adc0b9c44a
remove deprecated authz permissive task ( #5191 )
...
* remove deprecated authz permissive task
* update alias
2019-10-18 13:49:56 -07:00
7b3a0a8591
update logging-stack.yaml in Logging with Fluentd ( #5194 )
...
Use apps/v1 Deployment rather than extensions/v1beta1
2019-10-18 15:48:59 -04:00
38f252fb68
Get rid of demo-auth ( #5024 )
...
* Get rid of demo-auth
Signed-off-by: Chun Lin Yang <clyang@cn.ibm.com>
* remove strict mtls mode
* address comments
* fix linter error
* Add instruction for mtls
* add back demo-auth in configuration profile
* Update content/zh/docs/setup/kubernetes/install/kubernetes/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/health-check/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/https-overlay/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/https-overlay/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/plugin-ca-cert/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/plugin-ca-cert/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
* Update content/zh/docs/tasks/security/health-check/index.md
Co-Authored-By: SataQiu <1527062125@qq.com>
2019-10-18 09:55:29 -04:00
d6445fc726
Update reference docs. ( #5173 )
...
preliminary.istio.io will now display reference material for the release-1.4 branches
of istio/istio, istio/api, and istio/operator.
2019-10-17 11:09:11 -07:00
32592c56b2
Correct secure ingress task cleanup ( #5175 )
2019-10-17 10:42:15 -07:00
6e1825036e
[ImgBot] Optimize images ( #5167 )
...
*Total -- 2,116.10kb -> 2,113.71kb (0.11%)
/assets/inline_images/landing/routing-and-load-balancing.svg -- 2.02kb -> 1.49kb (26.05%)
/assets/inline_images/landing/telemetry-and-reporting.svg -- 2.26kb -> 1.74kb (22.86%)
/assets/inline_images/landing/policy-enforcement.svg -- 1.41kb -> 1.12kb (21.01%)
/static/img/istio-bluelogo-nobackground-unframed.svg -- 0.32kb -> 0.26kb (18.73%)
/static/img/istio-whitelogo-bluebackground-unframed.svg -- 0.39kb -> 0.32kb (17.75%)
/static/img/istio-bluelogo-whitebackground-unframed.svg -- 0.39kb -> 0.32kb (17.13%)
/static/img/istio-bluelogo-nobackground-framed.svg -- 0.35kb -> 0.29kb (17.13%)
/assets/inline_images/landing/resiliency.svg -- 2.33kb -> 1.94kb (16.83%)
/static/img/istio-bluelogo-whitebackground-framed.svg -- 0.42kb -> 0.35kb (16.47%)
/static/img/istio-whitelogo-bluebackground-framed.svg -- 0.42kb -> 0.35kb (15.89%)
/assets/inline_images/landing/istio-logo.svg -- 0.17kb -> 0.16kb (6.25%)
/assets/inline_images/istio-whitelogo-bluebackground-rounded.svg -- 0.21kb -> 0.21kb (3.21%)
/content/en/blog/2018/egress-https/https_from_the_app.svg -- 16.61kb -> 16.59kb (0.12%)
/content/en/about/contribute/diagrams/diagram-guidelines.svg -- 47.65kb -> 47.63kb (0.05%)
/content/en/blog/2018/egress-monitoring-access-control/https-to-gateway.svg -- 37.47kb -> 37.46kb (0.05%)
/content/en/blog/2018/egress-monitoring-access-control/http-to-gateway.svg -- 37.63kb -> 37.61kb (0.05%)
/content/en/docs/reference/config/policy-and-telemetry/mixer-overview/topology-with-cache.svg -- 81.78kb -> 81.75kb (0.03%)
/content/en/blog/2019/data-plane-setup/arch-2.svg -- 82.76kb -> 82.74kb (0.03%)
/content/en/docs/setup/install/multicluster/shared-gateways/diagram.svg -- 116.08kb -> 116.05kb (0.02%)
/content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/EgressGatewayWithSNIProxy.svg -- 71.72kb -> 71.71kb (0.02%)
/content/en/docs/examples/mesh-expansion/bookinfo-expanded/mesh-expansion.svg -- 217.56kb -> 217.53kb (0.01%)
/content/en/blog/2017/mixer-spof-myth/mixer-spof-myth-2.svg -- 91.28kb -> 91.28kb (0.01%)
/content/en/blog/2019/egress-traffic-control-in-istio-part-2/SecurityArchitectureWithL3Firewalls.svg -- 502.86kb -> 502.83kb (0%)
/content/zh/docs/concepts/multicluster-deployments/multicluster-with-gateways.svg -- 249.43kb -> 249.42kb (0%)
/content/en/docs/setup/install/multicluster/gateways/multicluster-with-gateways.svg -- 250.49kb -> 250.48kb (0%)
/content/zh/docs/concepts/multicluster-deployments/multicluster-with-vpn.svg -- 150.61kb -> 150.60kb (0%)
/content/en/docs/setup/install/multicluster/shared-vpn/multicluster-with-vpn.svg -- 151.47kb -> 151.47kb (0%)
Signed-off-by: ImgBotApp <ImgBotHelp@gmail.com>
2019-10-17 10:05:01 -07:00
c8ac8eb91c
Better organize operations guide material ( #5163 )
...
\
2019-10-16 09:59:04 -07:00
31d21ffbb4
migrate Deployment apiVersion from extensions/v1beta1 to apps/v1 to support k8s 1.16 ( #5159 )
...
* migrate Deployment apiVersion from extensions/v1beta1 to apps/v1 to support k8s 1.16
* migrate Deployment, PodSecurityPolicy apiVersion to support k8s 1.16
2019-10-15 10:56:21 -07:00
01c8fe2a1b
Update fault injection percentage syntax ( #5139 )
2019-10-15 07:31:22 -07:00
e392d7260a
add a task about Kubernetes Services for egress ( #4710 )
...
* add the first version of Egress with Kubernetes Services
* add explicit disabling of TLS in destination rules
* rewrite the motivation for Kubernetes service entries
motivation: location transparency
* remove pre-Istio from .spelling
* add "The external services are not part of an Istio service mesh..."
so they cannot perform the mutual TLS of Istio.
* split a long line
* expand the explanations about disabling Istio's mutual TLS
* add explanation about disabling TLS mode in the HTTP case
* add explanation about disabling Istio mutual TLS for HTTPS case
* unencoded -> unencrypted
* fix a link
* fix the location of the task to be in content/en
2019-10-15 01:30:21 -07:00
78ec428817
Improve concepts organization ( #5095 )
...
* cleanup unused files
* tweak wording
* merge traffic management architecture material
* reorg top level concept sections
* lint errors
* fix list style
2019-10-04 11:43:31 -07:00
cfef86521c
Remove mention of Istio managed certmanager ( #5092 )
...
* Remove mention of Istio managed certmanager
* Fix lint
* Number list
* Fix indent
* Update content/en/docs/tasks/traffic-management/ingress/ingress-certmgr/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-10-02 09:26:25 -07:00
fbc726c6b7
Remove usages of curl inside istio-proxy ( #5073 )
...
* Remove usages of curl inside istio-proxy
Distroless builds of Istio do not contain curl, so we should not tell
users to use it. Pilot-agent handles this functionality for us
* Fix lint error
2019-09-27 16:46:22 -07:00
d42dfe94ba
Introduce top-level News section. ( #5060 )
2019-09-27 07:09:58 -07:00
351710d058
Egress TLS origination port 443 must be HTTPS ( #5049 )
...
* Port 443 must be HTTPS
* Port 443 must be HTTPS
2019-09-26 12:05:15 -04:00
e606e95503
Fix typo ( #5055 )
2019-09-25 12:00:42 -07:00
28db342298
Minor egress fixes ( #5025 )
...
* fix the protocol in an HTTPS URL
* add "Enable Envoy's Access Logging" step to egress tasks
2019-09-21 23:41:11 -07:00
1ecc6cf6bb
Updated traffic management concept guide ( #5014 )
...
* New traffic management rewrite
* Updated traffic management guide
* Fix typo
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: John Howard <howardjohn@google.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: John Howard <howardjohn@google.com>
* Implementing Frank and John's edits
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Data plane definition
* Added glossary links
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Implementing Frank's suggestions
* More edits
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* More edits from Frank and Srinath
* Update content/en/docs/concepts/traffic-management/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* More edits
* Update index.md
* yet more edits
* Lint fixes and CRD glossary entry
* more links
* sdake's edits
2019-09-20 12:51:10 -07:00
84b5aaca9e
Mention mirror_percent field in mirroring task ( #4975 )
...
* Mention mirror_percent field in mirroring task
* Apply suggestions from code review
Co-Authored-By: Adam Miller <1402860+adammil2000@users.noreply.github.com>
2019-09-18 09:56:13 -07:00
9dae69638c
update psp ( #4977 )
2019-09-18 08:40:38 -07:00
c0284014fb
Rename Tasks/Telemetry to Tasks/Observability ( #4968 )
...
Matches a similar effort started in #4448 . Fixes #4730 .
2019-09-17 07:57:06 -07:00
71145ac443
Error in Secure Gateways (SDS) extra <angle brackets> ( #4930 )
...
* Fix bash: syntax error near unexpected token
* Use <password> throughout
* Add angle brackets for single-backticked 'password'
2019-09-12 12:02:20 -04:00
91c93a39b3
Added a bunch of links around istioctl. ( #4970 )
2019-09-12 08:26:58 -07:00
78a3473b94
Fix Envoy stats examples in egress docs ( #4903 )
2019-09-12 06:03:56 -07:00
aa0f287161
Remove out-dated SDS stuff ( #4924 )
2019-09-10 17:06:35 -04:00
454a091864
Revise ingress-sds user guide ( #4946 )
...
* add space after -
* revise
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-09-10 12:17:56 -07:00
9ff424c3ec
Add docs for updated Citadel namespace targeting mechanism ( #4746 )
...
* Add docs for updated Citadel namespace targeting mechanism
* Make doc voicing and audience pronouns fit rest of docs
2019-09-10 07:51:56 -07:00
dc7acb1b18
[Release 1.3] Temporarily disable the user guide of Istio Vault integration for release 1.3 ( #4904 )
...
* Temporarily disable the user guide of Istio Vault integration for release 1.3
Istio release 1.3 uses new k8s JWT (https://github.com/istio/istio/pull/16147 ),
which breaks the user guide of Istio Vault CA integration for release 1.3.
This PR temporarily disables the user guide of Istio Vault CA integration for release 1.3.
2019-09-05 20:32:27 -07:00
05c692b820
Update ingress-sds ( #4906 )
...
* update ingress-sds
* revise
* revise
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update index.md
2019-09-05 15:33:02 -07:00
436b65afb8
Sds trustworthy jwt doc ( #4701 )
...
* Update doc for sds
* Update SDS doc for trustworthy jwt feature
* Drop legacy jwt support
* Add SDS announcement
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/docs/setup/platform-setup/_index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update index.md
* Update .spelling
* Update content/en/docs/setup/install/helm/index.md
Co-Authored-By: Romain Lenglet <romain.lenglet@berabera.info>
* Update index.md
* Update _index.md
* Update index.md
* Address comments
* Refine doc again
* Bump the support version of k8s to 1.13
* Update vendors
* Update docs
* Apply suggestions from code review
Co-Authored-By: Rigs Caballero <grca@google.com>
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/blog/2019/trustworthy-jwt-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
2019-09-05 13:44:03 -07:00
54638f80de
Update auth-sds user guide ( #4901 )
...
* update auth-sds doc
* Update content/en/docs/tasks/security/auth-sds/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/docs/tasks/security/auth-sds/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
2019-09-03 14:53:20 -07:00
dc05694f8a
Remove old note about Istio 1.1 ( #4857 )
...
In 1.3 documentation I don't think we need a warning about 1.1 anymore
2019-08-27 13:30:53 -07:00
14a593c563
Fix broken Envoy links. ( #4832 )
2019-08-26 14:55:57 -07:00
917f34f843
Moved LLB content from tasks to ops / fixed links ( #4819 )
2019-08-22 13:32:26 -07:00
bdf0bc0f4a
Update docs for locality lb changes ( #4815 )
...
* Update docs for locality lb changes
* Fixes
2019-08-21 14:04:32 -07:00
79ff39088e
Rename example YAML manifests to match intent ( #4800 )
2019-08-20 07:29:42 -07:00
07178c1348
Reorganized the Operations node ( #4765 )
2019-08-16 16:03:31 -07:00
ca7559cab2
Remove Nomad & Consul docs ( #4805 )
...
* Remove Nomad & Consul docs
* broken links
* more broken links
* more broken links
* fix spelling errors
* remove broken ref
2019-08-16 12:13:30 -07:00
d0cf1e171e
Move English content to content/en as agreed in WG meeting. ( #4789 )
...
Once this goes in, I'll move content_zh to content/zh.
2019-08-14 15:45:31 -07:00
Yangmin Zhu
Istio Automation
Chunlin Yang
Martin Taillefer
Frank Budinsky
imgbot[bot]
Naoki Oketani
Vadim Eisenberg
John Howard
Ryan Michela
Xinnan Wen
LisaFC
Jonh Wendell
Greg Taylor
Ed Snible
Romain Lenglet
Phillip Quy Le
Jimmy Chen
Sam Naser
lei-tang
Adam Miller