Commit Graph

353 Commits

Author SHA1 Message Date
lei-tang 938a8d3e71 Add a description of certificate request flow for Vault CA (#3811) 2019-03-20 19:35:28 -07:00
Lin Sun f2ab14b785 update jaeger access port forward cmd (#3754) 2019-03-18 20:46:52 -07:00
Douglas Reid 9788bbe1a8 Modify Envoy Access Log Task to use Helm Template instead of hand-editing of configmap (#3742) 2019-03-18 11:49:38 -07:00
Martin Taillefer 2258d0b03b
Improve text blocks. (#3727)
- Add tests for the various text block features.

- Combine text_file and text_dynamic into text_import

- Add support for snippet extraction for text downloaded from a URL

- Add support for formatting output blocks in a different style for
content downloaded from a URL

- Report some errors when unable to fetch content from a URL.

- Fixed a few small bugs along the way.
2019-03-18 06:31:26 -07:00
Martin Taillefer cec8d2d5b9
Remove outdated example. (#3721) 2019-03-17 07:39:27 -07:00
Martin Taillefer 233b5ce2ab Race condition fix for mTLS steps. (#3722) 2019-03-17 03:17:38 -07:00
David Radcliffe ef7b475665 improve docs on access log settings (#3676) 2019-03-16 07:04:14 -07:00
Kuat 6077db4e47 add route directive task (#3700) 2019-03-15 21:06:25 -07:00
Douglas Reid 9ae7c675e7 Use helm template for updating istio configmap in policy enablement (#3715) 2019-03-15 20:37:55 -07:00
Yangmin Zhu b8d5be601f update the documentation for jwt authentication. (#3675)
* update the documentation for jwt authentication.

* address comment
2019-03-15 16:12:37 -07:00
Douglas Reid 160521a6d8 Reorganize the Telemetry tasks (#3707)
* Reorg the Telemetry tasks

* Address review comments

* update aliases

* Update links in old blogs, notes, and tasks
2019-03-15 16:10:37 -07:00
Martin Taillefer 2a5108806b
Site improvements. (#3706)
- Added a test suite to test out the different compositions of
site features.

- Substantially improve the composability of site features
(callouts, tabs, text blocks, boilerplates, lists). You can
now more confidentally mix & match these in any combination
and have a pretty good chance it'll render correctly.
2019-03-15 09:53:58 -07:00
Martin Taillefer 331c5d3f76
Remove unwanted empty lines in various text blocks. (#3699) 2019-03-14 20:47:25 -07:00
mtail 5c1c9ae630 Revert "Site improvements (#3696)"
This reverts commit e1ce0c36
2019-03-14 19:59:48 -07:00
Martin Taillefer e1ce0c3633 Site improvements (#3696)
- Add a test suite for various compositions of site features.

- Substantially improve composition of various site features to eliminate bad
interactions. It's not perfect yet, but it's much better. The one thing still
broken is "a text block inside a warning in a list in a tab". There's still
something funny going on there, but I have some ideas for later.

- Added a new linter check to detect misuse of https://preliminary.istio.io in docs,
and fixed one offending instance.
2019-03-14 17:20:38 -07:00
Jimmy Chen c3fdb3faf9 Add migration section into ingress-gateway using sds approach (#3695)
* add migration section to sds

* Apply suggestions from code review

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Apply suggestions from code review

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>
2019-03-14 14:52:40 -07:00
Douglas Reid cef1d8b0a9 Add doc on policy check enablement and clean-up P&T release notes (#3694)
* Add doc on policy check enablement and clean-up P&T release notes

* Add in-process adapter model deprecation notice

* Add deprecation feature status for in-proc

* Fix doc link
2019-03-14 14:07:39 -07:00
Martin Taillefer 1cc06a6e9c
Site improvements (#3677)
- Added call-to-action buttons in the 1.1 announcements. We can use the same
buttons in future release announcements.

- Fixed broken large warning icon on the 404 error page.

- Fix oerder of blog posts in the side bar.

- Add support to not expand @@ notations in text blocks and use
it for a text blocks that's currently triggering a build failure

- Fixed broken rendering of some text blocks when syntax coloring
is turned off via the menu.
2019-03-13 21:53:55 -07:00
Eric Van Norman 9318f38d0b Remove IKS free clusters from documentation (#3656)
* Remove IKS free clusters from documentation

* Review comments - expand on IKS zones and regions

* Review comment - change billable to standard
2019-03-13 18:43:38 -07:00
Douglas Reid 7c4112736d Add task for setting up telemetry gateway (#3625)
* Add task for setting up telemetry gateway

* Address lint issues and typos

* Add missing output for kiali-vs

* Minor rewording

* Minor reword: warning text

* Address review comments

* Clarify warning

* Update install and domain instructions
2019-03-13 10:45:37 -07:00
Martin Taillefer 5cf1f7d7ab
Reenable link checking. (#3664) 2019-03-13 09:44:16 -07:00
Martin Taillefer 1e075ef7cd
Fix broken links (#3636)
- We haven't been checking external links for months now due to a script error
when someone added an option that didn't work as expected. I'm fixing a bunch
of resulting broken links. I can't turn on the link checker yet since there are
some bad links in reference docs which I have to address first.

- Add a bunch of links to yaml files in our code examples using the @@ syntax.
2019-03-11 22:05:18 -07:00
Pengyuan Bian 21641fc79a update rate limit to use session cookie (#3631) 2019-03-11 14:28:35 -07:00
imgbot[bot] e9dd610a93 [ImgBot] Optimize images (#3629)
*Total -- 7,094.17kb -> 5,007.26kb (29.42%)

/static/img/logo.png -- 37.28kb -> 12.07kb (67.62%)
/content/about/community/partners/datadog.png -- 6.48kb -> 2.49kb (61.64%)
/content/blog/2019/egress-performance/response_times3.png -- 11.99kb -> 5.16kb (56.95%)
/content/about/community/partners/knative.png -- 14.59kb -> 7.08kb (51.48%)
/content/docs/setup/kubernetes/install/platform/gke/dm_grafana.png -- 439.78kb -> 228.33kb (48.08%)
/content/docs/setup/kubernetes/prepare/platform-setup/docker/dockerprefs.png -- 213.94kb -> 112.93kb (47.21%)
/content/docs/tasks/telemetry/distributed-tracing/lightstep/istio-tracing-details-lightstep.png -- 560.65kb -> 322.62kb (42.46%)
/content/docs/tasks/telemetry/distributed-tracing/lightstep/istio-tracing-list-lightstep.png -- 587.25kb -> 341.53kb (41.84%)
/content/about/community/partners/antfinancial.png -- 42.72kb -> 25.11kb (41.22%)
/content/docs/setup/kubernetes/install/platform/ibm/istio-catalog-2.png -- 198.14kb -> 118.25kb (40.32%)
/content/docs/setup/kubernetes/install/platform/ibm/istio-installation-2.png -- 259.64kb -> 156.16kb (39.86%)
/content/docs/setup/kubernetes/install/platform/ibm/istio-release.png -- 110.47kb -> 66.46kb (39.84%)
/content/docs/setup/kubernetes/install/platform/ibm/istio-deletion.png -- 154.98kb -> 93.97kb (39.37%)
/content/docs/setup/kubernetes/install/platform/ibm/istio-upgrade-2.png -- 156.17kb -> 94.74kb (39.33%)
/content/docs/setup/kubernetes/install/platform/ibm/istio-installation-1.png -- 303.79kb -> 191.73kb (36.89%)
/content/docs/setup/kubernetes/install/platform/ibm/istio-catalog-1.png -- 289.44kb -> 186.77kb (35.47%)
/content/blog/2019/egress-performance/case1_sidecar_bypass3.png -- 31.97kb -> 20.74kb (35.14%)
/content/blog/2019/egress-performance/acmeair_regpatrol3.png -- 46.91kb -> 30.71kb (34.53%)
/content/blog/2019/egress-performance/case2_sidecar_passthru3.png -- 29.23kb -> 19.26kb (34.11%)
/content/blog/2019/egress-performance/case3_egressgw3.png -- 33.18kb -> 21.97kb (33.79%)
/content/blog/2019/egress-performance/case5_egressgw_sni_proxy3.png -- 36.26kb -> 24.19kb (33.28%)
/content/blog/2019/egress-performance/case4_egressgw_mtls3.png -- 33.21kb -> 22.17kb (33.25%)
/content/blog/2018/egress-monitoring-access-control/dashboard-egress-gateway.png -- 177.27kb -> 119.79kb (32.42%)
/content/blog/2018/incremental-traffic-management/fifty-fifty-ingress-gateway.png -- 28.80kb -> 19.76kb (31.41%)
/content/blog/2019/egress-performance/throughput3.png -- 30.33kb -> 20.98kb (30.84%)
/content/blog/2019/egress-performance/cpu_usage3.png -- 24.27kb -> 16.88kb (30.42%)
/content/blog/2018/incremental-traffic-management/fifty-fifty.png -- 21.57kb -> 15.28kb (29.17%)
/content/about/community/customers/watson.png -- 179.58kb -> 131.53kb (26.75%)
/content/docs/tasks/telemetry/kiali/kiali-service-graph.png -- 21.04kb -> 15.57kb (25.99%)
/content/docs/setup/kubernetes/install/platform/ibm/istio-upgrade-1.png -- 970.48kb -> 722.29kb (25.57%)
/content/docs/tasks/telemetry/kiali/kiali-services.png -- 70.23kb -> 53.28kb (24.14%)
/content/docs/tasks/telemetry/kiali/kiali-versionedapp.png -- 48.27kb -> 37.06kb (23.22%)
/content/docs/tasks/telemetry/kiali/kiali-workload.png -- 47.77kb -> 36.77kb (23.03%)
/content/docs/setup/kubernetes/install/platform/gke/dm_kubernetes_workloads.png -- 83.60kb -> 64.50kb (22.84%)
/content/docs/tasks/telemetry/kiali/kiali-app.png -- 20.23kb -> 15.69kb (22.43%)
/content/docs/tasks/telemetry/kiali/kiali-graph.png -- 97.93kb -> 76.41kb (21.98%)
/content/docs/tasks/telemetry/distributed-tracing/zipkin/istio-tracing-list-zipkin.png -- 91.88kb -> 72.67kb (20.91%)
/content/docs/setup/kubernetes/install/platform/gke/dm_launcher.png -- 49.03kb -> 39.81kb (18.8%)
/content/docs/tasks/telemetry/distributed-tracing/zipkin/istio-tracing-details-zipkin.png -- 91.41kb -> 74.36kb (18.65%)
/content/docs/tasks/telemetry/kiali/kiali-overview.png -- 34.52kb -> 28.51kb (17.41%)
/content/about/community/customers/ebay.png -- 23.67kb -> 19.91kb (15.89%)
/content/about/community/partners/cilium.png -- 5.73kb -> 5.00kb (12.76%)
/content/docs/setup/kubernetes/install/platform/gke/dm_kiali.png -- 131.91kb -> 115.44kb (12.49%)
/content/about/community/customers/theweatherco.jpg -- 1,032.55kb -> 989.72kb (4.15%)
/content/about/community/partners/huawei.png -- 209.37kb -> 206.98kb (1.14%)
/content/about/community/customers/descarteslabs.png -- 4.66kb -> 4.65kb (0.19%)
2019-03-11 13:54:39 -07:00
Martin Taillefer 117521b05e Shuffle the setup directory a bit. (#3626)
Co-Authored-By: geeknoid <geeknoid@users.noreply.github.com>
2019-03-11 13:45:35 -07:00
Martin Taillefer fbd2b162fb
Prune a few things that shouldn't have been in the dictionary. (#3622) 2019-03-11 11:35:52 -07:00
Martin Taillefer 2c62859726 Tweak the installation pages. (#3610)
- Move requirements up to be the first thing people see. This matches
the order presented in the landing page.

- Shuffle the order in the sidebar a bit to correspond to the order
the material is presented in the landing page.

- Clean up some of the wording on the k8s landing page.

- Shorten the platform names used in the sidebar nav so they fit better.
This matches the names used in the Platform Setup section.
2019-03-11 08:56:35 -07:00
Martin Taillefer fc058032b1
Fix broken callouts. (#3612) 2019-03-10 11:53:09 -07:00
Venil Noronha 2c822d55d4 Add a warning about using sudo for a TCP sample (#3583)
* Add a tip about prefixing with sudo for TCP sample

This adds a note about using sudo while running the TCP Traffic Shifting
sample on certain platforms.

Signed-off-by: Venil Noronha <veniln@vmware.com>

* Switch from a tip to a warning

This updates the help text to a warning.

Signed-off-by: Venil Noronha <veniln@vmware.com>
2019-03-08 19:30:31 -08:00
Frank Budinsky 9761fd3204 Update egress task (#3595) 2019-03-08 16:25:19 -08:00
Ed Snible 5748253b7d Fortio binary changed directories (#3563) 2019-03-07 15:29:33 -08:00
Diem Vu 423085227e Add note to explain authentication mesh policy CRD kind. (#3540)
* Add note for the mesh policy to explain the different with regular (namespace and service) policies

* Address comment
2019-03-07 14:16:32 -08:00
Vadim Eisenberg c67a696e13 make "Disable Envoy's access logging a separate section" (#3553)
so it can be referenced from other documents
2019-03-07 06:47:36 -08:00
mtail 3c67a02564 Fix #3338 2019-03-06 11:37:41 -08:00
Vadim Eisenberg 82784bf61b add access log task (#3531)
* add access log task

* change config map to configuration map to prevent spelling errors

* add an empty line between two boilerplates

seems to be required, otherwise a redundant <p> tag is generated

* make the task's title Getting Envoy's Access Logs

* mind escaping -> be sure to escape

* check the log of sleep, httpbin -> check sleep's, httpbin's log

* change -> customize

* to do it, edit -> by editing
2019-03-06 09:09:25 -08:00
Vadim Eisenberg 2f1e1a6020 Use two separate ingress gateways for two hosts (#3529)
* use a separate gateway for bookinfo in the case of multiple hosts

* set the name parameter to be "istio" instead of "istio-ingressgateway"

Since the original istio-ingressgateway was deployed with the name parameter "istio".
Otherwise, the following error will be received:

The Deployment "istio-ingressgateway" is invalid: spec.template.metadata.labels: Invalid value: map[string]string{"chart":"gateways", "heritage":"Tiller", "istio":"ingressgateway", "release":"istio-ingressgateway", "app":"istio-ingressgateway"}: `selector` does not match template `labels`

The problem is that the "release" label contains the name parameter of helm template,
and if this label will not match in the new and the original deployments of istio-ingressgateway,
kubectl apply will fail.
2019-03-06 09:07:30 -08:00
Vadim Eisenberg e8a799f919 add ingress troubleshooting section (#3410)
* add ingress troubleshooting section

* it does not arrive to the Istio -> it does not arrive to the ingress gateway

* fix a link

* remove checking the log since access log will be removed in 1.1

* you have no other Kubernetes Ingress resources -> you have no Kubernetes Ingress resources
2019-03-06 08:59:38 -08:00
idouba f02b763382 fail with 503 instead of 000 for injected-app (#3157)
* fail with 503 instead of 000 for injected-app

As a bad destination rule is set to disable client side mTLS and receiving side is mTLS enabled. At this point, Running the curl command between sidecar injected Istio services  all requests will fail with a 503 error code as the client side is still using plain-text.
2019-03-06 08:48:20 -08:00
Douglas Reid da77bb2bb5 Add sampling info to Tracing tasks (#3397)
* Add sampling info to Tracing tasks

* Address review comments and add boilerplate

* Add link to OpenTracing

* Address review comments

* Wording changes
2019-03-06 07:42:59 -08:00
Eric Van Norman 9dde74f016 Remove .b from cert path httpbin.new.example.com curl (#3495) 2019-03-06 07:40:33 -08:00
Frank Budinsky 76fc94137e Update istio-demo install instructions (#3520)
* Update istio-demo install instructions

* improve verify step

* fix circleci errors

* typo

* Change title

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/tasks/security/authn-policy/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/tasks/security/plugin-ca-cert/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* Update content/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: frankbu <frankb@ca.ibm.com>

* spelling
2019-03-05 14:47:20 -08:00
Andra Cismaru a8aaef4afa Fix typo. (#3516)
Fixes istio.io#2981
2019-03-05 11:35:46 -08:00
Oliver Liu e866f13fb7 Update health check task. (#3435)
* Update health check task.

* Apply suggestions from code review

Co-Authored-By: myidpt <yonggangl@google.com>

* Apply suggestions from code review

Co-Authored-By: myidpt <yonggangl@google.com>

* Small fix.

* Small fix.
2019-03-05 10:50:33 -08:00
John Howard 0dabe29b28 Update references to value files (#3412) 2019-03-05 13:47:07 -05:00
Vadim Eisenberg 5c255e9618 add start-httpbin-service boilerplate (#3514) 2019-03-05 10:03:32 -08:00
Jimmy Chen 4ff728348d restore the order of docs (#3503) 2019-03-05 06:18:33 -08:00
Martin Taillefer 36a6514a07 Remove old comment. (#3499) 2019-03-04 16:05:31 -08:00
Martin Taillefer 7bf371365e
Optimize all our SVG files. (#3468) 2019-03-03 08:14:50 -08:00
Jimmy Chen 692125f6b4 Add guide for external cert management at ingress gateway using SDS (#3224)
* add ingress sds

* update

* update

* Revise

* update

* Revise

* Update

* update

* revise

* update

* Remove key cert path when SDS is enabled

* Split SDS task into separate file

* Revise

* add mount/ and sds/

* fix broken link

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/_index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/mount/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Apply suggestions from code review

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Update content/docs/tasks/traffic-management/secure-ingress/sds/index.md

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>

* Revise

* Revise

* update

* Apply suggestions from code review

Co-Authored-By: JimmyCYJ <28548492+JimmyCYJ@users.noreply.github.com>
2019-03-01 15:28:31 -08:00
idouba c5937a1d70 should specify the resource type:destinationrule. (#3159)
should specify the resource type:destinationrule in the delete statement.
2019-03-01 12:19:29 -08:00