* Clarify auth variant
This makes it clear that sds-auth is already the 'auth' variant. It
also tries to be more specific about what it does, rather than just
saying 'auth by default'
* Add incompatibility between SDS and control plane auth
* Remove unneeded aside
* Clarify status of control plane security with SDS
No technical issues apparently, just timeline. Also moved to before the
table for clarity.
* Simplify additional security feature table
This improves the clarity of this table by:
* Removing default and minimal , since -auth doesn't add any security
features
* Labeling the first column as security feature
* Changing the names of the profiles to reflect the final profile name
including the -auth, instead of without
* Patch the ingress-gateway deployment instead of recreating it
Patching it by just adding what is missing - a volume - is better in the
sense that it doesn't matter how the user created it - the template used,
the options used when creating it, etc.
* Apply suggestions from code review
Co-Authored-By: Rigs Caballero <grca@google.com>
* Replace oc with kubectl
* Remove a trailing space
* fix(telemetry docs): replace p&t concept doc with observability doc
* Fixed broken links
* Fixed one internal and one external link
* Added links and fixed two typos
* Title and links changes
* Added Policies conceptual section
* Fixed broken links in commands reference and traffic mnanagement
Cat-ing the crds into a single file along with the istio mainfests
leads to a race to install the crds. This applies the crds as a
separate step to avoid this.
* Refine the upgrade steps.
These could use a third party validation. The upgrade instructions
are mostly generic at this point, although the MTLS handling is not
necessarily generic between releases. I had thought we removed the
mtls global setting in this release, yet the existing docs state
this config option should be used.
* Update content/docs/setup/kubernetes/upgrade/steps/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
* Update content/docs/setup/kubernetes/upgrade/steps/index.md
Co-Authored-By: Rigs Caballero <grca@google.com>
Update the installation options for release-1.2 and the installation
option changes between release 1.1 and release 1.2. These changes have
been generated by the updated changes to tablegen.py in the
PR: https://github.com/istio/istio.io/pull/4402Fixes: #4374
* prep release note 1.2
* create release note 1.2 based on draft from wiki
* add a diff
* tweaks
* fix lint
* fix lint
* fix lint
* fix lint
* reorg a bit
* add missing rewrite prob annotation
* addressed Martin's comment
* add a release note item for 12824
* various update
* 3 month window
* a pass review with louis and josh
* typo
* a few link update
* Apply suggestions from code review
Co-Authored-By: mandarjog <mandarjog@gmail.com>
* more feedback
* galley related changes
* Update content/boilerplates/notes/1.2.md
Co-Authored-By: mandarjog <mandarjog@gmail.com>
* more updates
* more updates
* update mandar's change
* add link to annotationn
* Update content/boilerplates/notes/1.2.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/boilerplates/notes/1.2.md
Co-Authored-By: Ozben Evren <ozevren@users.noreply.github.com>
* Update content/boilerplates/notes/1.2.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* remove jitter in CSR
since it is in 1.1 4550986e42
also limin confirmed NO RBAC channges in 1.2
* add a link to sidecar none
* add feature maturity
* typo
* field->flag
* add a link
* added CNI support
* added a few others item
* typo
* Update content/boilerplates/notes/1.2.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* typos
* Update content/boilerplates/notes/1.2.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Update content/boilerplates/notes/1.2.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* some tweak for sds and remove service tracing
* fix link and lint
* add words
* fix link
* Update content/boilerplates/notes/1.2.md
Co-Authored-By: Oliver Liu <yonggangl@google.com>
* Add new Traffic management concept.
Wrote a new "Traffic management" concept to include the latest developments.
Organized the content into smaller pages to make it easier to consume. The new
structure improves visibility and each page includes keywords to improve the
"See Also" pieces of suggested content and SEO. The new concept includes
diagrams and examples. Each section starts with the larger picture and then
moves to explain the specifics.
Signed-off-by: rcaballeromx <grca@google.com>
* Improved based on review comments.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix Hugo front matter.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix false positives in links test.
Signed-off-by: rcaballeromx <grca@google.com>
* Remove terms from exceptions file.
Signed-off-by: rcaballeromx <grca@google.com>
* Revert "Add new Traffic management concept."
This reverts commit de9d0e0225.
Having back-ticks at the beginning of the lines was causing Hugo not to generate
the pages at build time. Moved the content with backticks away from the start of
the lines seems to fix the issue.
Signed-off-by: rcaballeromx <grca@google.com>
* Update feature stages for 1.2 release.
* Adjust stability of security features in consultatin with diemtvu and liminw.
* SNI multi cert now stable.
* Update feature stages based on feedback.
* Respond to code review feedback.
Nik Skoufis
Jonh Wendell
Martin Taillefer
Adam Miller
Tao Li
Lin Sun
John Howard
Dan Ciruli
Rigs Caballero
Diem Vu
Frank Budinsky
Ed Snible
imgbot[bot]
Steven Dake
Jan von Löwenstein
Yangmin Zhu
mtail
Martin Ostrowski
Matthew Wringe
Mariam John
Chris Wilson
Romain Lenglet
Oliver Liu
Jianfei Hu
Phil Rud
Joshua Blatt