Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs(kuma-cp) support mtls probes #282

Merged
merged 5 commits into from
Nov 17, 2020
Merged

docs(kuma-cp) support mtls probes #282

merged 5 commits into from
Nov 17, 2020

Conversation

lobkovilya
Copy link
Contributor

Documentation for new Pod annotations and a new section in Dataplane specification

endpoints:
- inboundPort: 8080
inboundPath: /health
path: /8080/health
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think this is a good place to introduce probes. This is one of the first page that users will go to learn about Kuma. Probes was essentially edge case that we need to cover. I think this should be just a separate section in docs

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In the similar fashion, we don't drop here an info how to override prometheus metrics settings.

@@ -235,6 +253,50 @@ spec:

On Kubernetes the [`Dataplane`](#dataplane-entity) entity is also automatically created for you, and because transparent proxying is being used to communicate between the service and the sidecar proxy, no code changes are required in your applications.

Kuma Control Plane also takes care of HttpGet probes. By default, webhook will override probe with a virtual one. So for the given probe:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why Kuma needs to take care of HttpGet probes? what is webhook?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@lobkovilya can you clarify?

@subnetmarco subnetmarco merged commit 732b0e4 into next Nov 17, 2020
@subnetmarco subnetmarco deleted the docs/mtls-probes branch November 17, 2020 03:27
subnetmarco added a commit that referenced this pull request Nov 17, 2020
* docs(security) token improvements (#273)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* docs(security) port security changes to 0.7.2

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* adjust ports (#299)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* docs(*) merge install ingress into install control-plane (#284)

Signed-off-by: Nikolay Nikolaev <[email protected]>

* feat(documentation) new multizone flow (#308)

* feat(documentation) new multizone flow

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* change env var to multizone

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* enable mtls

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* new flow of the dp (#274)

* docs(documentation) new dp flow

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* chore(*) move ot 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

Co-authored-by: Nikolay Nikolaev <[email protected]>

* docs(security) ingress token (#294)

* docs(security) ingress token

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* chore(*) move to 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

* edits

Co-authored-by: Nikolay Nikolaev <[email protected]>
Co-authored-by: subnetmarco <[email protected]>

* docs(*) locality aware load balancing (#306)

* docs(*) locality aware load balancing

Signed-off-by: Nikolay Nikolaev <[email protected]>

* chore(*) move to 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

* edits

Co-authored-by: subnetmarco <[email protected]>

* docs(*) support for kafka protocol (#309)

Signed-off-by: Nikolay Nikolaev <[email protected]>

* fix(*) passthrough on a Mesh update (#293)

* fix(*) passthrough on a Mesh update

Signed-off-by: Nikolay Nikolaev <[email protected]>

* fix(*) review and move to 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

* docs(kuma-cp) support mtls probes (#282)

* doc(kuma-cp) probes with mtls

* chore(*) move to 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

* edits

* edits

Co-authored-by: Nikolay Nikolaev <[email protected]>
Co-authored-by: subnetmarco <[email protected]>

* docs(*) TrafficRoute updates

Signed-off-by: Nikolay Nikolaev <[email protected]>

* Security update (TLS communications CP<->DP) (#298)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* chore(policies) change mads port (#314)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* chore(policies) change scope of resources to global (#315)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* doc(kuma-cp) API endpoint for Mesh Insights (#317)

Signed-off-by: Ilya Lobkov <[email protected]>

* doc(kuma-cp) traffic direction (#318)

Signed-off-by: Ilya Lobkov <[email protected]>

* docs(*) external services (#292)

* docs(*) External Services

Signed-off-by: Nikolay Nikolaev <[email protected]>

* docs(*) adding ExternlService

Signed-off-by: Nikolay Nikolaev <[email protected]>

* chore(*) move to 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

* fix(*) updates with ceritficates

Signed-off-by: Nikolay Nikolaev <[email protected]>

* fix(*) review

Signed-off-by: Nikolay Nikolaev <[email protected]>

* fix(*) add passthrough reference

Signed-off-by: Nikolay Nikolaev <[email protected]>

* feat(policies) traffic permission is created by default (#316)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* release: 1.0.0

Co-authored-by: Jakub Dyszkiewicz <[email protected]>
Co-authored-by: Nikolay Nikolaev <[email protected]>
Co-authored-by: Ilya Lobkov <[email protected]>
subnetmarco added a commit that referenced this pull request Nov 23, 2020
* docs(security) token improvements (#273)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* docs(security) port security changes to 0.7.2

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* adjust ports (#299)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* docs(*) merge install ingress into install control-plane (#284)

Signed-off-by: Nikolay Nikolaev <[email protected]>

* feat(documentation) new multizone flow (#308)

* feat(documentation) new multizone flow

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* change env var to multizone

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* enable mtls

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* new flow of the dp (#274)

* docs(documentation) new dp flow

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* chore(*) move ot 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

Co-authored-by: Nikolay Nikolaev <[email protected]>

* docs(security) ingress token (#294)

* docs(security) ingress token

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* chore(*) move to 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

* edits

Co-authored-by: Nikolay Nikolaev <[email protected]>
Co-authored-by: subnetmarco <[email protected]>

* docs(*) locality aware load balancing (#306)

* docs(*) locality aware load balancing

Signed-off-by: Nikolay Nikolaev <[email protected]>

* chore(*) move to 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

* edits

Co-authored-by: subnetmarco <[email protected]>

* docs(*) support for kafka protocol (#309)

Signed-off-by: Nikolay Nikolaev <[email protected]>

* fix(*) passthrough on a Mesh update (#293)

* fix(*) passthrough on a Mesh update

Signed-off-by: Nikolay Nikolaev <[email protected]>

* fix(*) review and move to 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

* docs(kuma-cp) support mtls probes (#282)

* doc(kuma-cp) probes with mtls

* chore(*) move to 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

* edits

* edits

Co-authored-by: Nikolay Nikolaev <[email protected]>
Co-authored-by: subnetmarco <[email protected]>

* docs(*) TrafficRoute updates

Signed-off-by: Nikolay Nikolaev <[email protected]>

* Security update (TLS communications CP<->DP) (#298)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* chore(policies) change mads port (#314)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* chore(policies) change scope of resources to global (#315)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* doc(kuma-cp) API endpoint for Mesh Insights (#317)

Signed-off-by: Ilya Lobkov <[email protected]>

* doc(kuma-cp) traffic direction (#318)

Signed-off-by: Ilya Lobkov <[email protected]>

* docs(*) external services (#292)

* docs(*) External Services

Signed-off-by: Nikolay Nikolaev <[email protected]>

* docs(*) adding ExternlService

Signed-off-by: Nikolay Nikolaev <[email protected]>

* chore(*) move to 0.7.3

Signed-off-by: Nikolay Nikolaev <[email protected]>

* fix(*) updates with ceritficates

Signed-off-by: Nikolay Nikolaev <[email protected]>

* fix(*) review

Signed-off-by: Nikolay Nikolaev <[email protected]>

* fix(*) add passthrough reference

Signed-off-by: Nikolay Nikolaev <[email protected]>

* feat(policies) traffic permission is created by default (#316)

Signed-off-by: Jakub Dyszkiewicz <[email protected]>

* release: 1.0.1

Co-authored-by: Jakub Dyszkiewicz <[email protected]>
Co-authored-by: Nikolay Nikolaev <[email protected]>
Co-authored-by: Ilya Lobkov <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants