* Correct command to append output to istio.yaml, instead of replacing
* Also correct the command to enable mTLS globally. control plane and global mtls need to be set to true together, at least for now.
Currently, the command line snippet for setting up multi-cluster Istio
with Helm is confined to a single line. This makes it difficult to read
without having to scroll horizontally to read the entire command.
Update the command to be multi-line.
Signed-off-by: Nick Travers <n.e.travers@gmail.com>
* Add new setup instructions about istio-cni
* Fix review nits.
* Add Istio CNI to about/features as an alpha status feature
* Reword intro and installation steps
* Add sidecar injection compatibility info
* fix review comments
* Fix wording nits from sdake
* Fix nits and formatting comments from geeknoid.
* Added general CNI spec link and Istio k8s requirements link.
- Fix formatting for the Subscribe link on blog pages. That got broken in some refactoring I did a while back.
- Remove a few *NOTE* and _NOTE_ instances and replace with the canonical icons
- Add a link to our community repo in the Getting Involved page.
* add a bullet about the privileged mode
* change privileged mode to NET_ADMIN capability
* Rewrite the sentence: it is required for...
Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>
* Simplify the sentence about the default service account
Co-Authored-By: vadimeisenbergibm <vadime@il.ibm.com>
* remove leftover from a previous commit
* remove another leftover from a previous commit
* add a missing whitespace after a dot
* remove capitalization of Service Account and Pod Security Policy
* add a remark about pod security policies being enforced in the cluster
* split the content between spec-requirements and required-pod-capabilities in the operations guide
* Fix the link to required-pod-capabilities
- The width value now defaults to 100%, so it doesn't need to be specified explicitly
in many cases.
- The ratio value can now be computed automatically for PNG and JPG files, so it doesn't need
to be specified explicitly.
* Add initial doc changes related to tracing provider and support for zipkin backend
* Suggestion for way to incorporate more tracing backends - using text from lightstep PR #2844
* Update based on review comments. Moved lightstep content (from #2844 to subfolder
* Add more zipkin content and images
* Remove jaeger from dt page
* Updates following comments
* Updates to address comments
* update chart requirements
adding `helm dep up` which is required for the install to succeed
* note about relative refs
* remove redundant space
* grammer and passive voice
Co-Authored-By: itaysk <itay@itaysk.com>
* helm repo add
* Edit and clean the multicluster installation.
Performed a major edit to enhance the clarity and accuracy of the content.
The edits include:
* Consistency and quality-of-content improvements including expanding
abbreviations on first use, adding or modifying markup for emphasis, and
adding lists.
* Grammar and spelling fixes including fixing passive voice and missing
articles.
* Content structure improvements to improve the readability and flow of the
content.
* Introduced heading tags to make identifying cross-references easier to
identify and maintain.
Signed-off-by: rcaballeromx <grca@google.com>
* Address typos
Signed-off-by: rcaballeromx <grca@google.com>
* Fix broken links with IDs.
Signed-off-by: rcaballeromx <grca@google.com>
* Implemented tabs for procedural options.
Alongside the tabs implementation, a warning and a note were added based on
comments.
* Update index.md
More pods and services have been added since this doc has been written.
* Added more verbose information
Added `Option 1` and `Option 3` outputs.
Signed-off-by: JJ Asghar <jja@ibm.com>
* Fixed formatting.
Opps.
Signed-off-by: JJ Asghar <jja@ibm.com>
* Removed the output
Put the command to verify the setup, but removed the output per
rcaballeromx's suggestion.
Signed-off-by: JJ Asghar <jja@ibm.com>
* Fixed per rcaballeromx suggestions.
- reformatted and fixed the wording.
Signed-off-by: JJ Asghar <jja@ibm.com>
* Istio, not ingress.
🤦
Signed-off-by: JJ Asghar <jja@ibm.com>
* Copy paste mess up.
Removed a dangling copy paste.
Signed-off-by: JJ Asghar <jja@ibm.com>
* Grammar, I think.
- fixed the optionally have line.
Signed-off-by: JJ Asghar <jja@ibm.com>
* More Grammar.
🤘
Signed-off-by: JJ Asghar <jja@ibm.com>
Minikube does the right thing (as of 0.28.1 at least) with creating the embedded CA. The extra-config parameters appear to have been necessary previously and were resolved to use the "right" credentials built by Minikube directly. In fact, passing those parameters appears to break current minikube deployments, making it impossible to create new service accounts and resources that rely on them. (like a tiller service account for a helm deployment of Istio...)
I found this bug that referenced this issue: https://github.com/kubernetes/minikube/issues/1647 which is now closed.
- Use a new approach to managing icons. This has two primary benefits:
- It makes it possible to color the icons such that they look good in the
dark theme. Previously, the icons were rendered in black on dark grey when
using the dark theme.
- The average payload size for our web pages is reduced and we better use the
browser cache.
- The new icon approach makes it possible to remove our dependency on the fontawesome
package, which further slims down our payload requirement
- Refresh our iconography for a slightly lighter look.
- Remove the extra thick left-hand border of text blocks to lighten the
look.
- Added a "NN minutes to read" indication on top of each page. This is
only displayed if the count is > 1 minute.
- Added a calendar icon next to the blog post date.
- Exposed a bunch of strings that were buried in CSS/JS to translation.
- Add the 'keywords:' front-matter fields to the Hugo archetypes.
* Add docker-for-desktop installation note
A default istio helm install under kubernetes running in docker-for-desktop wasn't working because pilot was reserving too much memory. Added documentation to work around this
* Update index.md
* Create index.md
* Update index.md
* Update index.md
* Update index.md
* Rename content/docs/setup/kubernetes/platform-setup/index.md to content/docs/setup/kubernetes/platform-setup/docker-for-desktop/index.md
* Update index.md
* Update index.md
quoted memory allocation, capitalized Kubernetes
* Add setup doc for ICP
* Modify the title "Upgrate and Rollback" to "Upgrate or Rollback"
* add diagrams to highlight action
* fix some spelling errors
* use consistent font for UI items and fix some grammatical mistake.
- Remove the release-specific wording on the main release note page and on the docs page. This
ends up being hard to keep correct and not really useful.
- Add a full_version variable in args.yml which contains the 3 part release version
such as 1.0.1. When we release a new patch, we need to update this number in the current
release branch.
- Apply the full_version variable to the download button on the home page. It will now say "DOWNLOAD 1.0.1".
* Document DNS resolution requirements
Service names must be resolved to IP address in any cluster, regardless of endpoint location.
* document DNS requirements for multi-cluster services
- Correct the use of OpenGraph annotations. I used the wrong attribute name, so the
annotations were never recognized.
- Added support for Twitter cards to our site, improving the experience of referencing
the site from Twitter posts.
- Added support for the twitter: front matter field for use in blog posts. Specifying this
front-matter entry will show the author's twitter address on the blog post, and will
add a Twitter card entry to the page noting the author's address.
- Renamed the page_icon front matter field to just icon to be consistent with other
entries.
- Made it so the subtitle front matter field can be used anywhere, not just on blog posts.
- Added a lint check to ensure subtitles don't end with a period.
- We now insert an "author" metadata entry whenever the attribution: front matter
field is used.
* Prep for 1.0 release
* Fix typo for 1.0 announcement. (#2081)
* Updated kubect link for IBM Cloud Private. (#2083)
* Fix generated tablegen.py (needs backport) (#2084)
Original table was dreadfully wrong.
(cherry picked from commit b3fa64fa41)
* add a VirtualService for external HTTPS ServiceEntry (#2080)
* add a VirtualService for external HTTPS ServiceEntry
* a VirtualService -> the VirtualService
(cherry picked from commit 9e57d4a5b7)
* egress gateway: use subsets for cnn in destination rules and virtual services (#1942)
* use subsets for cnn in destination rules and virtual services
* remove trailing spaces
* separate virtual services for traffic to and from egress gateway
to egress gateway: TLS match
from egress gateway: TCP match
* put back tls match for HTTPS egress for Istio without Auth
combine defining the Gateway and the VirtualServices
* use ISTIO_MUTUAL with sni in destination rules
* update the log message to print HTTP/2 as the protocol
* make two VirtualServices into one
* remove redundant explanation about SNI setting in a destination rule
* use different virtual service matches for Istio with and without SNI
* fix the case of HTTP traffic for Istio without Auth
(cherry picked from commit 81baa2e939)
* Disable Mesh Expansion page.
(cherry picked from commit dc4da48042)
* Blog fix.
* adding juspay (#2092)
* Update homepage and what is istio page (#2085)
- update the two pages
- make the links point to the Chinese document
(cherry picked from commit 993231abeb)
* Chinese: announcing istio 1.0 (#2088)
(cherry picked from commit 5301d4ea13)
* Move advanced egress tasks to examples, Advanced egress traffic control, release 1.0 (#2093)
* add advanced-egress subsection in Examples
* move egress gateway and egress tls origination tasks into advanced examples
* rename task to example and fix the links
* Tweak the HP blog post a tad.
* Another blog tweak.
* Update index.md (#2096)
Removing VM support until it's fixed
(cherry picked from commit c2e529212b)
* Make the site work when it's published to a subdirectory (for the archive) (#2095)
(cherry picked from commit 137e1d13f4)
* Change "Testing mutual TLS" tutorial to "Mutual TLS deep dive" (#1972)
(cherry picked from commit 0662e413f1)
* fix kubectl output (#2100)
fixes https://github.com/istio/istio.github.io/issues/2066
(cherry picked from commit 2a852d1408)
* Another blog tweak.
* Add section to tracing task to cover sampling. (#2097)
* Add section to tracing task to cover sampling.
* Lint fix
* Review comments.
* Review comments.
* Review comments.
* Add documentation for redisquota adapter in rate limiting doc (#2098)
* fix multicluster doc issues. (#2104)
* remove unnecessary gateway spec (#2091)
* Clarify and correct distributed tracing task (#2115)
* Cherry-pick latest changes from master (#2118)
* Translate fix zh links (#2105)
* zh: all linkes without '#' had been replaced
* translate: rewrite links to zh version if it exists.
(cherry picked from commit c4daa73dee)
* Translate Istio 1.0 canary into Chinese (#2110)
(cherry picked from commit 4d6eec754c)
* Fix typo in "Delayering Istio" blog post (#2102)
(cherry picked from commit 6bdb4605f4)
* Minikube settings (#2082)
(cherry picked from commit 9f6ebe9eeb)
* Fix single word in command (#2112)
It returned this:
```
kubectl get svc istio-ingress -n istio-system
Error from server (NotFound): services "istio-ingress" not found
```
Now it works correctly
(cherry picked from commit 2bbe9eef03)
* add initial galley intro to "what is istio" concept page (#2113)
(cherry picked from commit 2db7f5648d)
* make cmd/result match (#2117)
* make cmd/result match
* address comment
* Add Rigs to the English content owners file. (#2119)
(cherry picked from commit bd577696bf)
* Cherry-picks from master (#2122)
* Add Istio security vulnerabilities disclosure and handling page (#2114)
(cherry picked from commit dfee9b8ec0)
* Fix an error in faq page (#2120)
(cherry picked from commit d3c04a5ba7)
* More work to fix use of the site in a subdirectory. (#2123) (#2124)
(cherry picked from commit 5bd9c0f0bd)
* Cherry-pick latest changes from master (#2128)
* Add a couple entries to our prefered vocab list.
(cherry picked from commit 2cbe43aea7)
* Translate attribute-vocabulary (#2101)
* translate attribute-vocabulary
* fix Chinese link
* fix Chinese style & translate table header
(cherry picked from commit 056bf27879)
* fix the virtual-services fault injection error in the YAML (#2109)
fix the virtual-services fault injection error in the YAML
(cherry picked from commit 453012d3ab)
* Add an item to check whether mTLS is enabled for a service (#2062)
(cherry picked from commit 384f6cd8be)
* Chinese content was aliasing English content. (#2126)
Page aliases are intended to redirect users from a page old's location to a new location.
As it was, the Chinese content pages were redirect old English locations to Chinese, which
made Chinese show up on English systems that were using the old links.
(cherry picked from commit c86d357f2e)
* Fix formatting glitch in a few glossary entries.
(cherry picked from commit a6420a4475)
* Cherry pick latest changes from master (#2138)
* Translate into Chinese: docs/examples/multicluster/icp/index.md (#2129)
* Translate into Chinese: docs/examples/multicluster/icp/index.md
* fix link anchor
(cherry picked from commit eca46893fe)
* Add an icon for the security vulnerabilities page (#2132)
(cherry picked from commit 11ce2b3924)
* Fix security concept figure captions etc. (#2087)
(cherry picked from commit f83bb8ada0)
* Translate into Chinese: blog/2018/aws-nlb/index.md (#2130)
(cherry picked from commit 9e77fa4cd0)
* Translate: all keywords in front matters (#2135)
* Translate: all keywords
* fixed typo
* remvoed from terms: vm, config->configuration
(cherry picked from commit 02392ff87e)
* Initial checkin of the setup ops guide. (#2078) (#2139)
(cherry picked from commit 3b529341a1)
* Document DestinationRule mTLS conflict (#2131)
* Document TLS conflict in DRs
* spelling errors
* lint errors
* tweak title
* tweak title
* address review comments
* Cherry-pick latest changes from master (#2143)
* Add twitch livestream blog post (#2140)
This is for the all-day istio livestream on August 17th.
(cherry picked from commit 41d3caa211)
* Make the big boxes on the home page clickable.
(cherry picked from commit 387e54c299)
* Cherry-pick latest changes from master. (#2159)
* Fix broken Mixer Adapter Dev Guide links (#2144)
Signed-off-by: Venil Noronha <veniln@vmware.com>
(cherry picked from commit 5342ab2a80)
* Fix some more stale wiki links. (#2145)
(cherry picked from commit b641486002)
* translate tasks/traffic-management/egress-gateway to Chinese (#2146)
* translate tasks/traffic-management/egress-gateway to Chinese
* 修改内部链接路径
* 去掉空格
* 删除空格
(cherry picked from commit 75baef98ec)
* Improve linting (#2148)
- We now detect text blocks that are incorrectly indented.
- We now detect image captions that end in a period.
- We now detect page descriptions that don't end in a period.
- CircleCi now runs linting without minifying HTML first, improving perf and
improving error output.
- In CircleCi, we now have a per-build cache for HTML proofer output. This
helps reduce the frequency of link timeout errors.
- Fix errors flagged by the above new lint checks.
(cherry picked from commit fd290dc73e)
* translate:setup-kubernetes-requirments (#2147)
(cherry picked from commit 0d98eee9c4)
* Translate into Chinese: blog/2017/0.2-announcement/index.md (#2150)
(cherry picked from commit a34cfc063d)
* Translate into Chinese: content/blog/2018/aws-nlb/index.md Sync/Update (#2153)
* Translate into Chinese: blog/2017/0.2-announcement/index.md
* Update index.md
* Update _index.md
(cherry picked from commit 4ee8e44cb6)
* re translate /zh/blog/2018/egress-tcp/ page (#2151)
* re translate /zh/blog/2018/egress-tcp/, for changes of content/blog/2018/egress-tcp/index.md file between commit fd290dc73e and 82eb2c21a3
* fix unaviable link (#2151)
(cherry picked from commit 0b313e373b)
* Flip conditional polarity to remove useless work when linting.
(cherry picked from commit 4424563918)
* Enable extra lint stuff (#2158)
(cherry picked from commit 0b2ea1d38e)
* Fix indent, given new linting rules.
- We now detect text blocks that are incorrectly indented.
- We now detect image captions that end in a period.
- We now detect page descriptions that don't end in a period.
- CircleCi now runs linting without minifying HTML first, improving perf and
improving error output.
- In CircleCi, we now have a per-build cache for HTML proofer output. This
helps reduce the frequency of link timeout errors.
- Fix errors flagged by the above new lint checks.
It returned this:
```
kubectl get svc istio-ingress -n istio-system
Error from server (NotFound): services "istio-ingress" not found
```
Now it works correctly
Remove a bunch of entries that shouldn't have been in the spelling dictionary
and correct content aoocrdingly.
I'm disabling the Chinese spell checking for now, since I'm not able to fix the
spelling errors that emerged there. Once this PR is in, I'll file an issue to get
those spelling errors addressed and checking reenabled.
* use kubectl consistently throughout for Istio API resource C.R.U.D operations
xref: https://github.com/istio/istio.github.io/issues/1843
* fix typo
* review comments
* remove unnecessary instructions to use `replace` instead of `create`
* fix linter in `zh` content
* Clean up of the platform section
This cleans up the platform section into its own subdirectory.
I am not all that happy about how "see-also" works, but maybe that
is how it is meant to work, or alternatively I'm doing it wrong :)
* Apply reviewer comments and add the index file
_index.md was missing from prior commit accidentally.
Removed all "Platform setup for" text in all platform docs.
* Apply reviewer comments
Some wordsmithing.
weight = 3 is intentional to fit alphabet. Assuming nobody
will require ASCIIbetical.
* Fix US English lint errors
* Revert the Chinese translation of the platforms PR
The Chinese language version needs to be ported. This PR
was merged manually which probably has broken the gate.
* Fixed:
Broken link to the old platform-setup document.
code block in openshift setup.
* fixed: md005
recovered: code block for openshift.
Unexpected end tag : p (line 12)
* Update authentication concept doc.
* Fix lint errors.
* Address comments and fixed some links.
* Remove feature stages change from this PR.
I will make a separate PR for it.
* Multicluster: add details on enabling mTLS for control plane and app pods
- describes deployment steps and includes an example deployment with commands
* fix review comments on wording
* Extract platform prerequisites
* Reorg
* Remove the inner pages from the menu
* Conform to the site directory structure
* Fix the link wording to match the title of the link and the uppercase
* Fix lint errors
* more lint errors
Remove warning that prior to Istio 0.8 Helm was unstable.
Since we are on 1.0, and can expect people to upgrade from 0.8,
this warning doesn't seem relevant.
Also, Helm upgrade from 0.8 to 1.0 has been validated. Also
remove that warning.
* Edit Kubernetes Quick Start for clarity.
This edit includes among other changes:
* Consistent use of markup, line length, and command formatting.
* Grammar, spelling, and other language fixes.
* Use of ordered lists for steps.
* New clear headings for installation options.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix linter issues on Kubernetes QS edit.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix indentation to fix ordered lists.
Trying to figure out the space in links issue. So far it looks like a false
positive.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix links and code blocs for lint.
Signed-off-by: rcaballeromx <grca@google.com>
* Remove in-line markup from links.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix code-block indentation and spelling lint.
Signed-off-by: rcaballeromx <grca@google.com>
* Rewrote link text to avoid spelling lint.
Signed-off-by: rcaballeromx <grca@google.com>
* Update index.md
Istio intends to lead with automatic sidecar injection and
as such, there is no good rationale to document how to turn
sidecar injection off. Still, as a followon PR, it may make
sense to document 5-7 different customization scenarios.
ingress v1 is gone - no sense describing it here.
Diem Vu
Nick Travers
Martin Taillefer
Martin Ostrowski
Spike Curtis
Eric Van Norman
Frank Budinsky
Lin Sun
Morven Cao
Tim Swanson
Daneyon Hansen
Zefool
LisaFC
Lv Jiawei
Jesse Butler
Vadim Eisenberg
Megan O'Keefe
Ram Vennam
salrashid123
Kevin Simper
Chunlin Yang
Xi Ning Wang
Gary Brown
paassdc
Itay Shakury
agmsb
Linus Li
Shriram Rajagopalan
Jonh Wendell
Rigs Caballero
xavierbaude
John Mazzitelli
Yangmin Zhu
Guilherme Baufaker Rêgo
Jason Young
Pedro Spagiari
JJ Asghar
Robert Starmer
Vincent
Clement Labbe
Tao Li
Fernando Carletti
Oliver Liu
sshucker
Medya Gh
Guihua Zhu
Rachael Graham
mtail
skeeey
flydragon
Damon Wang
Etai Lev Ran
Steven Dake
Vladimir Rutsky
stevemcghee
kahou82
imgbot[bot]
facundomedica
Andra Cismaru
Guang Ya Liu
Fu Xu
Brian Avery
Yossi Mesika
LillyWu
duderino
Matthew Wringe
Limin Wang
David Tesar
Georgios Andrianakis
Tiago M. Vieira
Ozben Evren