Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions _docs/setup/kubernetes/sidecar-injection.md
Original file line number Diff line number Diff line change
Expand Up @@ -134,7 +134,7 @@ Note that unlike manual injection, automatic injection occurs at the pod-level.

#### Installing the webhook

_NOTE_: The [0.5.0](https://github.com/istio/istio/releases/tag/0.5.0) and [0.5.1](https://github.com/istio/istio/releases/tag/0.5.1) releases are missing scripts to provision webhook certificates. Download the missing files from [here](https://raw.githubusercontent.com/istio/istio/master/install/kubernetes/webhook-create-signed-cert.sh) and [here](https://raw.githubusercontent.com/istio/istio/master/install/kubernetes/webhook-patch-ca-bundle.sh). Subsqeuent releases (> 0.5.1) should include these missing files.
_NOTE_: The [0.5.0](https://github.com/istio/istio/releases/tag/0.5.0) and [0.5.1](https://github.com/istio/istio/releases/tag/0.5.1) releases are missing scripts to provision webhook certificates. Download the missing files from [here](https://raw.githubusercontent.com/istio/istio/release-0.7/install/kubernetes/webhook-create-signed-cert.sh) and [here](https://raw.githubusercontent.com/istio/istio/release-0.7/install/kubernetes/webhook-patch-ca-bundle.sh). Subsqeuent releases (> 0.5.1) should include these missing files.

Install base Istio.

Expand All @@ -148,7 +148,7 @@ secret for the sidecar injector webhook to consume.

_Note_: Kubernetes CA approval requires permissions to create and approve CSR. See
[https://kubernetes.io/docs/tasks/tls/managing-tls-in-a-cluster ](https://kubernetes.io/docs/tasks/tls/managing-tls-in-a-cluster/) and
[install/kubernetes/webhook-create-signed-cert.sh](https://raw.githubusercontent.com/istio/istio/master/install/kubernetes/webhook-create-signed-cert.sh) for more information.
[install/kubernetes/webhook-create-signed-cert.sh](https://raw.githubusercontent.com/istio/istio/release-0.7/install/kubernetes/webhook-create-signed-cert.sh) for more information.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This file should be in the release tgz

Copy link
Member Author

@sdake sdake Apr 2, 2018

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

curl on that link works - and it matches the existing intent of the document. What I didn't want to do was get into a document rewrite to unblock the gate. :)

Not sure if github does automatic tar/gz expasnion - I'll give it a try and push a new PR if you think it is necessary.

Or did you mean to say it should be in 0.8 release tarball (as in master?). I think @yusuoh has been doing work to make sidecar injection automated, so these files are no longer relevant in master (but didn't merge that work until 0.7 had branched).

Cheers
-steve


```bash
./install/kubernetes/webhook-create-signed-cert.sh \
Expand Down
2 changes: 1 addition & 1 deletion _help/troubleshooting.md
Original file line number Diff line number Diff line change
Expand Up @@ -416,7 +416,7 @@ of HTTP 404s (upto 2x the refresh interval) until the Envoy sidecars get all rel
## Kubernetes webhook setup script files are missing from 0.5 release package
NOTE: The 0.5.0 and 0.5.1 releases are missing scripts to provision webhook certificates. Download the missing files from
[here](https://raw.githubusercontent.com/istio/istio/master/install/kubernetes/webhook-create-signed-cert.sh) and [here](https://raw.githubusercontent.com/istio/istio/master/install/kubernetes/webhook-patch-ca-bundle.sh). Subsequent releases (> 0.5.1) should include these missing files.
[here](https://raw.githubusercontent.com/istio/istio/release-0.7/install/kubernetes/webhook-create-signed-cert.sh) and [here](https://raw.githubusercontent.com/istio/istio/release-0.7/install/kubernetes/webhook-patch-ca-bundle.sh). Subsequent releases (> 0.5.1) include these files.
## Automatic sidecar injection will fail if the kube-apiserver has proxy settings
Expand Down