[Refactor] istio.io security concept page - Authz

[xulingqing]

Preview Link: https://deploy-preview-10164--preliminary-istio.netlify.app/latest/docs/concepts/security/#authorization

Main Changes:

1. Merge Authorization architecture to Authorization introduction part
2. Change Implicit enablement to Policy Precedence with brief introduction
3. Merge Policy Target Value matching Exclusion matching as a Policy Matching section with concept rewrite
4. Move the 4 practices of allow-all policy, Custom conditions, unauthenticated identity, authz on plain TCP protocols to operation/config/security
5. deleted TCP protocal added a TCP task in Authz(/docs/tasks/security/authorization/authz-tcp/)
6. Value Matching (exact, prefix, suffix, exclusion)move to /docs/ops/configuration/security/security-policy-examples/

• Configuration Infrastructure
• Docs
• Installation
• Networking
• Performance and Scalability
• Policies and Telemetry
• Security
• Test and Release
• User Experience
• Developer Infrastructure

[istio-testing]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[yangminzhu]

I

[yangminzhu]

I think you should make sure the new content is ready when deleting it from the concept page. You could do it in a single PR that adds the new content in example/task/reference page while deleting it from concept page.

Otherwise there is chance that some contents are removed in this PR but forget to be added in other places, and more importantly, separating the change will make it harder to review and compare the newly added content to the old one, and it puts the preminary.istio.io in an incomplete status until all changes are merged.

[xulingqing]

Thanks for your suggestion. Yes, the changes to the authz part will be in the same PR. But let's first have consensus of how will the concept page look like. The concept page changes will be finished in the 1st commit, and I will commit the tasks/reference changes in this PR as a different commit.

[xulingqing]

Once we reach agreement on the concept page, @justinpettit will work with me on finding a section that fits for the delete content. In this way, we can greatly reduce moving the content around. Thanks~

[istio-testing]

@xulingqing: PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[istio-testing]

@xulingqing: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
doc.test.profile_none_istio.io	8733eb9	link	true	/test doc.test.profile_none
doc.test.profile_demo_istio.io	8733eb9	link	true	/test doc.test.profile_demo
doc.test.profile_default_istio.io	8733eb9	link	true	/test doc.test.profile_default
doc.test.multicluster_istio.io	8733eb9	link	true	/test doc.test.multicluster
doc.test.profile_minimal_istio.io	8733eb9	link	true	/test doc.test.profile_minimal
doc.test.profile-default_istio.io	8733eb9	link	true	/test doc.test.profile-default
doc.test.profile-none_istio.io	8733eb9	link	true	/test doc.test.profile-none
doc.test.profile-demo_istio.io	8733eb9	link	true	/test doc.test.profile-demo
doc.test.profile-minimal_istio.io	8733eb9	link	true	/test doc.test.profile-minimal

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[craigbox]

@xulingqing and @justinpettit, any interest in finishing this off?