Skip to content

manual cherrypick of 5025 to release-1.3 branch #5048

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
istio-testing merged 3 commits into from
Oct 6, 2019
Merged

manual cherrypick of 5025 to release-1.3 branch #5048

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
e3fb33b
manual merge of https://github.com/istio/istio.io/pull/5025
vadimeisenbergibm Sep 24, 2019
dd41864
Merge branch 'release-1.3' into manual_merge_of_5025
vadimeisenbergibm Oct 6, 2019
58e66e3
fix link to Envoy's access logging
vadimeisenbergibm Oct 6, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions ...en/docs/tasks/traffic-management/egress/egress-gateway-tls-origination/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,8 @@ traffic to external services.

* [Deploy Istio egress gateway](/docs/tasks/traffic-management/egress/egress-gateway/#deploy-istio-egress-gateway).

* [Enable Envoy’s access logging](/docs/tasks/telemetry/logs/access-log/#enable-envoy-s-access-logging)

## Perform TLS origination with an egress gateway

This section describes how to perform the same TLS origination as in the
Expand Down
6 changes: 4 additions & 2 deletions content/en/docs/tasks/traffic-management/egress/egress-gateway/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,8 @@ controlled way.

{{< boilerplate before-you-begin-egress >}}

* [Enable Envoy’s access logging](/docs/tasks/telemetry/logs/access-log/#enable-envoy-s-access-logging)

## Deploy Istio egress gateway

1. Check if the Istio egress gateway is deployed:
Expand Down Expand Up @@ -310,7 +312,7 @@ You need to specify port 443 with protocol `TLS` in a corresponding `ServiceEntr
EOF
{{< /text >}}

1. Verify that your `ServiceEntry` was applied correctly by sending an HTTPS request to [http://edition.cnn.com/politics](https://edition.cnn.com/politics).
1. Verify that your `ServiceEntry` was applied correctly by sending an HTTPS request to [https://edition.cnn.com/politics](https://edition.cnn.com/politics).

{{< text bash >}}
$ kubectl exec -it $SOURCE_POD -c sleep -- curl -sL -o /dev/null -D - https://edition.cnn.com/politics
Expand Down Expand Up @@ -482,7 +484,7 @@ You need to specify port 443 with protocol `TLS` in a corresponding `ServiceEntr

{{< /tabset >}}

1. Send an HTTPS request to [http://edition.cnn.com/politics](https://edition.cnn.com/politics).
1. Send an HTTPS request to [https://edition.cnn.com/politics](https://edition.cnn.com/politics).
The output should be the same as before.

{{< text bash >}}
Expand Down
2 changes: 2 additions & 0 deletions ...ocs/tasks/traffic-management/egress/egress_sni_monitoring_and_policies/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,8 @@ example extends that example to show how to configure SNI monitoring and apply p

* [Deploy Istio egress gateway](/docs/tasks/traffic-management/egress/egress-gateway/#deploy-istio-egress-gateway).

* [Enable Envoy’s access logging](/docs/tasks/telemetry/logs/access-log/#enable-envoy-s-access-logging)

* Configure traffic to `*.wikipedia.org` by following
[the steps](/docs/tasks/traffic-management/egress/wildcard-egress-hosts/#wildcard-configuration-for-arbitrary-domains) in
[Configure Egress Traffic using Wildcard Hosts](/docs/tasks/traffic-management/egress/wildcard-egress-hosts/) example,
Expand Down
2 changes: 2 additions & 0 deletions content/en/docs/tasks/traffic-management/egress/http-proxy/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,8 @@ services.

{{< boilerplate before-you-begin-egress >}}

* [Enable Envoy’s access logging](/docs/tasks/telemetry/logs/access-log/#enable-envoy-s-access-logging)

## Deploy an HTTPS proxy

To simulate a legacy proxy and only for this example, you deploy an HTTPS proxy inside your cluster.
Expand Down
2 changes: 2 additions & 0 deletions content/en/docs/tasks/traffic-management/egress/wildcard-egress-hosts/index.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,8 @@ without the need to specify every language's site separately.

* [Deploy Istio egress gateway](/docs/tasks/traffic-management/egress/egress-gateway/#deploy-istio-egress-gateway).

* [Enable Envoy’s access logging](/docs/tasks/telemetry/logs/access-log/#enable-envoy-s-access-logging)

## Configure direct traffic to a wildcard host

The first, and simplest, way to access a set of hosts within a common domain is by configuring
Expand Down