Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

modify sni-proxy.conf snippet for egress to work in kube #10053

Closed
wants to merge 5 commits into from

Conversation

AndreaM12345
Copy link
Contributor

@AndreaM12345 AndreaM12345 commented Jul 9, 2021

This is to fix #10052

[ ] Configuration Infrastructure
[ x] Docs
[ ] Installation
[ ] Networking
[ ] Performance and Scalability
[ ] Policies and Telemetry
[ ] Security
[ ] Test and Release
[ x] User Experience
[ ] Developer Infrastructure

@istio-policy-bot
Copy link

😊 Welcome! This is either your first contribution to the Istio documentation repo, or
it's been awhile since you've been here. A few things you should know:

  • You can learn about how we write and maintain documentation, about our style guidelines,
    and about all the available web site features by visiting Contributing to the Docs.

  • In the next few minutes, an automatic preview of your change will be
    built as a full copy of the istio.io website. You can find this preview by clicking on
    the Details link next to the deploy/netlify entry in the Status section of this
    page.

  • We care about quality, so we've put in place a number of checks to ensure our documentation
    is top notch. We do spell checking, we sanitize the markdown, we ensure all hyperlinks point
    to valid location, and more. If your PR doesn't pass one of these checks, you'll see a red X in the
    status section of the page. Click on the Details link to get a list of the problems with your PR.
    Fix those problems and push an update to your PR. This will automatically rerun the tests and
    hopefully this time everything will be perfect.

  • Once your changes are accepted and merged into the repository, they will initially show up
    on https://preliminary.istio.io. The changes will be published to https://istio.io
    the next time we do a major release (which typically happens every 3 months or so).

Thanks for contributing!

Courtesy of your friendly welcome wagon.

@google-cla
Copy link

google-cla bot commented Jul 9, 2021

Thanks for your pull request. It looks like this may be your first contribution to a Google open source project (if not, look below for help). Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

📝 Please visit https://cla.developers.google.com/ to sign.

Once you've signed (or fixed any issues), please reply here with @googlebot I signed it! and we'll verify it.


What to do if you already signed the CLA

Individual signers
Corporate signers

ℹ️ Googlers: Go here for more info.

@google-cla google-cla bot added the cla: no Set by the Google CLA bot to indicate the author of a PR has not signed the Google CLA. label Jul 9, 2021
@istio-testing istio-testing added size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. needs-ok-to-test labels Jul 9, 2021
@istio-testing
Copy link
Contributor

Hi @AndreaM12345. Thanks for your PR.

I'm waiting for a istio member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@ericvn
Copy link
Contributor

ericvn commented Jul 9, 2021

/ok-to-test

@istio-testing istio-testing added ok-to-test Set this label allow normal testing to take place for a PR not submitted by an Istio org member. and removed needs-ok-to-test labels Jul 9, 2021
@ericvn
Copy link
Contributor

ericvn commented Jul 9, 2021

Will probably need the same change in the .md file (see https://github.com/istio/istio.io/blob/master/tests/README.md)

listen 127.0.0.1:18443;
proxy_pass \$ssl_preread_server_name:443;
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think the \ is needed to escape the $ char because of the way the cat command is used to put the contents into the file sni-proxy.conf. That bash command will remove the \.

Btw, you should never modify snips.sh files directly. Instead, go to the corresponding .md file (wildcard-egress-hosts/index.md in this case), make the change there, and then run make gen to regen the snips file. The way that snips are generated from md files is described here: https://github.com/istio/istio.io/blob/master/tests/README.md

@AndreaM12345
Copy link
Contributor Author

@googlebot I signed it!

@google-cla google-cla bot added cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. and removed cla: no Set by the Google CLA bot to indicate the author of a PR has not signed the Google CLA. labels Jul 29, 2021
@AndreaM12345
Copy link
Contributor Author

/retest

@istio-testing
Copy link
Contributor

@AndreaM12345: PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@istio-testing istio-testing added the needs-rebase Indicates a PR needs to be rebased before being merged label Jun 7, 2022
@istio-testing
Copy link
Contributor

@AndreaM12345: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
doc.test.multicluster_istio.io cf0160c link true /test doc.test.multicluster
doc.test.profile_none_istio.io cf0160c link true /test doc.test.profile_none
doc.test.profile_demo_istio.io cf0160c link true /test doc.test.profile_demo
doc.test.profile_default_istio.io cf0160c link true /test doc.test.profile_default
doc.test.profile_minimal_istio.io cf0160c link true /test doc.test.profile_minimal
doc.test.profile-default_istio.io cf0160c link true /test doc.test.profile-default
doc.test.profile-none_istio.io cf0160c link true /test doc.test.profile-none
doc.test.profile-demo_istio.io cf0160c link true /test doc.test.profile-demo
doc.test.profile-minimal_istio.io cf0160c link true /test doc.test.profile-minimal

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

Copy link
Contributor

@craigbox craigbox left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@AndreaM12345 want to come back to this PR with the benefit of experience? :)

@frankbu
Copy link
Collaborator

frankbu commented Nov 9, 2023

This documentation has been removed long ago, so we can close this.

@craigbox craigbox closed this Nov 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/user experience cla: yes Set by the Google CLA bot to indicate the author of a PR has signed the Google CLA. kind/docs needs-rebase Indicates a PR needs to be rebased before being merged ok-to-test Set this label allow normal testing to take place for a PR not submitted by an Istio org member. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

noticed that the current sni-proxy snippet for the egress gateways doesn't work in kubernetes clusters
6 participants