Commit Graph

491 Commits

Author SHA1 Message Date
zirain 02cd7a86fc
improve ratelimit doc (#11654)
* improve ratelimit task

* fix lint

* fix redundant function call
2022-08-18 06:21:39 -07:00
Eric Van Norman da73c24218
Prepare for the 1.15.0 release (#11684) 2022-08-07 13:23:45 -07:00
Istio Automation d39873ede8
[master] Add minikube in the instructions per Kubernetes environment (#11613)
* Add minikube in the instructions per Kubernetes environment

I was coming from https://istio.io/latest/docs/examples/bookinfo/ "Follow these instructions to set the INGRESS_HOST and INGRESS_PORT ..." and did not realize I would have to setup the minikube tunnel as explained in the [Getting Started Guide](https://istio.io/latest/docs/setup/getting-started/#determining-the-ingress-ip-and-ports)

For this reason I suggest to add it here as well.

* incorporated reviewers suggestions

* snips and tests for the new code snippet in docu

* ran make snips
* updated test.sh with the new functin names
* also the functions
  snip_determining_the_ingress_ip_and_ports_{3,5,6,7,8,9} have changed
  but they seem not to be used in test.sh

* followed reviewer suggestion to revert sip numbers

- used the annotation snip_id=none to skip the snippet, see https://github.com/istio/istio.io/blob/master/tests/README.md
- took back the snip renumbering
- checked that generating snips does not bring them back again: make
  snips

* used custom name for generated snip

- now using minikube_tunnel as snip_id, resulting in a generated snip id snip_minikube_tunnel
- apparently still the remaining snips get renumbered
- updated test.sh with the 2 changed snip calls

Co-authored-by: Martin Knechtel <martin.knechtel@sap.com>
2022-07-20 08:35:39 -07:00
Iris e202a0995d
add multi-signer docs (#11419)
* addess review comments

* address review comments

* address review comments
2022-07-15 16:15:58 -07:00
verysonglaa 9cb547ced7
adding OpenCensus tracing task with W3C headers (#11239)
* adding opencensus tracing Task

* fix OpenCensus Agent wording

* adding generated snippet

* fix misc. linting issues

* regenerate snips.sh for OpenCensus

* fix quoting issue

* simplified docs and added tests

* fixed tests and grammar

* improved cleanup

* remove istio-system namespace in cleanup
2022-07-13 07:48:18 -07:00
Istio Automation 4add341878
[master] SHA-1 signatures will not work with Golang 1.18 (#11546)
* SHA-1 signatures will not work with Golang 1.18

Support for SHA-1 signatures is disabled by default in Go 1.18 or newer. When generating the certificates please use OpenSSL on MacOS to make sure the certificates will work with istio.

* Lint fixes

* Lint fix

Co-authored-by: Saverio Proto <saverioproto@microsoft.com>
Co-authored-by: craigbox <craigbox@google.com>
2022-07-06 09:58:29 -07:00
Ingwon Song 3ecc5aeb4a
Moving/Updating the WasmPlugin tutorial and Adding ImagePullPolicy description (#11379)
* Update for Wasm contents

* Fix the wrong cleanup code

* Fix the description of `extensibility` folder's description

* Apply suggestions from code review

Co-authored-by: craigbox <craigbox@google.com>

* Update _index.md

* Regenerate snips

* Add old URL path as an alias

* Update content/en/docs/tasks/extensibility/_index.md

* Add description for the wasm pull policy

Signed-off-by: Ingwon Song <igsong@google.com>

* Apply suggestions from code review

Co-authored-by: Douglas Reid <douglas-reid@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: craigbox <craigbox@google.com>

* Applying the comment from @dgn

Co-authored-by: craigbox <craigbox@google.com>
Co-authored-by: Douglas Reid <douglas-reid@users.noreply.github.com>
2022-07-01 12:20:20 -07:00
CharliePu 5312777dcc
Fix document omissions. (#11393)
* Fix document omissions.

* Fix document omissions.
2022-06-21 12:12:23 -07:00
Jakub Horák a5b270cba4
Improve clarity of Egress Gateway docs (#11458)
* Improve clarity of Egress Gateway docs

Make the step 13 more clear, since it is creating a DestinationRule in the test-egress namespace and not in the default namespace.

* Update content/en/docs/tasks/traffic-management/egress/egress-gateway/index.md

Co-authored-by: craigbox <craigbox@google.com>

Co-authored-by: craigbox <craigbox@google.com>
2022-06-20 10:36:26 -07:00
Eric Van Norman d6a7531a62
Enable the dashboard test (#11441) 2022-06-15 14:05:14 -07:00
Eric Van Norman b5e32c648a
Additional updates to use the master branches in other repos (#11431) 2022-06-15 03:34:22 -07:00
Eric Van Norman e9841ae394
Update to use the master branch of istio.io/istio for test refs (#11414)
* Update to use the master branch of istio.io/istio for test refs

* go.* changes

* Update test and go.*

* Update to use `master` branch for make targets

* One final go mod tidy

* REmove vm test for now.

* Remove istioctl-analyze test

* Also remove using-istio-dashboard
2022-06-14 13:39:44 -07:00
John Howard 2525eb5ea5
Wildcard egress: remove arbitrary domain section (#11291)
* Wildcard egress: remove arbitrary domain section

This doc has been a nuisance for many years. It recommends an extremely
complex and dangerous pattern, relying on deploying nginx, extremely
complex EnvoyFilters enabling unsupported, custom, alpha Envoy c++
filters, and a number of other scary practices. IMO this does not belong
in Istio docs at all, and certainly not in our top level taks.

* Add back single wildcard

* Update content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2022-06-06 15:36:31 -07:00
John Howard e1bc209fa0
Remove doc on "Istio DNS Certificate Management" (#11369)
* Remove doc on "Istio DNS Certificate Management"

This document gives harmful advice. This feature was intended to be used
for signing control plane certificates, and actually doesn't work for
other cases (cross namespace or any modern Kubernetes version are
completely broken).

* use archive link

* name trick
2022-06-06 11:16:26 -07:00
bobbypower-asm 2b7afa36d7
Fix title ("mininum" > "minimum") (#11346) 2022-05-24 14:27:36 -07:00
Eric Van Norman 9689696934
Update minikube instructions related to ingress host and port (#11326)
* Update minikube instructiuons related to ingress host and port

* Rune make gen

* Update test script with new snippet names (renumbered)
2022-05-24 07:48:10 -07:00
Eric Van Norman 3a18e15028
Update multicluster test kind image (#11337)
* Update multicluster test kind image

* Fix linting errors

* Restore make gen temporarily until reall common-files update can happen
2022-05-20 23:45:15 -07:00
Faseela K 471750a0f1
Egress TLS Origination - fix typos (#11332)
Signed-off-by: Faseela K <faseela.k@est.tech>
2022-05-20 05:59:30 -07:00
Faseela K db2b88790e
Document Egress mTLS origination at sidecar using credentialName in DR (#11301)
* Documentation for egress mTLS origination at sidecar using credentialName in DR

The feature is already merged. So trying to add a documentation for the same.

Signed-off-by: Faseela K <faseela.k@est.tech>

* Remove duplicate code and point to the existing documentation

Signed-off-by: Faseela K <faseela.k@est.tech>

* Fix test failures

Signed-off-by: Faseela K <faseela.k@est.tech>

* Fix test failures

Signed-off-by: Faseela K <faseela.k@est.tech>

* Add tests for mTLS origination at sidecar

Signed-off-by: Faseela K <faseela.k@est.tech>
2022-05-19 08:16:58 -07:00
Frank Budinsky a326daa3e0
Add webhooks to test framework snapshot (#11281)
* Add webhooks to test framework snapshot

* missing return

* fix lint

* some fixes

* more fixes

* final fixes

* one more
2022-05-13 10:12:49 -07:00
lei-tang bf82e1037c
User guide for Istio TLS configuration (#11166)
* User guide for Istio TLS configuration

* Address review comments

* Fix indention

* Fix lint

* Address reviewer comments

* Address review comment
2022-05-02 14:46:04 -07:00
Eric Van Norman 84c40da017
Prepare for version 1.14 as istio source is already branched (#11212)
* Prepare for version 1.14 as istio source is already branched

* Missed make gen
2022-04-25 10:24:04 -07:00
Eric Van Norman fc515c8166
Replay yq v3 which is deprecated with yq v4 (#11202)
* Replay yq v3 which is deprecated with yq v4

* Update yq key
2022-04-20 13:37:30 -07:00
zirain f2316b6eed
update rate limit metrics (#11127)
* update rate limit metrics

* fix display

* fix lint

* update text

* update content

* fix typo
2022-04-01 14:06:03 -07:00
lgadban c1e90d18f4
fix indentation for custom tags (#11131) 2022-03-31 11:27:37 -07:00
Kevin 14b766309c
doc: change 'plain text' to 'plaintext' (#11085) 2022-03-22 02:21:24 -07:00
zirain 7a90100810
add otel telemetry doc (#10977)
* add otel telemetry doc

* fix nit

* fix gen

* update content

* remove patch meshconfig

* fix test.sh

* fix probability of failure
2022-03-15 11:45:41 -07:00
Frank Budinsky 616d2afdc4
Possible fix for test flake (#10982) 2022-02-28 11:19:58 -08:00
Frank Budinsky 3d8e81d7d9
Document EnvoyProxy priority problem (#10935)
* Document EnvoyProxy priorty problem

* fix lint

* make more future-proof

* tweak
2022-02-23 21:04:00 -08:00
Eric Van Norman 08fe6be739
Updates to use fix main branch post release branching (#10894)
* Update to use main branch for reference docs

* Updates to fix this for next time (not moving to master)

* Run `make gen`

* Update master istio test reference

* Ingore one shellcheck, SC1091, for now. Not sure why it just showed up
2022-02-11 16:28:20 -08:00
Istio Automation 3d1ad88e4b
[master] GKE typo fix (#10881)
* Typo fix for GKE

* make gen

Co-authored-by: Noah Nsimbe <37845280+NoahNsimbe@users.noreply.github.com>
Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2022-02-08 17:07:55 -08:00
Pengyuan Bian ec2d933288
Fix envoy access log telemetry API to specify envoy as provider. (#10830)
* Fix envoy access log telemetry API to specify envoy as provider.

* word.

* gen
2022-01-24 13:17:47 -08:00
plucury e9ae249032
`proxy.istio.io/config` should attach in `annotations` (#10811) 2022-01-24 07:40:51 -08:00
Deepak Pakhale 29f0d809f3
Fixes #10813 (#10819)
Adding files generated after "make gen"
2022-01-23 14:40:13 -08:00
Eric Van Norman 68f0f07545
Prepare for v1.13 as istio source is already branched (#10808)
* Prepare for v1.13 as istio source is already branched

* Update VM test image from 1.11 to current to test

* Rename tests to temporaily disable Issue created to reanble before 1.13
2022-01-21 09:52:46 -08:00
Faseela K ac40646148
Remove unwanted cleanup step in mtls example (#10778)
Signed-off-by: Faseela K <faseela.k@est.tech>
2022-01-12 08:19:07 -08:00
Faseela K d99f954936
Minor fix in egress mtls example cleanup (#10720)
* Minor fix in egress mtls example cleanup

The document mentions some resources for cleanup
which are not actually created as part of this exercise.

Signed-off-by: Faseela K <faseela.k@est.tech>

* Adding make gen output files

Signed-off-by: Faseela K <faseela.k@est.tech>
2022-01-05 15:23:28 -08:00
Yangmin Zhu 84a63d0e33
add test for the dry-run task (#10526)
* add test for the dry-run task

* Update content/en/docs/tasks/security/authorization/authz-dry-run/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2021-12-08 07:50:27 -08:00
刘旭 87d20b5d3e
fix weak algorithm (#10545) 2021-11-29 20:41:42 -08:00
Yangmin Zhu 81e896486b
update release note for external authz (#10527)
* update release note for external authz

* address comment

* Update content/en/news/releases/1.12.x/announcing-1.12/change-notes/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
2021-11-23 11:30:07 -08:00
Eric Van Norman 72de90d75b
Advance master to release-1.13 (#10516)
* build an archive of v1.11 in master

* update data/versions.yml and archive index page

* advance master to release-1.13

* ANother script update

* go get remaing istio repos to satisfy linter

* Temporarily fix link broken by istio/api #2148

* Temporarily disable istioctl analyze test.
2021-11-19 06:52:51 -08:00
John Howard ad49bf308d
Initial Telemetry API docs (#10496)
* Initial Telemetry API docs

Currently, the docs only have Telemetry for tracing. This adds a common
Telemetry API doc for high level info, shared for all 3 types. It also
adds some info about access logging via Telemetry.

We should likely add a similar page for Metrics, but I did not do it
here.

* fix gen

* fix dead links

* fix typo

* dead link

* one more

* 1 more?

* I hope this is it...

* again???
2021-11-17 17:20:09 -08:00
John Howard db62971c31
Expand the gateway-api docs for 1.12 (#10481)
* Expand the gateway-api docs for 1.12

This introduces a lot more details, highlights changes in 1.12, and
discusses the differences between Istio and Gateway-API.

* erics comments

* clarify

* gen
2021-11-12 13:34:44 -08:00
IM CHAECHEOL f0bf5006c4
Fix Document meshConfiguration example (#10488)
* Fix meshConfiguration example

https://preliminary.istio.io/latest/docs/reference/config/istio.mesh.v1alpha1/#MeshConfig-DefaultProviders say meshConfig.defaultProviders.tracing data type string[] but document use string

* Fix lint 

Remove MD009 Trailing spaces
2021-11-10 05:28:32 -08:00
Yangmin Zhu 90c77c5583
update jwt claim based routing and add tests (#10465)
* update jwt claim based routing and add tests

* fix test

* fix typo

* fix test
2021-11-09 09:11:52 -08:00
Eric Van Norman 4c16b9a65e
Prepare for v1.12 as Istio source is already branched (#10455)
* prepare for v1.12 as istio source is already branched

* Fixup script output

* Removing validatingwebhookconfiguration if it exists.
2021-11-01 12:27:58 -07:00
Paul Lin b72ebb74a6
docs(kiali): fix broken links (#10437)
* Fix broken links for kiali docs

Fix broken links for kiali docs.

* Fix broken links for kiali docs in zh docs

Fix broken links for kiali docs in zh docs.
2021-10-27 02:00:08 -07:00
Eric Van Norman df10dca654
Update test ref (#10423)
* Update to latest istio/istio commit for istio.io tests

* Update to latest istio commit

* Additional istioctl analyze output

* Fix istioctl-analyze test

* Fix gateway doc

* Fix setting of INGRESS_HOST and more cleanup

* Fixes for unbound INGRESS_HOST

* lint fix

Co-authored-by: John Howard <howardjohn@google.com>
2021-10-20 09:07:12 -07:00
Yangmin Zhu 3053d41089
add task for JWT claim based routing (#10332)
* add task for JWT claim based routing

* move to security

* update

* update

* update
2021-10-12 19:08:05 -07:00
Istio Automation 07cf4f6b68
[master] Fix in attribute "name" on "metadata". (#10361)
* Fix in attribute "name" on "metadata".

Missing tab in attribute "name" at section "Define the external authorizer" in ServiceEntry example.

* command make gen

Co-authored-by: Igor Agueme <igoragueme@outlook.com>
2021-09-17 08:31:35 -07:00