Commit Graph

377 Commits

Author SHA1 Message Date
mtail e3ff3313e6 A few minor editorial changes. 2018-07-24 10:11:02 -07:00
lei-tang 8a43b3d1d8 Revert the PR 1744 as the yaml files have been added back (#1924)
* Revert the PR 1744 as the yaml files are added back

The PR 1744 fixes the non-existent yaml files in the description of Citadel health checking in
https://preliminary.istio.io/docs/tasks/security/health-check.html
reported by the issue https://github.com/istio/istio/issues/6922. Since
the PR https://github.com/istio/istio/pull/7178 adds back the removed
yaml files, the PR 1744 is reverted.
2018-07-24 09:46:20 -07:00
Dan Ciruli bfc17bb1fe New citadel (auth) diagram (#1929) 2018-07-24 07:50:40 -07:00
Steven Dake 1b2eeed706 Add release note about lacking Citadel Helm (#1937)
The Helm Citadel implementation will not make the 1.0 release.  We
can resolve this in later revisions.
2018-07-24 06:49:04 -07:00
mtail 18018adce4 Grammar fixes. 2018-07-24 06:45:37 -07:00
duderino f6aae3db69 Fixed stale filenames in the Kubernetes Quick Start. Replaced 'istio.yaml' with 'istio-demo.yaml' and 'istio-auth.yaml' with 'istio-demo-auth.yaml'. (#1720) 2018-07-24 06:29:05 -07:00
Guang Ya Liu 4773ac054a Removed redundant `--set`. (#1934) 2018-07-24 04:01:39 -07:00
Kent Rancourt 217c78af01 bookinfo doc fixes (#1817) 2018-07-23 20:36:23 -07:00
mtail 3dee29d873 Fix a linting error. 2018-07-23 17:27:29 -07:00
Dan Ciruli b1df371b92 New Authentication diagram (#1925) 2018-07-23 17:24:22 -07:00
Diem Vu 792675ad07 Update authentication policy tasks (#1891) 2018-07-23 14:17:13 -07:00
mtail 4337e873ac Replace funny quotation marks with normal ones. 2018-07-23 13:17:07 -07:00
Vadim Eisenberg 2bf4b91b73 Fix lint errors for egress gateway (#1922) 2018-07-23 13:14:49 -07:00
Limin Wang ed5e794e4d Blog post for Istio authrozation. (#1901) 2018-07-23 11:56:52 -07:00
Vadim Eisenberg 42a4a68833 Update tcp egress blog (#1908)
* un-split command lines

* split long text lines

* CA -> Citadel

* update the first paragraph, "you-language" and Service Entries instead of Egress Rules

* fix the subtitle: Egress Rules -> Mesh-external Service Entries

* ServiceEntry -> Service Entry

* add a note that the blog was updated

* Istio 0.3+ -> Istio 0.8+

* changed we/I-language into you-language

* remove mentioning HTTPS as a motivation for TCP egress control

HTTPS is handled now separately by TLS egress control

* replace route/egress rules by virtual services/service entries

* add using MYSQL_DB_HOST and MYSQL_DB_PORT environment variables

* put 1 into backticks

* add an output from the update table command

* instruct the users to apply the default destination rules

* do not use kube-inject in the commands

* add a reminder for users to make sure they applied the default destination rules

* use istioctl replace, update the output

* use bash-inlined service entry with bash variables

* specify a single IP address as a CIDR block with suffix 32

* update the output of deleting the virtual services

* remove kube-inject from deleting a deployment

* instruct the user how to set MYSQL_DB_IP for a local database

* change the update date to 23 of July

* I demonstrate you -> I demonstrate

* add a comma before respectively

* releasearchive -> release archive

* TLS -> HTTPS

* egress rule -> service entry

* remove a redundant empty line

* put the configuration item's path in backticks

* remove future work

* remove "Note:", remove the sentence of the old API to be removed

* data, outside -> data outside
2018-07-23 10:43:36 -07:00
Vadim Eisenberg 55a4a3361b Add egress gateway task to master, extended for mTLS and HTTPS (#1687)
* initial version of Egress Gateway for 1.0

* use HTTPS protocol for the egress gateway ports

* change troubleshouting section regarding mutual TLS

just direct users to read the mutual TLS page regarding troubleshooting

* add egressgateway to .spelling

* remove "let's" prevent the "we language"

* fix lint errors

* rename Cleanup section names to more detailed names, to prevent lint errors

* add a section about directing HTTPS traffic thru egress gateway

* remove istio-system namespace from the HTTPS-related artifacts

* add a section for mutual TLS over HTTPS

* disable mTLS on Istio with mTLS between a sidecar and the egress gateway

* use * as a host in the gateway's definition

* clarify the fact that in HTTPS the original traffic is already encrypted

* use mTLS between sidecar and egress gateway

* use explicit host in gateways instead of *

* add subjectAltNames to the upstream of the sidecar proxy

* unite creating a gateway for mTLS and a destination to set SNI

* add a missing dot

* add destination rule for setting SNI for mTLS to all cases

* add deleting the destination rule for mTLS

* split a long line

* Rewrite the steps to create a service entry in a separate step

* use port 80 in the destionation rule for direct HTTP traffic without TLS origination

* remove redundant ServiceEntry definition

* mention DestinationRule for TLS origination

* rename port tls to tls-cnn

for future definition of multiple servers on the same port

* describe getting Envoy's stastics of istio-egressgateway
2018-07-23 10:47:52 -04:00
Martin Taillefer 5527dcbaf6
Switch uses of funny quotation marks to plain ones. (#1914)
- Use only standard quotation marks to avoid cut & paste stuff not working

- Put in a lint rule to prevent further use of non-plain quotation marks.
2018-07-22 08:48:03 -07:00
Stefan Büringer eb4c7be94b Minor doc fixes (#1910)
Fixed indentation and typos
2018-07-22 07:52:43 -07:00
LillyWu 10677f5c9a make a note to check options settings before override it (#1867) 2018-07-21 06:42:10 -07:00
Pengyuan Bian 98281c123f Add `add` to expression reference. (#1902) 2018-07-20 16:10:35 -07:00
Matthew Wringe c9f8715bee Add in missing galley permissions for OpenShift (#1899) 2018-07-20 13:53:35 -07:00
Tyler Berry 79b6418dd5 Mention including cluster state archive in GitHub issues (#1892)
* Mention including cluster state archive in GitHub issues

* Fix spelling by wrapping with backticks

* Indent with 4 spaces (MD007)

* Split into two paragraphs

* Use pre-formatted blocks

Followed instructions at
https://preliminary.istio.io/about/contribute/writing-a-new-topic/#embedding-preformatted-blocks

* Extract branch_name variable
2018-07-20 13:52:35 -07:00
mtail 3bb4f605f2 Update reference docs. 2018-07-20 13:29:08 -07:00
Frank Budinsky 094007ddff Traffic managment rule config concepts improvements (#1897) 2018-07-20 13:15:36 -07:00
gargnupur 23fd3046e0 Add port-forward cleanup step in distributed-tracing, fluentd, metric… (#1894)
* Add port-forward cleanup step in distributed-tracing, fluentd, metrics-logs and servicegraph tasks

* Fix Lint Errors
2018-07-20 13:14:35 -07:00
Frank Budinsky 8f7a1d1b2f Clarify use of istioctl vs kubectl (#1893) 2018-07-20 11:53:35 -07:00
Limin Wang e1e056744f Add End user authentication to feature list. (#1888) 2018-07-20 11:09:35 -07:00
Frank Budinsky 7e66c3f40a Remove v1alpha3 notice (#1890) 2018-07-20 07:24:35 -07:00
mtail a580eab41c Update reference docs. 2018-07-20 06:23:03 -07:00
Limin Wang 61fcfd9e9b Add back denier and listing adapters task doc (#1887)
* Add back denier and listing adapters task doc.

* Renamed and fixed lint errors.
2018-07-20 06:18:37 -07:00
Frank Budinsky 466360e562 Create destination rules when running bookinfo (#1885)
* create destination rules when running bookinfo

* Update index.md
2018-07-20 06:14:35 -07:00
Yossi Mesika 5e7684acd6 Updated upgrade instructions (#1883)
* Updated upgrade instructions

* Lint

* Update index.md
2018-07-20 06:08:35 -07:00
imgbot[bot] 488f6a18de [ImgBot] optimizes images (#1889)
*Total -- 1,282.33kb -> 712.54kb (44.43%)

/content/docs/tasks/telemetry/using-istio-dashboard/grafana-istio-dashboard.png -- 89.55kb -> 43.35kb (51.59%)
/content/docs/tasks/telemetry/using-istio-dashboard/istio-workload-dashboard.png -- 161.88kb -> 87.40kb (46.01%)
/content/docs/tasks/telemetry/distributed-tracing/istio-tracing-details.png -- 165.35kb -> 90.83kb (45.07%)
/content/docs/tasks/telemetry/querying-metrics/prometheus_query_result.png -- 204.91kb -> 114.43kb (44.16%)
/content/docs/tasks/telemetry/using-istio-dashboard/dashboard-with-traffic.png -- 172.64kb -> 96.60kb (44.05%)
/content/docs/tasks/telemetry/using-istio-dashboard/istio-service-dashboard.png -- 198.97kb -> 111.39kb (44.02%)
/content/docs/tasks/telemetry/distributed-tracing/istio-tracing-list.png -- 202.38kb -> 113.96kb (43.69%)
/content/docs/tasks/telemetry/servicegraph/servicegraph-example.png -- 86.63kb -> 54.59kb (36.98%)
2018-07-20 06:03:34 -07:00
gargnupur c764245027 Update Distributed Tracing Task with new screenshots (#1742)
Update "Collecting Metrics and Logs" task with new source and destination attributes

Updated based on reviews and added tcp metrics changes too

Update Prometheus Task

Update Using-Istio-Dashboard task

Updated fluentd and servicegraph tasks.
Also update distributed tracing and using-istio-dashboards tasks based
on feedback

Add new picture for servicegraph and indent using-istio-dashboard again

Fixed Linting Errors

Updating based on review

Updating based on review

Adding destination-rule-all-mtls for tcp metrics routing too

Add explanation for Inbound Workloads and Outbound Services for Workload Dashboards
2018-07-20 05:58:35 -07:00
Limin Wang 8973981880 Update authentication concept doc (#1886)
* Update authentication concept doc.

* Fix lint errors.

* Address comments and fixed some links.

* Remove feature stages change from this PR.

I will make a separate PR for it.
2018-07-19 19:10:37 -07:00
Frank Budinsky 3434e2bafc
Clarify timeout task (#1884)
* clarify response time

* corrections
2018-07-19 16:13:20 -04:00
Pengyuan Bian ec6a89bd5c Update default metrics page (#1874) 2018-07-19 06:16:40 -07:00
David Tesar 713f7b2591 Add AKS to Azure quickstart (#1805) 2018-07-19 06:05:49 -07:00
Vincent 68a964c7d3 fixed: link to k8s documents, #type-nodeport => #nodeport (#1881)
* fixed: link to k8s documents, #type-nodeport => #nodeport

* fixed: link to k8s documents, #type-nodeport => #nodeport
2018-07-19 04:23:36 -07:00
Yangmin 0b9e3aba5a update rbac api version to align with istio/istio#6874. (#1879) 2018-07-18 15:21:37 -07:00
Limin Wang fe1e01866c Update authorization feature. (#1876) 2018-07-18 14:12:36 -07:00
Tao Li cbf490c692 Add incremenetal TLS to feature list (#1863) 2018-07-18 14:11:36 -07:00
Douglas Reid d373c42c04 Update Telemetry features in feature-stages doc (#1862)
* Update Telemetry features in feature-stages doc

* Update index.md
2018-07-18 14:10:36 -07:00
Georgios Andrianakis de6b17bcf5 Fix the directory in which the Ansible playbooks can be found (#1873)
Relates to: https://github.com/istio/istio/pull/7207
2018-07-18 08:45:37 -07:00
Jimmy Song 863934a454 Chinese community translation and fix a markdown error (#1871)
* Chinese community translation and fix a markdown error

- Translate community page into Chinese
- Fix https overlay markdown style check error

* fix CI errors

- update Quick Start with Kubernetes
- update Prerequisites and Installation steps
- fix some broken links
2018-07-18 07:56:37 -07:00
Tim Swanson 1b11b09761 Multicluster: add details on enabling mTLS for control plane and app pods (#1833)
* Multicluster: add details on enabling mTLS for control plane and app pods

- describes deployment steps and includes an example deployment with commands

* fix review comments on wording
2018-07-18 07:39:37 -07:00
Spike Curtis 0376ee75e9 Clarify install in HTTPS overlay (#1857)
Signed-off-by: Spike Curtis <spike@tigera.io>
2018-07-18 04:54:17 -07:00
Steven Dake 664d811043 Add mixer telemetry relnote multicluster limitation (#1866) 2018-07-18 04:43:17 -07:00
Pengyuan Bian 82685030a4 Add two expressions. (#1840) 2018-07-18 04:41:19 -07:00
Douglas Reid 6cfbccc9b5 Update Mixer FAQ Entries (#1854) 2018-07-18 04:40:09 -07:00