You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: content/en/docs/ambient/getting-started/enforce-auth-policies/index.md
+10-10
Original file line number
Diff line number
Diff line change
@@ -37,16 +37,16 @@ EOF
37
37
38
38
If you open the Bookinfo application in your browser (`http://localhost:8080/productpage`), you will see the product page, just as before. However, if you try to access the `productpage` service from a different service account, you should see an error.
39
39
40
-
Let's try accessing Bookinfo application from a `sleep` pod:
40
+
Let's try accessing Bookinfo application from a `curl` pod:
@@ -68,7 +68,7 @@ NAME CLASS ADDRESS PROGRAMMED AGE
68
68
waypoint istio-waypoint 10.96.58.95 True 42s
69
69
{{< /text >}}
70
70
71
-
Adding a [L7 authorization policy](/docs/ambient/usage/l7-features/) will explicitly allow the `sleep` service to send `GET` requests to the `productpage` service, but perform no other operations:
71
+
Adding a [L7 authorization policy](/docs/ambient/usage/l7-features/) will explicitly allow the `curl` service to send `GET` requests to the `productpage` service, but perform no other operations:
72
72
73
73
{{< text syntax=bash snip_id=deploy_l7_policy >}}
74
74
$ kubectl apply -f - <<EOF
@@ -87,7 +87,7 @@ spec:
87
87
- from:
88
88
- source:
89
89
principals:
90
-
- cluster.local/ns/default/sa/sleep
90
+
- cluster.local/ns/default/sa/curl
91
91
to:
92
92
- operation:
93
93
methods: ["GET"]
@@ -104,7 +104,7 @@ Confirm the new waypoint proxy is enforcing the updated authorization policy:
104
104
105
105
{{< text bash >}}
106
106
$ # This fails with an RBAC error because we're not using a GET operation
Copy file name to clipboardexpand all lines: content/en/docs/ambient/getting-started/manage-traffic/index.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -40,7 +40,7 @@ EOF
40
40
To confirm that roughly 10% of the of the traffic from 100 requests goes to `reviews-v2`, you can run the following command:
41
41
42
42
{{< text syntax=bash snip_id=test_traffic_split >}}
43
-
$ kubectl exec deploy/sleep -- sh -c "for i in \$(seq 1 100); do curl -s http://productpage:9080/productpage | grep reviews-v.-; done"
43
+
$ kubectl exec deploy/curl -- sh -c "for i in \$(seq 1 100); do curl -s http://productpage:9080/productpage | grep reviews-v.-; done"
44
44
{{< /text >}}
45
45
46
46
You'll notice the majority of requests go to `reviews-v1`. You can confirm the same if you open the Bookinfo application in your browser and refresh the page multiple times. Notice the requests from the `reviews-v1` don't have any stars, while the requests from `reviews-v2` have black stars.
0 commit comments