Commit Graph

31 Commits

Author SHA1 Message Date
carolsi af2edc6964
Update example of refine the mutual TLS settings per port (#14385) 2023-12-29 09:24:31 -08:00
Eric Van Norman 5ce52ebafd
Update istio test reference to latest commit and fix tests (#14200)
* Update istio test reference to latest commit and fix tests

* Move back two commits since some didn't have releases built

* Run go mod tidy after make clean

* Try removing metallb

* Don't remove the metallb validatingwebhookconfigurations

* Redo egress-control test to no use istio-state

* Update istio test reference to contain operator fix and revert test change

* Disable jwt-route test temporarily waiting on Envoy fix

* Upadte istio/api

* Replace uninstall

* revert chmod
2023-12-01 10:13:44 -08:00
Frank Budinsky 83bae38f99
gateway-api: use targetRef instead of selector for auth/authz gateway… (#14157)
* gateway-api: use targetRef instead of selector for auth/authz gateway refs

* regen

* fix yaml

* regen
2023-11-15 07:57:05 -08:00
Frank Budinsky 49568809b2
Add gateway-api instructions to authn policy task (#13625)
* Add gateway-api instructions to authn policy task

* 10 -> 11

* fix test

* fix test again
2023-07-26 13:35:25 -07:00
Michael a4d4f8bb18
Fix indentations and remove unecessary step numbers (#13230)
* Fix indentations and remove unecessary step numbers in /security/authorization/

* revert tabset indentations and wrap some long clauses
2023-05-23 18:29:05 -07:00
David Xia a8e24d7eeb
fix docs: wrong subject-verb agreement in authn-policy/index.md (#13015) 2023-04-05 18:02:49 -07:00
Michael 9de619e1fe
Replace setup with set up if it's a verb (#12419) 2022-12-29 17:02:30 -08:00
Aryan Gupta 60eb0e4474
udocs upddate for policies graduation (#12320) 2022-12-06 13:49:06 -08:00
Jianfei Hu 00f76de374
Remove the destination rule in peer authn doc. (#10117)
* Remove the destination rule in peer authn doc.

* update with snip test.

* fix test.sh.

* update the test.sh

* test.sh again.

* test 3rd time.

* test.sh 5th

* test.sh 6th time.
2021-08-14 22:08:55 -07:00
mrshengzyzy f8c4793af6
zh-translation:content/zh/docs/tasks/security/authentication/authn-policy/index.md (#9432) 2021-04-01 12:23:32 -07:00
John Howard 4396197f50
Use consistent quoting in API examples (#9373)
This matches istio/api examples and all Kubernetes best practices. This
quoting sets a bad precedent that is copy and pasted around the web.
2021-03-23 09:33:57 -07:00
Eric Van Norman caf7b6df79
Fix examples for newer kubectl (#9045) 2021-02-23 15:36:56 -08:00
Yangmin Zhu 6dd91af7cb
fix jwt test (#8873)
* fix jwt test

* update
2021-02-02 12:09:42 -08:00
Eric Van Norman bea8d187e5
Silence curl command (#8773)
* Silence curl command

* Update more files with -sS (adding S to show errors)

* Over-agressive on the -S and causing some tests to fail.

* Remove more curl -S flags
2021-01-20 09:45:50 -08:00
Frank Budinsky e9a89c879f
Add owner attribute to docs (#7737)
* Add owner attribute to docs

* remove @
2020-07-15 15:19:40 -07:00
Frank Budinsky 01c4cce951
Add proper wait for config calls to tests (#7620)
* Add wait for config calls to tests

* two more
2020-06-24 09:48:29 -07:00
Frank Budinsky 25c3be4772
Some random poor quality doc fixes (#7589)
* Some random poor quality doc fixes

* change profiles
2020-06-19 11:25:02 -07:00
Hongyi Zhang 5fbb14bedc
Convert all old tests to new tests (#7522)
* add an example task to test

* main test function: save progress

* a working example: routing request

* improve log info and error handling

* introduce makefile

* run each test as a subtest; remove common setup from test.sh

* add another test.sh: fault-injection

* improve error handling

* check test environment

* add two more test.sh files

* fix make command for istio setup

* update two test.sh files from upstream

* add comments and update README.md

* update test.sh files from upstream

* support multiple test names

* update README

* update README.md for new framework

* remove documentation of migration steps

* undo format changes

* change separation line to '# @cleanup'

* move go code and makefile from content/ to tests/

* change package name

* make for loop more readable

* change the set of auto-sourced scripts

* add docs for all functions

* approach to deal with folders with the same name

* minor fixes to ensure everything still runs

* fix make gen error

* add a TIMEOUT argument

* make sure util/debug.sh works with new framework

* make lint-go happy

* [BIG CHANGE] allow different istio setup configs

* make linters happy

* make linters happier

* changed wording and function orders

* make error return as the 2nd argument

* add TODOs

* Update content/en/docs/tasks/traffic-management/traffic-shifting/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* only test english docs

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* allow test.sh as suffix

* move adding setup configs to tests/setup

* recommend full paths

* Update tests/README.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* require full test paths

* converting old tests to new tests: traffic-management and misc

* converting old tests to new tests: security

* remove old tests

* Update content/en/docs/tasks/security/cert-management/dns-cert/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* simplify setup configs

* Update content/en/docs/tasks/security/authentication/authn-policy/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/authentication/mtls-migration/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/authorization/authz-http/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* do not let istioctl prompt y/n

* Update content/en/docs/tasks/traffic-management/ingress/ingress-sni-passthrough/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/cert-management/plugin-ca-cert/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* simplify stuff

* rename dns-cert test.sh to test_broken.sh

* fix dns-cert doc and test

* remove egress=disabled

* fix test

* Update content/en/docs/tasks/observability/logs/access-log/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/test.sh

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-06-11 11:15:48 -07:00
Shamsher Ansari 9fe272272b
update doc to use istioctl install (#7396) 2020-06-01 11:02:27 -07:00
Justin Pettit 877b438829
Authn policy (#7433)
* authn-policy: Point users to Istio installation guide.

Have users install Istio through the installation guide instead of
explicitly instructing them to run "istioctl manifest apply" in the
task.  This will make it easier to automate the task later.

* authn-policy: Make steps and expected response clear for testing.

* Add authn-policy user guide test.
2020-05-29 12:11:47 -07:00
Frank Budinsky e11cf24f0d
Add test: attribute to all md files (#7413) 2020-05-27 09:11:26 -07:00
jacob-delgado 7cf02b617d
Update Authentication page (#7198)
Fixes https://github.com/istio/istio.io/issues/7194
2020-04-30 10:58:57 -07:00
Mitch Connors e1b4de48f0
Fix cleanup to delete authorization policy (#7142)
Fixes https://github.com/istio/istio/issues/23190
2020-04-23 11:18:12 -07:00
Istio Automation b5a4efb064
Another clean up for global.mtls.enable (#6611)
* Another clean up for global.mtl.enable

* Update text

* Lint

* Use --set values.grafana.enabled=true as overriding operator value example

* Revert change in content/en/docs/reference/commands/istioctl/index.html

* Change example istioctl command to override grafana settings

* Lint

* Change to --set addonComponents.grafana.enabled=true

* Remove global.mtls.enable in authn task

* Update content/en/docs/setup/install/istioctl/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/citadel-config/plugin-ca-cert/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/citadel-config/plugin-ca-cert/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

Co-authored-by: Rigs Caballero <grca@google.com>
2020-03-04 13:15:19 -08:00
Diem Vu dde9ed9258
Fix per-port peer authentication command (#6682)
* Fix command

* Correct commands for mtls migration tasks

* Lint

* Lint
2020-03-02 14:43:03 -08:00
Diem Vu e59a1998bf
Modernize authn tasks for 1.5 API and auto-mTLS by default (#6546)
* Modernize authn tasks for 1.5 API and auto-mTLS by default

* Also remove auto-mtls task as merge with the main task, as this mode is by default and having separate task is uneccessary

* Lint

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Address first round comments

* Lint

* Lint

* Address more review comments

* Lint

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Address comments and revert delete files to fix lint. Will remove in another PR

* Fix links

* More review

* Update content/en/faq/security/accessing-non-istio-services.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

Co-authored-by: Rigs Caballero <grca@google.com>
2020-02-25 10:13:25 -08:00
Lin Sun 9bf0d55b26 update the cmd to retrieve token correctly (#6128)
* update the cmd to retrieve token correctly

* update to remove empty char only

* remove tab also

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>
2019-12-18 06:24:23 -08:00
John Zheng 3d7011c31b Improve index.md (#5646)
Suggest to add this commit, to improve user experience.

Already be merged into release-1.3, FYI
https://github.com/istio/istio.io/pull/5489/commits
2019-11-14 05:49:31 -08:00
Frank Budinsky f5ce9feb70
Consolidate getting started instructions (#5642)
* Consolidate getting started instructions

* review comments

* fix broken links

* add istioctl link

* Fix spelling

* more broken links

* one more
2019-11-12 23:04:33 -05:00
Frank Budinsky 823e85b69a
Reorganize reference docs (#5595)
* Reorganize reference docs

* aliases

* corrections

* fix broken links

* fix broken link

* another broken link

* another broken link
2019-11-11 17:46:27 -05:00
Frank Budinsky a6a5769f12
Organize security tasks (#5474)
* Organize security tasks

* lint errors

* fixes

* more fixes
2019-11-07 15:54:27 -05:00