Istio - Revision history

Christoph: /* Minikube method */

2021-08-16T21:29:56Z

‎Minikube method

Christoph: /* Minikube method */

2021-08-16T20:47:56Z

‎Minikube method

Christoph: /* Install Istio */

2021-08-16T20:42:13Z

‎Install Istio

Christoph: /* Istio architecture */

2021-08-16T18:25:24Z

‎Istio architecture

Christoph: /* Istio architecture */

2021-08-16T18:07:12Z

‎Istio architecture

Christoph: /* Istio architecture */

2020-11-02T21:24:41Z

‎Istio architecture

Christoph: /* Prometheus and Grafana */

2020-10-20T22:59:38Z

‎Prometheus and Grafana

Christoph: /* Kubernetes method */

2020-10-20T22:58:32Z

‎Kubernetes method

Christoph: /* Docker method */

2020-10-20T22:55:07Z

‎Docker method

Christoph: /* Docker method */

2020-10-20T22:48:06Z

‎Docker method

@@ Line 122: / Line 122: @@
 vehicle-telemetry-c8fcb46c6-qf6hq     2/2     Running   0          5m28s
 webapp-85fd946885-kwzsr               2/2     Running   0          5m28s
-<pre>
+</pre>
-* Get IP from minikube:
+* Get cluster IP from minikube:
   $ minikube ip
 .168.49.2
-* Get port from k8s:
+* Get port for <code>webapp</code>:
 <pre>
 $ kubectl get svc | grep fleetman-webapp
@@ Line 135: / Line 135: @@
 Put the IP and port into your browser (i.e., <code>192.168.49.2:30080</code>).
 ===Docker method===

@@ Line 111: / Line 111: @@
 * Deploy sample app:
- $ kubectl apply -f 4-application-full-stack.yaml
+<pre>
 ===Docker method===

← Older revision		Revision as of 20:42, 16 August 2021
Line 58:		Line 58:

	==Install Istio==		==Install Istio==
		+
		+	===Minikube method===
		+
		+	* Install minikube:
		+	$ minikube version
		+	minikube version: v1.22.0
		+
		+	* Start up minikube cluster (w/4GB of RAM):
		+	$ minikube start --memory 4096
		+
		+	* Install Custom Resource Definitions (CRDs) for Istio:
		+	<pre>
		+	$ kubectl apply -f 1-istio-init.yaml
		+	namespace/istio-system created
		+	customresourcedefinition.apiextensions.k8s.io/authorizationpolicies.security.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/destinationrules.networking.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/envoyfilters.networking.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/gateways.networking.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/istiooperators.install.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/peerauthentications.security.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/requestauthentications.security.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/serviceentries.networking.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/sidecars.networking.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/telemetries.telemetry.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/virtualservices.networking.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/workloadentries.networking.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/workloadgroups.networking.istio.io created
		+	customresourcedefinition.apiextensions.k8s.io/monitoringdashboards.monitoring.kiali.io created
		+	</pre>
		+
		+	* Install Istio:
		+	<pre>
		+	$ grep ^kind 2-istio-minikube.yaml \| wc -l
		+	78
		+	$ kubectl apply -f 2-istio-minikube.yaml
		+	$ kubectl -n istio-system get po
		+	NAME READY STATUS RESTARTS AGE
		+	grafana-7bdcf77687-5s5gd 1/1 Running 0 5m30s
		+	istio-egressgateway-5547fcc8fc-tkgln 1/1 Running 0 5m31s
		+	istio-ingressgateway-8f568d595-2xvm8 1/1 Running 0 5m31s
		+	istiod-6659979bdf-z7qbk 1/1 Running 0 5m31s
		+	jaeger-5c7c5c8d87-ks2bv 1/1 Running 0 5m30s
		+	kiali-7fd9f6f484-dnrwn 1/1 Running 0 5m29s
		+	prometheus-f5f544b59-z5c7s 2/2 Running 0 5m30s
		+	</pre>
		+
		+	* Create Kiali secret:
		+	$ kubectl apply -f 3-kiali-secret.yaml
		+
		+	* Enable Istio sidecar injection:
		+	$ kubectl label namespace default istio-injection=enabled
		+
		+	* Deploy sample app:
		+	$ kubectl apply -f 4-application-full-stack.yaml

	===Docker method===		===Docker method===

@@ Line 9: / Line 9: @@
 <div style="margin: 10px; padding: 5px; border: 2px solid red;">'''NOTE:''' This section will cover Istio 1.10.x (as of 16 July 2021).</div>
-; istio-system namespace
+; Control Plane
 * <code>istiod</code> (Istio Daemon) is the name of the Pod running the service mesh (it used to be called "pilot").
 ===Old Istio (pre-1.8)===

← Older revision		Revision as of 18:07, 16 August 2021
Line 6:		Line 6:

	==Istio architecture==		==Istio architecture==
		+
		+	<div style="margin: 10px; padding: 5px; border: 2px solid red;">'''NOTE:''' This section will cover Istio 1.10.x (as of 16 July 2021).</div>
		+
		+	; istio-system namespace
		+
		+	* <code>istiod</code> (Istio Daemon) is the name of the Pod running the service mesh (it used to be called "pilot").
		+
		+	===Old Istio (pre-1.8)===

	<div style="margin: 10px; padding: 5px; border: 2px solid red;">'''NOTE:''' The following is true, as of October 2019. Istio is being refactored and some of the following will have changed at some point in the future.</div>		<div style="margin: 10px; padding: 5px; border: 2px solid red;">'''NOTE:''' The following is true, as of October 2019. Istio is being refactored and some of the following will have changed at some point in the future.</div>

← Older revision		Revision as of 21:24, 2 November 2020
Line 6:		Line 6:

	==Istio architecture==		==Istio architecture==
		+
		+	<div style="margin: 10px; padding: 5px; border: 2px solid red;">'''NOTE:''' The following is true, as of October 2019. Istio is being refactored and some of the following will have changed at some point in the future.</div>

	Istio is made up of the following components:		Istio is made up of the following components:

@@ Line 134: / Line 134: @@
 ==Prometheus and Grafana==
-In this section, we will be looking at using Prometheus and Grafana to gain insight into the behaviour of the traffic inside the Istio mesh. In order to gain access to this with a browser, we are going to be using Nginx to create a proxy for the services. This is the Nginx configuration that was used before (located at <code>/etc/nginx/sites-enabled/default</code>):
+In this section, we will be looking at using [[Prometheus]] and [[Grafana]] to gain insight into the behaviour of the traffic inside the Istio mesh. In order to gain access to this with a browser, we are going to be using [[Nginx]] to create a proxy for the services. This is the Nginx configuration that was used before (located at <code>/etc/nginx/sites-enabled/default</code>):
 <pre>

@@ Line 86: / Line 86: @@
   $ tar -xvf istio-1.0.6-linux.tar.gz
-* Add istioctl to our path:
+* Add <code>istioctl</code> to our path:
   $ export PATH:<path_to_istio_bin>:$PATH
-* Set Istio to NodePort at port 30080:
+* Set Istio to <code>NodePort</code> at port 30080:
   $ sed -i 's/LoadBalancer/NodePort/;s/31380/30080/' ./istio-1.0.6/install/kubernetes/istio-demo.yaml
@@ Line 98: / Line 98: @@
   $ kubectl -n istio-system get pods
-When all of the pods are up and running (which we can verify by running that command again) we can move on.
+When all of the Pods are up and running (which we can verify by running that command again) we can move on.
-* Install the bookinfo application with manual sidecar injection:
+* Install the "bookinfo" application with manual sidecar injection:
   $ kubectl apply -f $(istioctl kube-inject -f samples/bookinfo/platform/kube/bookinfo.yaml)
-* Verify that the application is running and that there are 2 containers per pod:
+* Verify that the application is running and that there are 2 containers per Pod:
   $ kubectl get pods
@@ Line 121: / Line 121: @@
 * Update the virtual service file to point to version 2 of the service and verify that it is working. Edit <code>istio-1.0.6/samples/bookinfo/networking/virtual-service-all-v1.yaml</code> (using whatever text editor you like) and change this:
 <pre>
-- destination:
+    - destination:
          host: reviews
          subset: v1
@@ Line 127: / Line 127: @@
 to this:
 <pre>
-- destination:
+    - destination:
          host: reviews
          subset: v2

@@ Line 65: / Line 65: @@
   kubectl config use-context istio
-* Create a DOCKER_GATEWAY environment variable:
+* Create a <code>DOCKER_GATEWAY</code> environment variable:
   export DOCKER_GATEWAY=172.28.0.1:  # <- don't forget the colon
@@ Line 71: / Line 71: @@
   docker-compose -f install/consul/istio.yaml up -d
-* Change bookinfo.yaml to set port 30080 in place of port 9081:
+* Change <code>bookinfo.yaml</code> from using port 30080 to port 9081:
   sed -i 's/9081/30080/' ./istio-1.0.6/samples/bookinfo/platform/consul/bookinfo.yaml

@@ Line 50: / Line 50: @@
 * Install docker-compose and make it executable:
   COMPOSE_VERSION=1.23.2
-  sudo curl -L "<nowiki>https://github.com/docker/compose/releases/download/1.23.2/docker-compose-Linux-x86_64</nowiki>" \
+  sudo curl -L "<nowiki>https://github.com/docker/compose/releases/download/${COMPOSE_VERSION}/docker-compose-Linux-x86_64</nowiki>" \
     -o /usr/local/bin/docker-compose
   sudo chmod +x /usr/local/bin/docker-compose
 * Download Istio and unpack it:
-  wget <nowiki>https://github.com/istio/istio/releases/download/1.0.6/istio-1.0.6-linux.tar.gz</nowiki>
+ ISTIO_VERSION=1.0.6
-  tar -xvf istio-1.0.6-linux.tar.gz
+  wget <nowiki>wget https://github.com/istio/istio/releases/download/${ISTIO_VERSION}/istio-${ISTIO_VERSION}-linux-amd64.tar.gz</nowiki>
 * Preconfigure kubectl for pilot: