Add one FAQ - describes ztunnel is not a SPOF. #15306

ayushrakesh · 2024-06-19T08:05:09Z

Description

Clears misconception that ztunnel is not a Single Point of Failure.

Fixes #15246

Reviewers

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

istio-testing · 2024-06-19T08:05:20Z

Hi @ayushrakesh. Thanks for your PR.

I'm waiting for a istio member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

kfaseela · 2024-06-19T08:08:19Z

if this PR again fails lint check, please do not close the PR, rather revise it with the fix

kfaseela · 2024-06-19T08:08:27Z

/ok-to-test

kfaseela · 2024-06-19T08:09:19Z

content/en/about/faq/security/is-ztunnel-a-SPOF.md

+weight: 25
+---
+
+This misunderstanding arises primarily from concerns about the Ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages.


the link to the blog and other details seem to be removed? why?

First of all link should be of relative path. That's what confusing me little bit, that should I keep or remove it. I just removed it because the description seems enough to me. Should I revise it.

kfaseela · 2024-06-19T09:25:58Z

content/en/about/faq/security/is-ztunnel-a-SPOF.md

+weight: 25
+---
+
+This misunderstanding arises primarily from concerns about the Ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages.


Suggested change

This misunderstanding arises primarily from concerns about the Ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages.

Istio's ztunnel does not introduce a SPOF into a Kubernetes cluster. Ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages. [Learn more](https://blog.howardjohn.info/posts/ambient-spof/).

check the style guide as to if we have ztunnel or Ztunnel, and if there isn't a style guide, we should write one

@craigbox @kfaseela PR revised.

craigbox · 2024-06-19T09:54:30Z

For fast review of a docs PR, please include the link to the changed page in the Netlify deployment preview.

Updated is-ztunnel-a-SPOF.md

craigbox · 2024-06-19T10:40:44Z

Please also note that this doesn't address #15246 at all, which is entitled "Add ambient mode section to FAQ"

craigbox · 2024-06-19T10:41:34Z

content/en/about/faq/security/is-ztunnel-a-SPOF.md

+weight: 25
+---
+
+Istio's ztunnel does not introduce a SPOF into a Kubernetes cluster. These ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages. [Learn more](https://blog.howardjohn.info/posts/ambient-spof/).


These ztunnel failures

Which ztunnel failures?

considered a fallible component in a cluster

[[citation needed]]

Delete file.

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

dhawton

For clarity, try to define acronyms on their first use, especially ones that are not common.

dhawton · 2024-06-19T16:09:29Z

content/en/about/faq/ambient-mode/is-ztunnel-a-SPOF.md

@@ -0,0 +1,6 @@
+---
+title: Is ztunnel a SPOF?


Suggested change

title: Is ztunnel a SPOF?

title: Is ztunnel a single point of failure?

dhawton · 2024-06-19T16:09:45Z

content/en/about/faq/ambient-mode/is-ztunnel-a-SPOF.md

+weight: 25
+---
+
+Istio's ztunnel does not introduce a SPOF into a Kubernetes cluster. ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages. [Learn more](https://blog.howardjohn.info/posts/ambient-spof/).


Suggested change

Istio's ztunnel does not introduce a SPOF into a Kubernetes cluster. ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages. [Learn more](https://blog.howardjohn.info/posts/ambient-spof/).

Istio's ztunnel does not introduce a single point of failure (SPOF) into a Kubernetes cluster. ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages. [Learn more](https://blog.howardjohn.info/posts/ambient-spof/).

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

kfaseela · 2024-06-20T20:14:22Z

content/en/about/faq/ambient-mode/is-ztunnel-a-SPOF.md

+weight: 25
+---
+
+Istio's ztunnel does not introduce a single point of failure (SPOF) into a Kubernetes cluster. ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages. [Learn more](https://blog.howardjohn.info/posts/ambient-spof/).


I am not sure if "ztunnel" at the beginning of a line should be "Ztunnel" or not :) Leaving this to @craigbox for merging

craigbox · 2024-06-20T20:45:24Z

Perhaps our new contributor could look at style guides for other projects/companies as an example?

…

On Fri, 21 Jun 2024 at 08:14, Faseela K ***@***.***> wrote: ***@***.**** commented on this pull request. ------------------------------ In content/en/about/faq/ambient-mode/is-ztunnel-a-SPOF.md <#15306 (comment)>: > @@ -0,0 +1,6 @@ +--- +title: Is ztunnel a single point of failure? +weight: 25 +--- + +Istio's ztunnel does not introduce a single point of failure (SPOF) into a Kubernetes cluster. ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages. [Learn more](https://blog.howardjohn.info/posts/ambient-spof/). I am not sure if "ztunnel" at the beginning of a line should be "Ztunnel" or not :) Leaving this to @craigbox <https://github.com/craigbox> for merging — Reply to this email directly, view it on GitHub <#15306 (review)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABALHQNF3DZVKBINBNXGV3ZIMZ3JAVCNFSM6AAAAABJRQWERCVHI2DSMVQWIX3LMV43YUDVNRWFEZLROVSXG5CSMV3GSZLXHMZDCMZRGI3TENRYGA> . You are receiving this because you were mentioned.Message ID: <istio/istio .***@***.***>

ayushrakesh · 2024-06-20T21:30:46Z

Perhaps our new contributor could look at style guides for other projects/companies as an example?
…
On Fri, 21 Jun 2024 at 08:14, Faseela K @.> wrote: @.* commented on this pull request. ------------------------------ In content/en/about/faq/ambient-mode/is-ztunnel-a-SPOF.md <#15306 (comment)>: > @@ -0,0 +1,6 @@ +--- +title: Is ztunnel a single point of failure? +weight: 25 +--- + +Istio's ztunnel does not introduce a single point of failure (SPOF) into a Kubernetes cluster. ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages. Learn more. I am not sure if "ztunnel" at the beginning of a line should be "Ztunnel" or not :) Leaving this to @craigbox https://github.com/craigbox for merging — Reply to this email directly, view it on GitHub <#15306 (review)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AABALHQNF3DZVKBINBNXGV3ZIMZ3JAVCNFSM6AAAAABJRQWERCVHI2DSMVQWIX3LMV43YUDVNRWFEZLROVSXG5CSMV3GSZLXHMZDCMZRGI3TENRYGA . You are receiving this because you were mentioned.Message ID: <istio/istio .@.***>

Yeah, will check.

ayushrakesh · 2024-06-21T07:32:33Z

@craigbox @kfaseela I have checked following official websites and projects. These have "ztunnel" normally and "Ztunnel" at beginning of a line. Any suggestions?

https://www.solo.io/blog/understanding-istio-ambient-ztunnel-and-secure-overlay/
https://help.zscaler.com/client-connector/forwarding-traffic-management/z-tunnel
https://github.com/gridgentoo/ztunnel
https://github.com/intel/ztunnel
https://github.com/TemurRust/ztunnel

craigbox · 2024-06-21T08:41:29Z

I meant https://developers.google.com/style/product-names#capitalize

ayushrakesh · 2024-06-21T09:08:23Z

@craigbox https://developers.google.com/style/product-names#capitalize shows that if a product's name officially starts from lowercase letter then it must be taken care everywhere in beginning of a line.

I will suggest change phrase slightly like this -
"Failures of ztunnel are confined to..."

kfaseela · 2024-06-25T10:26:57Z

content/en/about/faq/ambient-mode/is-ztunnel-a-SPOF.md

+weight: 25
+---
+
+Istio's ztunnel does not introduce a single point of failure (SPOF) into a Kubernetes cluster. ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages. [Learn more](https://blog.howardjohn.info/posts/ambient-spof/).


Suggested change

Istio's ztunnel does not introduce a single point of failure (SPOF) into a Kubernetes cluster. ztunnel failures are scoped to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages. [Learn more](https://blog.howardjohn.info/posts/ambient-spof/).

Istio's ztunnel does not introduce a single point of failure (SPOF) into a Kubernetes cluster. Failures of ztunnel are confined to a single node, which is considered a fallible component in a cluster. It behaves the same as other node-critical infrastructure running on every cluster such as the Linux kernel, container runtime, etc. In a properly designed system, node outages do not lead to cluster outages. [Learn more](https://blog.howardjohn.info/posts/ambient-spof/).

@kfaseela @craigbox PR is revised now.

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

craigbox · 2024-06-26T02:08:34Z

Please see error introduced by this PR in #15331.

ayushrakesh · 2024-06-26T04:10:51Z

@craigbox I have made a new PR which fixes this error, please check this #15337. Actually I didn't included index.md file which is responsible for section title.

ayushrakesh and others added 5 commits June 19, 2024 11:55

Added a faq

2b424cf

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

Update is-ztunnel-a-SPOF

eae7826

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

Fix lint issues

b5df518

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

Fix lint issue

7e4b329

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

Merge branch 'istio:master' into add-faq

3e3ecdc

ayushrakesh requested a review from a team as a code owner June 19, 2024 08:05

istio-testing added size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. needs-ok-to-test labels Jun 19, 2024

istio-testing added ok-to-test Set this label allow normal testing to take place for a PR not submitted by an Istio org member. and removed needs-ok-to-test labels Jun 19, 2024

kfaseela reviewed Jun 19, 2024

View reviewed changes

ayushrakesh mentioned this pull request Jun 19, 2024

Add ambient mode section to FAQ #15246

Open

ayushrakesh added 2 commits June 19, 2024 15:34

Merge branch 'istio:master' into add-faq

2e70df4

Update is-ztunnel-a-SPOF.md

f73617e

Updated is-ztunnel-a-SPOF.md

craigbox reviewed Jun 19, 2024

View reviewed changes

ayushrakesh and others added 3 commits June 19, 2024 16:38

Delete content/en/about/faq/security/is-ztunnel-a-SPOF.md

382f669

Delete file.

Update is-ztunnel-a-SPOF.md

c464191

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

Moved file from security section to ambient-mode

8b1ee2a

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

dhawton reviewed Jun 19, 2024

View reviewed changes

Updated is-ztunnel-as-SPOF

2b95fc7

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

kfaseela reviewed Jun 20, 2024

View reviewed changes

kfaseela reviewed Jun 25, 2024

View reviewed changes

ayushrakesh and others added 2 commits June 25, 2024 18:17

Merge branch 'istio:master' into add-faq

fd81278

Update faq

fb54e69

Signed-off-by: ayushrakesh <ayushrakesh.05@gmail.com>

kfaseela approved these changes Jun 25, 2024

View reviewed changes

istio-testing merged commit 5224754 into istio:master Jun 25, 2024
6 checks passed

craigbox mentioned this pull request Jun 26, 2024

FAQ missing ambient mode section #15331

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add one FAQ - describes ztunnel is not a SPOF. #15306

Add one FAQ - describes ztunnel is not a SPOF. #15306

ayushrakesh commented Jun 19, 2024

istio-testing commented Jun 19, 2024

kfaseela commented Jun 19, 2024

kfaseela commented Jun 19, 2024

kfaseela Jun 19, 2024

ayushrakesh Jun 19, 2024 •

edited

Loading

kfaseela Jun 19, 2024 •

edited by craigbox

Loading

craigbox Jun 19, 2024

ayushrakesh Jun 19, 2024

craigbox commented Jun 19, 2024

craigbox commented Jun 19, 2024

craigbox Jun 19, 2024

dhawton left a comment

dhawton Jun 19, 2024

dhawton Jun 19, 2024

kfaseela Jun 20, 2024

craigbox commented Jun 20, 2024 via email

ayushrakesh commented Jun 20, 2024

ayushrakesh commented Jun 21, 2024

craigbox commented Jun 21, 2024 via email

ayushrakesh commented Jun 21, 2024

kfaseela Jun 25, 2024

ayushrakesh Jun 25, 2024

craigbox commented Jun 26, 2024

ayushrakesh commented Jun 26, 2024 •

edited

Loading

	title: Is ztunnel a SPOF?
	title: Is ztunnel a single point of failure?

Add one FAQ - describes ztunnel is not a SPOF. #15306

Add one FAQ - describes ztunnel is not a SPOF. #15306

Conversation

ayushrakesh commented Jun 19, 2024

Description

Reviewers

istio-testing commented Jun 19, 2024

kfaseela commented Jun 19, 2024

kfaseela commented Jun 19, 2024

Choose a reason for hiding this comment

ayushrakesh Jun 19, 2024 • edited Loading

Choose a reason for hiding this comment

kfaseela Jun 19, 2024 • edited by craigbox Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

craigbox commented Jun 19, 2024

craigbox commented Jun 19, 2024

Choose a reason for hiding this comment

dhawton left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

craigbox commented Jun 20, 2024 via email

ayushrakesh commented Jun 20, 2024

ayushrakesh commented Jun 21, 2024

craigbox commented Jun 21, 2024 via email

ayushrakesh commented Jun 21, 2024

Choose a reason for hiding this comment

Choose a reason for hiding this comment

craigbox commented Jun 26, 2024

ayushrakesh commented Jun 26, 2024 • edited Loading

ayushrakesh Jun 19, 2024 •

edited

Loading

kfaseela Jun 19, 2024 •

edited by craigbox

Loading

ayushrakesh commented Jun 26, 2024 •

edited

Loading