Commit Graph

61 Commits

Author SHA1 Message Date
Frank Budinsky 08c3e1db01
Multicluster terminology improvements (#7873)
* Multicluster terminology improvements

* review comments

* tweak
2020-08-06 14:19:52 -07:00
Simon Alling 8528095c20
Clarify domain stubbing parts (#7796) 2020-07-28 08:08:44 -07:00
Frank Budinsky e9a89c879f
Add owner attribute to docs (#7737)
* Add owner attribute to docs

* remove @
2020-07-15 15:19:40 -07:00
tomocy 14896e8e34
Fix description of Shared control plane (#7556)
From the remote cluster, one of the endpoints should be the IP of the Pod in remote cluster not in the main cluster.
2020-06-15 06:53:00 -07:00
Shamsher Ansari 275c55e905
Simplify passing --context to access different cluster (#7455) 2020-06-03 09:30:31 -07:00
Shamsher Ansari 9fe272272b
update doc to use istioctl install (#7396) 2020-06-01 11:02:27 -07:00
Frank Budinsky e11cf24f0d
Add test: attribute to all md files (#7413) 2020-05-27 09:11:26 -07:00
Gregory Hanson 9e9650b623
changed fromRegistry to match MAIN_CLUSTER_NAME (#7349) 2020-05-18 16:33:12 -07:00
Oliver Liu 1e73594260
Restructure the cert management tasks. (#7209)
* Restructure the cert management tasks.

* Small fix.

* Fix references.

* Fix links

* Small fix.

* Update content/en/docs/tasks/security/cert-management/plugin-ca-cert/index.md

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>

* Small fix.

* Change the weights.

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
2020-05-04 14:57:29 -04:00
Eric Van Norman acb51ca7f6
Update links (#7170) 2020-04-28 07:25:42 -07:00
Lin Sun 9686e9597a
remove self signed (#7169)
details: https://github.com/istio/istio/pull/23304
2020-04-27 07:30:02 -07:00
Istio Automation a51d8af8db
Remove GKE v1.11.x instructions (#7036)
See https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control#iam-rolebinding-bootstrap. Assuming that these instructions were *only* required for GKE, they are no longer necessary.

Co-authored-by: Adrian Ludwin <adrian.ludwin@gmail.com>
2020-04-06 15:01:10 -07:00
Eric Van Norman 2b3a873446
Minor cleanup fixups (#6948) 2020-03-23 13:41:51 -04:00
Jason Young 535d2724f0
Incorporate feedback into shared control plane docs (#6934)
* Incorporate feedback into shared control plane docs

fixes https://github.com/istio/istio.io/issues/6594

* update ilb usage

* fix lint errors

* Apply suggestions from code review

Co-Authored-By: Jed Hartman <jed@google.com>

* fix linter

* remove blank lines

Co-authored-by: Jed Hartman <jed@google.com>
2020-03-23 08:28:07 -07:00
Eric Van Norman d298a66352
Minor changes to replicated control plane doc (#6935)
* Minor changes to replicated control plane doc

* Replace Citadel with Istio CA

* Add $ to CLUSTER2_GW_ADDR per review
2020-03-23 07:03:09 -07:00
Jason Young e7f8c82451
update multicluster shared control plane docs (#6843)
* update multicluster shared control plane docs

* Merged single and multiple network instructions. They are nearly
  identically except for specifying the mesh network configuration.

* Removed use of pod IPs for cross-cluster control plane. Added three
  options that are more appropriate for production use.

* use `istioctl x create-remote-secret` instead of copy/paste bash

* Updated the master and remote cluster configuration examples to be
  declartive instead of imperative. Users can copy/paste the examples,
  edit, commit to scm, and apply to the clusters.

* Update content/en/docs/setup/install/multicluster/shared/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* updates

* Update content/en/docs/setup/install/multicluster/shared/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* lint errors

* lint

* Update content/en/docs/setup/install/multicluster/shared/index.md

Co-Authored-By: Lin Sun <linsun@us.ibm.com>

* update networks and add selfSigned

* Apply suggestions from code review

Co-Authored-By: Lin Sun <linsun@us.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared/index.md

Co-Authored-By: Lin Sun <linsun@us.ibm.com>

* fix config and remove option 3

* fix formatting and grammer

* move additional considerations after the sample services

Co-authored-by: Frank Budinsky <frankb@ca.ibm.com>
Co-authored-by: Lin Sun <linsun@us.ibm.com>
2020-03-18 10:31:36 -04:00
Istio Automation 5f6d0712b8
Add a guide of plugging in CA cert to istiod and update CA documents (#6644)
Co-authored-by: lei-tang <lei-tang@users.noreply.github.com>
2020-03-05 10:42:54 -08:00
Istio Automation b5a4efb064
Another clean up for global.mtls.enable (#6611)
* Another clean up for global.mtl.enable

* Update text

* Lint

* Use --set values.grafana.enabled=true as overriding operator value example

* Revert change in content/en/docs/reference/commands/istioctl/index.html

* Change example istioctl command to override grafana settings

* Lint

* Change to --set addonComponents.grafana.enabled=true

* Remove global.mtls.enable in authn task

* Update content/en/docs/setup/install/istioctl/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/authentication/authn-policy/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/citadel-config/plugin-ca-cert/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

* Update content/en/docs/tasks/security/citadel-config/plugin-ca-cert/index.md

Co-Authored-By: Rigs Caballero <grca@google.com>

Co-authored-by: Rigs Caballero <grca@google.com>
2020-03-04 13:15:19 -08:00
Xinnan Wen 4e5246b78f
update outdated injection related doc (#6538) 2020-02-25 09:08:33 -08:00
Jason Young 2213f1fbba
remove references to experimental simplified multicluster setup scripts (#6467)
* remove references to experimental simplified multicluster setup scripts

* undo zh changes
2020-02-18 16:20:32 -08:00
LiuDui a249a3cf87
Update delete step (#6437) 2020-02-10 09:35:18 -08:00
Johannes Scheuermann ef4b6b43b0
Make CoreDNS docs for Multi Cluster more precise (#5819)
* Make CoreDNS docs for Multi Cluster more precise

* Add DNS port to forward command
2020-02-05 10:30:59 -08:00
cewuandy 5da7627459 update Simplified Multicluster Install page (#6340)
Fix some wrong word, including en, zh and pt-br
2020-01-17 12:46:41 -05:00
fox 2dc29cdcbf add meta CLUSTER_NAME to remote cluster (#6307)
* add meta CLUSTER_NAME to remote cluster

* change multicluster to multiCluster
2020-01-14 09:18:16 -08:00
Lin Sun 86f642902b remove controlPlaneSecurityEnabled (#6200)
* remove controlPlaneSecurityEnabled

as it is enabled by default now

* more update

* more updates

* more updates

* more update
2019-12-31 08:14:30 -08:00
Xinnan Wen 99c6016793 update doc for multi cluster (#6065)
* update doc for multi cluster

* update more places

* Update doc based on suggested change

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-12-13 14:51:13 -05:00
Martin Taillefer c863bea599
Content changes to prepare to switch to the new Hugo. (#5993)
These fix problems encountered when switching to the new Hugo which has
a completely different markdown engine. I went through diffs of the generated
HTML and made required adjustments.
2019-12-05 12:44:01 -08:00
Martin Taillefer 6165cb9821
Replace cookies with local storage. (#5949)
- We don't need cookies for istio.io, the few settings we do have should be
managed with browser-local storage instead. This is a better privacy posture,
and avoids sending needless data to the server for every request.
2019-12-02 13:02:51 -08:00
Frank Budinsky 60f73570f0 Another ops guide incremental improvement (#5830)
* Another ops guide incremental improvement

* fix broken links

* more lint errors

* one more lint

* fix aliases
2019-11-25 11:58:39 -08:00
Rigs Caballero 22d066be37 Added the Best Practices section with general principles. (#5137)
* Added the Best Practices section with general principles.

This is the beginning of the new Best Practices section.
Our goal is to provide a section for all the best practices and recommendations
for Istio deployments. The best practices are based on the identified and
recommended deployment models.

Signed-off-by: rcaballeromx <grca@google.com>

* Change headings for clarity.

Adds clarity to some passages based on feedback.
Removes a list of recommendations that was causing some confusion.
Adds a glossary entry for failure domains and how they relate to a
platform's availability zones.

Signed-off-by: rcaballeromx <grca@google.com>

* Move Best Practices to Ops Guide

Signed-off-by: rcaballeromx <grca@google.com>

* Moved Deployment Best Practices to a new "Prepare Your Deployment" section.

Moved all deployment preparation content into a new section under "Setup".
For now the content includes the following sections:

- Deployment models
- Deployment best practices
- Pod requirements

Merged the two existing pages containing pod requirements into one single page.

Signed-off-by: rcaballeromx <grca@google.com>

* Replace example with better guidance around namespace tenancy.

Signed-off-by: Rigs Caballero <grca@google.com>

* Add links and language pointing to the Prepare section

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix minor typos and broken links.

Signed-off-by: Rigs Caballero <grca@google.com>

* Move from Setup to Operations

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix broken links

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix rebasing issues.

Signed-off-by: Rigs Caballero <grca@google.com>

* Fix multicluster install link.

Signed-off-by: Rigs Caballero <grca@google.com>
2019-11-14 11:58:29 -05:00
Martin Taillefer efad815752 New experimental multicluster setup instructions (#5495) 2019-11-14 06:12:45 -08:00
Tao HE 8d67ec7825 Missing CLI change line mark (#5667) 2019-11-13 18:22:45 -08:00
Eric Van Norman 50479f17c6 Remove coreDNS,egressgateway --sets (now in values-istio-multicluster-gateways) (#5660) 2019-11-13 11:49:45 -08:00
Tao HE 37a55d689b Update multicluster shared-vpn doc (#5645)
* Update multicluster shared-vpn doc

Update docs for the multicluster installation for Shared control plane (single-network) to make it work with `istioctl manifest`.

* Update index.md

* Apply suggestions from code review

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-11-13 11:38:45 -08:00
Eric Van Norman c1b3683152 Fixup Shared control plane (multi-network) with using itstioctl (#5639) 2019-11-12 10:55:54 -08:00
Eric Van Norman f9b731eb60 Remove --force option (#5606) 2019-11-11 14:38:54 -08:00
Eric Van Norman 40719adc10 Update Replicated Control Plane scenario (#5522) 2019-11-11 06:40:53 -08:00
Tao HE f46ad5fe89 Update to use istio-reader-service-account (#5531) 2019-11-09 06:31:52 -08:00
Tao HE bc385d5064 Update index.md (#5530) 2019-11-09 06:21:00 -08:00
leo 7e3ee2cace fix incorrect content (#5504) 2019-11-09 00:09:52 -08:00
Frank Budinsky a6a5769f12
Organize security tasks (#5474)
* Organize security tasks

* lint errors

* fixes

* more fixes
2019-11-07 15:54:27 -05:00
Neeraj Poddar db10e052ff Fix directory structure/heading for istioctl install (#5390) 2019-11-05 12:37:19 -08:00
Martin Taillefer 4d4e6ae28e
General cleanup items. (#5325)
- Fix a bunch of heading capitalization.

- Remove words that shouldn't be in the dictionary
and update the text accordingly.

- Added a few @@ sequences to reference content files from text blocks.

- Used a few {{< source_branch_name >}} sequences to refer to the proper
branch in GitHub rather than master.
2019-11-04 06:41:54 -08:00
Frank Budinsky cdd8d7f50f Clarify istioctl install support for helm options (#5302)
* Clarify istioctl helm option support

* add helm deprecation warning to install options page

* remove space

* add prepend to .spelling

* address review comments
2019-10-31 09:22:07 -07:00
Martin Ostrowski b9280ce88b Update multicluster instructions (#5293) 2019-10-29 20:59:21 -04:00
Frank Budinsky abab549d5d Fix broken links (#5288) 2019-10-29 16:18:21 -07:00
Frank Budinsky f220f655a7 Deprecate helm install (#5270)
* Deprecate helm install

* fix lint

* address review comments

* correction
2019-10-29 06:37:34 -07:00
Martin Ostrowski c6bba52018 Change multicluster and CNI instructions to use istioctl (#5273)
* Change multicluster and CNI instructions to use istioctl

* Lint

* Lint

* Update content/en/docs/setup/additional-setup/cni/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/additional-setup/cni/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/additional-setup/cni/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared-gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/gateways/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>

* Update content/en/docs/setup/install/multicluster/shared-vpn/index.md

Co-Authored-By: Frank Budinsky <frankb@ca.ibm.com>
2019-10-28 20:07:34 -07:00
Rigs Caballero 03ca9f6478 Move pages out from the Concepts section (#5256)
* Move Deployment Models from Concepts to Setup

Signed-off-by: rcaballeromx <grca@google.com>

* Move Architecture from Concepts to Ops.

Signed-off-by: rcaballeromx <grca@google.com>

* Move Performance page from Concepts to Ops

Signed-off-by: rcaballeromx <grca@google.com>
2019-10-24 15:40:25 -07:00
Johannes Scheuermann 523094bd70 Update docs for CoreDNS newer than 1.3.2 (#4811)
* Update docs for CoreDNS newer than 1.3.2

* Use tabs in website

* Fix lint issues
2019-10-22 10:16:28 -07:00