Commit Graph

310 Commits

Author SHA1 Message Date
Martin Taillefer 04cc4a3d84
Start populating the ops guide. (#1994) 2018-07-26 15:05:23 -07:00
Frank Budinsky 5f0a0f22d6 improve platform setup docs (#1991)
* improve platform setup docs

* update IBM instructions

* remove kube version arg

* remove extra spaces
2018-07-26 14:16:39 -07:00
Brian Avery 75ab0f02e6 Fixed manual sidecar command (#1986) 2018-07-26 11:46:00 -04:00
Gregory Hanson 59e10c2495 bug with new certs getting picked up (#1987) 2018-07-26 11:45:22 -04:00
mtail c42d9e7ca2 Fix some aspect ratios. 2018-07-26 06:33:53 -07:00
Dan Ciruli 056a13cf1b New adapters diagram (#1928) 2018-07-26 06:25:23 -07:00
Dan Ciruli 7bb01fa9c8 New topology diagrams (#1927) 2018-07-26 06:22:21 -07:00
Martin Taillefer 9d56f3dbe7
Various design changes. (#1976)
- Increase the size of the Copy button in preformatted blocks to make it stand out since it is the
most common used button.

- Shift the copy/download/print buttons in PRE blocks towards the left so they don't overlap the
scroll bar in large text blocks.

- Switch to new fonts.

- Instead of underlining <H2> headers, we now draw a blue bar above them.

- Add an "up level" button at the top of pages.

- Streamline the appearance of the next/previous page links at the bottom of most pages.

- Remove the right pointing arrows from index pages and see also sections. They were just
confusing.

- Add icons to the main pages.

- Slightly change the layout of the glossary page, more to come here.
2018-07-26 06:14:32 -07:00
Dan Ciruli b32b22e9c1 New version of new authz diagram (#1931) 2018-07-25 21:58:40 -07:00
mtail bfdf1b8edd Workaround combo Hugo + markdown style checker bug. 2018-07-25 21:49:16 -07:00
mtail eb46b2af6e Fix OpenShift code blocks.
Improve grammar while I was in the neighborhood.
2018-07-25 19:39:20 -07:00
Vincent 3c1a8c583b fixed 404 error (#1973) 2018-07-25 18:09:39 -07:00
Steven Dake 4ae9e7ea69 Clean up of the platform section (#1960)
* Clean up of the platform section

This cleans up the platform section into its own subdirectory.
I am not all that happy about how "see-also" works, but maybe that
is how it is meant to work, or alternatively I'm doing it wrong :)

* Apply reviewer comments and add the index file

_index.md was missing from prior commit accidentally.
Removed all "Platform setup for" text in all platform docs.

* Apply reviewer comments

Some wordsmithing.
weight = 3 is intentional to fit alphabet. Assuming nobody
will require ASCIIbetical.

* Fix US English lint errors

* Revert the Chinese translation of the platforms PR

The Chinese language version needs to be ported.  This PR
was merged manually which probably has broken the gate.
2018-07-25 14:11:45 -07:00
Yossi Mesika b5c98e9fd9 Correct set values for the gateways (#1968) 2018-07-25 17:06:34 -04:00
Vincent 9b957b26a4 Fixed: 404 in ansible-setup (#1963)
* Fixed:
Broken link  to the old  platform-setup document.

code block in openshift setup.

* fixed: md005
recovered: code block for openshift.

Unexpected end tag : p (line 12)
2018-07-25 15:53:51 -04:00
mtail 4bad2ec7f5 Update reference docs. 2018-07-25 11:09:46 -07:00
Diem Vu 35a1291a37 Add task for EUC + mTLS authentication (#1965) 2018-07-25 10:51:18 -07:00
mtail 7797fd427d A few editorial fixes. 2018-07-25 09:57:55 -07:00
Diem Vu 9b9088e7a6 Use mock JWT and JWKS from codebase for end-user auth tutorial (#1945) 2018-07-25 08:16:33 -07:00
Dan Ciruli 0f69fc4752 New diagram for mesh expansion example (#1933) 2018-07-25 06:47:00 -07:00
Diem Vu 483aad2b98 Correct authn policy for health check demo (#1949) 2018-07-25 06:32:33 -07:00
Andra Cismaru 938eb8b40d Move each platform setup into its own file (#1948) 2018-07-25 06:30:26 -07:00
LillyWu 30b5e85b99 update doc as ansible installation policy changes (#1951) 2018-07-25 04:50:39 -07:00
Yangmin 973d25c451 Add a slash to the gRPC path format in ServiceRole. (#1950) 2018-07-24 16:16:11 -07:00
Tim Swanson bd15cd4a76 Multicluster--make pod-IP copy/paste work with and without zipkin (#1941)
* Multicluster--make pod-IP copy/paste work with and without zipkin

Fixes: 1895
2018-07-24 13:23:41 -07:00
Frank Budinsky e005164581 Fix bookinfo consul instructions (#1946)
* Fix bookinfo consul instructions

* fix lint errors

* fix spelling error
2018-07-24 13:18:39 -07:00
mtail 613ffd6cc3 A few editorial fixes. 2018-07-24 13:13:15 -07:00
Rigs Caballero cddace0f45 Remove ghost elements from security diagrams. (#1943)
By removing ghost elements from the SVG files, I could fix the scaling of the
diagrams.

Signed-off-by: rcaballeromx <grca@google.com>
2018-07-24 13:02:37 -07:00
Steven Dake 82c8146867 All known caveats for MC are in release notes (#1947) 2018-07-24 13:01:10 -07:00
Rigs Caballero c3ab22f604 Edit Security section for clarity. (#1921)
* Edit Security section for clarity.

The edit includes:

* Rewrite of every passive voice instance.
* Consistent use markup to reference code from the examples in the text.
* Added emphasis to make key concepts clearer.
* Added links to the Identity section of the docs.
2018-07-24 10:50:50 -07:00
mtail e3ff3313e6 A few minor editorial changes. 2018-07-24 10:11:02 -07:00
lei-tang 8a43b3d1d8 Revert the PR 1744 as the yaml files have been added back (#1924)
* Revert the PR 1744 as the yaml files are added back

The PR 1744 fixes the non-existent yaml files in the description of Citadel health checking in
https://preliminary.istio.io/docs/tasks/security/health-check.html
reported by the issue https://github.com/istio/istio/issues/6922. Since
the PR https://github.com/istio/istio/pull/7178 adds back the removed
yaml files, the PR 1744 is reverted.
2018-07-24 09:46:20 -07:00
Dan Ciruli bfc17bb1fe New citadel (auth) diagram (#1929) 2018-07-24 07:50:40 -07:00
duderino f6aae3db69 Fixed stale filenames in the Kubernetes Quick Start. Replaced 'istio.yaml' with 'istio-demo.yaml' and 'istio-auth.yaml' with 'istio-demo-auth.yaml'. (#1720) 2018-07-24 06:29:05 -07:00
Guang Ya Liu 4773ac054a Removed redundant `--set`. (#1934) 2018-07-24 04:01:39 -07:00
Kent Rancourt 217c78af01 bookinfo doc fixes (#1817) 2018-07-23 20:36:23 -07:00
mtail 3dee29d873 Fix a linting error. 2018-07-23 17:27:29 -07:00
Dan Ciruli b1df371b92 New Authentication diagram (#1925) 2018-07-23 17:24:22 -07:00
Diem Vu 792675ad07 Update authentication policy tasks (#1891) 2018-07-23 14:17:13 -07:00
Vadim Eisenberg 2bf4b91b73 Fix lint errors for egress gateway (#1922) 2018-07-23 13:14:49 -07:00
Vadim Eisenberg 55a4a3361b Add egress gateway task to master, extended for mTLS and HTTPS (#1687)
* initial version of Egress Gateway for 1.0

* use HTTPS protocol for the egress gateway ports

* change troubleshouting section regarding mutual TLS

just direct users to read the mutual TLS page regarding troubleshooting

* add egressgateway to .spelling

* remove "let's" prevent the "we language"

* fix lint errors

* rename Cleanup section names to more detailed names, to prevent lint errors

* add a section about directing HTTPS traffic thru egress gateway

* remove istio-system namespace from the HTTPS-related artifacts

* add a section for mutual TLS over HTTPS

* disable mTLS on Istio with mTLS between a sidecar and the egress gateway

* use * as a host in the gateway's definition

* clarify the fact that in HTTPS the original traffic is already encrypted

* use mTLS between sidecar and egress gateway

* use explicit host in gateways instead of *

* add subjectAltNames to the upstream of the sidecar proxy

* unite creating a gateway for mTLS and a destination to set SNI

* add a missing dot

* add destination rule for setting SNI for mTLS to all cases

* add deleting the destination rule for mTLS

* split a long line

* Rewrite the steps to create a service entry in a separate step

* use port 80 in the destionation rule for direct HTTP traffic without TLS origination

* remove redundant ServiceEntry definition

* mention DestinationRule for TLS origination

* rename port tls to tls-cnn

for future definition of multiple servers on the same port

* describe getting Envoy's stastics of istio-egressgateway
2018-07-23 10:47:52 -04:00
Martin Taillefer 5527dcbaf6
Switch uses of funny quotation marks to plain ones. (#1914)
- Use only standard quotation marks to avoid cut & paste stuff not working

- Put in a lint rule to prevent further use of non-plain quotation marks.
2018-07-22 08:48:03 -07:00
Stefan Büringer eb4c7be94b Minor doc fixes (#1910)
Fixed indentation and typos
2018-07-22 07:52:43 -07:00
LillyWu 10677f5c9a make a note to check options settings before override it (#1867) 2018-07-21 06:42:10 -07:00
Pengyuan Bian 98281c123f Add `add` to expression reference. (#1902) 2018-07-20 16:10:35 -07:00
Matthew Wringe c9f8715bee Add in missing galley permissions for OpenShift (#1899) 2018-07-20 13:53:35 -07:00
mtail 3bb4f605f2 Update reference docs. 2018-07-20 13:29:08 -07:00
Frank Budinsky 094007ddff Traffic managment rule config concepts improvements (#1897) 2018-07-20 13:15:36 -07:00
gargnupur 23fd3046e0 Add port-forward cleanup step in distributed-tracing, fluentd, metric… (#1894)
* Add port-forward cleanup step in distributed-tracing, fluentd, metrics-logs and servicegraph tasks

* Fix Lint Errors
2018-07-20 13:14:35 -07:00
Frank Budinsky 8f7a1d1b2f Clarify use of istioctl vs kubectl (#1893) 2018-07-20 11:53:35 -07:00