* Edits formatting of the long commands to improve readability
* Adds snips by make gen
* Adds back the connection rejected output
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* re-ran make gen to edit the snip
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* wasm: use wasm API for attributegen
Signed-off-by: Kuat Yessenov <kuat@google.com>
* fix links
Signed-off-by: Kuat Yessenov <kuat@google.com>
* cleanup
Signed-off-by: Kuat Yessenov <kuat@google.com>
* typo
Signed-off-by: Kuat Yessenov <kuat@google.com>
---------
Signed-off-by: Kuat Yessenov <kuat@google.com>
`Configure traffic through egress gateway with SNI proxy` section was removed from the docs in the 1.14 release
but that is still mentioned in the setup instructions for the task `Egress using Wildcard Hosts`.
* Fix minor nits on the security tasks page Plugin CA Certificate
Partially fixes: #12695
* Fix minor nits on the security tasks page for certificate management
* Update feature status for Experimental/Alpha
Based off of the feature status in features.yaml, update the
corresponding doc page.
Update navigation_level.html to only flag Experimental and Alpha
features with an asterisk '*', rather than all docs with _any_ status
set.
Add new 'alpha.md' boilerplate, similar to 'experimental.md', with a
link to https://github.com/istio/community/blob/master/FEATURE-LIFECYCLE.md
Add either 'boilerplate alpha' or 'boilerplate experimental' to all
pages which have Alpha or Experimental status set.
Tidy up pages which already had
'boilerplate experimental-feature-warning' and be consistent with
'boilerplate experimental'
Update tasks/observability/distributed-tracing/mesh-and-proxy-config
status from 'Beta/Experimental' to 'Beta', to match what's in
features.yaml (all others only have a single value here)
* Add content/zh/boilerplates/alpha.md
* Update content/en/boilerplates/alpha.md
Suggested change
Co-authored-by: Faseela K <k.faseela@gmail.com>
* Update the zh 'alpha' boilerplate to match
---------
Co-authored-by: Faseela K <k.faseela@gmail.com>
* Update Istio/SPIRE integration demo to use SPIRE Controller
Manager instead of k8s workload registration.
Signed-off-by: jaellio <jaellio@microsoft.com>
* Adds test for automatic workload registration via the SPIRE
controller manager. During cleanup, removes generated istio.yaml
and chaim.pem files. Updates label to
spiffe.io/spire-managed-identity.
Signed-off-by: jaellio <jaellio@microsoft.com>
* Adds missing newline
Signed-off-by: jaellio <jaellio@microsoft.com>
* Fix spelling error
Signed-off-by: jaellio <jaellio@microsoft.com>
* Add missing ns flag on role and rolebinding resource commands
Signed-off-by: jaellio <jaellio@microsoft.com>
* Delete sleep resources and uninstall before SPIRE
Signed-off-by: jaellio <jaellio@microsoft.com>
* Reconfigures demo so istio install is not expected to fail.
Created ClusterSPIFFEID before install istio. Previously install
would fail because the ingress gateway wasn't registered/
Signed-off-by: jaellio <jaellio@microsoft.com>
* Remove references to v1.14 and update required version to 1.14+
Signed-off-by: jaellio <jaellio@microsoft.com>
* Fix lint errors
Signed-off-by: jaellio <jaellio@microsoft.com>
---------
Signed-off-by: jaellio <jaellio@microsoft.com>
* accesslog: work with Telemetry API cluster_name
Add telemetry api example with xds.cluster_name
* removed default namespace install and fixed some linting
* Fix "spelling" error
* Update envoy filter name
* Gloss refs and other small improvemetents in ambient docs
* Update content/en/docs/ops/ambient/architecture/index.md
Co-authored-by: John Howard <howardjohn@google.com>
---------
Co-authored-by: John Howard <howardjohn@google.com>
* Make ambient warning more extreme
* Update content/en/docs/ops/ambient/getting-started/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Lin Sun <lin.sun@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Reword this to better explain why a gateway on each node is recommended.
Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>
* Update content/en/docs/tasks/security/authorization/authz-ingress/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* ambient: add traffic routing docs
This fills in part of the architecture doc for ambient.
Note this is intentionally low-level. This attempts to mirror
https://istio.io/latest/docs/ops/configuration/traffic-management/traffic-routing/
but for ambient.
* Address Frank's comments
* Update content/en/docs/ops/ambient/architecture/index.md
Co-authored-by: Lin Sun <lin.sun@solo.io>
* Update content/en/docs/ops/ambient/architecture/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Lin Sun <lin.sun@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* remove explicit istio-injection labeling on ns for ingress-gateway
The gateway deployment already has the annotation "sidecar.istio.io/inject=true"
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix lint
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix lint
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* doc-global-downstream-max-conn-helm
* Add instructions to set global_downstream_max_connections with Helm
* Fix https://github.com/istio/istio/issues/37443
* Fix linting errors
* Address comments
* Remove global_downstream_max_connections from .spelling and add backticks where missing
* Simplify instructions on how to set global_downstream_max_connections
* Fix cleanup instructions for TLS version config task
* Address comments and run generating snips: content/en/boilerplates/snips/before-you-begin-egress.sh
generating snips: content/en/boilerplates/snips/cve-2020-007-configmap.sh
generating snips: content/en/boilerplates/snips/example.sh
generating snips: content/en/boilerplates/snips/experimental-feature-warning.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/experimental.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/external-loadbalancer-support.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-choose.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-experimental.sh
generating snips: content/en/boilerplates/snips/gateway-api-future.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-gamma-support.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/boilerplates/snips/gateway-api-install-crds.sh
generating snips: content/en/boilerplates/snips/gateway-api-support.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/boilerplates/snips/gateway-api-version.sh
generating snips: content/en/boilerplates/snips/helm-backup.sh
generating snips: content/en/boilerplates/snips/helm-jwt-warning.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/helm-preamble.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/helm-prereqs.sh
generating snips: content/en/boilerplates/snips/index.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/kubectl-multicluster-contexts.sh
generating snips: content/en/boilerplates/snips/multi-cluster-with-metallb.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-default-intro.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-default-outro.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-middle.sh
generating snips: content/en/boilerplates/snips/revision-tags-preamble.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-prologue.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-usage.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/security-vulnerability.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/start-httpbin-service.sh
generating snips: content/en/boilerplates/snips/start-otel-collector-service.sh
generating snips: content/en/boilerplates/snips/telemetry-tracing-tips.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-0.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-1.sh
generating snips: content/en/boilerplates/snips/test-2.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-3.sh
generating snips: content/en/boilerplates/snips/trace-generation.sh
generating snips: content/en/boilerplates/snips/untested-document.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/verify-crds.sh
generating snips: content/en/boilerplates/snips/work-in-progress.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/docs/examples/bookinfo/snips.sh
--> boilerplate external-loadbalancer-support does not have snippets
generating snips: content/en/docs/examples/virtual-machines/snips.sh
generating snips: content/en/docs/ops/configuration/mesh/app-health-check/snips.sh
generating snips: content/en/docs/ops/configuration/mesh/config-resource-ready/snips.sh
generating snips: content/en/docs/ops/configuration/security/security-policy-examples/snips.sh
generating snips: content/en/docs/ops/configuration/telemetry/envoy-stats/snips.sh
generating snips: content/en/docs/ops/configuration/traffic-management/network-topologies/snips.sh
generating snips: content/en/docs/ops/diagnostic-tools/istioctl-analyze/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/setup/additional-setup/cni/snips.sh
generating snips: content/en/docs/setup/additional-setup/gateway/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/setup/additional-setup/getting-started/snips.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate external-loadbalancer-support does not have snippets
generating snips: content/en/docs/setup/getting-started/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/setup/install/external-controlplane/snips.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/docs/setup/install/helm/snips.sh
--> boilerplate helm-preamble does not have snippets
generating snips: content/en/docs/setup/install/multicluster/multi-primary/snips.sh
generating snips: content/en/docs/setup/install/multicluster/multi-primary_multi-network/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/primary-remote/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/primary-remote_multi-network/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/verify/snips.sh
generating snips: content/en/docs/setup/install/multiple-controlplanes/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/setup/install/virtual-machine/snips.sh
--> boilerplate experimental does not have snippets
--> boilerplate experimental does not have snippets
--> boilerplate experimental does not have snippets
generating snips: content/en/docs/setup/upgrade/canary/snips.sh
--> boilerplate revision-tags-preamble does not have snippets
--> boilerplate revision-tags-usage does not have snippets
--> boilerplate revision-tags-default-intro does not have snippets
--> boilerplate revision-tags-default-outro does not have snippets
generating snips: content/en/docs/setup/upgrade/helm/snips.sh
--> boilerplate helm-preamble does not have snippets
--> boilerplate revision-tags-preamble does not have snippets
--> boilerplate revision-tags-usage does not have snippets
--> boilerplate revision-tags-default-intro does not have snippets
--> boilerplate revision-tags-default-outro does not have snippets
generating snips: content/en/docs/tasks/extensibility/wasm-module-distribution/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/jaeger/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/opencensusagent/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/skywalking/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/zipkin/snips.sh
generating snips: content/en/docs/tasks/observability/gateways/snips.sh
generating snips: content/en/docs/tasks/observability/logs/access-log/snips.sh
generating snips: content/en/docs/tasks/observability/logs/otel-provider/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/customize-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/querying-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/tcp-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/using-istio-dashboard/snips.sh
generating snips: content/en/docs/tasks/policy-enforcement/rate-limit/snips.sh
generating snips: content/en/docs/tasks/security/authentication/authn-policy/snips.sh
generating snips: content/en/docs/tasks/security/authentication/claim-to-header/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/security/authentication/jwt-route/snips.sh
generating snips: content/en/docs/tasks/security/authentication/mtls-migration/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-custom/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-deny/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-dry-run/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/security/authorization/authz-http/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-ingress/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-jwt/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-tcp/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-td-migration/snips.sh
generating snips: content/en/docs/tasks/security/cert-management/plugin-ca-cert/snips.sh
generating snips: content/en/docs/tasks/security/tls-configuration/workload-min-tls-version/snips.sh
generating snips: content/en/docs/tasks/traffic-management/circuit-breaking/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-control/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-gateway/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-gateway-tls-origination/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-kubernetes-services/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-tls-origination/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/http-proxy/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/snips.sh
generating snips: content/en/docs/tasks/traffic-management/fault-injection/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/gateway-api/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-control/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-sidecar-tls-termination/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-sni-passthrough/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/kubernetes-ingress/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/secure-ingress/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/before-you-begin/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/cleanup/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/distribute/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/failover/snips.sh
generating snips: content/en/docs/tasks/traffic-management/mirroring/snips.sh
generating snips: content/en/docs/tasks/traffic-management/request-routing/snips.sh
generating snips: content/en/docs/tasks/traffic-management/request-timeouts/snips.sh
generating snips: content/en/docs/tasks/traffic-management/tcp-traffic-shifting/snips.sh
generating snips: content/en/docs/tasks/traffic-management/traffic-shifting/snips.sh
* Update test.sh
* Add release note for istioctl 1.17 auth plugin removal
Signed-off-by: Keith Mattix II <keithmattix2@gmail.com>
* Respond to PR comments
Signed-off-by: Keith Mattix II <keithmattix2@gmail.com>
* Put version in backticks
Signed-off-by: Keith Mattix II <keithmattix2@gmail.com>
---------
Signed-off-by: Keith Mattix II <keithmattix2@gmail.com>
* build an archive of v1.16 in master
* update data/versions.yml and archive index page
* advance master to release-1.18
* Fix lint by moving back to older files - Note automated job will fail lint.
* Temporarily disable the istioctl-analyze test
* Termporarily remove the Performance page from the website
* Update preformance links to point to doc's relese version or latest existing page.
* Fixup another link
* Migrate ingress-sni-passthrough test to profile minimal
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix after snapshot test
Signed-off-by: Faseela K <faseela.k@est.tech>
* update minimal profile
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix cleanup test error
Signed-off-by: Faseela K <faseela.k@est.tech>
* review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix some wrong or inaccurate translations
* fix
* fix
Co-authored-by: Michael <haifeng.yao@daocloud.io>
---------
Co-authored-by: Michael <haifeng.yao@daocloud.io>
* WIP - test
* Fix verbosity option
* Echo config
* REplace nc with echo
* Put nc back in but add a sleep
* Final update (for now) adding delay so `nc` doesn't reset the kubeconfig
* Remove extra cat'ing of kubeconfig
* Update content/en/docs/tasks/traffic-management/tcp-traffic-shifting/test.sh
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
---------
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* 2023 Istio Steering Contributor Seats
Signed-off-by: Faseela K <faseela.k@est.tech>
* Add IBM member
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Craig Box <craig.box@gmail.com>
* additional review comments
Signed-off-by: Faseela K <faseela.k@est.tech>
* add second member from Huawei
Signed-off-by: Faseela K <faseela.k@est.tech>
* fix order
Signed-off-by: Faseela K <faseela.k@est.tech>
* remove [] for missing link
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix order of members
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Craig Box <craig.box@gmail.com>
* Update content/en/blog/2023/steering-contribution-seat-results/index.md
Co-authored-by: Craig Box <craig.box@gmail.com>
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Craig Box <craig.box@gmail.com>
* Clarify gateway canary upgrade
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update index.md
---------
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update custom ca integration with k8s CSR demo to include foo and
bar namespace creation and remove an unnecessary tab from the
sleep pod command.
Signed-off-by: jaellio <jaellio@microsoft.com>
* Fix lint error
Signed-off-by: jaellio <jaellio@microsoft.com>
---------
Signed-off-by: jaellio <jaellio@microsoft.com>
* Announce IstioDay at KubeCon Europe 2023
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Mitch Connors <mitchconnors@gmail.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Update index.md
* Remove social hour
Signed-off-by: Faseela K <faseela.k@est.tech>
* Apply suggestions from code review
Co-authored-by: Craig Box <craig.box@gmail.com>
* fix lint
Signed-off-by: Faseela K <faseela.k@est.tech>
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Mitch Connors <mitchconnors@gmail.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Craig Box <craig.box@gmail.com>
* Enhance docs for revision tags and add tests
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test failures
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix lint failure
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix test failures
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix cleanup test failures
Signed-off-by: Faseela K <faseela.k@est.tech>
* Fix cleanup for canary upgrade tests
Signed-off-by: Faseela K <faseela.k@est.tech>
* add profile none
Signed-off-by: Faseela K <faseela.k@est.tech>
* review comments
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* make gen
Signed-off-by: Faseela K <faseela.k@est.tech>
Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Add more context
* Update content/en/docs/ops/configuration/traffic-management/network-topologies/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/ops/configuration/traffic-management/network-topologies/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/ops/configuration/traffic-management/network-topologies/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Update content/en/docs/ops/configuration/traffic-management/network-topologies/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* As per discuss in https://github.com/istio/istio/pull/42962#issuecomment-1402236303
* Lint fix
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Add PDB and HPA example for gateway-api
* Apply suggestions from code review
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* gen
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Istio Automation