Commit Graph

49 Commits

Author SHA1 Message Date
Shriram Rajagopalan 3f0eb787e5 multi-cluster over gateways (#2713)
* some diagrams for multi-cluster

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* nits

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* tweaks

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* section index

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* remove ...

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* page description ends with a period

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* completing the doc

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* flat network

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* multicluster to federation

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* federation

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* multicluster-install

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* fix section title

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* proofer

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* html proofing again

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* final nit

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* nits

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* spell

Signed-off-by: Shriram Rajagopalan <shriramr@vmware.com>

* Address review comments and other improvements

* a couple more nits

* fix build error

* add missing end tag

* fix lint errors

* mention decentralized pilot
2018-10-12 13:46:10 -04:00
Martin Taillefer a2026aab5e
Clean up a bunch of loose ends (#2745) 2018-10-05 22:21:56 -07:00
Martin Taillefer 0a4264417f
Site improvements (#2633)
- Use a new approach to managing icons. This has two primary benefits:

  - It makes it possible to color the icons such that they look good in the
    dark theme. Previously, the icons were rendered in black on dark grey when
    using the dark theme.

  - The average payload size for our web pages is reduced and we better use the
    browser cache.

- The new icon approach makes it possible to remove our dependency on the fontawesome
  package, which further slims down our payload requirement

- Refresh our iconography for a slightly lighter look.

- Remove the extra thick left-hand border of text blocks to lighten the
look.

- Added a "NN minutes to read" indication on top of each page. This is
only displayed if the count is > 1 minute.

- Added a calendar icon next to the blog post date.

- Exposed a bunch of strings that were buried in CSS/JS to translation.

- Add the 'keywords:' front-matter fields to the Hugo archetypes.
2018-09-17 08:52:23 -07:00
Vadim Eisenberg 9167adaece add using openssl for troubleshooting HTTPS egress gateway (#2622) 2018-09-15 20:00:23 -07:00
Vadim Eisenberg bb22b22308 Use kubectl with EOF instead of cat with pipe (#2620)
* handle kubectl create/apply -f - <<EOF

in the same way as "cat <<EOF | kubectl apply -f -"

* replace cat <<EOF | kubectl apply/create -f - with kubectl apply/create -f - <<EOF
2018-09-15 14:37:23 -07:00
Frank Budinsky cc69a69ce2
Some clarifications in ingress/egress examples (#2556)
* Some clarifications

* improve wording

* spelling
2018-09-10 14:40:43 -04:00
Vadim Eisenberg 74c98d51ab Egress Gateway mTLS origination advanced example (#2268)
* initial version

* add the steps to Generate client and server certificates and keys section

* extend the description of the example

explain about the NGINX service

* add creating namespace, secrets and nginx configuration

* add creating of nginx-configmap

* add deployment of NGINX

* finalize the NGINX config

* move creating client certificates into the section of redeploying Egress gateway

* add instructions for generating and deploying istio-egressgateway.yaml

* update the description

* nginx.example.com -> my-nginx.mesh-external.svc.cluster.local

* change the title and description to mutual TLS to extrnal services

* add mTLS origination and cleanup

* change the port of nginx to 443

* update the output and the log with actual content

* add test NGINX deployment section

* add missing dot in page description

* Nginx -> NGINX

* change dots to semicolons before command blocks

* add volumes to the sleep deployment

* add sending requests to the NGINX server

* renamed the directory: mtls-egress-gateway -> egress-gateway-mtls-origination

* remove redundant whitespaces

* fix dead link (missing leading slash)

* change the name of the port 443 to be https and protocol HTTPS

* add endpoints section to the service entry

* replace internal kubernetes address with nginx.example.com

* change we to you

* expand the introduction to explain using NGINX and nginx.example.com

* remove before you begin section

* use sleep container in the default namespace to test both NGINX and egress gateway

* add port 80 to the ServiceEntry

* remove the second definition of the ServiceEntry

* use resolve option in testing mTLS

* change container name from egressgateway to istio-proxy

* simplify the introduction

* make Egress Gateway lower case

* make the introduction present tense

* replace pushd/popd with cd, since they are not POSIX

* add missing article

* remove cross referencing with regard to generating certificates/keys

* add "namely" to mesh-external namespace

* the NGINX -> the NGINX server

* sleep container -> sleep pod

* rephrase the text about --resolve option of curl

* rephrase the sentence about prompts

When prompted, select `y` for all the questions. ->
Select `y` for all prompts that appear.

* move egress-gateway-mtls-origination into advaanced gateway examples

* fixed links to the advanced gateways examples
2018-09-07 09:14:12 -04:00
Vadim Eisenberg a0e6e2aac5 configure NAT devices to drop packets that do not originate at the egress gateways and add a section on Kubernetes network policies (#2275)
* add "configuring NAT devices to drop packets that do not originate at the egress gateways"

* add Network Policy section

* make sentences present tense

* remove the labels

* rewrite the additional security considerations section

* Network Policy -> network policy

* add cleanup step for the configuring HTTPS egress gateway section

* a malicious application attacks -> attackers bypass

* egressgateway -> egress gateway

* kube-system DNS service -> the kube-system DNS service

* test-egress namespace -> the test-egress namespace

* no Istio sidecar was attached -> with no Istio sidecar attached

* must succeed -> will succeed

* by first enabling, then redeploy
2018-09-04 08:03:07 -07:00
Vadim Eisenberg 6b97bf6b62 change the name of the Envoy's container in egress gateway to istio-proxy (#2304)
according to https://github.com/istio/istio/pull/7566
2018-08-29 19:51:10 -04:00
Frank Budinsky 95bd707886
A few wording tweaks (#2343) 2018-08-22 10:24:07 -04:00
Vadim Eisenberg f84eb545a2 Rewrite ingress without tls termination example (#2342)
* remove ingress without tls termination example

* add ingress without tls termination example
2018-08-22 09:28:31 -04:00
Vadim Eisenberg e57d5c86a1 [WIP] Rename advanced egress examples (#2331)
* examples/advanced-egress -> examples/advanced-gateways

* fix the links

* complete fixing links
2018-08-21 16:19:33 -04:00
Vadim Eisenberg 7f1848f7d5 TLS ingress gateway for HTTPS (#2294)
* initial version

* remove deploying sleep, use the sidecar proxy of nginx itself

* add gateway configuration

* add "task" after Securing Gateways

* Secrets -> a Secret

* NGINX -> NGINX server

* add explanation of what the example will do, to the introduction

* add explanations of the output of curl (server's certificate)

* remove redundant empty line

* fix a tag

* fix a bare URL

* remove redundant whitespace
2018-08-19 11:57:33 -07:00
Martin Taillefer 5e29d61ff2
Bunch of site fixes & improvements. (#2306)
- Correct the use of OpenGraph annotations. I used the wrong attribute name, so the
annotations were never recognized.

- Added support for Twitter cards to our site, improving the experience of referencing
the site from Twitter posts.

- Added support for the twitter: front matter field for use in blog posts. Specifying this
front-matter entry will show the author's twitter address on the blog post, and will
add a Twitter card entry to the page noting the author's address.

- Renamed the page_icon front matter field to just icon to be consistent with other
entries.

- Made it so the subtitle front matter field can be used anywhere, not just on blog posts.

- Added a lint check to ensure subtitles don't end with a period.

- We now insert an "author" metadata entry whenever the attribution: front matter
field is used.
2018-08-19 11:51:03 -07:00
Jimmy Song 91d2481bc5 Delete special chars and turn on HTML checking (#2292)
* Delete special chars and turn on HTML checking

- Refer to #2289 and issue #2290
- Delete the special chars in Chinese content
- Turn on HTML checking to highlight problems

* delete the redundant period
2018-08-19 07:42:20 -07:00
Guang Ya Liu 670fb9eba0 Highlight "Istio multicluster" in example document. (#2196) 2018-08-16 09:49:34 -07:00
Iris 65a1638ef4 add IKS-ICP hybrid multicluster example (#2169) 2018-08-09 06:50:36 -07:00
Martin Taillefer fd290dc73e
Improve linting (#2148)
- We now detect text blocks that are incorrectly indented.

- We now detect image captions that end in a period.

- We now detect page descriptions that don't end in a period.

- CircleCi now runs linting without minifying HTML first, improving perf and
improving error output.

- In CircleCi, we now have a per-build cache for HTML proofer output. This
helps reduce the frequency of link timeout errors.

- Fix errors flagged by the above new lint checks.
2018-08-04 08:44:06 -07:00
Vadim Eisenberg 8e1b9fc557 Move egress tasks to examples (#2106)
* add Advanced Egress Control section in Examples

* move egress gateway and egress tls origination tasks to advanced egress examples

* fix the links and replace task with example
2018-08-01 06:30:41 -07:00
Jason Young 2a852d1408 fix kubectl output (#2100)
fixes https://github.com/istio/istio.github.io/issues/2066
2018-07-31 16:55:40 -07:00
Tim Swanson 8c16cc9c33 GKE multicluster example: Fixes and uninstall section addition (#2059)
* GKE multicluster example: Fixes and uninstall section addition

- fix same copy paste errors in IBM cloud version as well

* Fix spelling error
2018-07-30 11:00:40 -07:00
Guang Ya Liu 8461ec14f5 Add IBM Cloud Private Istio multicluster deployment example. (#2029)
* Add IBM Cloud Private Istio multicluster deployment example.

* Addressed sdake's comments.

* Second round review from sdake.
2018-07-30 03:57:40 -07:00
Steven Dake adc352c034 Add _index.md for multicluster examples (#2031) 2018-07-29 14:32:53 -07:00
Martin Taillefer 1c300c99bd
Spelling improvements (#2037)
Remove a bunch of entries that shouldn't have been in the spelling dictionary
and correct content aoocrdingly.

I'm disabling the Chinese spell checking for now, since I'm not able to fix the
spelling errors that emerged there. Once this PR is in, I'll file an issue to get
those spelling errors addressed and checking reenabled.
2018-07-29 14:27:06 -07:00
Tim Swanson 5f0ac3ba0e Add GKE Istio multicluster deployment example (#2008)
* Add GKE Istio multicluster deployment example

* Fix first round of review comments

* Followup review comments and make downloadable yaml block

* Reorg dir to gke specific subdir
2018-07-28 06:55:40 -07:00
Andra Cismaru bf4b81f398 Correct the pod and svc spec requirements (#1971)
* Correct the pod and svc spec requirements

* Fix links

* Fix links

* Address code review comments

* Code review comments

* Consistent naming

* Keep the broken order
2018-07-27 17:19:40 -07:00
Jason Young c27351268b use kubectl for managing Istio API resources (#2002)
* use kubectl consistently throughout for Istio API resource C.R.U.D operations

xref: https://github.com/istio/istio.github.io/issues/1843

* fix typo

* review comments

* remove unnecessary instructions to use `replace` instead of `create`

* fix linter in `zh` content
2018-07-27 10:57:41 -07:00
Martin Taillefer 9d56f3dbe7
Various design changes. (#1976)
- Increase the size of the Copy button in preformatted blocks to make it stand out since it is the
most common used button.

- Shift the copy/download/print buttons in PRE blocks towards the left so they don't overlap the
scroll bar in large text blocks.

- Switch to new fonts.

- Instead of underlining <H2> headers, we now draw a blue bar above them.

- Add an "up level" button at the top of pages.

- Streamline the appearance of the next/previous page links at the bottom of most pages.

- Remove the right pointing arrows from index pages and see also sections. They were just
confusing.

- Add icons to the main pages.

- Slightly change the layout of the glossary page, more to come here.
2018-07-26 06:14:32 -07:00
Steven Dake 4ae9e7ea69 Clean up of the platform section (#1960)
* Clean up of the platform section

This cleans up the platform section into its own subdirectory.
I am not all that happy about how "see-also" works, but maybe that
is how it is meant to work, or alternatively I'm doing it wrong :)

* Apply reviewer comments and add the index file

_index.md was missing from prior commit accidentally.
Removed all "Platform setup for" text in all platform docs.

* Apply reviewer comments

Some wordsmithing.
weight = 3 is intentional to fit alphabet. Assuming nobody
will require ASCIIbetical.

* Fix US English lint errors

* Revert the Chinese translation of the platforms PR

The Chinese language version needs to be ported.  This PR
was merged manually which probably has broken the gate.
2018-07-25 14:11:45 -07:00
Dan Ciruli 0f69fc4752 New diagram for mesh expansion example (#1933) 2018-07-25 06:47:00 -07:00
Andra Cismaru 938eb8b40d Move each platform setup into its own file (#1948) 2018-07-25 06:30:26 -07:00
Frank Budinsky e005164581 Fix bookinfo consul instructions (#1946)
* Fix bookinfo consul instructions

* fix lint errors

* fix spelling error
2018-07-24 13:18:39 -07:00
Frank Budinsky 8f7a1d1b2f Clarify use of istioctl vs kubectl (#1893) 2018-07-20 11:53:35 -07:00
Frank Budinsky 466360e562 Create destination rules when running bookinfo (#1885)
* create destination rules when running bookinfo

* Update index.md
2018-07-20 06:14:35 -07:00
Andra Cismaru 78b4c20adf Extract platform prerequisites (#1834)
* Extract platform prerequisites

* Reorg

* Remove the inner pages from the menu

* Conform to the site directory structure

* Fix the link wording to match the title of the link and the uppercase

* Fix lint errors

* more lint errors
2018-07-17 22:49:37 -07:00
Frank Budinsky 7501ba05c3
workaround for hugo bug (#1856)
* workaround for hugo bug

* unindent div

* fix lint errors

* one more try

* try simpler text section
2018-07-17 13:19:37 -04:00
Rocky Shang a05a9fc28e add explict instructions to enable autoinject in ns (#1746) 2018-07-17 12:40:18 -04:00
Sven Mawson d8857391a1 Switch bookinfo install to use kubectl apply instead of istioctl create for ingress (#1837)
Randomly bit me since I didn't have istioctl in PATH, no need to use istioctl here.
2018-07-16 15:57:15 -04:00
Martin Taillefer 597f7ce3b4
Enable more linting rules (#1824)
Fix feported linting errors.
2018-07-15 07:49:11 -07:00
Frank Budinsky de49a21816
Fix references to bookinfo sample files (#1759)
* fix references to sample files

* fix mixer rule link
2018-07-11 09:41:15 -04:00
Isaiah Snell-Feikema f51f015108 Remove Eureka references (#1717) 2018-07-10 12:56:50 -07:00
Andra Cismaru 4e2b9233bc Create service subsets and move routing/route-rule* to networking/virtual-service* (#1715) 2018-07-10 11:52:29 -07:00
mtail 93a6627952 Fix typos. 2018-07-04 05:51:53 -07:00
Martin Taillefer 07ed229051
Simplify linking to GitHub content. (#1669)
- Add <github_file> <github_blob> and <github_tree> to make it simpler to link to the right
place on GitHub.

- Use these new sequences throughout the docs.

- Also, fix bad HTML generated for the TOC in certain cirsumstances.

- Fix extra blank line inserted at the bottom of indented code blocks.
2018-07-04 04:16:49 -07:00
Martin Taillefer 1d355094cf Simplify the Concepts section. (#1649) 2018-07-02 06:32:04 -07:00
mtail 0f8724351f Content fixes.
- Remove What's next sections since we now have auto-generated See also sections

- Fix a few incorrectly capitalized headers, "istio", "kubernetes", "sidecar"
2018-06-30 21:42:52 -07:00
Martin Taillefer 0541000be8
Switch from ``` to {{< text >}} to indicate text blocks. (#1644)
This fixes a number of cases of incorrect formatting of code blocks
throughout the site.
2018-06-30 07:11:21 -07:00
Vadim Eisenberg 201cbd5928 Add secure ingress task (#1590) 2018-06-28 06:50:03 -07:00
mtail e3c1f36859 Guides -> Examples
As agreed, in prep for the 1.0 launch.
2018-06-27 16:03:53 -07:00