Commit Graph

13 Commits

Author SHA1 Message Date
Martin Taillefer c863bea599
Content changes to prepare to switch to the new Hugo. (#5993)
These fix problems encountered when switching to the new Hugo which has
a completely different markdown engine. I went through diffs of the generated
HTML and made required adjustments.
2019-12-05 12:44:01 -08:00
Hongzhi c17b7c1caa lack of indentation (#5931) 2019-11-29 06:33:42 -08:00
Frank Budinsky 60f73570f0 Another ops guide incremental improvement (#5830)
* Another ops guide incremental improvement

* fix broken links

* more lint errors

* one more lint

* fix aliases
2019-11-25 11:58:39 -08:00
Rigs Caballero 22d066be37 Added the Best Practices section with general principles. (#5137)
* Added the Best Practices section with general principles.

This is the beginning of the new Best Practices section.
Our goal is to provide a section for all the best practices and recommendations
for Istio deployments. The best practices are based on the identified and
recommended deployment models.

Signed-off-by: rcaballeromx <grca@google.com>

* Change headings for clarity.

Adds clarity to some passages based on feedback.
Removes a list of recommendations that was causing some confusion.
Adds a glossary entry for failure domains and how they relate to a
platform's availability zones.

Signed-off-by: rcaballeromx <grca@google.com>

* Move Best Practices to Ops Guide

Signed-off-by: rcaballeromx <grca@google.com>

* Moved Deployment Best Practices to a new "Prepare Your Deployment" section.

Moved all deployment preparation content into a new section under "Setup".
For now the content includes the following sections:

- Deployment models
- Deployment best practices
- Pod requirements

Merged the two existing pages containing pod requirements into one single page.

Signed-off-by: rcaballeromx <grca@google.com>

* Replace example with better guidance around namespace tenancy.

Signed-off-by: Rigs Caballero <grca@google.com>

* Add links and language pointing to the Prepare section

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix minor typos and broken links.

Signed-off-by: Rigs Caballero <grca@google.com>

* Move from Setup to Operations

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix broken links

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix rebasing issues.

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix multicluster install link.

Signed-off-by: Rigs Caballero <grca@google.com>
2019-11-14 11:58:29 -05:00
Kevin Kunkel 7806506728 Added Verify Istio CNI to observability-issues.md (#5427)
* Added Verify Istio CNI to observability-issues.md

If using the Istio CNI to avoid granting `NET_ADMIN` to pods, the CNI
node pods must be running for metrics to be collected. The helm charts
don't include a PodSecurityPolicy, so the documentation guides users to
a non-working setup if the cluster has PodSecurityPolicy enabled.

* Markup changes to PodSecurityPolicy and NET_ADMIN

* Added backticks to `PodSecurityPolicy`
* Added backticks and link to NET_ADMIN capability requirement
* Removed trailing whitespace on line 39
* Added backticks to `istio-init`
2019-11-12 10:14:55 -08:00
Ed Snible b419fcbfab Use 'istioctl dashboard' instead of port-forward (#5296)
* Use 'istioctl dashboard' instead of port-forward

* bold references to UI elements

* Cleanup dashboards

* Address comments

* Mention control-c, which is easier way to stop dashboard
2019-11-12 07:28:54 -08:00
Eric Buehl ad1020b40c s/10514/15014/ (#5260) 2019-11-12 07:17:53 -08:00
Yangmin Zhu 9a57887706 update authz concept page for the new v1beta1 policy (#5165)
* update authz doc

* address comments.

* use master

* address more comments

* implicit enablement

* comments

* link to ref page

* fix lint

* address more comments

* Update content/en/docs/ops/common-problems/security-issues/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/reference/config/authorization/conditions/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/reference/config/authorization/conditions/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/reference/config/authorization/conditions/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/reference/config/authorization/constraints-and-properties/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/concepts/security/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/concepts/security/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/concepts/security/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/concepts/security/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/concepts/security/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/concepts/security/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/concepts/security/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/concepts/security/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* Update content/en/docs/concepts/security/index.md

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>

* more fix
2019-11-09 06:02:52 -08:00
Frank Budinsky a6a5769f12
Organize security tasks (#5474)
* Organize security tasks

* lint errors

* fixes

* more fixes
2019-11-07 15:54:27 -05:00
Martin Taillefer 4d4e6ae28e
General cleanup items. (#5325)
- Fix a bunch of heading capitalization.

- Remove words that shouldn't be in the dictionary
and update the text accordingly.

- Added a few @@ sequences to reference content files from text blocks.

- Used a few {{< source_branch_name >}} sequences to refer to the proper
branch in GitHub rather than master.
2019-11-04 06:41:54 -08:00
Frank Budinsky f220f655a7 Deprecate helm install (#5270)
* Deprecate helm install

* fix lint

* address review comments

* correction
2019-10-29 06:37:34 -07:00
Jesse Lumme 0c464a3bdc Updated formatting of Virtual Service in docs (#5209) 2019-10-20 07:12:05 -07:00
Frank Budinsky c8ac8eb91c Better organize operations guide material (#5163)
\
2019-10-16 09:59:04 -07:00