* Add instructions on installing Istio for vms
* Address review comments
workaround netlify
* Fix cert management link
* Remove /var/run/secrets from document
* Address linting problems
rebase for netlify failure
* Address review comments - not quite functional
This change addresses all reviewer comments, but does not address
my personal testing. That is the next commit in this PR:)
* Address reviewier comments
* One small improvement to the make command
* Address reviewer comments.
* Address reviewer comments and lintian problems
* Fix spellING errors.
* few linting errors.
* Self review.
* Add a plugin ca cert reference to individual CSOs.
force push to work around netlify issue
* Move from setup/install/multicluster
* Rebase to pick up cert-management directory change
netlify rebase
* Address @rshriram comment by adding a banner
force rebase to force netlify to build
* Address reviewer comments.
* Address reviewer comments
* Address reviewer comments
rebase for netlify
* Address reviewer comments
* Address @frankb 's comments.
force push for netlify
* Address reviewer comments.
* Prefix WORK_DIR with $HOME instead of $WORK_DIR. :)
netliffy rebase
* Address most of @smawson's comments
* Fix linting error
* Address reviewer comments.
rebase for netlify
* Fix linting errors
* Add tip explaining that only one VM can be registered
* Fix linting errors.
* Resolve reviewer comments.
Also run go mod tidy. This made me notice we are installing the junit
reporter every time even when not needed and keeping it in go.mod
unexpectedly, so this is removed as well.
* snip.py: Replace github file token with release-specific URL.
* verify.sh: Show the expected output as well as the actual output.
* snip.py: Update the githubfile regex to not include email addresses.
When generating snip scripts, pairs of "@" signs indicate a link to
GitHub repo content. However, JWT attribute values contained pairs of
email addresses such as:
`testing@secure.istio.io/testing@secure.istio.io`
which would be treated as an email address and mangled. This commit
rewrites the regex to not match on email addresses.
* Add authz-jwt user guide test.
* initial version
* rewrite the motivation for the example
* switch the order: use managed Istio or install it yourself
* fix indentation
* do not use "this example shows" twice
replace the second sentence with "In this example you..."
* rewrite the example to simplify it
* fix the letter case in a sentence
* remove using --context
copied&pasted from another example
* finalize rewriting the example, simplifying things, minor improvements
* Update index.md
* Update index.md
* remove the troubleshooting section
* fix some whitespace issues
* nginx -> Nginx
* split long lines
* add explanation why both certificates are required
* remove Nginx since it is an implementation detail of ALB
* rewrite the introduction
* remove multiple glossary entries for mutual TLS
* External-IP -> external IP
* The Application Load Balancer Ingress subdomain certificates -> The Application Load Balancer's Ingress subdomain certificates
* shorten the sentence about exchange certificates and trust them
* remove one more glossary item
* delete "this time" since it is the first time curl is used in this example
* additional --cert option -> the --cert option
* you will need -> you need
* add missing dot
* Istio Ingress Gateway -> Istio ingress gateway
* fix two typos
* will not be able to communicate -> will not be able to communicate directly
* fix abbreviations usage: IKS, ALB, NLB
* rewrite the introduction
* move storing the Ingress IP before using it
* certificate -> TLS certificate
* rewrite the introduction of the section "Create secrets for ALB and Istio ingress gateway"
* domain name of your cluster -> domain name of your ALB
* remove mentioning NLB
use "ingress gateway instead of NLB"
* move the example to the blogs section
* fix metadata, description
* this example -> this blog post
* add echoing INGRESS_GATEWAY_IP
* remove grep by IP in the output of the DNS NLB domains
otherwise the fields of the output are not printed and it is not clear
which value corresponds to which field
* in the output of the previous command -> in the line that matches the IP of the gateway
* fix the part about verifiying that the certificate is created for NLB domain
* IKS-provided certificates -> certificates provided by IKS
* burden -> overhead
* Require -> Enforce
* add a summary
* add a sentence about allocating a hostname for Istio ingress gateway
* update the publication date
* Update content/en/blog/2019/alb-ingress-gateway-iks/index.md
remove the explanation about the domain name format, remove "for each cluster"
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* remove in addition to registering a DNS domain
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* the recommend way -> the recommended method to send traffic
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* Istio mutual TLS -> STRICT mutual TLS
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* In this blog post -> this blog describes how
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* nlb-dns-create -> nlb-dns create
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* add -n httptools two deploy the Gateway
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* add -n httptools
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* add an explanation about re-encryption from ALB to Istio ingress gateway
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* add an explanation about using ALB and NLB certificates for mTLS between the ALB and the Istio ingress gateway
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* Istio ingress gateway -> the Istio ingress gateway
Co-authored-by: Rachael Graham <rachael.graham@ibm.com>
* The traffic -> traffic, Istio sidecar -> an Istio sidecar, ALB -> the ALB
Co-authored-by: Rachael Graham <rachael.graham@ibm.com>
* Application Load Balancer -> ALB
Co-authored-by: Rachael Graham <rachael.graham@ibm.com>
* add -n httptools
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* add -n httptools
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
* one of another -> of one another
Co-authored-by: Rachael Graham <rachael.graham@ibm.com>
* add missing "that", remove "one to another"
Co-authored-by: Rachael Graham <rachael.graham@ibm.com>
* Istio sidecar -> an Istio sidecar, "it requires" -> "requires"
Co-authored-by: Rachael Graham <rachael.graham@ibm.com>
* while ALB -> which
Co-authored-by: Rachael Graham <rachael.graham@ibm.com>
* move the blog post to 2020
* fix the publish date
* third field -> fourth field
regarding the status of the certificate in "ibmcloud ks nlb-dnss"
* a new DNS domain -> a new DNS subdomain
* for the gateway's IP -> for the Istio gateway's IP
* ALB -> the ALB
* split long lines
* remove Policy and DestinationRule
* fix the year in the publish date
* Istio Ingress Gateway -> an Istio Ingress Gateway
* a -> the, for Istio Ingress Gateway
* remove mentioning "Let's encrypt" certificate in the introduction
it is a technical detail
* has to -> must
* Securely direct -> Direct encrypted
* rewrite the introduction to explain what happens with the certificates
* rewrite the usage of the private keys
* you configure -> you will configure
* allows us -> allows you
* clarify using Let's encrypt, securely send traffic -> send encrypted traffic
* ALB -> the ALB
* in order to verify -> in order to specify
Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
Co-authored-by: Rachael Graham <rachael.graham@ibm.com>
* update for istio users why gloo
* Copy edits and implement Jed's suggestions
Co-authored-by: Adam Miller <1402860+adammil2000@users.noreply.github.com>
* A bit of cleanup on the arch doc
* Replaced the confusing goals section with a minimal section on app's design
* Removed trailing spaces
* Clarfified sentence
Co-authored-by: Adam Miller <1402860+adammil2000@users.noreply.github.com>
* fix(metrics): Add multicluster labels to Standard Metrics doc
* Fixed title case
Co-authored-by: Adam Miller <1402860+adammil2000@users.noreply.github.com>
Old instructions send users to the forums. Forums send users to the
about page.
Copying the about info to the general faq to save the community
redirect forum posts.
Nico Aragon
Martin Ostrowski
Steven Dake
Shamsher Ansari
John Howard
fktkrt
Istio Automation
carolynhu
Gregory Hanson
Justin Pettit
Frank Budinsky
Vadim Eisenberg
lei-tang
Eric Van Norman
Christian Posta
Costin Manolache
Douglas Reid
jacob-delgado
Rueben Ramirez
Ram Vennam
Davin Kevin
Neeraj Poddar
John Pape
Xavier Canal i Masjuan