Commit Graph

5722 Commits

Author SHA1 Message Date
John Howard 265500101f
Add more details to security disclosure page (#8228)
* Add more details to security disclosure page

Attempt to get people to stop publicly filing security vulns in github

* Update content/en/about/security-vulnerabilities/index.md

Co-authored-by: Francois Pesce <fpesce@google.com>

* Update content/en/about/security-vulnerabilities/index.md

Co-authored-by: Neeraj Poddar <nrjpoddar@gmail.com>

Co-authored-by: Francois Pesce <fpesce@google.com>
Co-authored-by: Neeraj Poddar <nrjpoddar@gmail.com>
2020-09-30 09:08:15 -07:00
John Howard b9c31e1352
Fix invalid arg on multicluster doc (#8236)
* Fix invalid arg on multicluster doc

* regen

* fix sort
2020-09-30 08:39:13 -07:00
Eric Van Norman efd94919a1
Update test reference from latest master commit (#8233) 2020-09-30 07:53:11 -07:00
Eric Van Norman ac554e74cc
lint-yaml will fail with pipefail and incoming fix, so remove now (#8235)
* Automator: update common-files@master in istio/istio.io@master

* lint-yaml will fail with pipefail and incoming fix, so remove now

Co-authored-by: istio-testing <istio-testing-bot@google.com>
2020-09-29 22:40:21 -04:00
Brian Avery ea69e6a0df
Release 1.7 (#7998) (#8227) (#8230)
* Release Notes for Istio-2020-010 (#7998) (#11)

* Release notes for ISTIO-2020-010

* PR comments

* Update CVSS

* Remove changes section

* Fix Linter Issues (#12)

* Increase indent

* Fix lint errors

* Update args.yml

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update index.md

* Update index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2020-09-29 12:53:41 -07:00
Ram Vennam dd8ffdab49
Blog post for 2020 steering election results (#8222)
* steering-election-results

* lint

* spelling

* Update content/en/blog/2020/steering-election-results/index.md

Co-authored-by: craigbox <craigbox@google.com>

Co-authored-by: craigbox <craigbox@google.com>
2020-09-29 07:46:14 -07:00
Istio Automation b7802db0b7
Automator: update istio.io@ reference docs (#8221) 2020-09-28 19:09:15 -07:00
imgbot[bot] 9459c7bc88
[ImgBot] Optimize images (#8179)
*Total -- 3,177.95kb -> 3,160.18kb (0.56%)

/content/en/docs/tasks/security/cert-management/plugin-ca-cert/ca-hierarchy.svg -- 14.87kb -> 9.67kb (34.99%)
/content/en/about/community/customers/hotels-com.svg -- 12.99kb -> 10.11kb (22.15%)
/page-test.png -- 20.22kb -> 17.97kb (11.12%)
/content/en/about/community/customers/nearpod.svg -- 11.77kb -> 11.44kb (2.8%)
/content/en/docs/ops/deployment/deployment-models/blue-green.svg -- 81.51kb -> 80.16kb (1.65%)
/content/en/docs/ops/deployment/deployment-models/endpoint-discovery.svg -- 82.72kb -> 81.92kb (0.97%)
/content/en/docs/setup/install/multicluster/primary-remote.svg -- 83.37kb -> 82.59kb (0.95%)
/content/en/docs/setup/install/multicluster/multi-primary.svg -- 91.08kb -> 90.26kb (0.89%)
/content/en/docs/setup/install/multicluster/primary-remote-multi-network.svg -- 96.83kb -> 96.01kb (0.85%)
/content/en/docs/setup/install/multicluster/multi-primary-multi-network.svg -- 110.31kb -> 109.45kb (0.78%)
/content/en/blog/2020/large-scale-security-policy-performance-tests/istio_setup.svg -- 25.85kb -> 25.68kb (0.65%)
/content/en/about/community/customers/avito.svg -- 1.77kb -> 1.76kb (0.22%)
/content/en/about/community/customers/cash-app.svg -- 4.78kb -> 4.78kb (0.12%)
/content/en/blog/2020/large-scale-security-policy-performance-tests/mtls_plaintext.svg -- 216.38kb -> 216.21kb (0.08%)
/content/en/blog/2020/large-scale-security-policy-performance-tests/AuthZ_var_paths.svg -- 273.61kb -> 273.44kb (0.06%)
/content/en/blog/2020/large-scale-security-policy-performance-tests/RequestAuthN_jwks.svg -- 275.79kb -> 275.63kb (0.06%)
/content/en/blog/2020/large-scale-security-policy-performance-tests/AuthZ_var_policies_paths.svg -- 279.11kb -> 278.94kb (0.06%)
/content/en/blog/2020/large-scale-security-policy-performance-tests/AuthZ_var_principals.svg -- 286.37kb -> 286.21kb (0.06%)
/content/en/blog/2020/large-scale-security-policy-performance-tests/AuthZ_var_policies_sourceIP.svg -- 296.11kb -> 295.95kb (0.06%)
/content/en/blog/2020/large-scale-security-policy-performance-tests/AuthZ_var_requestPrincipals.svg -- 297.02kb -> 296.85kb (0.06%)
/content/en/blog/2020/large-scale-security-policy-performance-tests/AuthZ_var_sourceIP.svg -- 298.21kb -> 298.04kb (0.06%)
/content/en/blog/2020/large-scale-security-policy-performance-tests/AuthZ_paths_vs_sourceIP.svg -- 317.29kb -> 317.12kb (0.05%)

Signed-off-by: ImgBotApp <ImgBotHelp@gmail.com>

Co-authored-by: ImgBotApp <ImgBotHelp@gmail.com>
2020-09-28 17:13:16 -04:00
Istio Automation 53af919d27
[master] [release-1.7] Update 1.6 docs: new ref docs, install changes (#8207)
* Update 1.6 docs: new ref docs, install changes

* Remove Chinese changes

* Add reference doc updates for 1.6.10 (also other zh changes)

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2020-09-28 12:38:08 -07:00
Steven Dake c4d66e5413
Single network virtual machine example (#8203)
* Single network virtual machine instructions

This is a copy and paste from the multi-network instructions with
anything "multi-network" removed.

* Address @frankbu's comments. cannot run linter atm.

* Fix linting error

* Unindent a section
2020-09-28 11:20:27 -07:00
Istio Automation afb78d0b1d
Automator: update common-files@master in istio/istio.io@master (#8219) 2020-09-28 09:22:15 -07:00
Eric Van Norman 2c820133fa
Update for process of creating an archive update (#8208) 2020-09-28 11:12:43 -04:00
Istio Automation d28ec76fac
Automator: update common-files@master in istio/istio.io@master (#8218) 2020-09-28 06:20:49 -07:00
Nathan Mittler 84cb2189f2
Rewrite multicluster installation docs (#8180)
* Rewrite multicluster installation docs

This completely replaces the existing docs for multi-primary, primary-remote, and single/multi-network.

Changed blogs dependent on the `.global` hack to reference the 1.6 docs.

* addressing sven's comments

* renaming resources and changing heading style within tabs

* using <h3> for headings in tabs
2020-09-27 17:28:39 -07:00
Istio Automation 1ba9b4e0f1
Automator: update istio.io@ reference docs (#8217) 2020-09-25 19:09:38 -07:00
Bryan Muscedere 106eac2db1
Removal of -it in kubectl commands. (#8216) 2020-09-25 14:30:39 -07:00
davidhauck 07f51b347a
Include redirects for static resources (#8209) 2020-09-25 07:04:38 -07:00
Istio Automation 3b5cacbbe9
Automator: update istio.io@ reference docs (#8210) 2020-09-24 19:10:42 -07:00
Eric Van Norman 459c6e56a0
Fix flaky failure (#8204) 2020-09-24 14:00:15 -07:00
Eric Van Norman 4b19932627
Test flake - increase timeout and echo actual wait duration. (#8198) 2020-09-24 14:00:07 -07:00
Eric Van Norman 4b4e395c68
Increase retry count for test flakiness (#8206) 2020-09-24 13:51:56 -07:00
ewc7092 77968cdc1e
Fix Typo in README.md (#8200)
The README.md for this project contains a typo when referencing the french language as an example for adding a new maintainer team. This patch fixes the typo.
2020-09-24 08:18:51 -07:00
Istio Automation b9a9e5a138
Automator: update istio.io@ reference docs (#8201) 2020-09-23 19:11:01 -07:00
Nathan Mittler 539cd2aaf7
Update to latest istio/istio (#8199) 2020-09-23 16:06:55 -07:00
Eric Van Norman eadaa2d6bc
Fix MacOS tests using a container (#8197)
* Fix MacOS tests using a container

* istioctl was wrong OS in container

* export IN_BUILD_CONTAINER
2020-09-23 12:35:54 -07:00
Frank Budinsky 65e28d2b6c
Small improvements on getting started page (#8195) 2020-09-23 09:17:57 -07:00
Nathan Mittler ae343f4148
Fixing tests for osx (#8194)
The scripts currently hard-code the istioctl binary for linux. This change modifies `init.sh` to use the appropriate binary for the current platform.
2020-09-23 07:45:11 -07:00
Eric Van Norman 70d361b30d
Try different timeout for tasks/security/authorization/authz-ingress (#8163)
* Try longer timeout for tasks/security/authorization/authz-ingress/test.sh

* Go back to old 5m timeout and add failure on timeout back in

* Test with individual wait_for_istio call updates

* Revert to simply changing timeout (but keep duration in output)

* Fix call

* Comment out istioctl wait call

* Add TODO remark

* Fix lint error

* Add temporary sleep until _wait_for_istio is re-enabled

* Add wait for sleep deployment to complete
2020-09-22 19:25:13 -07:00
Istio Automation 38fbacc6d7
Automator: update istio.io@ reference docs (#8190) 2020-09-22 19:10:10 -07:00
Ram Vennam a29e41441d
Remove period at the end of the curl command (#8186)
* Remove misleading period

* Update content/en/docs/setup/getting-started/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Update index.md

* add snips

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-09-22 16:37:20 -07:00
jacob-delgado 0d762d15ec
1 6 10 release notes (#8187)
* add release notes for 1.6.10

* fix lint error

* fix lint

* ads CronJob into spelling

* address review comments

* fix lint

* address review comments

* Update content/en/news/releases/1.6.x/announcing-1.6.10/index.md

Co-authored-by: jacob-delgado <jacob.delgado@aspenmesh.io>

* Code review comments

Co-authored-by: “irisdingbj” <irisdingbj@gmail.com>
2020-09-22 12:08:25 -07:00
craigbox e8f668b05e
Logo changes (#8184)
* Add four logos, remove one at user request, and change the weighting of the About section.

* remove blank line; change title of contribute page
2020-09-22 09:28:13 -07:00
Istio Automation a3908357cc
Automator: update istio.io@ reference docs (#8181) 2020-09-21 19:09:58 -07:00
Suchith J N 94fe1b5353
Test framework enhancement for multicluster doc test (#8160)
* test framework enhancement for multicluster doc test

* simplify multicluster test framework with setup=multicluster directive

* restore documentation comment
2020-09-21 10:43:36 -07:00
Eric Van Norman d56bada3e6
egress-gateway-tls-origination - Additional secrets need cleaning (#8175)
* Additional secrets need cleaning

* Missed make gen
2020-09-21 10:32:31 -07:00
Nathan Mittler 565ee0cfbe
Expand deployment models to include multicluster considerations (#8162)
* Expand deployment models to include multicluster considerations

This is a prerequisite for the new multicluster installation guide.

* Update content/en/docs/reference/glossary/network.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-09-21 07:55:27 -07:00
Istio Automation 20fde796a9
Automator: update istio.io@ reference docs (#8176) 2020-09-18 19:10:20 -07:00
Jimmy Chen d5d301ad77
Release notes for 1.7.2 (#8164)
* Release notes for 1.7.2

* update

* update

* update
2020-09-18 11:09:37 -07:00
Istio Automation f3b3359396
Automator: update istio.io@ reference docs (#8165) 2020-09-17 19:10:24 -07:00
Frank Budinsky 1f1d762c81
README update (#8161)
* README update

* tweak

* missing paren
2020-09-17 15:13:09 -07:00
Nathan Mittler 93856c2730
Narrow tool files copied to only include certs. (#8159) 2020-09-17 08:29:05 -07:00
Istio Automation 457b3b1b11
fix mysql password (#8158)
There's a letter p missing from the password.

Co-authored-by: Jimmy Song <rootsongjc@gmail.com>
2020-09-17 10:49:41 -04:00
Frank Budinsky f4cf61ec5d
Simplify startup of egressgateway-with-sni-proxy (#8148)
* Simplify startup of egressgateway-with-sni-proxy

* fix

* set value
2020-09-17 07:39:48 -07:00
Suchith J N 8ef2a3573a
Doc test for accessing Jaeger and Grafana dashboards by port-forwarding (#8086)
* refactor zipkin doc test to use test/util/addons.sh

* doc test for accessing jaeger dashboard

* doc test for accessing istio-mesh and istio-service dashboards in grafana by port-forwarding

* add -L flags to follow redirects for accessing dashboards

* fix linting issue - double quote around ingress gateway URL

* improve Grafana and Jaeger access tests based on code review feedback

* fix jaeger url

* remove prometheus queries through grafana to check if it is causing flakes in CI

* fix grafana test to use productpage request boilerplate

* fix formatting in Makefile.overrides.mk
2020-09-17 06:45:12 -07:00
Nathan Mittler b06ce95f96
Update docs for pluggin in CA certs (#8099)
The new recommended approach is to generate the certs and to use intermediate certs for each cluster.
2020-09-16 17:39:21 -07:00
Eric Van Norman cc1a34f99c
Update test reference - master (#8103)
* Update test reference

* Test framework changes

* Another required change

* Update Tag to 1.8

* Pick istio/istio commit that actually exists

* Disable ISTIO_META_DNS_CAPTURE

* Add --skip-confirmation to istioctl installl commands

* Increase test timeout. First pass at fixes.

* Update to later istio/istio that fixes DNS and minor fixes

* test fixes

* Pick up go.mod `replace` changes from #8118

* Fix istioctl-analayze and mirror

* Fix mtls-migration test

* Update istio to include commit to fix egress

* Re-enable verify with fix

* Update istio/istio ref for egress fix

* Fix tasks/security/authorization/authz-td-migration - remove ns

* Shorten wait timeout so tests complete in under an hr

* Let tests continue after wait timeout

* Fix --skip-confirmation to -y and use yes | in tests

* revert yes | to echo y |

* Additional echo y fix

* Code review comments

* Change verify from same to contains as k8s 1.19 has extra warning lines.
2020-09-16 11:44:20 -07:00
Istio Automation 789ec6fc0a
Automator: update common-files@master in istio/istio.io@master (#8153) 2020-09-16 09:16:41 -07:00
Suchith J N b0fe8d5a9b
Run tests with new kind setup script (#8127)
* run tests with new kind setup script

* kind_provisioner fixup for ipv6 and some refactoring

* simplify setup for multicluster/single-cluster doc test with kind_provisioner

* define environment variables required by provisioner

* sync common files
2020-09-16 08:31:43 -07:00
Istio Automation 18c5829e60
Automator: update common-files@master in istio/istio.io@master (#8152) 2020-09-15 20:07:57 -07:00
Istio Automation 996ee5dcc3
Automator: update istio.io@ reference docs (#8150) 2020-09-15 19:08:41 -07:00