2adfb33c25
Remove MTLS DR from Egress Gateway Task ( #6795 )
...
* celan up destination rule differences for auto mtls on by default
* lint fixes
2020-03-06 12:12:56 -08:00
9fbae823c1
[Release-1.5] Remove tasks referring to the deprecated tool ( #6587 )
...
* Also remove faq mentioned it
* Also in egress task
2020-03-05 16:39:16 -05:00
9c4f1bbc68
[Release-1.5] remove mixer references from egress tasks and deprecate where needed ( #6734 )
...
* remove mixer references from egress tasks and deprecate where needed
* lint fixes
* Update content/en/docs/tasks/traffic-management/egress/egress_sni_monitoring_and_policies/index.md
Co-Authored-By: mandarjog <mandarjog@gmail.com>
* Update content/en/docs/tasks/traffic-management/egress/egress_sni_monitoring_and_policies/index.md
Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Francois Pesce <fpesce@google.com>
Co-authored-by: mandarjog <mandarjog@gmail.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2020-03-05 16:37:56 -05:00
2edbaeaf4b
Remove deep dive mtls taks. ( #6706 )
...
* remove deep dive
* update links
* lint fixing egs gw
* more removal
* link 1.0.3 lint
2020-03-04 13:15:26 -08:00
f7363dea08
Updates to ExternalName doc ( #6664 )
...
* Updates to ExternalName doc
* Update content/en/docs/tasks/traffic-management/egress/egress-kubernetes-services/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-03-03 17:41:46 -08:00
b6a786ca93
Fix comments of 5262 ( #6206 )
...
* add "for" in description: ... configure Istio for Kubernetes External Services
* add "in the default namespace" to "create a Kubernetes ExternalName Service"
* mention the Kubernetes DNS format for services
2020-01-03 11:32:24 -08:00
ae41b8fcdd
Site improvements. ( #6003 )
...
- Update common files.
- Switch to latest Hugo version.
- Thanks to the new Hugo, retire the text_hack shortcode.
The hack is no longer needed.
2019-12-06 06:59:22 -08:00
c863bea599
Content changes to prepare to switch to the new Hugo. ( #5993 )
...
These fix problems encountered when switching to the new Hugo which has
a completely different markdown engine. I went through diffs of the generated
HTML and made required adjustments.
2019-12-05 12:44:01 -08:00
6165cb9821
Replace cookies with local storage. ( #5949 )
...
- We don't need cookies for istio.io, the few settings we do have should be
managed with browser-local storage instead. This is a better privacy posture,
and avoids sending needless data to the server for every request.
2019-12-02 13:02:51 -08:00
24e35577de
Add note about annotations to control traffic ( #5896 )
...
* Add note about annotations to control traffic
Fixes https://github.com/istio/istio/issues/19258
* Update content/en/docs/tasks/traffic-management/egress/egress-control/index.md
Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
2019-11-27 11:17:41 -08:00
60f73570f0
Another ops guide incremental improvement ( #5830 )
...
* Another ops guide incremental improvement
* fix broken links
* more lint errors
* one more lint
* fix aliases
2019-11-25 11:58:39 -08:00
66f2d2a02c
Use subset in the destination rule of TLS origination ( #5795 )
...
* use a subset in the destination rule for TLS origination
this way the TLS origination will only be applied for the traffic directed by the
virtual service for TLS origination. TLS origination will not be applied for the original TLS traffic
* add a check that the original TLS traffic works as before
2019-11-19 09:51:45 -08:00
01747f2349
Fix a bunch of busted links. ( #5588 )
2019-11-11 07:43:43 -08:00
a6a5769f12
Organize security tasks ( #5474 )
...
* Organize security tasks
* lint errors
* fixes
* more fixes
2019-11-07 15:54:27 -05:00
db10e052ff
Fix directory structure/heading for istioctl install ( #5390 )
2019-11-05 12:37:19 -08:00
4d4e6ae28e
General cleanup items. ( #5325 )
...
- Fix a bunch of heading capitalization.
- Remove words that shouldn't be in the dictionary
and update the text accordingly.
- Added a few @@ sequences to reference content files from text blocks.
- Used a few {{< source_branch_name >}} sequences to refer to the proper
branch in GitHub rather than master.
2019-11-04 06:41:54 -08:00
241143bfa9
add port name "tls" to both Service and Endpoints ( #5261 )
...
otherwise the service is treated as HTTP, causing an error
2019-10-29 08:00:36 -07:00
e5cb80badc
add a cleanup subsection to set desired outbound traffic policy mode ( #5264 )
...
* add a cleanup subsection to set desired outbound traffic policy mode
the title: "Set the `global.outboundTrafficPolicy.mode` to your desired mode"
* remove a redundant empty line
* rename the subsection to be "Set the outbound traffic policy mode to your desired value"
* remove a semicolon at the end of the subsection's title
* add `uniq` so the output of the current outbound traffic policy mode will appear once
2019-10-29 07:10:35 -07:00
f220f655a7
Deprecate helm install ( #5270 )
...
* Deprecate helm install
* fix lint
* address review comments
* correction
2019-10-29 06:37:34 -07:00
03ca9f6478
Move pages out from the Concepts section ( #5256 )
...
* Move Deployment Models from Concepts to Setup
Signed-off-by: rcaballeromx <grca@google.com>
* Move Architecture from Concepts to Ops.
Signed-off-by: rcaballeromx <grca@google.com>
* Move Performance page from Concepts to Ops
Signed-off-by: rcaballeromx <grca@google.com>
2019-10-24 15:40:25 -07:00
92eac8892c
Quote jsonpath to support zsh ( #5211 )
2019-10-21 10:02:37 -07:00
d6445fc726
Update reference docs. ( #5173 )
...
preliminary.istio.io will now display reference material for the release-1.4 branches
of istio/istio, istio/api, and istio/operator.
2019-10-17 11:09:11 -07:00
6e1825036e
[ImgBot] Optimize images ( #5167 )
...
*Total -- 2,116.10kb -> 2,113.71kb (0.11%)
/assets/inline_images/landing/routing-and-load-balancing.svg -- 2.02kb -> 1.49kb (26.05%)
/assets/inline_images/landing/telemetry-and-reporting.svg -- 2.26kb -> 1.74kb (22.86%)
/assets/inline_images/landing/policy-enforcement.svg -- 1.41kb -> 1.12kb (21.01%)
/static/img/istio-bluelogo-nobackground-unframed.svg -- 0.32kb -> 0.26kb (18.73%)
/static/img/istio-whitelogo-bluebackground-unframed.svg -- 0.39kb -> 0.32kb (17.75%)
/static/img/istio-bluelogo-whitebackground-unframed.svg -- 0.39kb -> 0.32kb (17.13%)
/static/img/istio-bluelogo-nobackground-framed.svg -- 0.35kb -> 0.29kb (17.13%)
/assets/inline_images/landing/resiliency.svg -- 2.33kb -> 1.94kb (16.83%)
/static/img/istio-bluelogo-whitebackground-framed.svg -- 0.42kb -> 0.35kb (16.47%)
/static/img/istio-whitelogo-bluebackground-framed.svg -- 0.42kb -> 0.35kb (15.89%)
/assets/inline_images/landing/istio-logo.svg -- 0.17kb -> 0.16kb (6.25%)
/assets/inline_images/istio-whitelogo-bluebackground-rounded.svg -- 0.21kb -> 0.21kb (3.21%)
/content/en/blog/2018/egress-https/https_from_the_app.svg -- 16.61kb -> 16.59kb (0.12%)
/content/en/about/contribute/diagrams/diagram-guidelines.svg -- 47.65kb -> 47.63kb (0.05%)
/content/en/blog/2018/egress-monitoring-access-control/https-to-gateway.svg -- 37.47kb -> 37.46kb (0.05%)
/content/en/blog/2018/egress-monitoring-access-control/http-to-gateway.svg -- 37.63kb -> 37.61kb (0.05%)
/content/en/docs/reference/config/policy-and-telemetry/mixer-overview/topology-with-cache.svg -- 81.78kb -> 81.75kb (0.03%)
/content/en/blog/2019/data-plane-setup/arch-2.svg -- 82.76kb -> 82.74kb (0.03%)
/content/en/docs/setup/install/multicluster/shared-gateways/diagram.svg -- 116.08kb -> 116.05kb (0.02%)
/content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/EgressGatewayWithSNIProxy.svg -- 71.72kb -> 71.71kb (0.02%)
/content/en/docs/examples/mesh-expansion/bookinfo-expanded/mesh-expansion.svg -- 217.56kb -> 217.53kb (0.01%)
/content/en/blog/2017/mixer-spof-myth/mixer-spof-myth-2.svg -- 91.28kb -> 91.28kb (0.01%)
/content/en/blog/2019/egress-traffic-control-in-istio-part-2/SecurityArchitectureWithL3Firewalls.svg -- 502.86kb -> 502.83kb (0%)
/content/zh/docs/concepts/multicluster-deployments/multicluster-with-gateways.svg -- 249.43kb -> 249.42kb (0%)
/content/en/docs/setup/install/multicluster/gateways/multicluster-with-gateways.svg -- 250.49kb -> 250.48kb (0%)
/content/zh/docs/concepts/multicluster-deployments/multicluster-with-vpn.svg -- 150.61kb -> 150.60kb (0%)
/content/en/docs/setup/install/multicluster/shared-vpn/multicluster-with-vpn.svg -- 151.47kb -> 151.47kb (0%)
Signed-off-by: ImgBotApp <ImgBotHelp@gmail.com>
2019-10-17 10:05:01 -07:00
31d21ffbb4
migrate Deployment apiVersion from extensions/v1beta1 to apps/v1 to support k8s 1.16 ( #5159 )
...
* migrate Deployment apiVersion from extensions/v1beta1 to apps/v1 to support k8s 1.16
* migrate Deployment, PodSecurityPolicy apiVersion to support k8s 1.16
2019-10-15 10:56:21 -07:00
e392d7260a
add a task about Kubernetes Services for egress ( #4710 )
...
* add the first version of Egress with Kubernetes Services
* add explicit disabling of TLS in destination rules
* rewrite the motivation for Kubernetes service entries
motivation: location transparency
* remove pre-Istio from .spelling
* add "The external services are not part of an Istio service mesh..."
so they cannot perform the mutual TLS of Istio.
* split a long line
* expand the explanations about disabling Istio's mutual TLS
* add explanation about disabling TLS mode in the HTTP case
* add explanation about disabling Istio mutual TLS for HTTPS case
* unencoded -> unencrypted
* fix a link
* fix the location of the task to be in content/en
2019-10-15 01:30:21 -07:00
78ec428817
Improve concepts organization ( #5095 )
...
* cleanup unused files
* tweak wording
* merge traffic management architecture material
* reorg top level concept sections
* lint errors
* fix list style
2019-10-04 11:43:31 -07:00
fbc726c6b7
Remove usages of curl inside istio-proxy ( #5073 )
...
* Remove usages of curl inside istio-proxy
Distroless builds of Istio do not contain curl, so we should not tell
users to use it. Pilot-agent handles this functionality for us
* Fix lint error
2019-09-27 16:46:22 -07:00
d42dfe94ba
Introduce top-level News section. ( #5060 )
2019-09-27 07:09:58 -07:00
351710d058
Egress TLS origination port 443 must be HTTPS ( #5049 )
...
* Port 443 must be HTTPS
* Port 443 must be HTTPS
2019-09-26 12:05:15 -04:00
28db342298
Minor egress fixes ( #5025 )
...
* fix the protocol in an HTTPS URL
* add "Enable Envoy's Access Logging" step to egress tasks
2019-09-21 23:41:11 -07:00
1ecc6cf6bb
Updated traffic management concept guide ( #5014 )
...
* New traffic management rewrite
* Updated traffic management guide
* Fix typo
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: John Howard <howardjohn@google.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: John Howard <howardjohn@google.com>
* Implementing Frank and John's edits
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Data plane definition
* Added glossary links
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Implementing Frank's suggestions
* More edits
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* More edits from Frank and Srinath
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* More edits
* Update index.md
* yet more edits
* Lint fixes and CRD glossary entry
* more links
* sdake's edits
2019-09-20 12:51:10 -07:00
71145ac443
Error in Secure Gateways (SDS) extra <angle brackets> ( #4930 )
...
* Fix bash: syntax error near unexpected token
* Use <password> throughout
* Add angle brackets for single-backticked 'password'
2019-09-12 12:02:20 -04:00
78a3473b94
Fix Envoy stats examples in egress docs ( #4903 )
2019-09-12 06:03:56 -07:00
dc05694f8a
Remove old note about Istio 1.1 ( #4857 )
...
In 1.3 documentation I don't think we need a warning about 1.1 anymore
2019-08-27 13:30:53 -07:00
ca7559cab2
Remove Nomad & Consul docs ( #4805 )
...
* Remove Nomad & Consul docs
* broken links
* more broken links
* more broken links
* fix spelling errors
* remove broken ref
2019-08-16 12:13:30 -07:00
d0cf1e171e
Move English content to content/en as agreed in WG meeting. ( #4789 )
...
Once this goes in, I'll move content_zh to content/zh.
2019-08-14 15:45:31 -07:00
Gregory Hanson