Skip to content

Conversation

wbartosz
Copy link
Contributor

@wbartosz wbartosz commented Mar 24, 2021

This pull request syncs polidea-update with master and resolves conflicts.

[ ] Configuration Infrastructure
[ ] Docs
[ ] Installation
[ ] Networking
[ ] Performance and Scalability
[ ] Policies and Telemetry
[ ] Security
[ ] Test and Release
[ ] User Experience
[ ] Developer Infrastructure

howardjohn and others added 30 commits February 25, 2021 17:33
* Add suggested additions to security dock

* Update content/en/docs/ops/best-practices/security/index.md

Co-authored-by: Ram Vennam <rvennam@us.ibm.com>

Co-authored-by: Ram Vennam <rvennam@us.ibm.com>
)

* Add blog for zero configuration Istio

The intent here is to show off what Istio provides out of the box, to
attempt to counteract some of the reputation Istio has gotten for being
over complicated/requiring too many CRDs.

* fix links

* Address comments

* Apply suggestions from code review

Co-authored-by: craigbox <craigbox@google.com>

Co-authored-by: John Howard <howardjohn@google.com>
Co-authored-by: craigbox <craigbox@google.com>
else install would fail

Co-authored-by: Lin Sun <lin.sun@solo.io>
* fix workaround for revision validation bug

* fix backwards wording in bug description

* change wording to not suggest changing validating webhook
…stio#8991)

* Include latest versions of 1.7 and 1.8 and 1.9 without cve patches

* Remove language around LTS

* Update release table

* Code review comments

* Say we don't support 1.7 and below

* Put 1.9.1 in patched versions
* Add mixer migration faq.

* address comment

* add mixer envoy api.

* spelling

* reword

* update doc

* Update content/en/faq/metrics-and-logs/mixer-migration.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* Initial announcement

* Code review comments

* Fix linting

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: Joshua Blatt <jblatt@google.com>

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* Update content/en/news/security/istio-security-2021-001/index.md

Co-authored-by: Joshua Blatt <jblatt@google.com>

* Code review comments from Josh

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: craigbox <craigbox@google.com>

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: craigbox <craigbox@google.com>

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: craigbox <craigbox@google.com>

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: craigbox <craigbox@google.com>

* Update content/en/news/security/istio-security-2021-001/index.md

Co-authored-by: craigbox <craigbox@google.com>

* Additional docs review

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: craigbox <craigbox@google.com>

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: craigbox <craigbox@google.com>

* Update content/en/news/security/istio-security-2021-001/index.md

Co-authored-by: craigbox <craigbox@google.com>

* Update content/en/news/security/istio-security-2021-001/index.md

Co-authored-by: craigbox <craigbox@google.com>

* Add cvss score

* Fix spelling

* Update content/en/news/security/istio-security-2021-001/index.md

Co-authored-by: Oliver Liu <yonggangl@google.com>

* Fix link to istio.io

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: Joshua Blatt <jblatt@google.com>
Co-authored-by: craigbox <craigbox@google.com>
Co-authored-by: Oliver Liu <yonggangl@google.com>
Manually correct link that was added in a commit in istio#9087, without cherrypicking the entire thing
* add blog for v1alpha1 security policy migration

* update

* update

* update

* Apply suggestions from code review

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* small fix

* Apply suggestions from code review

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* update

* Apply suggestions from code review

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* update

* move to blog

* rewrite in blog post format.

* please the linter

* Update content/en/blog/2021/migrate-alpha-policy/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
Co-authored-by: craigbox <craigbox@google.com>
* zh-translation: about/bugs/index.md

* > fix lint

* > fix translate
> fix typo

> fix lint

> fix lint

> fix lint
* Add IST0137 Chinese translate

* > fix typo
* Update index.md

per @myidpt

* Update content/en/news/releases/1.9.x/announcing-1.9.1/index.md

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>

* change to a non-obtrusive tip

Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
* zh-translation: community/partners

* Update resource
wangmeng and others added 18 commits March 22, 2021 12:41
…o#9350)

* Wildcard configuration with non root user

* Generate snips.sh for wildcard-egress-hosts
)

* zh-translation:/docs/reference/config/config-status/index.md

* update english reference to chinese /zh/ reference

* update lint,add anchor,update changes after reviewing

* remove Spaces inside link text

* remove tail extra content

* update lint,change anchor format

* update anchor lint
* remove oc adm policy as it's not needed any more

* add anyuid group back into documentation

* remove anyuid header reference
* Update istio test ref - fix timeout failures?

* Go back to figure out why ext cp setup is failing (samples not starting)

* Again including #31560

* After 31561

* Past #31410

* test ref sha=688973e58828ffbcff2ccd9eeab41a12527c217a

* test ref 9d5ba69 #31401

* Update test ref to latest istio and change 504/408 for egress test

* Update to get around quay.io outage
This matches istio/api examples and all Kubernetes best practices. This
quoting sets a bad precedent that is copy and pasted around the web.
* Fix lint URL

* Update lint_site.sh

* no longer latest (or greatest)
…-microservices (istio#9130)

* zh-translation: zh/docs/examples/microservices-istio/enable-istio-all-microservices

Signed-off-by: nicole-lihui <hui.li-iog@daocloud.io>

* update title

* zh-translation update

* fix en link to zh link and Pods to Pod

* fix sort line number and 你 to 您

* fix 边车 to Sidecar

* fix end enter line

* fix semantic is not clear
)

* zh-translation: docs/setup/platform-setup/openshift/index.md

* Update content/zh/docs/setup/platform-setup/openshift/index.md

Co-authored-by: Kebe <kebe.liu@daocloud.io>

* fixed

Co-authored-by: Kebe <kebe.liu@daocloud.io>
* zh-translation:content/zh/docs/tasks/_index.md

* zh-translation: content/zh/docs/tasks/security/authentication/auto-mtls|https-overlay
* zh-translation: docs/ops/integrations/certmanager/index.md

* Update index.md
…istio#9360)

* zh-translation: docs/tasks/security/cert-management/dns-cert/index.md

* modify

* modify
*Total -- 14,394.39kb -> 12,877.57kb (10.54%)

/archive/v1.6/blog/2020/mosn-proxy/mosn-arch.png -- 29.12kb -> 14.35kb (50.71%)
/archive/v1.6/docs/tasks/observability/metrics/querying-metrics/prometheus_query_result.png -- 191.94kb -> 117.14kb (38.97%)
/archive/v1.8/blog/2020/show-source-ip/aws-proxy-protocol.png -- 584.51kb -> 380.46kb (34.91%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-wiz2-ratings-service-action-menu.png -- 114.91kb -> 77.47kb (32.58%)
/archive/v1.6/zh/docs/setup/getting-started/kiali-example2.png -- 262.82kb -> 177.91kb (32.31%)
/archive/v1.6/docs/setup/getting-started/kiali-example2.png -- 262.82kb -> 177.91kb (32.31%)
/archive/v1.6/blog/2020/deploy-wasm-declarative/how-it-works.png -- 117.95kb -> 81.33kb (31.04%)
/archive/v1.6/zh/blog/2020/deploy-wasm-declarative/how-it-works.png -- 117.95kb -> 81.33kb (31.04%)
/archive/v1.6/about/community/customers/tuya.png -- 15.99kb -> 11.10kb (30.57%)
/archive/v1.6/zh/about/community/customers/tuya.png -- 15.99kb -> 11.10kb (30.57%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-wiz1-graph-ratings-percent.png -- 69.02kb -> 48.90kb (29.15%)
/archive/v1.6/docs/tasks/observability/distributed-tracing/lightstep/istio-explorer.png -- 598.16kb -> 434.01kb (27.44%)
/archive/v1.6/zh/docs/tasks/observability/distributed-tracing/lightstep/istio-explorer.png -- 598.16kb -> 434.01kb (27.44%)
/archive/v1.6/docs/tasks/observability/distributed-tracing/lightstep/istio-services.png -- 372.11kb -> 273.16kb (26.59%)
/archive/v1.6/zh/docs/tasks/observability/distributed-tracing/lightstep/istio-services.png -- 372.11kb -> 273.16kb (26.59%)
/archive/v1.6/about/community/partners/tetrate.png -- 97.29kb -> 74.58kb (23.34%)
/archive/v1.6/zh/about/community/partners/tetrate.png -- 97.29kb -> 74.58kb (23.34%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-istioconfig1-tooltip.png -- 76.28kb -> 58.54kb (23.26%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-istioconfig3-details-yaml1.png -- 85.27kb -> 65.82kb (22.82%)
/archive/v1.6/about/community/partners/portshift.png -- 3.16kb -> 2.46kb (22.12%)
/archive/v1.6/zh/about/community/partners/portshift.png -- 3.16kb -> 2.46kb (22.12%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-validate1-list.png -- 77.38kb -> 60.43kb (21.9%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-istioconfig0-errormsgs.png -- 101.91kb -> 79.96kb (21.54%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-istioconfig3-details-yaml2.png -- 90.03kb -> 70.81kb (21.35%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-istioconfig3-details-yaml3.png -- 89.28kb -> 70.36kb (21.19%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-wiz0-graph-options.png -- 82.54kb -> 65.34kb (20.83%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-validate3-ok.png -- 86.71kb -> 68.68kb (20.8%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-validate2-errormsg.png -- 53.18kb -> 42.43kb (20.22%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-overview.png -- 47.47kb -> 38.13kb (19.68%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-istioconfig2-details-errormsgs.png -- 85.37kb -> 68.63kb (19.61%)
/archive/v1.6/docs/tasks/observability/kiali/kiali-graph.png -- 119.75kb -> 98.10kb (18.08%)
/content/zh/about/community/customers/liulishuo.svg -- 8.70kb -> 7.40kb (14.86%)
/content/en/about/community/customers/liulishuo.svg -- 8.70kb -> 7.40kb (14.86%)
/content/en/docs/setup/platform-setup/huaweicloud/create-cluster.png -- 80.65kb -> 70.18kb (12.98%)
/content/en/docs/setup/platform-setup/huaweicloud/create-node.png -- 72.95kb -> 63.61kb (12.79%)
/content/en/blog/2021/istiocon-2021-program/istiocon-program.png -- 591.18kb -> 515.83kb (12.74%)
/archive/v1.6/blog/2020/workload-entry/workload-entry-final.svg -- 3.61kb -> 3.27kb (9.34%)
/archive/v1.6/blog/2020/workload-entry/workload-entry-first-example.svg -- 3.86kb -> 3.53kb (8.46%)
/archive/v1.8/blog/2020/istiocon-2021/istioconlogo.jpg -- 80.19kb -> 75.10kb (6.35%)
/content/zh/about/community/customers/splunk.png -- 38.93kb -> 36.55kb (6.13%)
/content/en/about/community/customers/splunk.png -- 38.93kb -> 36.55kb (6.13%)
/archive/v1.8/about/community/join/governance.svg -- 1.01kb -> 0.96kb (5.77%)
/archive/v1.8/zh/about/community/join/governance.svg -- 1.01kb -> 0.96kb (5.77%)
/archive/v1.6/about/community/partners/signalsciences.svg -- 9.81kb -> 9.58kb (2.37%)
/archive/v1.6/zh/about/community/partners/signalsciences.svg -- 9.81kb -> 9.58kb (2.37%)
/archive/v1.6/docs/ops/configuration/telemetry/monitoring-multicluster-prometheus/in-mesh-production-prometheus.svg -- 141.09kb -> 138.61kb (1.76%)
/archive/v1.6/docs/ops/configuration/telemetry/monitoring-multicluster-prometheus/external-production-prometheus.svg -- 161.00kb -> 158.40kb (1.62%)
/content/en/docs/ops/deployment/vm-architecture/single-network.svg -- 86.04kb -> 84.73kb (1.52%)
/content/en/docs/ops/deployment/vm-architecture/multi-network.svg -- 92.38kb -> 91.18kb (1.31%)
/archive/v1.6/docs/ops/best-practices/observability/production-prometheus.svg -- 132.91kb -> 131.50kb (1.06%)
/archive/v1.8/docs/setup/install/multicluster/primary-remote/arch.svg -- 86.51kb -> 85.72kb (0.91%)
/archive/v1.8/docs/setup/install/multicluster/multi-primary/arch.svg -- 94.20kb -> 93.39kb (0.86%)
/archive/v1.8/docs/setup/install/multicluster/primary-remote_multi-network/arch.svg -- 100.69kb -> 99.87kb (0.82%)
/content/en/docs/setup/additional-setup/external-controlplane/external-multicluster.svg -- 101.71kb -> 100.92kb (0.77%)
/content/en/blog/2021/better-external-authz/external_authz.svg -- 158.18kb -> 156.99kb (0.75%)
/archive/v1.8/docs/setup/install/multicluster/multi-primary_multi-network/arch.svg -- 114.25kb -> 113.39kb (0.75%)
/content/en/docs/setup/additional-setup/external-controlplane/external-controlplane.svg -- 75.22kb -> 74.76kb (0.62%)
/archive/v1.8/docs/setup/additional-setup/external-controlplane/external-controlplane.svg -- 75.23kb -> 74.76kb (0.62%)
/archive/v1.6/zh/blog/2020/tradewinds-2020/architecture-post-istiod.svg -- 169.81kb -> 169.00kb (0.48%)
/archive/v1.8/docs/ops/configuration/traffic-management/tls-configuration/sidecar-connections.svg -- 75.19kb -> 74.98kb (0.28%)
/content/en/docs/ops/deployment/vm-architecture/service-selector.svg -- 44.85kb -> 44.73kb (0.27%)
/archive/v1.8/docs/ops/configuration/traffic-management/tls-configuration/gateway-connections.svg -- 62.80kb -> 62.65kb (0.25%)
/archive/v1.6/zh/blog/2020/tradewinds-2020/architecture-pre-istiod.svg -- 607.59kb -> 606.27kb (0.22%)
/archive/v1.6/docs/ops/deployment/architecture/arch.svg -- 11.68kb -> 11.65kb (0.22%)
/archive/v1.6/zh/docs/ops/deployment/architecture/arch.svg -- 11.68kb -> 11.65kb (0.22%)
/content/en/blog/2021/wasm-progress/architecture-istio-agent-downloading-wasm-module.svg -- 105.55kb -> 105.32kb (0.22%)
/archive/v1.8/blog/2020/proxying-legacy-services-using-egress-gateways/proxying-legacy-services-using-egress-gateways-authz.svg -- 292.47kb -> 291.89kb (0.2%)
/archive/v1.8/blog/2020/proxying-legacy-services-using-egress-gateways/proxying-legacy-services-using-egress-gateways-communication.svg -- 285.72kb -> 285.22kb (0.17%)
/archive/v1.6/blog/2020/alb-ingress-gateway-iks/alb-ingress-gateway.svg -- 364.92kb -> 364.35kb (0.15%)
/archive/v1.6/img/icons.svg -- 95.54kb -> 95.40kb (0.15%)
/archive/v1.8/img/icons.svg -- 96.09kb -> 95.95kb (0.15%)
/archive/v1.6/about/contribute/remove-content/remove-documentation.svg -- 149.34kb -> 149.13kb (0.15%)
/archive/v1.8/blog/2020/proxying-legacy-services-using-egress-gateways/proxying-legacy-services-using-egress-gateways-overview.svg -- 311.40kb -> 310.99kb (0.13%)
/archive/v1.6/docs/concepts/wasm/extending.svg -- 175.72kb -> 175.52kb (0.11%)
/archive/v1.6/zh/docs/concepts/wasm/extending.svg -- 175.72kb -> 175.52kb (0.11%)
/archive/v1.6/docs/ops/deployment/performance-and-scalability/latency_p90_fortio.svg -- 223.34kb -> 223.17kb (0.07%)
/archive/v1.6/zh/docs/ops/deployment/performance-and-scalability/latency_p90_fortio.svg -- 223.34kb -> 223.17kb (0.07%)
/archive/v1.6/docs/ops/deployment/performance-and-scalability/latency_p99_fortio.svg -- 232.07kb -> 231.90kb (0.07%)
/archive/v1.6/zh/docs/ops/deployment/performance-and-scalability/latency_p99_fortio.svg -- 232.07kb -> 231.90kb (0.07%)
/archive/v1.8/zh/docs/ops/deployment/performance-and-scalability/latency_p90_fortio_with_jitter.svg -- 333.49kb -> 333.33kb (0.05%)
/archive/v1.8/docs/ops/deployment/performance-and-scalability/latency_p90_fortio_with_jitter.svg -- 333.49kb -> 333.33kb (0.05%)
/archive/v1.8/zh/docs/ops/deployment/performance-and-scalability/latency_p90_fortio_without_jitter.svg -- 398.86kb -> 398.69kb (0.04%)
/archive/v1.8/docs/ops/deployment/performance-and-scalability/latency_p90_fortio_without_jitter.svg -- 398.86kb -> 398.69kb (0.04%)
/archive/v1.8/docs/ops/deployment/performance-and-scalability/latency_p99_fortio_without_jitter.svg -- 418.98kb -> 418.81kb (0.04%)
/archive/v1.8/zh/docs/ops/deployment/performance-and-scalability/latency_p99_fortio_without_jitter.svg -- 418.98kb -> 418.81kb (0.04%)
/archive/v1.8/docs/ops/deployment/performance-and-scalability/latency_p99_fortio_with_jitter.svg -- 428.26kb -> 428.09kb (0.04%)
/archive/v1.8/zh/docs/ops/deployment/performance-and-scalability/latency_p99_fortio_with_jitter.svg -- 428.26kb -> 428.09kb (0.04%)

Signed-off-by: ImgBotApp <ImgBotHelp@gmail.com>

Co-authored-by: ImgBotApp <ImgBotHelp@gmail.com>
@wbartosz wbartosz requested review from a team as code owners March 24, 2021 11:12
@istio-testing istio-testing added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. needs-ok-to-test labels Mar 24, 2021
@istio-testing
Copy link
Contributor

Hi @wbartosz. Thanks for your PR.

I'm waiting for a istio member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@google-cla google-cla bot added the cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. label Mar 24, 2021
@craigbox
Copy link
Contributor

craigbox commented Mar 24, 2021 via email

@istio-testing istio-testing added ok-to-test Set this label allow normal testing to take place for a PR not submitted by an Istio org member. and removed needs-ok-to-test labels Mar 24, 2021
@istio-testing istio-testing merged commit 16bc7bc into istio:polidea-update Mar 24, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. ok-to-test Set this label allow normal testing to take place for a PR not submitted by an Istio org member. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.