* Updating the bash script for upgrading sidecar (#4675)
Updating the bash script and its usage for doing a rolling update
for all pods sidecar.
(cherry picked from commit fba893e943)
# Conflicts:
# content/docs/setup/kubernetes/upgrade/steps/index.md
* fix merge conflict
* fix merge conflict
* Document preference to using an NLB with gateways
Gateways multicluster runs best with NLBs. Share this arcane bit of
information in the documentation.
* Address linting
* Address reviewer comments.
* Address reviewer comments
* Show the URL for the Mixer self-monitoring endpoint
So that the user does not have to guess.
* Update content/docs/ops/telemetry/missing-metrics/index.md
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
the old jsonpath selector doesn't work because it produce the pod name value to be incorrect
update it to the right jsonpath selector that produces the right pod name
(cherry picked from commit 0ad4e0a687)
* Add clarification on behaviour in absence of policy
* Content fixes for clarity
* Remove example manifest in favor of explanation
The example manifest was confusing because it wasn't technically valid
if applied to a cluster. This removes it in favor of just spelling out
that both origin and transport auth are disabled.
* Add clarity to transport auth section, inc new mode param
Arguably the wording here before was incorrect, because the mtls
parameter does have an argument, the mode parameter. This documents
STRICT and PERMISSIVE modes, as well as discussing the equivalence
between STRICT mode and omission of the mode key. It also adds clarity
as to what happens when the section is omitted.
* Fix typos
* Reword omission of tls mode for clarity
* Link to reference docs with equivalence tip
* Remove speculative paragraph
* Link directly to mtls modes reference
* Unbreak line to fix html
* Remove list inside tip
This seems to cause issues with html generation from Hugo
* Updated with instructions for LightStep Tracing vs. LightStep [x]pm (#4203)
* Remove [x]PM unless necessary (#4405)
These instructions are now for both LightStep [x]PM and LightStep Tracing.
* Clarify auth variant
This makes it clear that sds-auth is already the 'auth' variant. It
also tries to be more specific about what it does, rather than just
saying 'auth by default'
* Add incompatibility between SDS and control plane auth
* Remove unneeded aside
* Clarify status of control plane security with SDS
No technical issues apparently, just timeline. Also moved to before the
table for clarity.
* Simplify additional security feature table
This improves the clarity of this table by:
* Removing default and minimal , since -auth doesn't add any security
features
* Labeling the first column as security feature
* Changing the names of the profiles to reflect the final profile name
including the -auth, instead of without
* Patch the ingress-gateway deployment instead of recreating it
Patching it by just adding what is missing - a volume - is better in the
sense that it doesn't matter how the user created it - the template used,
the options used when creating it, etc.
* Apply suggestions from code review
Co-Authored-By: Rigs Caballero <grca@google.com>
* Replace oc with kubectl
* Remove a trailing space
* fix(telemetry docs): replace p&t concept doc with observability doc
* Fixed broken links
* Fixed one internal and one external link
* Added links and fixed two typos
* Title and links changes
* Added Policies conceptual section
* Fixed broken links in commands reference and traffic mnanagement
Cat-ing the crds into a single file along with the istio mainfests
leads to a race to install the crds. This applies the crds as a
separate step to avoid this.
* Refine the upgrade steps.
These could use a third party validation. The upgrade instructions
are mostly generic at this point, although the MTLS handling is not
necessarily generic between releases. I had thought we removed the
mtls global setting in this release, yet the existing docs state
this config option should be used.
* Update content/docs/setup/kubernetes/upgrade/steps/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/docs/setup/kubernetes/upgrade/steps/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
Update the installation options for release-1.2 and the installation
option changes between release 1.1 and release 1.2. These changes have
been generated by the updated changes to tablegen.py in the
PR: https://github.com/istio/istio.io/pull/4402Fixes: #4374
navinger
mergify[bot]
Steven Dake
Frank Budinsky
Vadim Eisenberg
Martin Taillefer
Adam Miller
Jian Zeng
Jonh Wendell
Nik Skoufis
Ta-Ching Chen
Robin Whitmore
Romain Lenglet
Tao Li
Lin Sun
John Howard
Dan Ciruli
Rigs Caballero
Diem Vu
Ed Snible
imgbot[bot]
Steven Dake
Jan von Löwenstein
Yangmin Zhu
Martin Ostrowski
Matthew Wringe
Mariam John