Commit Graph

10 Commits

Author SHA1 Message Date
Vadim Eisenberg bb795b90c3 replace the statistics of envoy with envoy's log for TCP (#3018) 2019-01-03 08:12:03 -08:00
Vadim Eisenberg ddd3ad1788 Replace before you begin egress with boilerplate (#3022)
* add before-you-begin-egress boilerplate and use it in one case

* move the boilerplate into content

* replace before-you-begin section for egress task/examples

* remove egress related details from the boilerplate
2019-01-03 07:52:42 -08:00
Vadim Eisenberg de3d56dd81 change the name of the Envoy's container in egress gateway (#2896)
egressgateway -> istio-proxy
2018-11-20 07:31:38 -08:00
Frank Budinsky 830629db39
Wildcard egress example clarifications and improvements (#2899)
* cleanup and reorg wildcard egress example

* nits

* few more tweaks

* fix linter errors

* address review comments
2018-11-19 12:16:47 -05:00
Frank Budinsky 93a928bc48
Improvements to egress examples (#2850)
* Reorganize egress gateway and TLS origination examples

* More cleanup

* fix circleci errors

* nits

* another nit

* address review comments

* fix broken link
2018-11-08 10:44:10 -05:00
Vadim Eisenberg 9167adaece add using openssl for troubleshooting HTTPS egress gateway (#2622) 2018-09-15 20:00:23 -07:00
Vadim Eisenberg bb22b22308 Use kubectl with EOF instead of cat with pipe (#2620)
* handle kubectl create/apply -f - <<EOF

in the same way as "cat <<EOF | kubectl apply -f -"

* replace cat <<EOF | kubectl apply/create -f - with kubectl apply/create -f - <<EOF
2018-09-15 14:37:23 -07:00
Vadim Eisenberg a0e6e2aac5 configure NAT devices to drop packets that do not originate at the egress gateways and add a section on Kubernetes network policies (#2275)
* add "configuring NAT devices to drop packets that do not originate at the egress gateways"

* add Network Policy section

* make sentences present tense

* remove the labels

* rewrite the additional security considerations section

* Network Policy -> network policy

* add cleanup step for the configuring HTTPS egress gateway section

* a malicious application attacks -> attackers bypass

* egressgateway -> egress gateway

* kube-system DNS service -> the kube-system DNS service

* test-egress namespace -> the test-egress namespace

* no Istio sidecar was attached -> with no Istio sidecar attached

* must succeed -> will succeed

* by first enabling, then redeploy
2018-09-04 08:03:07 -07:00
Vadim Eisenberg 6b97bf6b62 change the name of the Envoy's container in egress gateway to istio-proxy (#2304)
according to https://github.com/istio/istio/pull/7566
2018-08-29 19:51:10 -04:00
Vadim Eisenberg e57d5c86a1 [WIP] Rename advanced egress examples (#2331)
* examples/advanced-egress -> examples/advanced-gateways

* fix the links

* complete fixing links
2018-08-21 16:19:33 -04:00