Commit Graph

653 Commits

Author SHA1 Message Date
Whitney Griffith be4221a2d9
Update CEL documentation to capture type checking errors. (#14107)
* Update CEL documentation to capture type checking errors.

Signed-off-by: Whitney Griffith <whgriffi@microsoft.com>

* address comments

Signed-off-by: Whitney Griffith <whgriffi@microsoft.com>

* address comments

Signed-off-by: Whitney Griffith <whgriffi@microsoft.com>

* fix lint issues

Signed-off-by: Whitney Griffith <whgriffi@microsoft.com>

* fix lint issues

Signed-off-by: Whitney Griffith <whgriffi@microsoft.com>

---------

Signed-off-by: Whitney Griffith <whgriffi@microsoft.com>
2023-11-15 15:36:04 -08:00
Frank Budinsky 83bae38f99
gateway-api: use targetRef instead of selector for auth/authz gateway… (#14157)
* gateway-api: use targetRef instead of selector for auth/authz gateway refs

* regen

* fix yaml

* regen
2023-11-15 07:57:05 -08:00
Eric Van Norman 31dde271c5 advance master to release-1.21 2023-11-14 17:19:21 +00:00
Kuat 0de72af162
docs: update to use PROXY config (#13568)
* docs: update to use PROXY config

Signed-off-by: Kuat Yessenov <kuat@google.com>

* gen

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-11-13 18:08:28 -08:00
Eric Van Norman a72fb91721
Update istio test ref to 1.20.0-rc.0 (#14091)
* Update istio test ref to 1.20.0-rc.0

* Remove added toolchain line

* Run make gen

* Update to set ENABLE_EXTERNAL_NAME_ALIAS to false (default) for testing

* Move gateway tcp-traffic shifting to demo

* Change gateway tcp-traffic shifting to not remove istio in demo...

* Change gateway tcp-traffic shifting to remove istiooperator in demo...

* Update to latest 1.20 commit

* Change to be a minimal test
2023-11-10 12:25:21 -08:00
visheshtha 1622e5f0bc
Added the information about setting the gateway_url (#14058) 2023-10-26 07:18:29 -07:00
Eric Van Norman a8ccc83d83
Preare istio.io for 1.20 as other repos have branched. (#14025) 2023-10-19 08:29:10 -07:00
Istio Automation e6f670461f
Automator: update istio@ test reference (#13956) 2023-10-16 06:26:37 -07:00
Kalya Subramanian 56eb12c044
AKS Egress instructions (#13967)
Signed-off-by: Kalya Subramanian <kasubra@microsoft.com>
2023-10-09 12:37:22 -07:00
Eric Van Norman 9b28e18fd8
Re-enable the tcp-traffic-shifting tests (#13970) 2023-10-05 09:28:36 -07:00
crossoverJie f4910f7156
telemetry: change ALL_METRICS to REQUEST_COUNT (#13929) 2023-09-26 06:27:03 -07:00
Frank Budinsky 86eff5d563
gateway-api: setup tips and warnings corrections (#13899)
* gateway-api: setup tips and warnings corrections

* regen

* remove obsolete snip
2023-09-19 16:28:03 -07:00
Frank Budinsky 6cd8adb17a
Add gateway-api instructions to timeouts task (#13208)
* [WIP] Task for testing experimental gateway-api timeouts

* tweak wording

* lint and regen

* update tabs

* fractional timeout values not supported in gateway-api

* add gateway api test

* remove blog
2023-09-19 10:01:53 -07:00
Eric Van Norman 63d262dba8
Update istio test ref, hardcode sha from Gateway API to non-release (#13892)
* Update istio test ref, do not strip sha from gateway version

* Rework sha, remove code to update gateway-api automatically

* Update Makefile to use full sha

* Some minor tweaks

* Some minor tweaks

* Move sha logic to a bash script

* Remove extraneous expected line in dns-proxy test

* fix tab/space
2023-09-18 12:14:54 -07:00
Eitan Suez 4924df7e4b
Update index.md (#13879)
* Update index.md

corrects example httproute for mesh traffic in k8s gw api ingress task.  the backendRefs should be part of the one rule that applies the filters.

* also updates snips.sh in gw api ingress task
2023-09-15 11:15:51 -07:00
Eric Van Norman cf43397b2f
Update to main branch commit (#13819)
* Update to main branch comit

* Update istio api and client-go commits

* Update tests to also work on arm64 machines

* Change multi-cluster cleanup to use --purge like the page

* Change multi-cluster cleanup to use --purge like the page

* Try changing uninstall order to see if it follows second uniunstall

* Try doing one uninstall instead of spinning both of them

* Move back to commit before suspected PR

* make gen

* Update to commit with fix for --context

* Update to latest branch disabling tcp-traffic-shifting tests
2023-09-11 09:40:29 -07:00
Wei Shan Sun b484cfa528
Add more Info to locality load balancing page (#13682)
* create single cluster load balancing example& modify keywords

* modify keywords and remove see also section from locality load balancing

* remove single cluster lb page from examples

* create a standalone example for single cluster load balancing

* fix lint

* remove traffic-shifting from keywords

* fix typos

* organize locality-load-balancing page

* delete standalone single-cluster-lb page & add a tip for single-cluster lb

* remove use case description

* add original text back in

* update test file

* fix lint

* rephrase paragraph

* commit suggestion for the tip

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* update test file

* suppress generation of the snips

* move tip to the start of the before-you-begin section

* add step 3 to tell users to deploy istiod and the app to the nodes

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* fix format for the commands

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* move tip before Environment Variables section

* reformat the tip section

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-09-05 12:42:52 -07:00
Eric Van Norman 867381b258 advance master to release-1.20 2023-09-05 16:32:26 +00:00
Frank Budinsky 3951a73b02
Improve mesh warning messages (#13798) 2023-08-31 12:14:08 -07:00
John Howard 739d3d1fed
Update GAMMA status (#13794)
The terminology is bit confusing; before it was not experimental upstream at all -- it was undefined. Now its really experimental, so its not "pending agreement"
2023-08-31 08:45:09 -07:00
Frank Budinsky e8e9b35f2c
gateway-api: doc tests should not run with alpha CRDs by default (#13782)
* gateway-api: Doc tests should not run with alpha CRDs by default

* Fix broken tests

* cleanup

* replace bad wikipedia server ip
2023-08-30 17:15:08 -07:00
Eric Van Norman 9c03812dc0
Update to istio 1.19.0-rc.0 + samples fix (#13769)
* Update to latest istio commit. Also use rc for gateway-api.

* Fix Makefile update-gateway-version

* Update istio to 1.19.0-rc1

* Remove wasm from envoy test

* Update gateway-api to rc-2.

* Revert gateway-api t0 0.7.1

* Update samples for core group

* Revert gateway-api to rc.1 to match istio repo
2023-08-29 08:27:27 -07:00
Frank Budinsky 113f9fd098
gateway-api: Service parentRef needs to specify core group (#13735)
* gateway-api: Service parentRef needs to specify core group

* regen
2023-08-16 13:56:36 -07:00
Eric Van Norman e0e010f089
prepare for v1.19 as istio source is already branched (#13691) 2023-08-05 14:21:02 -07:00
Frank Budinsky 49568809b2
Add gateway-api instructions to authn policy task (#13625)
* Add gateway-api instructions to authn policy task

* 10 -> 11

* fix test

* fix test again
2023-07-26 13:35:25 -07:00
Eric Van Norman f278e63825
Re-enable processing of gateway-api version in `make gen` (#13595)
* Re-enable processing of gateway-api version in `make gen`

* Update gateway-api to be the publicly released base version

* remove script and add awk in Makefile

* rebase and make gen
2023-07-18 17:43:55 -07:00
zirain 2f7b0690e8
move Telemetry API to alpha (#13585)
* move Telemetry API to alpha

* update status
2023-07-17 20:24:05 -07:00
Frank Budinsky 52658c57c3
JWT routing task fixes (#13570)
* JWT routing task fixes

* revert gtwapi

* fix test

* lint

* more lint
2023-07-14 12:58:43 -07:00
zirain b56f351f9c
security: correct command on jwt-route page (#13460)
* security: correct command on jwt-route page

* gen
2023-06-30 11:27:21 -07:00
ognyvrac c71712c34d
Add warning for TLS verification in TLS origination guide (#13472)
* TLS verification

* add whitespace

* fix indentation

* use relative url

* apply comments
2023-06-29 06:02:03 -07:00
Eric Van Norman 6fd97aa04d
Re-enable telemetry-api test (#13439)
* Re-enable telemetry-api test

* Run make gen

* Change to use default profile
2023-06-23 13:06:35 -07:00
Keith Mattix II 3c94567ce1
Change Istio Classic terminology to Istio APIs (#13385)
* Change Istio Classic terminology to Istio APIs

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Fix stutter

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Change back parallel structure formation

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

---------

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
2023-06-16 07:02:06 -07:00
Michael ba926d3006
fix a typo in authz-ingress (#13332) 2023-06-08 21:26:48 -07:00
Faseela K 01da15421a
Add docs for ocsp staple support (#13307)
* Add docs for ocsp staple support

Signed-off-by: Faseela K <faseela.k@est.tech>

* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-06-08 11:58:05 -07:00
wulianglongrd 15f812bdb6
add tips for using `[]` as a separator (#13188) 2023-06-08 08:15:05 -07:00
Wei Shan Sun 3a1d24e297
Update doc for internal IP ranges for egress control (#13287)
* clarify the internal IP ranges for IBM Cloud Kubernetes Service

* Trigger Build

* add example of the command output

* paraphrase the text

* update snips.sh
2023-06-08 06:30:04 -07:00
Eric Van Norman 91afadd482
Main branch has a non release gateway API. Changes to allow that. (#13313)
* Master has a non release gateway API. Changes to allow that.

* Grab a istio test ref from main branch

* <ove from istio.io/pkg to istio/istio/pkg

* revert one change

* update istio/api

* Run make gen

* disable failing test temporarily
2023-06-07 15:42:03 -07:00
Eric Van Norman af9705dd17 advance master to release-1.19 2023-06-07 14:31:17 +00:00
Faseela K 31fbb11a68
Enhance mTLS origination example (#13297)
* Enhance mTLS origination example

Signed-off-by: Faseela K <faseela.k@est.tech>

* rebase

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-06-07 00:08:03 -07:00
Kuat a985ac38a6
cleanup more usages of EnvoyFilter (#13301)
* cleanup more usages of EnvoyFilter

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix test

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-06-06 14:06:49 -07:00
Faseela K 8ba8228b1a
Add proxy-config secret command for verification (#13294)
* Add proxy-config secret command for verification

Signed-off-by: Faseela K <faseela.k@est.tech>

* fix test failure

Signed-off-by: Faseela K <faseela.k@est.tech>

* remove secure-ingress changes

Signed-off-by: Faseela K <faseela.k@est.tech>

* incorporate review comments

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-06-06 10:19:49 -07:00
Kuat 340ac45f6e
docs: update classify metrics page (#13296)
Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-06-06 08:08:55 -07:00
Faseela K 504290f56d
remove unused SE cleanup step (#13295)
Signed-off-by: Faseela K <faseela.k@est.tech>
2023-06-06 07:55:48 -07:00
Faseela K 5dfb323027
Document CRL usage (#13275)
* Document CRL usage

Signed-off-by: Faseela K <faseela.k@est.tech>

* incorporate review comments

Signed-off-by: Faseela K <faseela.k@est.tech>

* fix lint

Signed-off-by: Faseela K <faseela.k@est.tech>

* Update content/en/boilerplates/crl-tip.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-06-05 06:21:18 -07:00
Eric Van Norman ba7e7b9bad
Fix broken link to subzone (#13242) 2023-05-25 09:16:42 -07:00
Michael a4d4f8bb18
Fix indentations and remove unecessary step numbers (#13230)
* Fix indentations and remove unecessary step numbers in /security/authorization/

* revert tabset indentations and wrap some long clauses
2023-05-23 18:29:05 -07:00
Jackie Elliott da58f42dec
fix(): add missing cleanup instructions (#13076)
* fix(): add missing cleanup instructions

Part of #11720

Signed-off-by: jaellio <jaellio@microsoft.com>

* Remove unecessary uninstalls

Signed-off-by: jaellio <jaellio@microsoft.com>

---------

Signed-off-by: jaellio <jaellio@microsoft.com>
2023-05-10 11:46:35 -07:00
Eric Van Norman 57ba4f6751
prepare for v1.18 as istio source is already branched (#13134) 2023-04-27 12:07:29 -07:00
zirain 58c4822de4
add tests for `tasks/observability/logs/telemetry-api` (#13045)
* add tests

* update test

* wait for telemetry

* fix cleanup

* enable istio injection

* wait longer

* rollout restart pod

* fix after_snapshot

* update link

* user none profile

* fix cleanup
2023-04-17 11:55:55 -07:00
John Zheng 788d8cf93f
Update index.md (#13033)
* Update index.md

* Update index.md

* Put it into troubleshooting.

* Update index.md

* Update snips.sh

* Update snips.sh

* apply changes for snips.sh

* Update content/en/docs/tasks/traffic-management/ingress/secure-ingress/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-04-12 11:34:45 -07:00