Skip to content

Commit f4f18a4

Browse files
kfaseelakfaseela
authored
prepare for v1.25 as istio source is already branched (#16261)
* prepare for v1.25 as istio source is already branched Signed-off-by: Faseela K <[email protected]> * fix gen-check Signed-off-by: Faseela K <[email protected]> * fix gen check Signed-off-by: Faseela K <[email protected]> --------- Signed-off-by: Faseela K <[email protected]>
1 parent 68f54fa commit f4f18a4

File tree

16 files changed

+81
-109
lines changed

16 files changed

+81
-109
lines changed

‎Makefile.core.mk

+1-1
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ baseurl := "$(URL)"
7777
endif
7878

7979
# Which branch of the Istio source code do we fetch stuff from
80-
export SOURCE_BRANCH_NAME ?= master
80+
export SOURCE_BRANCH_NAME ?= release-1.25
8181

8282
site:
8383
@scripts/gen_site.sh

‎content/en/docs/examples/virtual-machines/snips.sh

+1-1
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ sudo systemctl restart mysql
3939
}
4040

4141
snip_running_mysql_on_the_vm_3() {
42-
curl -LO https://raw.githubusercontent.com/istio/istio/master/samples/bookinfo/src/mysql/mysqldb-init.sql
42+
curl -LO https://raw.githubusercontent.com/istio/istio/release-1.25/samples/bookinfo/src/mysql/mysqldb-init.sql
4343
mysql -u root -ppassword < mysqldb-init.sql
4444
}
4545

‎content/en/docs/reference/commands/istioctl/index.html

+21-22
Original file line numberDiff line numberDiff line change
@@ -242,7 +242,7 @@ <h4 id="istioctl-admin-log Examples">Examples</h4>
242242
<h3 id="istioctl-analyze">istioctl analyze</h3>
243243
<p>Analyze Istio configuration and print validation messages.
244244
For more information about message codes, refer to:
245-
https://istio.io/v1.26/docs/reference/config/analysis</p>
245+
https://istio.io/v1.25/docs/reference/config/analysis</p>
246246
<pre class="language-bash"><code>istioctl analyze &lt;file&gt;... [flags]
247247
</code></pre>
248248
<table class="command-flags">
@@ -1119,7 +1119,7 @@ <h3 id="istioctl-create-remote-secret">istioctl create-remote-secret</h3>
11191119
<td><code>--manifests &lt;string&gt;</code></td>
11201120
<td><code>-d</code></td>
11211121
<td>Specify a path to a directory of charts and profiles
1122-
(e.g. ~/Downloads/istio-1.26.0/manifests). (default ``)</td>
1122+
(e.g. ~/Downloads/istio-1.25.0/manifests). (default ``)</td>
11231123
</tr>
11241124
<tr>
11251125
<td><code>--name &lt;string&gt;</code></td>
@@ -3819,11 +3819,6 @@ <h3 id="istioctl-experimental-workload-group-create">istioctl experimental workl
38193819
<td>The labels to apply to the workload instances; e.g. -l env=prod,vers=2 (default `[]`)</td>
38203820
</tr>
38213821
<tr>
3822-
<td><code>--locality &lt;string&gt;</code></td>
3823-
<td></td>
3824-
<td>The locality associated with the endpoint. (default ``)</td>
3825-
</tr>
3826-
<tr>
38273822
<td><code>--name &lt;string&gt;</code></td>
38283823
<td></td>
38293824
<td>The name of the workload group (default ``)</td>
@@ -3929,7 +3924,7 @@ <h3 id="istioctl-install">istioctl install</h3>
39293924
<td><code>--manifests &lt;string&gt;</code></td>
39303925
<td><code>-d</code></td>
39313926
<td>Specify a path to a directory of charts and profiles
3932-
(e.g. ~/Downloads/istio-1.26.0/manifests).
3927+
(e.g. ~/Downloads/istio-1.25.0/manifests).
39333928
(default ``)</td>
39343929
</tr>
39353930
<tr>
@@ -3952,7 +3947,7 @@ <h3 id="istioctl-install">istioctl install</h3>
39523947
<td><code>-s</code></td>
39533948
<td>Override an IstioOperator value, e.g. to choose a profile
39543949
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
3955-
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.26/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
3950+
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.25/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
39563951
</tr>
39573952
<tr>
39583953
<td><code>--skip-confirmation</code></td>
@@ -4286,7 +4281,7 @@ <h3 id="istioctl-manifest-generate">istioctl manifest generate</h3>
42864281
<td><code>--manifests &lt;string&gt;</code></td>
42874282
<td><code>-d</code></td>
42884283
<td>Specify a path to a directory of charts and profiles
4289-
(e.g. ~/Downloads/istio-1.26.0/manifests).
4284+
(e.g. ~/Downloads/istio-1.25.0/manifests).
42904285
(default ``)</td>
42914286
</tr>
42924287
<tr>
@@ -4304,7 +4299,7 @@ <h3 id="istioctl-manifest-generate">istioctl manifest generate</h3>
43044299
<td><code>-s</code></td>
43054300
<td>Override an IstioOperator value, e.g. to choose a profile
43064301
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
4307-
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.26/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
4302+
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.25/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
43084303
</tr>
43094304
<tr>
43104305
<td><code>--vklog &lt;Level&gt;</code></td>
@@ -4398,7 +4393,7 @@ <h3 id="istioctl-manifest-install">istioctl manifest install</h3>
43984393
<td><code>--manifests &lt;string&gt;</code></td>
43994394
<td><code>-d</code></td>
44004395
<td>Specify a path to a directory of charts and profiles
4401-
(e.g. ~/Downloads/istio-1.26.0/manifests).
4396+
(e.g. ~/Downloads/istio-1.25.0/manifests).
44024397
(default ``)</td>
44034398
</tr>
44044399
<tr>
@@ -4421,7 +4416,7 @@ <h3 id="istioctl-manifest-install">istioctl manifest install</h3>
44214416
<td><code>-s</code></td>
44224417
<td>Override an IstioOperator value, e.g. to choose a profile
44234418
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
4424-
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.26/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
4419+
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.25/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
44254420
</tr>
44264421
<tr>
44274422
<td><code>--skip-confirmation</code></td>
@@ -4513,7 +4508,7 @@ <h3 id="istioctl-manifest-translate">istioctl manifest translate</h3>
45134508
<td><code>--manifests &lt;string&gt;</code></td>
45144509
<td><code>-d</code></td>
45154510
<td>Specify a path to a directory of charts and profiles
4516-
(e.g. ~/Downloads/istio-1.26.0/manifests).
4511+
(e.g. ~/Downloads/istio-1.25.0/manifests).
45174512
(default ``)</td>
45184513
</tr>
45194514
<tr>
@@ -4536,7 +4531,7 @@ <h3 id="istioctl-manifest-translate">istioctl manifest translate</h3>
45364531
<td><code>-s</code></td>
45374532
<td>Override an IstioOperator value, e.g. to choose a profile
45384533
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
4539-
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.26/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
4534+
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.25/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
45404535
</tr>
45414536
<tr>
45424537
<td><code>--vklog &lt;Level&gt;</code></td>
@@ -5999,7 +5994,7 @@ <h3 id="istioctl-tag-generate">istioctl tag generate</h3>
59995994
<td><code>--manifests &lt;string&gt;</code></td>
60005995
<td><code>-d</code></td>
60015996
<td>Specify a path to a directory of charts and profiles
6002-
(e.g. ~/Downloads/istio-1.26.0/manifests). (default ``)</td>
5997+
(e.g. ~/Downloads/istio-1.25.0/manifests). (default ``)</td>
60035998
</tr>
60045999
<tr>
60056000
<td><code>--namespace &lt;string&gt;</code></td>
@@ -6241,7 +6236,7 @@ <h3 id="istioctl-tag-set">istioctl tag set</h3>
62416236
<td><code>--manifests &lt;string&gt;</code></td>
62426237
<td><code>-d</code></td>
62436238
<td>Specify a path to a directory of charts and profiles
6244-
(e.g. ~/Downloads/istio-1.26.0/manifests). (default ``)</td>
6239+
(e.g. ~/Downloads/istio-1.25.0/manifests). (default ``)</td>
62456240
</tr>
62466241
<tr>
62476242
<td><code>--namespace &lt;string&gt;</code></td>
@@ -6357,7 +6352,7 @@ <h3 id="istioctl-uninstall">istioctl uninstall</h3>
63576352
<td><code>--manifests &lt;string&gt;</code></td>
63586353
<td><code>-d</code></td>
63596354
<td>Specify a path to a directory of charts and profiles
6360-
(e.g. ~/Downloads/istio-1.26.0/manifests).
6355+
(e.g. ~/Downloads/istio-1.25.0/manifests).
63616356
(default ``)</td>
63626357
</tr>
63636358
<tr>
@@ -6380,7 +6375,7 @@ <h3 id="istioctl-uninstall">istioctl uninstall</h3>
63806375
<td><code>-s</code></td>
63816376
<td>Override an IstioOperator value, e.g. to choose a profile
63826377
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
6383-
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.26/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
6378+
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.25/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
63846379
</tr>
63856380
<tr>
63866381
<td><code>--skip-confirmation</code></td>
@@ -6478,7 +6473,7 @@ <h3 id="istioctl-upgrade">istioctl upgrade</h3>
64786473
<td><code>--manifests &lt;string&gt;</code></td>
64796474
<td><code>-d</code></td>
64806475
<td>Specify a path to a directory of charts and profiles
6481-
(e.g. ~/Downloads/istio-1.26.0/manifests).
6476+
(e.g. ~/Downloads/istio-1.25.0/manifests).
64826477
(default ``)</td>
64836478
</tr>
64846479
<tr>
@@ -6501,7 +6496,7 @@ <h3 id="istioctl-upgrade">istioctl upgrade</h3>
65016496
<td><code>-s</code></td>
65026497
<td>Override an IstioOperator value, e.g. to choose a profile
65036498
(--set profile=demo), enable or disable components (--set components.cni.enabled=true), or override Istio
6504-
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.26/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
6499+
settings (--set meshConfig.enableTracing=true). See documentation for more info:https://istio.io/v1.25/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec (default `[]`)</td>
65056500
</tr>
65066501
<tr>
65076502
<td><code>--skip-confirmation</code></td>
@@ -6912,7 +6907,10 @@ <h3 id="istioctl-waypoint-delete">istioctl waypoint delete</h3>
69126907
</tbody>
69136908
</table>
69146909
<h4 id="istioctl-waypoint-delete Examples">Examples</h4>
6915-
<pre class="language-bash"><code># Delete a waypoint by name, which can obtain from istioctl waypoint list
6910+
<pre class="language-bash"><code> # Delete a waypoint from the default namespace
6911+
istioctl waypoint delete
6912+
6913+
# Delete a waypoint by name, which can obtain from istioctl waypoint list
69166914
istioctl waypoint delete waypoint-name --namespace default
69176915

69186916
# Delete several waypoints by name
@@ -8853,6 +8851,7 @@ <h2 id="metrics">Exported metrics</h2>
88538851
<tr><td><code>pilot_xds_eds_reject</code></td><td><code>LastValue</code></td><td>Pilot rejected EDS.</td></tr>
88548852
<tr><td><code>pilot_xds_expired_nonce</code></td><td><code>Sum</code></td><td>Total number of XDS requests with an expired nonce.</td></tr>
88558853
<tr><td><code>pilot_xds_lds_reject</code></td><td><code>LastValue</code></td><td>Pilot rejected LDS.</td></tr>
8854+
<tr><td><code>pilot_xds_push_context_errors</code></td><td><code>Sum</code></td><td>Number of errors (timeouts) initiating push context.</td></tr>
88568855
<tr><td><code>pilot_xds_push_time</code></td><td><code>Distribution</code></td><td>Total time in seconds Pilot takes to push lds, rds, cds and eds.</td></tr>
88578856
<tr><td><code>pilot_xds_pushes</code></td><td><code>Sum</code></td><td>Pilot build and send errors for lds, rds, cds and eds.</td></tr>
88588857
<tr><td><code>pilot_xds_rds_reject</code></td><td><code>LastValue</code></td><td>Pilot rejected RDS.</td></tr>

‎content/en/docs/reference/commands/pilot-discovery/index.html

+1
Original file line numberDiff line numberDiff line change
@@ -1560,6 +1560,7 @@ <h2 id="metrics">Exported metrics</h2>
15601560
<tr><td><code>pilot_xds_eds_reject</code></td><td><code>LastValue</code></td><td>Pilot rejected EDS.</td></tr>
15611561
<tr><td><code>pilot_xds_expired_nonce</code></td><td><code>Sum</code></td><td>Total number of XDS requests with an expired nonce.</td></tr>
15621562
<tr><td><code>pilot_xds_lds_reject</code></td><td><code>LastValue</code></td><td>Pilot rejected LDS.</td></tr>
1563+
<tr><td><code>pilot_xds_push_context_errors</code></td><td><code>Sum</code></td><td>Number of errors (timeouts) initiating push context.</td></tr>
15631564
<tr><td><code>pilot_xds_push_time</code></td><td><code>Distribution</code></td><td>Total time in seconds Pilot takes to push lds, rds, cds and eds.</td></tr>
15641565
<tr><td><code>pilot_xds_pushes</code></td><td><code>Sum</code></td><td>Pilot build and send errors for lds, rds, cds and eds.</td></tr>
15651566
<tr><td><code>pilot_xds_rds_reject</code></td><td><code>LastValue</code></td><td>Pilot rejected RDS.</td></tr>

‎content/en/docs/reference/config/istio.mesh.v1alpha1/index.html

-14
Original file line numberDiff line numberDiff line change
@@ -4423,20 +4423,6 @@ <h2 id="MeshNetworks">MeshNetworks</h2>
44234423
port: 15443
44244424
locality: us-east-1a
44254425
</code></pre>
4426-
<p>If <code>ENABLE_HCM_INTERNAL_NETWORKS</code> is set to true, MeshNetworks can be used to
4427-
to explicitly define the networks in Envoy&rsquo;s internal address configuration.
4428-
Envoy uses the IPs in the <code>internalAddressConfig</code> to decide whether or not to sanitize
4429-
Envoy headers. If the IP address is listed an internal, the Envoy headers are not
4430-
sanitized. As of Envoy 1.33, the default value for <code>internalAddressConfig</code> is set to
4431-
an empty set. Previously, the default value was the set of all private IPs. Setting
4432-
the <code>internalAddressConfig</code> to all private IPs (via Envoy&rsquo;s previous default behavior
4433-
or via the MeshNetworks) will leave users with an Istio Ingress Gateway potentially
4434-
vulnerable to <code>x-envoy</code> header manipulation by external sources. More information about
4435-
this vulnerability can be found here:
4436-
<a href="https://github.com/envoyproxy/envoy/security/advisories/GHSA-ffhv-fvxq-r6mf">https://github.com/envoyproxy/envoy/security/advisories/GHSA-ffhv-fvxq-r6mf</a>
4437-
To preserve headers, you must explicitly configure MeshNetworks and set
4438-
<code>ENABLE_HCM_INTERNAL_NETWORKS</code> to true. Envoy&rsquo;s <code>internalAddressConfig</code> will be set to
4439-
the endpointed specified by <code>fromCidr</code>.</p>
44404426

44414427
<table class="message-fields">
44424428
<thead>

‎content/en/docs/tasks/security/authentication/authn-policy/snips.sh

+5-5
Original file line numberDiff line numberDiff line change
@@ -298,7 +298,7 @@ spec:
298298
istio: ingressgateway
299299
jwtRules:
300300
- issuer: "[email protected]"
301-
jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
301+
jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/jwks.json"
302302
EOF
303303
}
304304

@@ -316,7 +316,7 @@ spec:
316316
name: httpbin-gateway
317317
jwtRules:
318318
- issuer: "[email protected]"
319-
jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
319+
jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/jwks.json"
320320
EOF
321321
}
322322

@@ -337,7 +337,7 @@ curl --header "Authorization: Bearer deadbeef" "$INGRESS_HOST:$INGRESS_PORT/head
337337
ENDSNIP
338338

339339
snip_enduser_authentication_9() {
340-
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s)
340+
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/demo.jwt -s)
341341
curl --header "Authorization: Bearer $TOKEN" "$INGRESS_HOST:$INGRESS_PORT/headers" -s -o /dev/null -w "%{http_code}\n"
342342
}
343343

@@ -346,11 +346,11 @@ curl --header "Authorization: Bearer $TOKEN" "$INGRESS_HOST:$INGRESS_PORT/header
346346
ENDSNIP
347347

348348
snip_enduser_authentication_10() {
349-
wget --no-verbose https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/gen-jwt.py
349+
wget --no-verbose https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/gen-jwt.py
350350
}
351351

352352
snip_enduser_authentication_11() {
353-
wget --no-verbose https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/key.pem
353+
wget --no-verbose https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/key.pem
354354
}
355355

356356
snip_enduser_authentication_12() {

‎content/en/docs/tasks/security/authentication/claim-to-header/snips.sh

+2-2
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ spec:
4848
app: httpbin
4949
jwtRules:
5050
- issuer: "[email protected]"
51-
jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
51+
jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/jwks.json"
5252
outputClaimToHeaders:
5353
- header: "x-jwt-claim-foo"
5454
claim: "foo"
@@ -64,7 +64,7 @@ kubectl exec "$(kubectl get pod -l app=curl -n foo -o jsonpath={.items..metadata
6464
ENDSNIP
6565

6666
snip_allow_requests_with_valid_jwt_and_listtyped_claims_3() {
67-
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode -
67+
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode -
6868
}
6969

7070
! IFS=$'\n' read -r -d '' snip_allow_requests_with_valid_jwt_and_listtyped_claims_3_out <<\ENDSNIP

‎content/en/docs/tasks/security/authentication/jwt-route/snips.sh

+3-3
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ spec:
4747
istio: ingressgateway
4848
jwtRules:
4949
- issuer: "[email protected]"
50-
jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
50+
jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/jwks.json"
5151
EOF
5252
}
5353

@@ -97,7 +97,7 @@ HTTP/1.1 401 Unauthorized
9797
ENDSNIP
9898

9999
snip_validating_ingress_routing_based_on_jwt_claims_3() {
100-
TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode
100+
TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode
101101
}
102102

103103
! IFS=$'\n' read -r -d '' snip_validating_ingress_routing_based_on_jwt_claims_3_out <<\ENDSNIP
@@ -114,7 +114,7 @@ HTTP/1.1 200 OK
114114
ENDSNIP
115115

116116
snip_validating_ingress_routing_based_on_jwt_claims_5() {
117-
TOKEN_NO_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN_NO_GROUP" | cut -d '.' -f2 - | base64 --decode
117+
TOKEN_NO_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN_NO_GROUP" | cut -d '.' -f2 - | base64 --decode
118118
}
119119

120120
! IFS=$'\n' read -r -d '' snip_validating_ingress_routing_based_on_jwt_claims_5_out <<\ENDSNIP

‎content/en/docs/tasks/security/authorization/authz-custom/snips.sh

+1-1
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ kubectl exec "$(kubectl get pod -l app=curl -n foo -o jsonpath={.items..metadata
3636
ENDSNIP
3737

3838
snip_deploy_the_external_authorizer_1() {
39-
kubectl apply -n foo -f https://raw.githubusercontent.com/istio/istio/master/samples/extauthz/ext-authz.yaml
39+
kubectl apply -n foo -f https://raw.githubusercontent.com/istio/istio/release-1.25/samples/extauthz/ext-authz.yaml
4040
}
4141

4242
! IFS=$'\n' read -r -d '' snip_deploy_the_external_authorizer_1_out <<\ENDSNIP

‎content/en/docs/tasks/security/authorization/authz-jwt/snips.sh

+3-3
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ spec:
4747
app: httpbin
4848
jwtRules:
4949
- issuer: "[email protected]"
50-
jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
50+
jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/jwks.json"
5151
EOF
5252
}
5353

@@ -87,7 +87,7 @@ EOF
8787
}
8888

8989
snip_allow_requests_with_valid_jwt_and_listtyped_claims_5() {
90-
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode
90+
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode
9191
}
9292

9393
! IFS=$'\n' read -r -d '' snip_allow_requests_with_valid_jwt_and_listtyped_claims_5_out <<\ENDSNIP
@@ -133,7 +133,7 @@ EOF
133133
}
134134

135135
snip_allow_requests_with_valid_jwt_and_listtyped_claims_9() {
136-
TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode
136+
TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/release-1.25/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode
137137
}
138138

139139
! IFS=$'\n' read -r -d '' snip_allow_requests_with_valid_jwt_and_listtyped_claims_9_out <<\ENDSNIP

0 commit comments

Comments
 (0)