Commit Graph

59 Commits

Author SHA1 Message Date
Diem Vu 35a1291a37 Add task for EUC + mTLS authentication (#1965) 2018-07-25 10:51:18 -07:00
Diem Vu 9b9088e7a6 Use mock JWT and JWKS from codebase for end-user auth tutorial (#1945) 2018-07-25 08:16:33 -07:00
mtail 613ffd6cc3 A few editorial fixes. 2018-07-24 13:13:15 -07:00
lei-tang 8a43b3d1d8 Revert the PR 1744 as the yaml files have been added back (#1924)
* Revert the PR 1744 as the yaml files are added back

The PR 1744 fixes the non-existent yaml files in the description of Citadel health checking in
https://preliminary.istio.io/docs/tasks/security/health-check.html
reported by the issue https://github.com/istio/istio/issues/6922. Since
the PR https://github.com/istio/istio/pull/7178 adds back the removed
yaml files, the PR 1744 is reverted.
2018-07-24 09:46:20 -07:00
mtail 3dee29d873 Fix a linting error. 2018-07-23 17:27:29 -07:00
Diem Vu 792675ad07 Update authentication policy tasks (#1891) 2018-07-23 14:17:13 -07:00
Limin Wang 61fcfd9e9b Add back denier and listing adapters task doc (#1887)
* Add back denier and listing adapters task doc.

* Renamed and fixed lint errors.
2018-07-20 06:18:37 -07:00
Limin Wang 8973981880 Update authentication concept doc (#1886)
* Update authentication concept doc.

* Fix lint errors.

* Address comments and fixed some links.

* Remove feature stages change from this PR.

I will make a separate PR for it.
2018-07-19 19:10:37 -07:00
Yangmin 0b9e3aba5a update rbac api version to align with istio/istio#6874. (#1879) 2018-07-18 15:21:37 -07:00
Jimmy Song 863934a454 Chinese community translation and fix a markdown error (#1871)
* Chinese community translation and fix a markdown error

- Translate community page into Chinese
- Fix https overlay markdown style check error

* fix CI errors

- update Quick Start with Kubernetes
- update Prerequisites and Installation steps
- fix some broken links
2018-07-18 07:56:37 -07:00
Spike Curtis 0376ee75e9 Clarify install in HTTPS overlay (#1857)
Signed-off-by: Spike Curtis <spike@tigera.io>
2018-07-18 04:54:17 -07:00
Axel Siebenborn b4ed6f2823 Document to use flag security.selfSigned instead (#1757)
of no longer existing template file.
2018-07-17 11:45:57 -04:00
Yangmin 5ba0a19293 Update RBAC task for Istio 1.0. (#1789)
* Update RBAC task for Istio 1.0.

* address comments.

* address comments.

* Replace "Istio RBAC" with "Istio Authorization".

* address comments.

* change "Istio Authorization" to "Authorization" to match #1807.

* resolve conflict.
2018-07-16 16:58:43 -04:00
Limin Wang fd259b3526 Update Istio Authorization Concept. (#1807)
* Update Istio Authorization Concept.

* Fix lint errors and address comments.

* Addressed comments.

* Changed title from "Istio Authorization" to "Authorization".

* Fixed links.

* Addressed comments.

* Addressed comments.

* Fix lint errors.

* Undo unintended changes in .spelling.
2018-07-16 16:46:18 -04:00
Martin Taillefer 597f7ce3b4
Enable more linting rules (#1824)
Fix feported linting errors.
2018-07-15 07:49:11 -07:00
lei-tang 289e90b854 Fix the non-existent file in the test description of Citadel health checking (#1744) 2018-07-14 04:39:29 -07:00
Spike Curtis 6b1321ade4 Newlines to display lists correctly (#1816)
Signed-off-by: Spike Curtis <spike@tigera.io>
2018-07-13 19:19:51 -07:00
Spike Curtis 9fa7b375cf Remove innacurate text about extra RBAC files (#1815)
Signed-off-by: Spike Curtis <spike@tigera.io>
2018-07-13 16:37:36 -07:00
Tao Li 721906a161 Update istio-auth.yaml to istio-demo-auth.yaml (#1809) 2018-07-13 14:08:36 -07:00
Limin Wang 81cd374bc7 Delete "basic access control" and "secure access control" pages. (#1780)
* Delete "basic access control" and "secure access control" pages.

These pages were there before Istio RBAC was introduced. We should
remove them now to avoid confusion.

* Added aliases for deleted pages.
2018-07-12 15:58:43 -07:00
Vincent 044c20358e fixed: references to sleep.yaml (#1770) 2018-07-12 07:37:47 -07:00
Yangmin 6c54c67d9c Update basic-access-control and request-routing. (#1743) 2018-07-11 06:50:17 -07:00
Frank Budinsky de49a21816
Fix references to bookinfo sample files (#1759)
* fix references to sample files

* fix mixer rule link
2018-07-11 09:41:15 -04:00
Jianfei Hu e8a32581d6 Document PERMISSIVE mode for incremental mTLS adoption. (#1565) 2018-07-10 13:54:26 -07:00
Andra Cismaru 4e2b9233bc Create service subsets and move routing/route-rule* to networking/virtual-service* (#1715) 2018-07-10 11:52:29 -07:00
Axel Siebenborn cdf51a4cc0 Replace hard coded pod-id by command substitution. (#1705) 2018-07-10 10:41:41 -07:00
Martin Taillefer 181605b27e
Consolidate the security concept pages into a single page. (#1721)
* Consolidate the security concept pages into a single page.

- This updates the security concept material to be on a single page, which matches the
change done last week for the rest of the concept material. This ends up being a less clicky
more directed introduction for newcomers to the platform.

- While I was there, I moved the redundant What is Istio page from our about section and stuck
the content at the top of the What is Istio page in the Concepts section.
2018-07-10 10:26:19 -07:00
Axel Siebenborn 96ca8ac221 Change name of Policy and DestinationRule. (#1704)
The command uses istioctl replace to change Policy and DestinationRule.
However, there is no Policy or DestinationRule with the name example-2.
2018-07-09 08:43:49 -07:00
Steven Dake 4ebbb12505 Change all references to istio-demo-*.yaml (#1696)
Remove demo from all documentation references
2018-07-06 11:46:23 -07:00
Steven Dake 8c2b933ebc Fix broken links (#1692) 2018-07-06 06:43:20 -07:00
Yossi Mesika 26113b3b5b Remove link annotations from command paths (#1690) 2018-07-06 05:18:17 -07:00
LillyWu 1e8427099a make istio installation yaml file consistent (#1675) 2018-07-05 14:09:03 -04:00
Martin Taillefer 07ed229051
Simplify linking to GitHub content. (#1669)
- Add <github_file> <github_blob> and <github_tree> to make it simpler to link to the right
place on GitHub.

- Use these new sequences throughout the docs.

- Also, fix bad HTML generated for the TOC in certain cirsumstances.

- Fix extra blank line inserted at the bottom of indented code blocks.
2018-07-04 04:16:49 -07:00
mtail 0f8724351f Content fixes.
- Remove What's next sections since we now have auto-generated See also sections

- Fix a few incorrectly capitalized headers, "istio", "kubernetes", "sidecar"
2018-06-30 21:42:52 -07:00
Martin Taillefer 0541000be8
Switch from ``` to {{< text >}} to indicate text blocks. (#1644)
This fixes a number of cases of incorrect formatting of code blocks
throughout the site.
2018-06-30 07:11:21 -07:00
Limin Wang 4a114797f9 Update authn policy tasks with global policy. (#1639)
* Update authn policy tasks with global policy.

This is cloned from Diem's PR
https://github.com/istio/istio.github.io/pull/1600.

* Add section to use mesh-wide policy to enable mTLS globally.
* Update examples to follow naming restriction.

* Fix linter errors.

* Additional lint fix.
2018-06-29 16:12:29 -07:00
mtail 12dbc0202d Fix some bad formatting. 2018-06-29 08:06:59 -07:00
mtail e3c1f36859 Guides -> Examples
As agreed, in prep for the 1.0 launch.
2018-06-27 16:03:53 -07:00
mtail 77da9cccea Next batch of file refactorings. 2018-06-27 00:19:09 -07:00
Guang Ya Liu 4203f1b102 Use route rules in istio file directly. (#1581)
We have created the files in istio already at
https://github.com/istio/istio/pull/6102 , so there is no need
to create the file again.
2018-06-25 11:15:27 -07:00
Guang Ya Liu 425eed2439 Add option when auto injection is enabled. (#1521) 2018-06-15 06:31:51 -07:00
Morven Cao 738bed1889 fix format issue for access control doc. (#1520) 2018-06-15 06:30:02 -07:00
Martin Taillefer 9f3e980147
Add support for an auto-generated See Also section on every page. (#1364)
- We now automatically generate a See Also section on pages when possible.
The links are determined by a reverse index based on the keywords
assigned to each page in its front-matter.

- Do a pass to assign keywords to all our pages to populate the See Also
links.

- Leverage the keywords in the front-matter to generate a keyword metadata entry for each
generated page.
2018-06-11 15:07:32 -07:00
Guang Ya Liu df72c5caad Use virtualservices for basic access control. (#1475) 2018-06-08 09:06:13 -07:00
Guang Ya Liu aab47ae9af Correct some errors in mutual tls over https. (#1479) 2018-06-08 09:05:41 -07:00
Guang Ya Liu 329e6acff6 Added cleanup for mtls. (#1473) 2018-06-07 15:37:03 -07:00
Guang Ya Liu 4d4b297542 Use route rules from samples/bookinfo/routing. (#1476) 2018-06-07 10:01:48 -07:00
Guang Ya Liu c4022b9dc7 Basic auth clean. (#1472) 2018-06-07 05:30:56 -07:00
Oliver Liu 921eadfea1 Fix V0.8 security tasks. (#1400) 2018-06-06 16:15:42 -07:00
Tao Li c7ac01761e Remove the deprecated --debug in istioctl (#1457)
(cherry picked from commit ff690be)
2018-06-06 11:58:28 -07:00