Commit Graph

245 Commits

Author SHA1 Message Date
Frank Budinsky 83bae38f99
gateway-api: use targetRef instead of selector for auth/authz gateway… (#14157)
* gateway-api: use targetRef instead of selector for auth/authz gateway refs

* regen

* fix yaml

* regen
2023-11-15 07:57:05 -08:00
Eric Van Norman 31dde271c5 advance master to release-1.21 2023-11-14 17:19:21 +00:00
Kuat 0de72af162
docs: update to use PROXY config (#13568)
* docs: update to use PROXY config

Signed-off-by: Kuat Yessenov <kuat@google.com>

* gen

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-11-13 18:08:28 -08:00
Eric Van Norman a8ccc83d83
Preare istio.io for 1.20 as other repos have branched. (#14025) 2023-10-19 08:29:10 -07:00
Eric Van Norman 867381b258 advance master to release-1.20 2023-09-05 16:32:26 +00:00
Eric Van Norman e0e010f089
prepare for v1.19 as istio source is already branched (#13691) 2023-08-05 14:21:02 -07:00
Frank Budinsky 49568809b2
Add gateway-api instructions to authn policy task (#13625)
* Add gateway-api instructions to authn policy task

* 10 -> 11

* fix test

* fix test again
2023-07-26 13:35:25 -07:00
Frank Budinsky 52658c57c3
JWT routing task fixes (#13570)
* JWT routing task fixes

* revert gtwapi

* fix test

* lint

* more lint
2023-07-14 12:58:43 -07:00
zirain b56f351f9c
security: correct command on jwt-route page (#13460)
* security: correct command on jwt-route page

* gen
2023-06-30 11:27:21 -07:00
Keith Mattix II 3c94567ce1
Change Istio Classic terminology to Istio APIs (#13385)
* Change Istio Classic terminology to Istio APIs

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Fix stutter

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Change back parallel structure formation

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

---------

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
2023-06-16 07:02:06 -07:00
Michael ba926d3006
fix a typo in authz-ingress (#13332) 2023-06-08 21:26:48 -07:00
wulianglongrd 15f812bdb6
add tips for using `[]` as a separator (#13188) 2023-06-08 08:15:05 -07:00
Eric Van Norman af9705dd17 advance master to release-1.19 2023-06-07 14:31:17 +00:00
Kuat a985ac38a6
cleanup more usages of EnvoyFilter (#13301)
* cleanup more usages of EnvoyFilter

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix test

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-06-06 14:06:49 -07:00
Michael a4d4f8bb18
Fix indentations and remove unecessary step numbers (#13230)
* Fix indentations and remove unecessary step numbers in /security/authorization/

* revert tabset indentations and wrap some long clauses
2023-05-23 18:29:05 -07:00
Eric Van Norman 57ba4f6751
prepare for v1.18 as istio source is already branched (#13134) 2023-04-27 12:07:29 -07:00
David Xia a8e24d7eeb
fix docs: wrong subject-verb agreement in authn-policy/index.md (#13015) 2023-04-05 18:02:49 -07:00
Frank Budinsky 18e2058d81
Fix snippet generator to not include html id in snip id (#12988)
* Fix snippet generator to not include html id in snip id

* verify failure
2023-04-03 13:20:34 -07:00
Frank Budinsky b64832ac53
gateway-api: future proof gateway address (#12961)
* gateway-api: future proof gateway address

* regen
2023-03-28 14:28:39 -07:00
Frank Budinsky 0d65b3888d
gateway-api: change wait ready to wait programmed (#12937) 2023-03-24 12:12:01 -07:00
Faseela K ff6b3ee3d1
Specify EXTERNAL_CA env under .Values.pilot.env (#12908)
* Specify EXTERNAL_CA env under .Values.pilot.env

Signed-off-by: Faseela K <faseela.k@est.tech>

* make snips

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-03-20 13:56:43 -07:00
Faseela K 2de8b7cf3f
Add docs test for custom CA k8s (#12910)
* Add docs test for custom CA k8s

Signed-off-by: Faseela K <faseela.k@est.tech>

* wait for secrets to be created

Signed-off-by: Faseela K <faseela.k@est.tech>

* Fix tests

Signed-off-by: Faseela K <faseela.k@est.tech>

* address review comments

Signed-off-by: Faseela K <faseela.k@est.tech>

---------

Signed-off-by: Faseela K <faseela.k@est.tech>
2023-03-20 13:30:45 -07:00
Frank Budinsky f577e3cdbc
gateway-api: add instructions to gateway topology doc (#12889)
* gateway-api: add instructions to gateway topology doc

* fix test

* fix numbering
2023-03-14 10:53:24 -07:00
Aayush Sharma e348075be1
Added headersToDownstreamOnAllow example in ext authz task page (#12791)
* Added headersToDownstreamOnAllow example in ext authz task page

Added headersToDownstreamOnAllow to https://istio.io/latest/docs/tasks/security/authorization/authz-custom/#define-the-external-authorizer.

* Update index.md

* updated snips.sh

* made suggested changes

* make scripts fix
2023-03-13 12:59:23 -07:00
Frank Budinsky fe7c0f1145
gateway-api: add gateway api instructions to ingress access control doc (#12869)
* gateway-api: authz-ingress

* gateway-api: add gateway api instructions to ingress access control doc

* lint

* fixes

* simplify aws samples
2023-03-10 11:45:55 -08:00
Frank Budinsky 486c559488
Small fixes to custom CA doc (#12856) 2023-03-08 08:09:47 -08:00
Arka Bhattacharya 052f5fbc7e
TCP Traffic page edit (#12819)
* Edits formatting of the long commands to improve readability

* Adds snips by make gen

* Adds back the connection rejected output

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* re-ran make gen to edit the snip

---------

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-03-06 08:58:45 -08:00
majeshps e9ecc67a71
Fix minor nits on the security tasks page Plugin CA Certificate (#12709)
* Fix minor nits on the security tasks page Plugin CA Certificate

Partially fixes: #12695

* Fix minor  nits on the security tasks page for certificate management
2023-03-03 10:09:06 -08:00
Paddy Doyle e24e58affa
Update feature status for Experimental/Alpha (#12821)
* Update feature status for Experimental/Alpha

Based off of the feature status in features.yaml, update the
corresponding doc page.

Update navigation_level.html to only flag Experimental and Alpha
features with an asterisk '*', rather than all docs with _any_ status
set.

Add new 'alpha.md' boilerplate, similar to 'experimental.md', with a
link to https://github.com/istio/community/blob/master/FEATURE-LIFECYCLE.md

Add either 'boilerplate alpha' or 'boilerplate experimental' to all
pages which have Alpha or Experimental status set.

Tidy up pages which already had
'boilerplate experimental-feature-warning' and be consistent with
'boilerplate experimental'

Update tasks/observability/distributed-tracing/mesh-and-proxy-config
status from 'Beta/Experimental' to 'Beta', to match what's in
features.yaml (all others only have a single value here)

* Add content/zh/boilerplates/alpha.md

* Update content/en/boilerplates/alpha.md

Suggested change

Co-authored-by: Faseela K <k.faseela@gmail.com>

* Update the zh 'alpha' boilerplate to match

---------

Co-authored-by: Faseela K <k.faseela@gmail.com>
2023-03-03 07:45:06 -08:00
Ben Leggett 825f422087
Add more context to `externalTrafficPolicy=local` caveats. (#12779)
* Reword this to better explain why a gateway on each node is recommended.

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Update content/en/docs/tasks/security/authorization/authz-ingress/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-02-28 11:03:16 -08:00
SRodi c27767e58a
Fix cleanup instructions for TLS version config task (#12735)
* Fix cleanup instructions for TLS version config task

* Address comments and run generating snips: content/en/boilerplates/snips/before-you-begin-egress.sh
generating snips: content/en/boilerplates/snips/cve-2020-007-configmap.sh
generating snips: content/en/boilerplates/snips/example.sh
generating snips: content/en/boilerplates/snips/experimental-feature-warning.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/experimental.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/external-loadbalancer-support.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-choose.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-experimental.sh
generating snips: content/en/boilerplates/snips/gateway-api-future.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/gateway-api-gamma-support.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/boilerplates/snips/gateway-api-install-crds.sh
generating snips: content/en/boilerplates/snips/gateway-api-support.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/boilerplates/snips/gateway-api-version.sh
generating snips: content/en/boilerplates/snips/helm-backup.sh
generating snips: content/en/boilerplates/snips/helm-jwt-warning.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/helm-preamble.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/helm-prereqs.sh
generating snips: content/en/boilerplates/snips/index.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/kubectl-multicluster-contexts.sh
generating snips: content/en/boilerplates/snips/multi-cluster-with-metallb.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-default-intro.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-default-outro.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-middle.sh
generating snips: content/en/boilerplates/snips/revision-tags-preamble.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-prologue.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/revision-tags-usage.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/security-vulnerability.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/start-httpbin-service.sh
generating snips: content/en/boilerplates/snips/start-otel-collector-service.sh
generating snips: content/en/boilerplates/snips/telemetry-tracing-tips.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-0.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-1.sh
generating snips: content/en/boilerplates/snips/test-2.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/test-3.sh
generating snips: content/en/boilerplates/snips/trace-generation.sh
generating snips: content/en/boilerplates/snips/untested-document.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/boilerplates/snips/verify-crds.sh
generating snips: content/en/boilerplates/snips/work-in-progress.sh
--> no snippet or boilerplate. skipping..
generating snips: content/en/docs/examples/bookinfo/snips.sh
--> boilerplate external-loadbalancer-support does not have snippets
generating snips: content/en/docs/examples/virtual-machines/snips.sh
generating snips: content/en/docs/ops/configuration/mesh/app-health-check/snips.sh
generating snips: content/en/docs/ops/configuration/mesh/config-resource-ready/snips.sh
generating snips: content/en/docs/ops/configuration/security/security-policy-examples/snips.sh
generating snips: content/en/docs/ops/configuration/telemetry/envoy-stats/snips.sh
generating snips: content/en/docs/ops/configuration/traffic-management/network-topologies/snips.sh
generating snips: content/en/docs/ops/diagnostic-tools/istioctl-analyze/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/setup/additional-setup/cni/snips.sh
generating snips: content/en/docs/setup/additional-setup/gateway/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/setup/additional-setup/getting-started/snips.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate external-loadbalancer-support does not have snippets
generating snips: content/en/docs/setup/getting-started/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/setup/install/external-controlplane/snips.sh
--> boilerplate gateway-api-future does not have snippets
--> boilerplate gateway-api-choose does not have snippets
generating snips: content/en/docs/setup/install/helm/snips.sh
--> boilerplate helm-preamble does not have snippets
generating snips: content/en/docs/setup/install/multicluster/multi-primary/snips.sh
generating snips: content/en/docs/setup/install/multicluster/multi-primary_multi-network/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/primary-remote/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/primary-remote_multi-network/snips.sh
--> boilerplate multi-cluster-with-metallb does not have snippets
generating snips: content/en/docs/setup/install/multicluster/verify/snips.sh
generating snips: content/en/docs/setup/install/multiple-controlplanes/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/setup/install/virtual-machine/snips.sh
--> boilerplate experimental does not have snippets
--> boilerplate experimental does not have snippets
--> boilerplate experimental does not have snippets
generating snips: content/en/docs/setup/upgrade/canary/snips.sh
--> boilerplate revision-tags-preamble does not have snippets
--> boilerplate revision-tags-usage does not have snippets
--> boilerplate revision-tags-default-intro does not have snippets
--> boilerplate revision-tags-default-outro does not have snippets
generating snips: content/en/docs/setup/upgrade/helm/snips.sh
--> boilerplate helm-preamble does not have snippets
--> boilerplate revision-tags-preamble does not have snippets
--> boilerplate revision-tags-usage does not have snippets
--> boilerplate revision-tags-default-intro does not have snippets
--> boilerplate revision-tags-default-outro does not have snippets
generating snips: content/en/docs/tasks/extensibility/wasm-module-distribution/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/jaeger/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/opencensusagent/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/skywalking/snips.sh
generating snips: content/en/docs/tasks/observability/distributed-tracing/zipkin/snips.sh
generating snips: content/en/docs/tasks/observability/gateways/snips.sh
generating snips: content/en/docs/tasks/observability/logs/access-log/snips.sh
generating snips: content/en/docs/tasks/observability/logs/otel-provider/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/customize-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/querying-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/tcp-metrics/snips.sh
generating snips: content/en/docs/tasks/observability/metrics/using-istio-dashboard/snips.sh
generating snips: content/en/docs/tasks/policy-enforcement/rate-limit/snips.sh
generating snips: content/en/docs/tasks/security/authentication/authn-policy/snips.sh
generating snips: content/en/docs/tasks/security/authentication/claim-to-header/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/security/authentication/jwt-route/snips.sh
generating snips: content/en/docs/tasks/security/authentication/mtls-migration/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-custom/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-deny/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-dry-run/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/security/authorization/authz-http/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-ingress/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-jwt/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-tcp/snips.sh
generating snips: content/en/docs/tasks/security/authorization/authz-td-migration/snips.sh
generating snips: content/en/docs/tasks/security/cert-management/plugin-ca-cert/snips.sh
generating snips: content/en/docs/tasks/security/tls-configuration/workload-min-tls-version/snips.sh
generating snips: content/en/docs/tasks/traffic-management/circuit-breaking/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-control/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-gateway/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-gateway-tls-origination/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-kubernetes-services/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/egress-tls-origination/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/http-proxy/snips.sh
generating snips: content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/snips.sh
generating snips: content/en/docs/tasks/traffic-management/fault-injection/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/gateway-api/snips.sh
--> boilerplate gateway-api-future does not have snippets
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-control/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-sidecar-tls-termination/snips.sh
--> boilerplate experimental-feature-warning does not have snippets
generating snips: content/en/docs/tasks/traffic-management/ingress/ingress-sni-passthrough/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/kubernetes-ingress/snips.sh
generating snips: content/en/docs/tasks/traffic-management/ingress/secure-ingress/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/before-you-begin/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/cleanup/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/distribute/snips.sh
generating snips: content/en/docs/tasks/traffic-management/locality-load-balancing/failover/snips.sh
generating snips: content/en/docs/tasks/traffic-management/mirroring/snips.sh
generating snips: content/en/docs/tasks/traffic-management/request-routing/snips.sh
generating snips: content/en/docs/tasks/traffic-management/request-timeouts/snips.sh
generating snips: content/en/docs/tasks/traffic-management/tcp-traffic-shifting/snips.sh
generating snips: content/en/docs/tasks/traffic-management/traffic-shifting/snips.sh

* Update test.sh
2023-02-20 10:42:30 -08:00
Michael cc750f532e
Fix some consistency issues (#12703) 2023-02-17 07:22:57 -08:00
Frank Budinsky 72e2bb29f0
Add IBM Kubernetes Load Balancer type to table (#12690) 2023-02-16 11:15:23 -08:00
Michael ba253743fb
Fix some typos in custom-ca-k8s (#12689) 2023-02-16 07:20:23 -08:00
Eric Van Norman fefe6d2bd3
advance master to release-1.18 (#12665)
* build an archive of v1.16 in master

* update data/versions.yml and archive index page

* advance master to release-1.18

* Fix lint by moving back to older files - Note automated job will fail lint.

* Temporarily disable the istioctl-analyze test
2023-02-14 21:05:49 -08:00
Frank Budinsky f508e6aa90
Clarify mtls migration policy location (#12662) 2023-02-14 08:33:41 -08:00
Michael 9ab1a8f9df
Change for consistency with title (#12647) 2023-02-13 07:41:48 -08:00
Eric Van Norman 510f278525
Update lint checker configuration. (#12602)
* Update lint checker configuration.

* Uses mdl.rb in the root

* Fix trailing lines

* Reset mdl.rb

* Fix for adding an empty line
2023-02-07 13:18:34 -08:00
Jackie Elliott 28749ecfc2
Update custom ca integration with k8s CSR demo (#12527)
* Update custom ca integration with k8s CSR demo to include foo and
bar namespace creation and remove an unnecessary tab from the
sleep pod command.

Signed-off-by: jaellio <jaellio@microsoft.com>

* Fix lint error

Signed-off-by: jaellio <jaellio@microsoft.com>

---------

Signed-off-by: jaellio <jaellio@microsoft.com>
2023-01-27 10:02:50 -08:00
Eric Van Norman 93ea5bb3ae
Update values so istioctl x wait works (#12508)
* Update values so istioctl x wait works

* Remove extra values

* Update all snippet instances of `istio install` for wait_for_istio

* Fix value
2023-01-24 15:46:18 -08:00
Eric Van Norman cb3aebc837
Update istio.io to prepare for 1.17 (#12487) 2023-01-19 10:53:13 -08:00
Aryan Gupta 9434bc1ee6
task for copy claim to header (#12427)
* task for copy claim to header

* updateed outtput

* resolved pr comments
2023-01-10 06:26:50 -08:00
Michael 9de619e1fe
Replace setup with set up if it's a verb (#12419) 2022-12-29 17:02:30 -08:00
Aryan Gupta 60eb0e4474
udocs upddate for policies graduation (#12320) 2022-12-06 13:49:06 -08:00
Chen Xintong 1f7a0ea5a7
Fix custom CA integration doc typo (#12318)
* Fix custom CA integration doc typo

* restore 1.14 and 1.15 release change
2022-12-01 08:48:15 -08:00
Bo-Cheng Chu 27c2aa9d04
Update index.md (#12243) 2022-11-15 20:52:16 -08:00
Eric Van Norman 1f12d8f392
Release 1.16 istio.io branch cut (#12239)
* build an archive of v1.15 in master

* update data/versions.yml and archive index page

* advance master to release-1.17

* Fix lint error
2022-11-15 13:25:34 -08:00
Eric Van Norman 14f8c33a8a
Minor correction submitted in 12203 - no CLA (#12231) 2022-11-14 10:35:33 -08:00
Aryan Gupta f2baf1228b
updated authz docs (#12178)
* updated authz docs

* removed extra spaces

* updated authz-tcp task tests

* minor yaml fixes
2022-11-08 16:04:55 -08:00
Bo-Cheng Chu 813337f378
Add performance expectations in ext-authz page (#12176)
* add performance benchmarking

* fix typo
2022-11-08 16:04:47 -08:00