Commit Graph

199 Commits

Author SHA1 Message Date
Justin Pettit e77f3e8e2d
Add authz-tcp user guide test. (#7176)
Force merge because of netlify flake
2020-05-11 10:25:00 -04:00
Frank Budinsky affe99f97a
More traffic management task tests (#7250)
* More traffic management task tests

* lint errors

* fix kubectl output

* fix arg check

* login to bookinfo

* curl --user

* temporary kludge for login not working

* fault injection test

* rename test

* fix cleanup

* timeouts tests

* regen

* make sure sleep pods are gone
2020-05-10 15:05:22 -07:00
Frank Budinsky dcfdce05dc
Delete all snippet generating code from istioio test framework (#7239)
* Cleanup and remove all snippet generateing from istioio test framework

* fix lint

* one more lint

* remove dead code
2020-05-08 06:07:34 -07:00
Shamsher Ansari f58fffb5d1
Update deprecated flags for meshConfig (#7236) 2020-05-07 09:54:26 -07:00
Frank Budinsky f45bc9e1a8
Remove obsolete '# ' uses from all tests (#7233) 2020-05-06 19:17:11 -04:00
Eric Van Norman 392a2bee14
Update test framework to use 1.6.0-beta.0 (#7214)
* Update test framework to use 1.6.0-beta.0

* Go back to copies from env var

* Add more test targets, fix mtls test (new PA added)

* Update to use Istio SHA from go.mod (convert to long SHA)

* Try and remove TAG from prow

* Debug TAG not being set

* Fix paralization issue

* Remove some extra output

* Review comments
2020-05-06 10:49:27 -07:00
Guy Templeton 9397d21b55
Correct Envoy Access Log links (#7226) 2020-05-05 16:47:09 -04:00
Oliver Liu 1e73594260
Restructure the cert management tasks. (#7209)
* Restructure the cert management tasks.

* Small fix.

* Fix references.

* Fix links

* Small fix.

* Update content/en/docs/tasks/security/cert-management/plugin-ca-cert/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Small fix.

* Change the weights.

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-05-04 14:57:29 -04:00
jacob-delgado 7cf02b617d
Update Authentication page (#7198)
Fixes https://github.com/istio/istio.io/issues/7194
2020-04-30 10:58:57 -07:00
Kenjiro Nakayama c2dcbfb63b
Fix format for warning message (#7193) 2020-04-30 07:00:15 -07:00
Gregory Hanson a83522e819
cleanup a few of of the commands in egress examples (#7189) 2020-04-29 15:08:40 -07:00
Adam Miller 737e8d90a3
Add docs for Classifying Metrics Based on Request or Response (#7150)
* Add draft content

* Corrections

* Added verification and troubleshooting steps

* Typo fix

* Bash fix

* Linter fixes

* Fix PR feedback

* Typo fix 5

* Linter fixes

* Adjusted language

* Using temp link for community testing day

* Update content/en/docs/tasks/observability/metrics/classify-metrics/index.md

Co-Authored-By: mandarjog <mandarjog@gmail.com>

* Added indents

* Update content/en/docs/tasks/observability/metrics/classify-metrics/index.md

Co-Authored-By: Nupur Garg <37600866+gargnupur@users.noreply.github.com>

* Update content/en/docs/tasks/observability/metrics/classify-metrics/index.md

Co-Authored-By: Nupur Garg <37600866+gargnupur@users.noreply.github.com>

* Update content/en/docs/tasks/observability/metrics/classify-metrics/index.md

Co-Authored-By: Nupur Garg <37600866+gargnupur@users.noreply.github.com>

* Update content/en/docs/tasks/observability/metrics/classify-metrics/index.md

Co-Authored-By: Nupur Garg <37600866+gargnupur@users.noreply.github.com>

* Linter fix 3

* Small change to trigger netlify

* Replace temp link

Co-authored-by: mandarjog <mandarjog@gmail.com>
Co-authored-by: Nupur Garg <37600866+gargnupur@users.noreply.github.com>
2020-04-29 12:09:36 -07:00
Jonh Wendell 30ea242d0d
Use `sniHosts` instead of `sni_hosts` in examples (#7178)
* Use `sniHosts` instead of `sni_hosts` in examples

* Trigger netlify
2020-04-29 07:55:32 -07:00
Adam Miller 6731953961
Add docs for Customizing Istio Metrics (#7137)
* first draft

* More updates

* Remove experimental tag

* Typos and linter fix

* Deleted redundant file

* Link to reference page

* Address PR comments

* Linter fix

* Updated procedure

* URL fix
2020-04-28 15:58:42 -07:00
Robin Whitmore 2dca907e87
Updated Lightstep topic with new Lighstep brand and products (#7123)
* Updated with instructions for LightStep Tracing vs. LightStep [x]pm (#4203)

* Remove [x]PM unless necessary (#4405)

These instructions are now for both LightStep [x]PM and LightStep Tracing.

* Updated with instructions for LightStep Tracing vs. LightStep [x]pm (#4203)

* remove bad dir

* fix graphic name

* Changed spelling of Lightstep

Changed spelling of "LightStep" to "Lightstep" due to brand changes.

* Update Lightstep 

Update for branding

* Change LightStep to Lightstep and removed bad link

* Change LightStep to Lightstep

* Change LightStep to Lightstep

* Change LightStep to Lightstep

* change LightStep to Lightstep

* remove changes from other langs

* merge changes from istio

* put branding changes back in

* resolve merge conflict

* fix lint issues and add LighStep back into .spelling

* Update content/en/docs/tasks/observability/distributed-tracing/lightstep/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-04-27 15:05:31 -04:00
Frank Budinsky 1fe7056ffa
Partial convert mirror test to new model (#7153)
Reverted the actual mirror test script, because mirror test seems to have some subtle failure when running with what seems to be the exact same commands via snips. Will investigate further in followup PR. Merging this one to get the generator changes.
2020-04-25 12:34:24 -04:00
Mitch Connors e1b4de48f0
Fix cleanup to delete authorization policy (#7142)
Fixes https://github.com/istio/istio/issues/23190
2020-04-23 11:18:12 -07:00
jacob-delgado 988cc4606d
Add docs for experimental tracing configuration (#7122)
* Add docs for customizing tracing configuration

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Fix linting error

* Caution the use custom_tags and gateways

* Spelling fixes; change to active voice

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

* Update based on comments

* Remove MeshConfig from ignored spelling

* Fix links

* Remove gateways warning

* Update content/en/docs/tasks/observability/distributed-tracing/configurability/index.md

Co-Authored-By: Douglas Reid <douglas-reid@users.noreply.github.com>

* Review comments

* Address nit in doc; link to jaeger

* Trace sampling is beta; other features are experimental

* Fix whitespace

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Rachael Graham <rachael.graham@ibm.com>
Co-authored-by: Douglas Reid <douglas-reid@users.noreply.github.com>
2020-04-23 08:25:16 -07:00
Frank Budinsky a7107678f5
Convert TCP traffic shifting test (#7131)
* Convert TCP traffic shifting test

* lint errors

* regen

* test disable spellcheck

* temporary disable gen-check

* disable inappropriate bash lint errors

* disable gen check

* one more regen

* reenable gen check

* remove -it options

* revert commands

* fix app health check outdated
2020-04-22 18:26:27 -07:00
Shamsher Ansari 290ff5fa8e
Add test for Request Timeouts (#6660)
* Add test for Request Timeouts

* Update test to extract snippets

* Apply suggestions from code review

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Fix lint error

* Use code snippets from bookinfo snips

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Remove sleep pods

* remove deprecated $snippet and use use verify func

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Skip test failure

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-04-22 10:10:28 -04:00
Istio Automation 8bc4139ee0
Fix doc in 'Egress Gateways with TLS Origination' (#7118)
The code in step 3 of Perform TLS origination with an egress gateway explains how to create egress Gateway for edition.cnn.com. port 80, so the title of this step should follow it.

Co-authored-by: Koki Tomoshige <36136133+tomocy@users.noreply.github.com>
2020-04-21 16:00:46 -04:00
Istio Automation 9071b1f385
Fix code in 'Authorization for TCP traffic' (#7117)
The pod of tcp-echo which is asked its podIP is in `foo` namespace, so  the `kubectl get` should specify the namespace as `foo`.

Co-authored-by: Koki Tomoshige <36136133+tomocy@users.noreply.github.com>
2020-04-21 16:00:16 -04:00
Steven Dake d6e9f4b92b
Retire helm documentation as we use a protobuf (#7106)
* Retire helm documentation as we use a protobuf

The new rendered source of truth is:
https://preliminary.istio.io/docs/reference/config/istio.operator.v1alpha1/

This is rendered from the API repo protobuf which (may) need description fields
set. That protobuf is here:

https://github.com/istio/api/blob/master/operator/v1alpha1/operator.proto

* Follow the flowchart

The flowchart is not quite right and could use some improvement.

* Update content/en/blog/2019/performance-best-practices/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-04-21 07:55:44 -07:00
lei-tang f8fd68c04b
User guide tests for DNS certificate management (#7103)
* User guide tests for DNS certificate management

- Add user guide tests for DNS certificate management
- Remove user guide's dependency on jq

* Use _verify_contains function
2020-04-21 07:32:39 -07:00
lei-tang 96073364ea
User guide tests and remove manual steps for plugging in CA cert (#7085)
* User guide tests and remove manual steps for plugging in CA cert

- Add user guide tests for plugging in CA cert
- Remove the manual steps in the user guide of plugging in CA cert
to make it easier for an user to try the guide.

* Fix SC2046 lint error and the trafficmanagement test errors
2020-04-17 09:16:56 -07:00
John Howard 9af39e2f0e
Use standard ports for telemetry exposure (#7069)
* Use standard ports for telemetry exposure

Blocker for https://github.com/istio/istio/issues/22911

* Full update and include HTTPS

* Fix link

* Remove from ports table

* Apply suggestions from code review

Co-Authored-By: Rachael Graham <rachael.graham@ibm.com>

Co-authored-by: Rachael Graham <rachael.graham@ibm.com>
2020-04-16 13:20:33 -07:00
Frank Budinsky f2cf780bfb
Update doc test README (#7080)
* Update doc test README

* add sh

* tweaks

* formatting

* format

* fix comment

* wording

* convert mtls migration task

* Update tests/README.md

Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>

* Update tests/README.md

Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2020-04-15 08:44:18 -07:00
John Howard 4ca257992a
Refactor Secure Ingress tasks (#7025)
* Refactor Secure Ingress tasks

Ingress SDS is now the default and recommended. This removes the file
mount task, which is no longer recommended and will avoid confusion, and
cleans up the task a bit. I also documented the new supported secret
formats.

* use archive
2020-04-14 08:53:28 -07:00
Frank Budinsky 3b59501872
Generate test snippets from md files POC (#7044)
* Generate test snippets from md POC

* fixes

* fix python lint

* fix snip source

* improvements

* update snip calls

* add copyright header

* lint errors

* lint error in md instructions

* better default snip_id

* run test without snippet gen

* gofmt

* fixes

* fix path

* fixes

* fix verify
2020-04-14 07:13:44 -07:00
Eric Van Norman 55accd83b4
Update base64 -d to --decode (#7039)
* Update base64 -d to --decode

* Fix additional -d to --decode change
2020-04-09 06:41:44 -07:00
John Howard 494b0d0219
Add documentation on Ingress support (#7012)
* Add documentation on Ingress support

Istio has supported Ingress for quite a while, but its not documented.
This explains how to use it and configure it.

Note to docs reviewers: Gateway is Istio's alternative to Kubernetes'
Inrgess object, and we prefer users to use Gateway. However, for reasons
like legacy users, we also support Ingress.

* fix lint

* fix lint

* fix lint

* improvements

.

* Apply suggestions from code review

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-04-03 11:51:30 -04:00
Eric Van Norman 1290482b63
Fix privildeged (#6997) 2020-04-02 08:12:33 -07:00
Jianfei Hu 8dc367d9fd
Add a tcpdump verification FAQ entry for mutual TLS effect proof. (#6922)
* add a tcpdump verification for mtls

* add period

* move to the migration doc.

* lint fixing

* address cmt.

* Apply suggestions from code review

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-03-24 13:30:11 -04:00
John Howard 6baafb5ef2
Remove cert-manager task with reference to new integration page (#6936)
* Remove cert-manager task with reference to new integration page

* fix alias

* Fix dead lines
2020-03-23 11:58:11 -07:00
John Pape 8ecc8fc10c
Add istiod to the glossary page (#6899)
* Add istiod to the glossary page

* Updated istio learning link.

* adding gloss links to first term usage in page

* Updated gloss links per review
2020-03-18 12:01:53 -04:00
Frank Budinsky 64d2c26267
Remove links to deleted istio_ca reference doc (#6895)
* Remove links to deleted istio_ca reference doc

* cacert->cacerts
2020-03-17 07:46:37 -07:00
lei-tang 2463045315
Update Istio DNS certificate document for Istio 1.5 (#6871)
* Update Istio DNS certificate document for Istio 1.5

* Revise overview based on review comments
2020-03-16 12:39:11 -07:00
tigran-a e8466022bd
Revert "cacerts secret to replace with istio-ca-secret (#6829)" (#6836)
This reverts commit d4eba6eb52.
2020-03-10 07:25:50 -07:00
tigran-a d4eba6eb52
cacerts secret to replace with istio-ca-secret (#6829)
Currently, 1.5.0 istiod is looking for istio-ca-secret, while in 1.4.x it was cacerts.
2020-03-09 13:21:37 -07:00
Istio Automation 0114e09f65
replace Citadel with Istio CA (#6825)
Since Citadel is now built in into istiod, the certificate authority should be called Istio CA

Co-authored-by: tigran-a <avanesovt@gmail.com>
2020-03-09 13:25:29 -04:00
Gregory Hanson 7f6ef186fc
remove mtls destination rules, apply patch instead of redeploy (#6805) 2020-03-09 08:56:02 -07:00
Gregory Hanson 3e8856ac1d
Traffic Mirror cleanup (#6787)
* automtls wording and remove broken sudo command

* remove confusing tip regarding auto mtls
2020-03-06 12:57:34 -08:00
Gregory Hanson 2adfb33c25
Remove MTLS DR from Egress Gateway Task (#6795)
* celan up destination rule differences for auto mtls on by default

* lint fixes
2020-03-06 12:12:56 -08:00
Yangmin Zhu 686f3b7967
authz: update TCP task to use tcp-echo (#6754) 2020-03-06 11:33:38 -08:00
Douglas Reid 280e4d9498
fix(telemetry): add deprecation notices to Mixer tasks (#6635)
Co-authored-by: douglas-reid <douglas-reid@users.noreply.github.com>
2020-03-06 09:59:56 -08:00
Diem Vu 055f5e480c
[Release-1.5] Delete auto-mTLS task (#6591)
* Delete auto-mTLS task

* Fix links

* Fix links

* Fix links on 1.5

* Fix links
2020-03-05 18:01:06 -08:00
Frank Budinsky 9fbae823c1
[Release-1.5] Remove tasks referring to the deprecated tool (#6587)
* Also remove faq mentioned it

* Also in egress task
2020-03-05 16:39:16 -05:00
Frank Budinsky 9c4f1bbc68
[Release-1.5] remove mixer references from egress tasks and deprecate where needed (#6734)
* remove mixer references from egress tasks and deprecate where needed

* lint fixes

* Update content/en/docs/tasks/traffic-management/egress/egress_sni_monitoring_and_policies/index.md

Co-Authored-By: mandarjog <mandarjog@gmail.com>

* Update content/en/docs/tasks/traffic-management/egress/egress_sni_monitoring_and_policies/index.md

Co-Authored-By: Eric Van Norman <ericvn@us.ibm.com>

Co-authored-by: Francois Pesce <fpesce@google.com>
Co-authored-by: mandarjog <mandarjog@gmail.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2020-03-05 16:37:56 -05:00
Istio Automation 0e350476f3
[Release-1.5] update certmanager part in the telemetry addon doc (#6741)
Co-authored-by: richardwxn <richardwxn@users.noreply.github.com>
2020-03-05 12:43:22 -08:00
Lin Sun cb8704c98d
[ImgBot] Optimize images (#6752)
*Total -- 3,308.25kb -> 3,017.43kb (8.79%)

/content/en/docs/tasks/observability/metrics/querying-metrics/prometheus_query_result_graphical.png -- 486.04kb -> 308.71kb (36.49%)
/content/en/docs/setup/getting-started/kiali-example2.png -- 295.32kb -> 191.83kb (35.04%)
/content/en/docs/tasks/observability/metrics/tcp-metrics/alpn-based-tunneling-protocol.svg -- 20.39kb -> 17.14kb (15.92%)
/content/en/docs/ops/deployment/architecture/arch.svg -- 21.16kb -> 21.01kb (0.72%)
/content/en/docs/concepts/security/node_agent.svg -- 227.49kb -> 226.11kb (0.61%)
/content/en/blog/2020/tradewinds-2020/architecture-post-istiod.svg -- 169.81kb -> 169.00kb (0.48%)
/content/zh/blog/2020/istio-agent/istio_agent.svg -- 413.85kb -> 412.47kb (0.33%)
/content/en/blog/2020/istio-agent/istio_agent.svg -- 413.85kb -> 412.47kb (0.33%)
/content/en/blog/2020/tradewinds-2020/architecture-pre-istiod.svg -- 607.59kb -> 606.27kb (0.22%)
/content/en/docs/ops/deployment/performance-and-scalability/latency_p90.svg -- 319.73kb -> 319.56kb (0.05%)
/content/en/docs/ops/deployment/performance-and-scalability/latency_p99.svg -- 333.03kb -> 332.86kb (0.05%)

Signed-off-by: ImgBotApp <ImgBotHelp@gmail.com>

Co-authored-by: Imgbot <help@imgbot.net>
2020-03-05 14:41:08 -05:00