* Add documentation on Ingress support
Istio has supported Ingress for quite a while, but its not documented.
This explains how to use it and configure it.
Note to docs reviewers: Gateway is Istio's alternative to Kubernetes'
Inrgess object, and we prefer users to use Gateway. However, for reasons
like legacy users, we also support Ingress.
* fix lint
* fix lint
* fix lint
* improvements
.
* Apply suggestions from code review
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
* Rename PKI to Identity Issuance
Calling Identity issuance as PKI has resulted in confusion among customers expecting to see content about CRLs, OCSP, and other frills associated with standard PKIs. The content of that section is about securely issuing identities to the workloads by embedding the identity in the X509 certificate.
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
Co-Authored-By: Justin Pettit <jpettit@ovn.org>
* Update content/en/docs/concepts/security/index.md
* Update content/en/docs/concepts/security/index.md
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Oliver Liu <yonggangl@google.com>
Co-authored-by: Justin Pettit <jpettit@ovn.org>
The mTLS migration task in the docs was updated to use
PeerAuthentication instead of Policy and DestinationRules, but the
tests were never updated. This updates the test script to be inline
with the docs.
The `TestTCPTrafficShifting` test script relies on fetching the port
named "tcp" on the istio-ingressgateway service, but that port is not
present in the default installation profile -- only in the demo
profile. This patches the service to add the port in the setup
script, and also fixes the usage of `nc` in the test script.
* Make site linter more configurable
* change brittle github links error to warning
* turn off external link checking by default
* update makefile
* fix target lint
* remove cross language link
* better variable name
* Fix links for removal of helm installation directory
* Point to archive version of istioctl upgrade instructions
* Add Aporeto to lint ignores for now.
* Provision a certificate to an application through a sidecar
* Revisions based on the review comments
* Move the document location
* Revise install command based on the review comments
* Make the blog more concise
* Explain the use case
* Revised based on comments
* Revise based on review comments
* Revised based on the review comments
* Revise based on review comments
* Revise based on review comments
* Revise based on review comments
* Revise based on review comments
* Revise based on review comments
* add a tcpdump verification for mtls
* add period
* move to the migration doc.
* lint fixing
* address cmt.
* Apply suggestions from code review
Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
potterhe
SataQiu
Istio Automation
Frank Budinsky
John Howard
Shriram Rajagopalan
Eric Van Norman
Brad Ison
Nupur Garg
shinji3887
Nathan Mittler
Yangmin Zhu
Steven Dake
Francois Pesce
Kebe
lei-tang
Jianfei Hu
Suchith J N
Gau Liang
Xinnan Wen
Christian Posta
Jason Young