* Clarify auth variant
This makes it clear that sds-auth is already the 'auth' variant. It
also tries to be more specific about what it does, rather than just
saying 'auth by default'
* Add incompatibility between SDS and control plane auth
* Remove unneeded aside
* Clarify status of control plane security with SDS
No technical issues apparently, just timeline. Also moved to before the
table for clarity.
* Simplify additional security feature table
This improves the clarity of this table by:
* Removing default and minimal , since -auth doesn't add any security
features
* Labeling the first column as security feature
* Changing the names of the profiles to reflect the final profile name
including the -auth, instead of without
* Add new Traffic management concept.
Wrote a new "Traffic management" concept to include the latest developments.
Organized the content into smaller pages to make it easier to consume. The new
structure improves visibility and each page includes keywords to improve the
"See Also" pieces of suggested content and SEO. The new concept includes
diagrams and examples. Each section starts with the larger picture and then
moves to explain the specifics.
Signed-off-by: rcaballeromx <grca@google.com>
* Improved based on review comments.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix Hugo front matter.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix false positives in links test.
Signed-off-by: rcaballeromx <grca@google.com>
* Remove terms from exceptions file.
Signed-off-by: rcaballeromx <grca@google.com>
* Revert "Add new Traffic management concept."
This reverts commit de9d0e0225.
* Add new Traffic management concept.
Wrote a new "Traffic management" concept to include the latest developments.
Organized the content into smaller pages to make it easier to consume. The new
structure improves visibility and each page includes keywords to improve the
"See Also" pieces of suggested content and SEO. The new concept includes
diagrams and examples. Each section starts with the larger picture and then
moves to explain the specifics.
The flag to pass to Helm is `cniBinDir=/home/kubernetes/bin`, so it is confusing to add `istio-cni.cniBinDir=/home/kubernetes/bin` as the option, unless there is some context I am missing
* Clarify language regarding the sidecar webhook.
Signed-off-by: rcaballeromx <grca@google.com>
* Clarify the injection process further.
Signed-off-by: rcaballeromx <grca@google.com>
* Remove blank lines around short codes.
Signed-off-by: rcaballeromx <grca@google.com>
- We haven't been checking external links for months now due to a script error
when someone added an option that didn't work as expected. I'm fixing a bunch
of resulting broken links. I can't turn on the link checker yet since there are
some bad links in reference docs which I have to address first.
- Add a bunch of links to yaml files in our code examples using the @@ syntax.
- Move requirements up to be the first thing people see. This matches
the order presented in the landing page.
- Shuffle the order in the sidebar a bit to correspond to the order
the material is presented in the landing page.
- Clean up some of the wording on the k8s landing page.
- Shorten the platform names used in the sidebar nav so they fit better.
This matches the names used in the Platform Setup section.
* First round of mesh expansion doc updates.
* Bash syntax works now, and remove the headline to be consistent.
* fix the spelling.
* SERVICE_NAMESPACE and cleanup.
* Use more SERVICE_NAMESPACE in the cmd.
* Another round of fixing the doc by following exactly what it says.
* add gcloud ssh
* VM instance ip as a step.
* address comments. ns explaining.
* comments fixing and echo to tee.
* update meshexpansion.enabled
* applied my zone, project in scp.
* add istio-sys ns crtn.
* Fix frank suggestion.
* gce instance ip
* Verfied manually: use helm template for CRD.
* Verfied manually: use helm template for CRD.
* for example comma.
* Add tips to disclaim GCE.
* Update content/docs/setup/kubernetes/mesh-expansion/index.md
Co-Authored-By: incfly <jianfeih@google.com>
* Update content/docs/setup/kubernetes/mesh-expansion/index.md
Co-Authored-By: incfly <jianfeih@google.com>
* address taos comments.
* fix the link for cert life config.
* Change to require helm in prerequisite.
* fix lint
* congrats section and cleanup vm model section.
* Apply 23 suggestions to code review from github.
Co-Authored-By: incfly <jianfeih@google.com>
* remove tip section.
* fix trailing spaces lint.
* fix lint.
* remove duplicate sentence.
* remove duplicate the the.
* Implement consitent term for installation related flows
Replaced "paths", "instructions", and other similar terms
with the term "flow" to ensure readers from different
Geos are not confused by multiple meanings or idiomatic use.
Signed-off-by: Rigs Caballero <grca@google.com>
* Implement consistent term for installation related flows
Replaced "paths", "instructions", and other similar terms
with the term "flow" to ensure readers from different
Geos are not confused by multiple meanings or idiomatic use.
Signed-off-by: Rigs Caballero <grca@google.com>
* Fix typos and lint issue.
Signed-off-by: Rigs Caballero <grca@google.com>
* WIP Add Kubernetes Installation landing page.
This adds the landing page and organizes the content to make it easier to navigate.
Signed-off-by: rcaballeromx <grca@google.com>
* Apply initial feedback on landing page content.
Signed-off-by: rcaballeromx <grca@google.com>
* Rename and move files to enhance navigation.
Added aliases to redirect after filename changes.
Signed-off-by: rcaballeromx <grca@google.com>
* Harmonize all installation guide titles and intros.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix all links affected by the restructure.
Fixed all internal links and added aliases to ensure external redirects.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix paths of images on the ZH content.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix additional links and apply feedback.
Signed-off-by: rcaballeromx <grca@google.com>
* Fix link error introduced by rebase.
Signed-off-by: rcaballeromx <grca@google.com>
* Remove redundant instances of "Istio" in titles.
Signed-off-by: rcaballeromx <grca@google.com>
Nik Skoufis
Lin Sun
John Howard
Rigs Caballero
Frank Budinsky
Romain Lenglet
Dmitri Dolguikh
Martin Taillefer
Jianfei Hu
mtail
Eric Van Norman
Tim Swanson
Idan Zach