Commit Graph

245 Commits

Author SHA1 Message Date
Phillip Quy Le bc16c4c4a7 Create trust domain migration task for authz (#5486)
* Create trust domain migration task for authz

* Revise content and address comments

* Remove httpbin and sleep from example
2019-11-15 10:14:46 -08:00
John Zheng 3d7011c31b Improve index.md (#5646)
Suggest to add this commit, to improve user experience.

Already be merged into release-1.3, FYI
https://github.com/istio/istio.io/pull/5489/commits
2019-11-14 05:49:31 -08:00
Frank Budinsky f5ce9feb70
Consolidate getting started instructions (#5642)
* Consolidate getting started instructions

* review comments

* fix broken links

* add istioctl link

* Fix spelling

* more broken links

* one more
2019-11-12 23:04:33 -05:00
Jimmy Chen 08a92bb255 fix workload-SDS user guide (#5612) 2019-11-12 07:16:54 -08:00
Diem Vu 822701661d Fix tls-check output example (#5608)
* Fix tls-check output example

* Fix spacing
2019-11-11 15:54:54 -08:00
lei-tang 62453fc38e Add an explanation that Chiron is linked with Pilot (#5609) 2019-11-11 15:42:53 -08:00
Rigs Caballero 047785da6a Replace "Mesh Expansion" with "VM Support" and related edits. (#5215)
Let's make additional changes in a followup PR.


* Replace "Mesh Expansion" with "VM Support" and related edits.

To avoid confusion and improve the visibility of the VM-related content, these
changes align with terminology used by our users.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix descriptions, titles and link texts.

Addressed the feedback given around the link text still containing "mesh
expansion". Also addressed the feedback around the accuracy of the
titles and descriptions used.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix bullets and descriptions.

Signed-off-by: rcaballeromx <grca@google.com>

* Return content to examples.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix broken links.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix title for accuracy.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix links for ZH content.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix language for clarity.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix broken link to SDS task.

Signed-off-by: rcaballeromx <grca@google.com>

* Fix merge conflicts.

Signed-off-by: Rigs Caballero <grca@google.com>
2019-11-11 18:28:05 -05:00
Frank Budinsky 823e85b69a
Reorganize reference docs (#5595)
* Reorganize reference docs

* aliases

* corrections

* fix broken links

* fix broken link

* another broken link

* another broken link
2019-11-11 17:46:27 -05:00
lei-tang 7f85876be6 Check no prior webhook configs and clean up webhook configs (#5597) 2019-11-11 12:36:54 -08:00
Oliver Liu 98ce605cb8 Fix several istio.io tasks. (#5539) 2019-11-09 06:32:00 -08:00
Jianfei Hu 16d07b0483 Update the egrep and service accounts. (#5523)
* Update the egrep and service accounts.

* fix the lint.
2019-11-09 06:20:52 -08:00
lei-tang 026bb329d4 Change the config names to be consistent with istioctl installation (#5529) 2019-11-08 16:33:52 -08:00
Oliver Liu ef1ffd4cfd Fix auth installation and its references. (#5482)
* Fix auth installation and its references.

* Apply suggestions from code review

Fix according to the feedback.

Co-Authored-By: Martin Taillefer <geeknoid@users.noreply.github.com>
2019-11-08 16:51:19 -05:00
lei-tang 1d2c74a629 Fix bug istioctl manifest command does not read from standard input (#5521) 2019-11-08 10:36:52 -08:00
lei-tang b0cdd6f222 User guide for istioctl managing webhooks (#5162)
* User guide for istioctl managing webhooks

* Generate the webhook configurations

* Skip long config

* Move the task to be under setup/install directory

* Add jq as a prerequisite

* Decouple installation from the user guide

* Add explanations to config

* Change the weight

* Revisions on cleanup

* Revise headings

* Revise the search instructions

* Revise the wordings

* Revise install instructions and location

* Skip --validation

* Use istioctl to generate webhook configurations

* Use istioctl to install

* Revise the commands

* Revise the wording

* Remove two comment lines
2019-11-08 07:59:51 -08:00
lei-tang acd3269915 User guide for Istio DNS certificates (#5152)
* User guide for Istio DNS certificates

A guide of how to provision and manage DNS certificates in Istio.

* Explain why uses this feature

* Use the boilerplate command

* Unindent a text block

* Add jq as a prerequisite

* Decouple installation step from the user guide

* Wording revisions

* Wording revisions and change weight

* Follow the same installation approach of CNI

* Revise the writing

* Merge the javascript functions

* Fix the lint error

- ./public/docs/tasks/security/dns-cert/index.html
  *  linking to /docs/setup/install/helm/#dnscerts, but dnscerts does not exist (line 58176)
     <a href="/docs/setup/install/helm/#dnscerts">Customizable Install with Helm</a>
htmlproofer 3.12.0 | Error:  HTML-Proofer found 1 failure!

* Use istioctl to install Istio

* Revisions according to review comments

* Add an explanation

* Revise based on review comments

* Remove the referrence to a file
2019-11-08 07:47:51 -08:00
Frank Budinsky a6a5769f12
Organize security tasks (#5474)
* Organize security tasks

* lint errors

* fixes

* more fixes
2019-11-07 15:54:27 -05:00
Yangmin Zhu cbcea241ad update authz group task for 1.4 (#5435)
* update authz group page for 1.4

* address comments
2019-11-07 06:24:51 -08:00
Jianfei Hu d0dae3fb18 Auto mTLS user guide doc on istio.io (#5313)
* first rewrite of the DR removal till global mTLS section.

* remove all destinationrule for authn policy doc.

* lint fix

* add separate page for automtls

* restore the original authn policy

* new page with auto mtls separately.

* fix the lint

* fix lint and using istioctl manifest.

* complete the instructions for auto mlts

* finish and verify with install

* more delta before and after in strict

* header with certificate identity.

* no more helm

* apply the suggestion.
2019-11-06 15:20:15 -08:00
Neeraj Poddar db10e052ff Fix directory structure/heading for istioctl install (#5390) 2019-11-05 12:37:19 -08:00
Martin Taillefer 4d4e6ae28e
General cleanup items. (#5325)
- Fix a bunch of heading capitalization.

- Remove words that shouldn't be in the dictionary
and update the text accordingly.

- Added a few @@ sequences to reference content files from text blocks.

- Used a few {{< source_branch_name >}} sequences to refer to the proper
branch in GitHub rather than master.
2019-11-04 06:41:54 -08:00
Yangmin Zhu 9532bc0dda update authorization for HTTP task for v1beta1 policy (#5185)
* update authorization for HTTP task for v1beta1 policy

* fix

* small update

* resolve comments

* address comments

* minor

* more fix

* address comments

* address comments

* remove namespace-level

* more fix

* remove duplicate
2019-11-01 15:54:22 -07:00
Frank Budinsky 4bf2fb2e5e Remove uses of istio-demo.yaml (#5311)
* Remove uses of istio-demo.yaml

* broken link
2019-10-31 13:38:03 -07:00
Yangmin Zhu facbed0482 update authorization for TCP task for v1beta1 policy (#5196)
* update authorization for TCP task for v1beta1 policy

* address comments

* address comment

* address comments

* more fix

* resolve comments

* fix
2019-10-31 09:37:35 -04:00
Frank Budinsky f220f655a7 Deprecate helm install (#5270)
* Deprecate helm install

* fix lint

* address review comments

* correction
2019-10-29 06:37:34 -07:00
Jimmy Chen 3fec0dd43f update user guide (#5233) 2019-10-24 10:07:43 -07:00
Diem Vu 272a55b88b Update istioctl auth tls-check example to reflect https://github.com/istio/istio/pull/17720 (#5219)
* content/en/docs/tasks/security/mutual-tls/index.md

* Correct destination rule name in tls-check example

* UPdate check-policy.md
2019-10-23 12:19:42 -07:00
John Howard 962c9ac0aa Remove one last mention of demo-auth (#5236) 2019-10-23 08:59:11 -07:00
Martin Taillefer e8f8b4feb8
Improve snippet logic. (#5205)
- Support snippets that specify the body syntax and output
syntax of the snippet.

- Snippets with bash syntax triggered an incorrect error message.

- No error message was produced for a misnamed snippet

- Convert a security task to use snippets to populate its
many preformatted blocks.
2019-10-20 16:27:51 -07:00
Yangmin Zhu adc0b9c44a remove deprecated authz permissive task (#5191)
* remove deprecated authz permissive task

* update alias
2019-10-18 13:49:56 -07:00
Chunlin Yang 38f252fb68 Get rid of demo-auth (#5024)
* Get rid of demo-auth

Signed-off-by: Chun Lin Yang <clyang@cn.ibm.com>

* remove strict mtls mode

* address comments

* fix linter error

* Add instruction for mtls

* add back demo-auth in configuration profile

* Update content/zh/docs/setup/kubernetes/install/kubernetes/index.md

Co-Authored-By: SataQiu <1527062125@qq.com>

* Update content/zh/docs/tasks/security/health-check/index.md

Co-Authored-By: SataQiu <1527062125@qq.com>

* Update content/zh/docs/tasks/security/https-overlay/index.md

Co-Authored-By: SataQiu <1527062125@qq.com>

* Update content/zh/docs/tasks/security/https-overlay/index.md

Co-Authored-By: SataQiu <1527062125@qq.com>

* Update content/zh/docs/tasks/security/plugin-ca-cert/index.md

Co-Authored-By: SataQiu <1527062125@qq.com>

* Update content/zh/docs/tasks/security/plugin-ca-cert/index.md

Co-Authored-By: SataQiu <1527062125@qq.com>

* Update content/zh/docs/tasks/security/health-check/index.md

Co-Authored-By: SataQiu <1527062125@qq.com>
2019-10-18 09:55:29 -04:00
Martin Taillefer d6445fc726
Update reference docs. (#5173)
preliminary.istio.io will now display reference material for the release-1.4 branches
of istio/istio, istio/api, and istio/operator.
2019-10-17 11:09:11 -07:00
Naoki Oketani 31d21ffbb4 migrate Deployment apiVersion from extensions/v1beta1 to apps/v1 to support k8s 1.16 (#5159)
* migrate Deployment apiVersion from extensions/v1beta1 to apps/v1 to support k8s 1.16

* migrate Deployment, PodSecurityPolicy apiVersion to support k8s 1.16
2019-10-15 10:56:21 -07:00
Xinnan Wen e606e95503 Fix typo (#5055) 2019-09-25 12:00:42 -07:00
Yangmin Zhu 9dae69638c update psp (#4977) 2019-09-18 08:40:38 -07:00
Greg Taylor c0284014fb Rename Tasks/Telemetry to Tasks/Observability (#4968)
Matches a similar effort started in #4448. Fixes #4730.
2019-09-17 07:57:06 -07:00
Martin Taillefer 91c93a39b3
Added a bunch of links around istioctl. (#4970) 2019-09-12 08:26:58 -07:00
Sam Naser 9ff424c3ec Add docs for updated Citadel namespace targeting mechanism (#4746)
* Add docs for updated Citadel namespace targeting mechanism

* Make doc voicing and audience pronouns fit rest of docs
2019-09-10 07:51:56 -07:00
lei-tang dc7acb1b18 [Release 1.3] Temporarily disable the user guide of Istio Vault integration for release 1.3 (#4904)
* Temporarily disable the user guide of Istio Vault integration for release 1.3

Istio release 1.3 uses new k8s JWT (https://github.com/istio/istio/pull/16147),
which breaks the user guide of Istio Vault CA integration for release 1.3.
This PR temporarily disables the user guide of Istio Vault CA integration for release 1.3.
2019-09-05 20:32:27 -07:00
Phillip Quy Le 436b65afb8 Sds trustworthy jwt doc (#4701)
* Update doc for sds

* Update SDS doc for trustworthy jwt feature

* Drop legacy jwt support

* Add SDS announcement

* Update content/en/blog/2019/trustworthy-jwt-sds/index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/blog/2019/trustworthy-jwt-sds/index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/blog/2019/trustworthy-jwt-sds/index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/blog/2019/trustworthy-jwt-sds/index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/blog/2019/trustworthy-jwt-sds/index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/blog/2019/trustworthy-jwt-sds/index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/blog/2019/trustworthy-jwt-sds/index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/blog/2019/trustworthy-jwt-sds/index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/blog/2019/trustworthy-jwt-sds/index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/blog/2019/trustworthy-jwt-sds/index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/docs/setup/platform-setup/_index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update index.md

* Update .spelling

* Update content/en/docs/setup/install/helm/index.md

Co-Authored-By: Romain Lenglet <romain.lenglet@berabera.info>

* Update index.md

* Update _index.md

* Update index.md

* Address comments

* Refine doc again

* Bump the support version of k8s to 1.13

* Update vendors

* Update docs

* Apply suggestions from code review

Co-Authored-By: Rigs Caballero <grca@google.com>
Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/blog/2019/trustworthy-jwt-sds/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>
2019-09-05 13:44:03 -07:00
Jimmy Chen 54638f80de Update auth-sds user guide (#4901)
* update auth-sds doc

* Update content/en/docs/tasks/security/auth-sds/index.md

Co-Authored-By: Oliver Liu <yonggangl@google.com>

* Update content/en/docs/tasks/security/auth-sds/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>
2019-09-03 14:53:20 -07:00
Martin Taillefer 14a593c563
Fix broken Envoy links. (#4832) 2019-08-26 14:55:57 -07:00
Ed Snible 79ff39088e Rename example YAML manifests to match intent (#4800) 2019-08-20 07:29:42 -07:00
Frank Budinsky ca7559cab2 Remove Nomad & Consul docs (#4805)
* Remove Nomad & Consul docs

* broken links

* more broken links

* more broken links

* fix spelling errors

* remove broken ref
2019-08-16 12:13:30 -07:00
Martin Taillefer d0cf1e171e
Move English content to content/en as agreed in WG meeting. (#4789)
Once this goes in, I'll move content_zh to content/zh.
2019-08-14 15:45:31 -07:00