Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
105 commits
Select commit Hold shift + click to select a range
1c2e994
add initial sceleton of the wildcard https egress gateway blog post
vadimeisenbergibm Jul 18, 2018
8169260
fixed the links and bare URLs
vadimeisenbergibm Jul 24, 2018
01131c4
add missing 'the'
vadimeisenbergibm Jul 24, 2018
2e8f1ca
complete the Background section
vadimeisenbergibm Jul 24, 2018
095c4c1
add before you begin and cleanup sections
vadimeisenbergibm Jul 24, 2018
cf1f26b
add initial configuration items and their cleanup
vadimeisenbergibm Jul 24, 2018
86d614b
add SNI with placeholder
vadimeisenbergibm Jul 24, 2018
073a01b
assume Istio with mutual TLS
vadimeisenbergibm Jul 25, 2018
e008c72
use two virtual services for the egress traffic
vadimeisenbergibm Jul 25, 2018
0db6bcb
add wikipedia subset to the VirtualService
vadimeisenbergibm Jul 26, 2018
1f5e5f6
add a step to check Envoy's statistics
vadimeisenbergibm Jul 26, 2018
802d5c4
move the blog post to tasks
vadimeisenbergibm Jul 27, 2018
34bd68f
convert blog post to task
vadimeisenbergibm Jul 27, 2018
16bd8c8
change the title of the section for configuring the HTTPS traffic
vadimeisenbergibm Jul 27, 2018
5171197
route the traffic from the gateway to www.wikipedia.org
vadimeisenbergibm Jul 27, 2018
751c83c
add a motivation for an additional forward proxy
vadimeisenbergibm Jul 29, 2018
cf8384e
add instructions for deploying a new egress gateway
vadimeisenbergibm Jul 30, 2018
ec20912
add a config map for Nginx configuration
vadimeisenbergibm Jul 30, 2018
25d6ff6
escape $ signs in nginx config
vadimeisenbergibm Jul 30, 2018
670150f
add empty events section to the nginx config
vadimeisenbergibm Jul 30, 2018
d349215
create nginx config map in istio-system, use nginx.conf key
vadimeisenbergibm Jul 30, 2018
877fe1e
add instructions to add nginx container to an egress gateway
vadimeisenbergibm Jul 30, 2018
4bed79d
add directing the traffic in egress gateway to localhost
vadimeisenbergibm Jul 31, 2018
a6ff5c7
replace istioctl by kubectl
vadimeisenbergibm Jul 31, 2018
e438544
add missing apiVersion fields
vadimeisenbergibm Jul 31, 2018
3470fc1
unite two virtual services into one
vadimeisenbergibm Jul 31, 2018
1ef298e
use ISTIO_MUTUAL instead of MUTUAL
vadimeisenbergibm Jul 31, 2018
46bb77a
Merge remote-tracking branch 'upstream/master' into wildcard_https_eg…
vadimeisenbergibm Aug 1, 2018
827b25b
Merge remote-tracking branch 'upstream/master' into wildcard_https_eg…
vadimeisenbergibm Aug 1, 2018
644db54
move wildcard egress task to the advanced egress examples
vadimeisenbergibm Aug 1, 2018
db1989c
fix links and rename task to example
vadimeisenbergibm Aug 1, 2018
e55f1b8
run the SNI proxy on port 8443
vadimeisenbergibm Aug 1, 2018
f50c5ef
use full url of the sni-proxy and port 8443
vadimeisenbergibm Aug 1, 2018
41ad196
use ServiceEntry with static IP endpoint 127.0.0.1 for sni-proxy.local
vadimeisenbergibm Aug 1, 2018
388dc7c
drop nginx prefix from sni-proxy items
vadimeisenbergibm Aug 1, 2018
4eebdea
add a destination rule to disable mTLS to sni-proxy
vadimeisenbergibm Aug 1, 2018
a54f69e
fix the logs of the Istio proxy and the SNI proxy
vadimeisenbergibm Aug 1, 2018
5ce1071
remove deleting the SNI proxy
vadimeisenbergibm Aug 1, 2018
a8ab08e
make the name of the SNI proxy's ServiceEntry name to be sni-proxy
vadimeisenbergibm Aug 1, 2018
a92f75c
unite the editing steps of the egress gateway with SNI proxy into one…
vadimeisenbergibm Aug 1, 2018
b0b2ce0
restructure creating/deleting configuration items for egress gateway …
vadimeisenbergibm Aug 1, 2018
5563edd
clarify the virtual rule for egress gateway with SNI proxy
vadimeisenbergibm Aug 1, 2018
3b01994
add wildcarded to .spelling
vadimeisenbergibm Aug 1, 2018
3b1b1c2
add "hostnames" to .spelling
vadimeisenbergibm Aug 2, 2018
ce216d8
put localhost in backticks
vadimeisenbergibm Aug 2, 2018
0b6c05e
add 127.0.0.1 and localhost in parentheses
vadimeisenbergibm Aug 2, 2018
6ee86c0
mTLS -> mutual TLS
vadimeisenbergibm Aug 2, 2018
54f9dc8
add wikipedia to .spelling
vadimeisenbergibm Aug 2, 2018
8beab27
put *.com and *.org and * in backticks
vadimeisenbergibm Aug 2, 2018
82e8abc
remove redundant empty line
vadimeisenbergibm Aug 2, 2018
7a6b0c6
add using helm template configVolumes and additionalContainers
vadimeisenbergibm Aug 5, 2018
797b7a9
add an explanation about Nginx
vadimeisenbergibm Aug 6, 2018
d7e75e6
move creating nginx configuration before creating egressgateway with …
vadimeisenbergibm Aug 6, 2018
e8e7c4a
add a comment about manual editing of the deployment yaml before Isti…
vadimeisenbergibm Aug 6, 2018
73a4cf0
add a step for verifying that the sni proxy runs
vadimeisenbergibm Aug 6, 2018
c30d81e
Configure Egress Gateway -> Configure an Egress Gateway
vadimeisenbergibm Aug 6, 2018
42e44bd
we -> you
vadimeisenbergibm Aug 6, 2018
b32a9a3
remove double "mutual"
vadimeisenbergibm Aug 6, 2018
70d4003
add semicolon, "and", "also" to a sentence about multiple configurati…
vadimeisenbergibm Aug 6, 2018
80a601c
remove redundant the
vadimeisenbergibm Aug 6, 2018
81a4bc0
This could not always be the case -> However, this may not...
vadimeisenbergibm Aug 6, 2018
76b157a
IP -> IP address
vadimeisenbergibm Aug 6, 2018
32a3db1
split the explanation about the requirement for SNI proxy into two pa…
vadimeisenbergibm Aug 6, 2018
0617481
add a link to Envoy proxy
vadimeisenbergibm Aug 6, 2018
9d3fdc1
IP -> IP address, host -> hosts
vadimeisenbergibm Aug 6, 2018
cdaa739
split the motivation for the SNI proxy into one more paragraph
vadimeisenbergibm Aug 6, 2018
c14a724
remove two redundant commas
vadimeisenbergibm Aug 6, 2018
9684b8e
requests to -> requests sent to
vadimeisenbergibm Aug 6, 2018
fa987e5
request -> requests
vadimeisenbergibm Aug 6, 2018
40eb690
Let's reconfigure -> In this section you will configure
vadimeisenbergibm Aug 6, 2018
9a2d5b4
arbitrary -> arbitrary, not preconfigured
vadimeisenbergibm Aug 6, 2018
3a44859
for that functionality -> to achieve that functionality
vadimeisenbergibm Aug 6, 2018
ebad329
split long lines
vadimeisenbergibm Aug 6, 2018
a1499df
add explanation about the port to listen and port to forward for the …
vadimeisenbergibm Aug 6, 2018
65c03d4
add an explanation about the Nginx configuration
vadimeisenbergibm Aug 6, 2018
2239048
fix the name of the config map volume, add a link to Config Map Volum…
vadimeisenbergibm Aug 6, 2018
1f14ca2
sent to, destined to -> destined for
vadimeisenbergibm Aug 6, 2018
498dd8d
gateway's proxy -> gateway's Envoy proxy
vadimeisenbergibm Aug 6, 2018
3cd95ce
the counter for the SNI proxy -> the counter for traffic to the SNI p…
vadimeisenbergibm Aug 6, 2018
9a86b81
replace the cleanup section with a reference to the Egress Gateway's …
vadimeisenbergibm Aug 7, 2018
79f7f21
add setting istio.globalNamespace option
vadimeisenbergibm Aug 8, 2018
bcd97e7
fix a typo in the name parameter of helm template
vadimeisenbergibm Aug 12, 2018
1c39ef4
add cpu.targetAverageUtilization to the egressgateway deployment
vadimeisenbergibm Aug 26, 2018
214b380
remove the part: for Istio before 1.1
vadimeisenbergibm Aug 26, 2018
5c95fc0
rename the egressgateway proxy to be "istio-proxy"
vadimeisenbergibm Aug 26, 2018
649af30
add printing mixer log
vadimeisenbergibm Aug 26, 2018
c2a34d0
in cleanup rename nginx-sni-proxy-config to sni-proxy-config
vadimeisenbergibm Aug 26, 2018
782c8da
split a long line
vadimeisenbergibm Aug 27, 2018
a28581d
add configuration for traffic without mTLS
vadimeisenbergibm Aug 27, 2018
6c1dfe3
set-sni-for-egress-gateway -> egressgateway-for-wikipedia
vadimeisenbergibm Aug 27, 2018
01bed14
use local directory instead of $HOME
vadimeisenbergibm Aug 27, 2018
00ce6b4
create virtual service together with gateway and destination rule
vadimeisenbergibm Aug 27, 2018
f361fb2
add monitoring and policy subsection
vadimeisenbergibm Aug 27, 2018
5b8d29a
change connection event from close to open
vadimeisenbergibm Aug 27, 2018
5063471
Cleanup of the monitoring and policy -> Cleanup of monitoring and pol…
vadimeisenbergibm Aug 27, 2018
e92fd0e
Merge remote-tracking branch 'upstream/master' into wildcard_https_eg…
vadimeisenbergibm Sep 9, 2018
aedde88
move wildcard egress gateway into advanced gateways examples
vadimeisenbergibm Sep 9, 2018
c7de29e
add using custom istio proxy
vadimeisenbergibm Sep 9, 2018
9727aa6
rename port's name from tls to tls-egress
vadimeisenbergibm Sep 9, 2018
24463a6
add a part of adding EnvoyFilter
vadimeisenbergibm Sep 10, 2018
1267581
add period after the example description
vadimeisenbergibm Sep 11, 2018
d016b35
add a subsection for monitoring and policy enforcement based on source
vadimeisenbergibm Sep 11, 2018
24658c7
add deleting EnvoyFilter
vadimeisenbergibm Sep 13, 2018
b109d10
fix a typo in "deployment"
vadimeisenbergibm Sep 13, 2018
7ba9a32
use denier instead of adapter
vadimeisenbergibm Sep 13, 2018
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .spelling
Original file line number Diff line number Diff line change
Expand Up @@ -259,6 +259,7 @@ grpc
helloworld
hostIP
hostname
hostnames
hotspots
html
http
Expand Down Expand Up @@ -438,8 +439,10 @@ webhook
webhooks
whitelist
whitelists
wikipedia
wikipedia.org
wildcard
wildcarded
www.google.com
x-envoy-upstream-rq-timeout-ms
x.509
Expand Down
Loading