidecar and egress gateway

* use explicit host in gateways instead of *

* add subjectAltNames to the upstream of the sidecar proxy

* unite creating a gateway for mTLS and a destination to set SNI

* add a missing dot

* add destination rule for setting SNI for mTLS to all cases

* add deleting the destination rule for mTLS

* split a long line

* Rewrite the steps to create a service entry in a separate step

* use port 80 in the destionation rule for direct HTTP traffic without TLS origination

* remove redundant ServiceEntry definition

* mention DestinationRule for TLS origination

* rename port tls to tls-cnn

for future definition of multiple servers on the same port

* describe getting Envoy's stastics of istio-egressgateway
2018-07-23 10:47:52 -04:00
Martin Taillefer 5527dcbaf6
Switch uses of funny quotation marks to plain ones. (#1914)
- Use only standard quotation marks to avoid cut & paste stuff not working

- Put in a lint rule to prevent further use of non-plain quotation marks.
2018-07-22 08:48:03 -07:00
Stefan Büringer eb4c7be94b Minor doc fixes (#1910)
Fixed indentation and typos
2018-07-22 07:52:43 -07:00
LillyWu 10677f5c9a make a note to check options settings before override it (#1867) 2018-07-21 06:42:10 -07:00
Pengyuan Bian 98281c123f Add `add` to expression reference. (#1902) 2018-07-20 16:10:35 -07:00
Matthew Wringe c9f8715bee Add in missing galley permissions for OpenShift (#1899) 2018-07-20 13:53:35 -07:00
mtail 3bb4f605f2 Update reference docs. 2018-07-20 13:29:08 -07:00
Frank Budinsky 094007ddff Traffic managment rule config concepts improvements (#1897) 2018-07-20 13:15:36 -07:00
gargnupur 23fd3046e0 Add port-forward cleanup step in distributed-tracing, fluentd, metric… (#1894)
* Add port-forward cleanup step in distributed-tracing, fluentd, metrics-logs and servicegraph tasks

* Fix Lint Errors
2018-07-20 13:14:35 -07:00
Frank Budinsky 8f7a1d1b2f Clarify use of istioctl vs kubectl (#1893) 2018-07-20 11:53:35 -07:00
Frank Budinsky 7e66c3f40a Remove v1alpha3 notice (#1890) 2018-07-20 07:24:35 -07:00
mtail a580eab41c Update reference docs. 2018-07-20 06:23:03 -07:00
Limin Wang 61fcfd9e9b Add back denier and listing adapters task doc (#1887)
* Add back denier and listing adapters task doc.

* Renamed and fixed lint errors.
2018-07-20 06:18:37 -07:00
Frank Budinsky 466360e562 Create destination rules when running bookinfo (#1885)
* create destination rules when running bookinfo

* Update index.md
2018-07-20 06:14:35 -07:00
Yossi Mesika 5e7684acd6 Updated upgrade instructions (#1883)
* Updated upgrade instructions

* Lint

* Update index.md
2018-07-20 06:08:35 -07:00
imgbot[bot] 488f6a18de [ImgBot] optimizes images (#1889)
*Total -- 1,282.33kb -> 712.54kb (44.43%)

/content/docs/tasks/telemetry/using-istio-dashboard/grafana-istio-dashboard.png -- 89.55kb -> 43.35kb (51.59%)
/content/docs/tasks/telemetry/using-istio-dashboard/istio-workload-dashboard.png -- 161.88kb -> 87.40kb (46.01%)
/content/docs/tasks/telemetry/distributed-tracing/istio-tracing-details.png -- 165.35kb -> 90.83kb (45.07%)
/content/docs/tasks/telemetry/querying-metrics/prometheus_query_result.png -- 204.91kb -> 114.43kb (44.16%)
/content/docs/tasks/telemetry/using-istio-dashboard/dashboard-with-traffic.png -- 172.64kb -> 96.60kb (44.05%)
/content/docs/tasks/telemetry/using-istio-dashboard/istio-service-dashboard.png -- 198.97kb -> 111.39kb (44.02%)
/content/docs/tasks/telemetry/distributed-tracing/istio-tracing-list.png -- 202.38kb -> 113.96kb (43.69%)
/content/docs/tasks/telemetry/servicegraph/servicegraph-example.png -- 86.63kb -> 54.59kb (36.98%)
2018-07-20 06:03:34 -07:00
gargnupur c764245027 Update Distributed Tracing Task with new screenshots (#1742)
Update "Collecting Metrics and Logs" task with new source and destination attributes

Updated based on reviews and added tcp metrics changes too

Update Prometheus Task

Update Using-Istio-Dashboard task

Updated fluentd and servicegraph tasks.
Also update distributed tracing and using-istio-dashboards tasks based
on feedback

Add new picture for servicegraph and indent using-istio-dashboard again

Fixed Linting Errors

Updating based on review

Updating based on review

Adding destination-rule-all-mtls for tcp metrics routing too

Add explanation for Inbound Workloads and Outbound Services for Workload Dashboards
2018-07-20 05:58:35 -07:00
Limin Wang 8973981880 Update authentication concept doc (#1886)
* Update authentication concept doc.

* Fix lint errors.

* Address comments and fixed some links.

* Remove feature stages change from this PR.

I will make a separate PR for it.
2018-07-19 19:10:37 -07:00
Frank Budinsky 3434e2bafc
Clarify timeout task (#1884)
* clarify response time

* corrections
2018-07-19 16:13:20 -04:00
Pengyuan Bian ec6a89bd5c Update default metrics page (#1874) 2018-07-19 06:16:40 -07:00
David Tesar 713f7b2591 Add AKS to Azure quickstart (#1805) 2018-07-19 06:05:49 -07:00
Vincent 68a964c7d3 fixed: link to k8s documents, #type-nodeport => #nodeport (#1881)
* fixed: link to k8s documents, #type-nodeport => #nodeport

* fixed: link to k8s documents, #type-nodeport => #nodeport
2018-07-19 04:23:36 -07:00
Yangmin 0b9e3aba5a update rbac api version to align with istio/istio#6874. (#1879) 2018-07-18 15:21:37 -07:00
Georgios Andrianakis de6b17bcf5 Fix the directory in which the Ansible playbooks can be found (#1873)
Relates to: https://github.com/istio/istio/pull/7207
2018-07-18 08:45:37 -07:00
Jimmy Song 863934a454 Chinese community translation and fix a markdown error (#1871)
* Chinese community translation and fix a markdown error

- Translate community page into Chinese
- Fix https overlay markdown style check error

* fix CI errors

- update Quick Start with Kubernetes
- update Prerequisites and Installation steps
- fix some broken links
2018-07-18 07:56:37 -07:00
Tim Swanson 1b11b09761 Multicluster: add details on enabling mTLS for control plane and app pods (#1833)
* Multicluster: add details on enabling mTLS for control plane and app pods

- describes deployment steps and includes an example deployment with commands

* fix review comments on wording
2018-07-18 07:39:37 -07:00
Spike Curtis 0376ee75e9 Clarify install in HTTPS overlay (#1857)
Signed-off-by: Spike Curtis <spike@tigera.io>
2018-07-18 04:54:17 -07:00
Pengyuan Bian 82685030a4 Add two expressions. (#1840) 2018-07-18 04:41:19 -07:00
Douglas Reid 1328fbdd15 Update TCP Report diagram (#1860) 2018-07-18 04:38:00 -07:00
Andra Cismaru 78b4c20adf Extract platform prerequisites (#1834)
* Extract platform prerequisites

* Reorg

* Remove the inner pages from the menu

* Conform to the site directory structure

* Fix the link wording to match the title of the link and the uppercase

* Fix lint errors

* more lint errors
2018-07-17 22:49:37 -07:00
Tiago M. Vieira 0159e7ff3f fix typo (#1861) 2018-07-17 15:31:37 -07:00