Commit Graph

112 Commits

Author SHA1 Message Date
Frank Budinsky 83bae38f99
gateway-api: use targetRef instead of selector for auth/authz gateway… (#14157)
* gateway-api: use targetRef instead of selector for auth/authz gateway refs

* regen

* fix yaml

* regen
2023-11-15 07:57:05 -08:00
Eric Van Norman 31dde271c5 advance master to release-1.21 2023-11-14 17:19:21 +00:00
Kuat 0de72af162
docs: update to use PROXY config (#13568)
* docs: update to use PROXY config

Signed-off-by: Kuat Yessenov <kuat@google.com>

* gen

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-11-13 18:08:28 -08:00
Eric Van Norman a8ccc83d83
Preare istio.io for 1.20 as other repos have branched. (#14025) 2023-10-19 08:29:10 -07:00
Eric Van Norman 867381b258 advance master to release-1.20 2023-09-05 16:32:26 +00:00
Eric Van Norman e0e010f089
prepare for v1.19 as istio source is already branched (#13691) 2023-08-05 14:21:02 -07:00
Keith Mattix II 3c94567ce1
Change Istio Classic terminology to Istio APIs (#13385)
* Change Istio Classic terminology to Istio APIs

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Fix stutter

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

* Change back parallel structure formation

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>

---------

Signed-off-by: Keith Mattix II <keithmattix@microsoft.com>
2023-06-16 07:02:06 -07:00
Michael ba926d3006
fix a typo in authz-ingress (#13332) 2023-06-08 21:26:48 -07:00
Eric Van Norman af9705dd17 advance master to release-1.19 2023-06-07 14:31:17 +00:00
Kuat a985ac38a6
cleanup more usages of EnvoyFilter (#13301)
* cleanup more usages of EnvoyFilter

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix

Signed-off-by: Kuat Yessenov <kuat@google.com>

* fix test

Signed-off-by: Kuat Yessenov <kuat@google.com>

* review

Signed-off-by: Kuat Yessenov <kuat@google.com>

---------

Signed-off-by: Kuat Yessenov <kuat@google.com>
2023-06-06 14:06:49 -07:00
Michael a4d4f8bb18
Fix indentations and remove unecessary step numbers (#13230)
* Fix indentations and remove unecessary step numbers in /security/authorization/

* revert tabset indentations and wrap some long clauses
2023-05-23 18:29:05 -07:00
Eric Van Norman 57ba4f6751
prepare for v1.18 as istio source is already branched (#13134) 2023-04-27 12:07:29 -07:00
Frank Budinsky 18e2058d81
Fix snippet generator to not include html id in snip id (#12988)
* Fix snippet generator to not include html id in snip id

* verify failure
2023-04-03 13:20:34 -07:00
Frank Budinsky b64832ac53
gateway-api: future proof gateway address (#12961)
* gateway-api: future proof gateway address

* regen
2023-03-28 14:28:39 -07:00
Frank Budinsky 0d65b3888d
gateway-api: change wait ready to wait programmed (#12937) 2023-03-24 12:12:01 -07:00
Frank Budinsky f577e3cdbc
gateway-api: add instructions to gateway topology doc (#12889)
* gateway-api: add instructions to gateway topology doc

* fix test

* fix numbering
2023-03-14 10:53:24 -07:00
Aayush Sharma e348075be1
Added headersToDownstreamOnAllow example in ext authz task page (#12791)
* Added headersToDownstreamOnAllow example in ext authz task page

Added headersToDownstreamOnAllow to https://istio.io/latest/docs/tasks/security/authorization/authz-custom/#define-the-external-authorizer.

* Update index.md

* updated snips.sh

* made suggested changes

* make scripts fix
2023-03-13 12:59:23 -07:00
Frank Budinsky fe7c0f1145
gateway-api: add gateway api instructions to ingress access control doc (#12869)
* gateway-api: authz-ingress

* gateway-api: add gateway api instructions to ingress access control doc

* lint

* fixes

* simplify aws samples
2023-03-10 11:45:55 -08:00
Arka Bhattacharya 052f5fbc7e
TCP Traffic page edit (#12819)
* Edits formatting of the long commands to improve readability

* Adds snips by make gen

* Adds back the connection rejected output

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* re-ran make gen to edit the snip

---------

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-03-06 08:58:45 -08:00
Paddy Doyle e24e58affa
Update feature status for Experimental/Alpha (#12821)
* Update feature status for Experimental/Alpha

Based off of the feature status in features.yaml, update the
corresponding doc page.

Update navigation_level.html to only flag Experimental and Alpha
features with an asterisk '*', rather than all docs with _any_ status
set.

Add new 'alpha.md' boilerplate, similar to 'experimental.md', with a
link to https://github.com/istio/community/blob/master/FEATURE-LIFECYCLE.md

Add either 'boilerplate alpha' or 'boilerplate experimental' to all
pages which have Alpha or Experimental status set.

Tidy up pages which already had
'boilerplate experimental-feature-warning' and be consistent with
'boilerplate experimental'

Update tasks/observability/distributed-tracing/mesh-and-proxy-config
status from 'Beta/Experimental' to 'Beta', to match what's in
features.yaml (all others only have a single value here)

* Add content/zh/boilerplates/alpha.md

* Update content/en/boilerplates/alpha.md

Suggested change

Co-authored-by: Faseela K <k.faseela@gmail.com>

* Update the zh 'alpha' boilerplate to match

---------

Co-authored-by: Faseela K <k.faseela@gmail.com>
2023-03-03 07:45:06 -08:00
Ben Leggett 825f422087
Add more context to `externalTrafficPolicy=local` caveats. (#12779)
* Reword this to better explain why a gateway on each node is recommended.

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>

* Update content/en/docs/tasks/security/authorization/authz-ingress/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

---------

Signed-off-by: Benjamin Leggett <benjamin.leggett@solo.io>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2023-02-28 11:03:16 -08:00
Michael cc750f532e
Fix some consistency issues (#12703) 2023-02-17 07:22:57 -08:00
Frank Budinsky 72e2bb29f0
Add IBM Kubernetes Load Balancer type to table (#12690) 2023-02-16 11:15:23 -08:00
Eric Van Norman fefe6d2bd3
advance master to release-1.18 (#12665)
* build an archive of v1.16 in master

* update data/versions.yml and archive index page

* advance master to release-1.18

* Fix lint by moving back to older files - Note automated job will fail lint.

* Temporarily disable the istioctl-analyze test
2023-02-14 21:05:49 -08:00
Eric Van Norman 93ea5bb3ae
Update values so istioctl x wait works (#12508)
* Update values so istioctl x wait works

* Remove extra values

* Update all snippet instances of `istio install` for wait_for_istio

* Fix value
2023-01-24 15:46:18 -08:00
Eric Van Norman cb3aebc837
Update istio.io to prepare for 1.17 (#12487) 2023-01-19 10:53:13 -08:00
Aryan Gupta 60eb0e4474
udocs upddate for policies graduation (#12320) 2022-12-06 13:49:06 -08:00
Bo-Cheng Chu 27c2aa9d04
Update index.md (#12243) 2022-11-15 20:52:16 -08:00
Eric Van Norman 1f12d8f392
Release 1.16 istio.io branch cut (#12239)
* build an archive of v1.15 in master

* update data/versions.yml and archive index page

* advance master to release-1.17

* Fix lint error
2022-11-15 13:25:34 -08:00
Eric Van Norman 14f8c33a8a
Minor correction submitted in 12203 - no CLA (#12231) 2022-11-14 10:35:33 -08:00
Aryan Gupta f2baf1228b
updated authz docs (#12178)
* updated authz docs

* removed extra spaces

* updated authz-tcp task tests

* minor yaml fixes
2022-11-08 16:04:55 -08:00
Bo-Cheng Chu 813337f378
Add performance expectations in ext-authz page (#12176)
* add performance benchmarking

* fix typo
2022-11-08 16:04:47 -08:00
Eric Van Norman 8b95b8eb57
Prepare for release 1.16.0 (#12138)
* Prepare for release 1.16.0

* Update for 1.160.0-beta.1

* Update reference docs with new beta.1 build
2022-10-21 20:30:38 -07:00
Bo-Cheng Chu e859278609
Remove restart requirement for ext-authz (#12106)
* rm restart

* update snip
2022-10-18 17:29:51 -07:00
Eric Van Norman 68fb4ec77a
advance master to release-1.16 (#11778)
* build an archive of v1.14 in master

* update data/versions.yml and archive index page

* advance master to release-1.16

* Rerun `make update_ref_docs

* Update to commit on main branch to fix tests

* Disable failing test (temporary)
2022-09-01 07:25:41 -07:00
Tong Li 46eb244468
Replace experimental uninstall command with uninstall command (#11736)
* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

* Update content/en/docs/setup/upgrade/canary/index.md

Replace experimental uninstall command with uninstall command

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Apply suggestions from code review

Replace experimental uninstall command with uninstall command

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

* Update content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Replace experimental uninstall command with uninstall command

Signed-off-by: Tong Li <litong01@us.ibm.com>

Signed-off-by: Tong Li <litong01@us.ibm.com>
Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2022-08-25 08:00:21 -07:00
Istio Automation 15a3975599
Remove 2 year old security warning (#11747)
Was fixed long ago

Co-authored-by: John Howard <howardjohn@google.com>
2022-08-24 14:15:06 -07:00
Eric Van Norman da73c24218
Prepare for the 1.15.0 release (#11684) 2022-08-07 13:23:45 -07:00
Eric Van Norman b5e32c648a
Additional updates to use the master branches in other repos (#11431) 2022-06-15 03:34:22 -07:00
Eric Van Norman 84c40da017
Prepare for version 1.14 as istio source is already branched (#11212)
* Prepare for version 1.14 as istio source is already branched

* Missed make gen
2022-04-25 10:24:04 -07:00
Eric Van Norman fc515c8166
Replay yq v3 which is deprecated with yq v4 (#11202)
* Replay yq v3 which is deprecated with yq v4

* Update yq key
2022-04-20 13:37:30 -07:00
Eric Van Norman 08fe6be739
Updates to use fix main branch post release branching (#10894)
* Update to use main branch for reference docs

* Updates to fix this for next time (not moving to master)

* Run `make gen`

* Update master istio test reference

* Ingore one shellcheck, SC1091, for now. Not sure why it just showed up
2022-02-11 16:28:20 -08:00
Deepak Pakhale 29f0d809f3
Fixes #10813 (#10819)
Adding files generated after "make gen"
2022-01-23 14:40:13 -08:00
Eric Van Norman 68f0f07545
Prepare for v1.13 as istio source is already branched (#10808)
* Prepare for v1.13 as istio source is already branched

* Update VM test image from 1.11 to current to test

* Rename tests to temporaily disable Issue created to reanble before 1.13
2022-01-21 09:52:46 -08:00
Yangmin Zhu 84a63d0e33
add test for the dry-run task (#10526)
* add test for the dry-run task

* Update content/en/docs/tasks/security/authorization/authz-dry-run/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2021-12-08 07:50:27 -08:00
Yangmin Zhu 81e896486b
update release note for external authz (#10527)
* update release note for external authz

* address comment

* Update content/en/news/releases/1.12.x/announcing-1.12/change-notes/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2021-11-23 11:30:07 -08:00
Eric Van Norman 72de90d75b
Advance master to release-1.13 (#10516)
* build an archive of v1.11 in master

* update data/versions.yml and archive index page

* advance master to release-1.13

* ANother script update

* go get remaing istio repos to satisfy linter

* Temporarily fix link broken by istio/api #2148

* Temporarily disable istioctl analyze test.
2021-11-19 06:52:51 -08:00
Eric Van Norman 4c16b9a65e
Prepare for v1.12 as Istio source is already branched (#10455)
* prepare for v1.12 as istio source is already branched

* Fixup script output

* Removing validatingwebhookconfiguration if it exists.
2021-11-01 12:27:58 -07:00
Istio Automation 07cf4f6b68
[master] Fix in attribute "name" on "metadata". (#10361)
* Fix in attribute "name" on "metadata".

Missing tab in attribute "name" at section "Define the external authorizer" in ServiceEntry example.

* command make gen

Co-authored-by: Igor Agueme <igoragueme@outlook.com>
2021-09-17 08:31:35 -07:00
Sungyun Hur 4b6489305b
docs: update broken OPA links (#10320)
* docs: update broken OPA links

* fix: typo
2021-09-09 21:40:51 -07:00