* Improve sidecar injector documentation
* Remove old implementation details
* Discuss details of how to enable/disable injection
* Discuss advanced customizations of the sidecar
* Apply suggestions from code review
Co-authored-by: Sven Mawson <sven@google.com>
Co-authored-by: Sven Mawson <sven@google.com>
* Improve the plug-in cert task.
* Small fix.
* Update content/en/docs/tasks/security/cert-management/plugin-ca-cert/index.md
Co-authored-by: Sven Mawson <sven@google.com>
* Describe the recommendation of using hierarchical CA.
* Small fix.
* Apply suggestions from code review
Co-authored-by: Sven Mawson <sven@google.com>
* Apply suggestions from code review
Co-authored-by: Sven Mawson <sven@google.com>
Co-authored-by: Sven Mawson <sven@google.com>
Seems that after merging https://github.com/kubernetes/kops/pull/9534
there is no need to specify paths for key-files for service Account
Token Volume Projection.
Instead, current configuration proposed is making Istio unable to verify
JWT token with errors. In this commit, we remove the paths, letting Kops
handles the default ones that are working as expected.
Signed-off-by: dntosas <ntosas@gmail.com>
* Add troubleshooting guide for VMs
* Update content/en/docs/ops/diagnostic-tools/virtual-machines/index.md
Co-authored-by: Jimmy Song <rootsongjc@gmail.com>
Co-authored-by: Jimmy Song <rootsongjc@gmail.com>
* Remove root cert transition guide
The guide is for users on 1.2. Any user from 1.2 would already have
their cert expired, so they either already followed this guide or
already had a production outage.
Fixes https://github.com/istio/istio.io/issues/6668
* fix lint
* Add info about using Metallb for multi-cluster setup on Kind
* update comments and fix lint
* lowercase kind
* moved instruction to the top
* add to multi-network too
* use common msg
* use boilerplate for common usage
* move tip to boilerplate
* change header for platform per TOC guidance
* Update content/en/docs/setup/platform-setup/azure/index.md
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Change to Istio 1.9
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* vm docs: fix bullets for generated files
* Update content/en/docs/setup/install/virtual-machine/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Silence curl command
* Update more files with -sS (adding S to show errors)
* Over-agressive on the -S and causing some tests to fail.
* Remove more curl -S flags
* mark as tested
* generate snips
* test progress
* add -I to curl output in command
* regenerate snips
* doc test fixes
* Add HTTP/1.1 to expected output
* change to use verify_elided